Sabtu, 08 Desember 2012

Essential Tricks

Checking your bandwidth
Imagine this: Company A has a storage server named ginger and it is being NFS-mounted by a client node named beckham. Company A has decided they really want to get more bandwidth out of ginger because they have lots of nodes they want to have NFS mount ginger's shared filesystem.
The most common and cheapest way to do this is to bond two Gigabit ethernet NICs together. This is cheapest because usually you have an extra on-board NIC and an extra port on your switch somewhere.
So they do this. But now the question is: How much bandwidth do they really have?
Gigabit Ethernet has a theoretical limit of 128MBps. Where does that number come from? Well,
1Gb = 1024Mb; 1024Mb/8 = 128MB; "b" = "bits," "B" = "bytes"
But what is it that we actually see, and what is a good way to measure it? One tool I suggest is iperf. You can grab iperf like this:
# wget http://dast.nlanr.net/Projects/Iperf2.0/iperf-2.0.2.tar.gz
You'll need to install it on a shared filesystem that both ginger and beckham can see. or compile and install on both nodes. I'll compile it in the home directory of the bob user that is viewable on both nodes:
tar zxvf iperf*gz
cd iperf-2.0.2
./configure -prefix=/home/bob/perf
make
make install

On ginger, run:
# /home/bob/perf/bin/iperf -s -f M
This machine will act as the server and print out performance speeds in MBps.
On the beckham node, run:
# /home/bob/perf/bin/iperf -c ginger -P 4 -f M -w 256k -t 60
You'll see output in both screens telling you what the speed is. On a normal server with a Gigabit Ethernet adapter, you will probably see about 112MBps. This is normal as bandwidth is lost in the TCP stack and physical cables. By connecting two servers back-to-back, each with two bonded Ethernet cards, I got about 220MBps.
In reality, what you see with NFS on bonded networks is around 150-160MBps. Still, this gives you a good indication that your bandwidth is going to be about what you'd expect. If you see something much less, then you should check for a problem.

Essential tricks

Poking a hole in the firewall
Poking a hole in the firewall

Here's how to proceed:
  1. Check that what you're doing is allowed, but make sure you ask the right people. Most people will cringe that you're opening the firewall, but what they don't understand is that it is completely encrypted. Furthermore, someone would need to hack your outside machine before getting into your company. Instead, you may belong to the school of "ask-for-forgiveness-instead-of-permission." Either way, use your judgment and don't blame me if this doesn't go your way.

  2. SSH from ginger to blackbox.example.com with the -R flag. I'll assume that you're the root user on ginger and that tech will need the root user ID to help you with the system. With the -R flag, you'll forward instructions of port 2222 on blackbox to port 22 on ginger. This is how you set up an SSH tunnel. Note that only SSH traffic can come into ginger: You're not putting ginger out on the Internet naked. You can do this with the following syntax:
    ~# ssh -R 2222:localhost:22 thedude@blackbox.example.com
    Once you are into blackbox, you just need to stay logged in. I usually enter a command like:
    thedude@blackbox:~$ while [ 1 ]; do date; sleep 300; done
    to keep the machine busy. And minimize the window.
  3. Now instruct your friends at tech to SSH as thedude into blackbox without using any special SSH flags. You'll have to give them your password: root@tech:~# ssh thedude@blackbox.example.com .
  4. Once tech is on the blackbox, they can SSH to ginger using the following command: thedude@blackbox:~$: ssh -p 2222 root@localhost
  5. Tech will then be prompted for a password. They should enter the root password of ginger.

Jumat, 07 Desember 2012

Kubuntu 12.10 is Released


 Kubuntu




The Kubuntu community is proud to announce the release of 12.10, the Quantal Quetzal. This is the first release to burst free from the limits of CD sizes giving us some more space for goodies on the image.
It also does away with the alternate installer images, adding advanced partitioning options to the desktop image.
Built on Ubuntu's core and polished with KDE’s applications and workspaces, Kubuntu 12.10 is a grand example of friendly, fast and beautiful software. We recommend it as the perfect OS for casual users, students, Linux gamers, software developers, professionals and anyone interested in a free, open platform that is both beautiful and useful.
For a more technical overview see the Kubuntu 12.10 Release Notes

Getting Kubuntu 12.10

Upgrading from Previous Versions

To upgrade to Kubuntu 12.10 from 12.04 LTS, follow the Upgrade Instructions.

Download a Disk Image

Instructions for burning the image to a DVD or USB flash drive can be found on the Burning ISO Howto or Installation for USB Stick.
We recommend you learn how to check your image file to ensure it has downloaded correctly. Compare your MD5 checksum with the correct ones found alongside the images.


The Official Cyber Criminals Most Wanted Website at ccmostwanted.com

The Official Cyber Criminals Most Wanted Website at ccmostwanted.com

Internet Scams Section at ccmostwanted.com

Internet Scams Section at ccmostwanted.com

Quantum Mechanics video

Demystifying the Chinese Hacking Industry: Earning 6 Million a Night

Good Morning to you all! this is from the Linux security website, I just wanted to Share it with you. when you do hacking please be a white hacker I am not responsible for your actions, Take care !


An Interview with a Member of the Chown Group (COG) about the billion dollar hacking business in China "My friend earned 6 million Yuan a night by socalled Shuaku – or data server intrusion, and he bought a racing car the next day to show up in front of us", said Liwrml, one of the initiators of China's first hacker organization named Green Regiment.

According to Liwrml, Shuaku is among the coolest hacking technologies, and is also among the topmost hacking industries as well. "Although I admit that every body is envious in heart, but I will never do like that, for people shall maintain the moral bottom line", he added.

Liwrml also disclosed that the Chinese hacking industry was worth more than 10 billion Yuan RMB, and driven by the money desire, the Chinese Internet is challenged with the possibility of out of control.

In 2008, Chinese hackers found that hacking was a profitable business, and since then, they started to do non-core business, the socalled Black Industry Chains. Before that, their activities were centered around IT technology sharing.At that time, people who are not respected in the society, found themselves like God in the Internet, doing whatever they wanted and then also started with the socalled Black Industry. The booming period of this business was between 2004 and 2005, when there was no regulations. But now the majority have already retreated from doing that because they have earned enough already.

The Chinese hackers can be divided into three classes: the black hackers doing Black Business, the grey hackers for grey industry and the white hackers with government background.

The Grey Industry is not the same as the Black Industry, in that the former is making middleware, or the socalled gangster software. This type of software is embedded into the computer memory and is a sort of forced advertisement. This kind of advertisement module can be sold at RMB 80 per piece. One well-known media playing software once earned RMB 600 000 a day of playing, while another software company started up with pirating Windows operation system has sucked in a 7-digit Yuan income in its first month of operation, which was even unexpected by the boss of the company himself.

But there are still differences between Grey Hackers and Black Hackers, with the later doing things in direct violations of laws. The most notorious example is the "Big Miss" Trojan code decrypted in 2008.

The "Big Miss" hacker system has managed a strict franchising system, from the general gold agent to general regional agent. During the making of Trojan codes, there were again job organization. For example, a big trojan code has 12 smaller trojans, each of them is able to bypass the active protection of the game software operators. The makers of trojans earn one part, the sellers the other part and yet the account stealer also some parts.

Insiders of the hacking industry called stealing of accounts "Envelop". At the best time each "envelop" can be sold at 100 Yuan, and it was as easy as a game to earn more than 100 000 a night. Once the stealing is finished, next came the "envelop washing or cleansing", that is, to load the device of the stolen accounts into the small accounts, and then cleaned up the unlawful money through the underground bank systems. There is flowing band operation.

The "prosperous" development of the hacking industry has put the Internet into virtually out of control. The power of the hackers, the inability of the security companies and the distorted market development, all have contributed to the booming of the hacking business.

It is popularly known that people in the security industry earn much less than those in the hacking business, although both of them own the same skills. This forces a considerable number of security professionals to turn to hacking business, or to do partime hacking job. According to an employee of a security company, about 1/3 to 1/4 of the security engineers are involved in the Black Industry. Their incomes out of this bybusiness are fluctuating very much, among them, the best can earn RMB 200 000 a month.

What's ironicly it that the hackers and the security companies have established a close relationship, as the continuously improved skills of the hackers are pushing the security industry to upgrade their own technologies in a battle to defend the Internet and computer systems.

There is also a general trend among the hackers – the trends towards younger age. Much of the hackers are born after the nineties, and they have plenty of time either.

The author: Mr Chen Minghua, CEO of HeliosLab (www.helioslab.org) is a senior consultant in several major technology areas. He is an invited and frequent author of several online magazines and media.