Geek Speech's Blog

Maximize Virtual Machine performance

Amirvala Movahed — Tue, 02 Feb 2010 06:35:53 +0000

Virtual Machines performance is dramatically decrease after passing times around 4-5 mouth in Vmware ESX environment, this problem is facing too much in Windows VM.

I found and test http://www.perfectdisk.com/products/business-perfectdisk10-virtual-enterprise-edition/learn-more this software and realy boost the windows performances.

You can download 30-day Trial version from here http://www.perfectdisk.com/products/business-perfectdisk10-virtual-enterprise-edition/free-trial

Find Security Problem , Get Money from Big G

Amirvala Movahed — Sun, 31 Jan 2010 06:15:50 +0000

Google has launched an experimental programme to encourage external security researchers to find and report vulnerabilities in its browser. Borrowing from the Mozilla Foundation’s 2004 Security Bug Bounty Program, $500 will be awarded for each bug found. In special cases, a committee will decide whether to increase the amount to a maximum of $1,337 – however, this reward is only for vulnerabilities which are particularly critical, or particularly smart reports on vulnerabilities and their exploitation.

According to Google, it doesn’t matter whether the vulnerability is in the open source Chromium version or the binary Chrome version. The two differ only marginally anyway – Chrome additionally contains GoogleUpdater and sends an RLZ parameter which is forwarded to Google when a search term is entered in the Chrome address bar. The company will not be offering rewards for reports of bugs in third-party plug-ins.

How Internet Works

Amirvala Movahed — Tue, 26 Jan 2010 17:29:07 +0000

SSL for free ! Think about the reason?

Amirvala Movahed — Sat, 23 Jan 2010 19:36:41 +0000

Why a company release free version of SSL key for your web servers ?, is this keys can be still trusted or not the answer is on your decision, but at least give it a try in a virtualize apache server.

http://www.startssl.com/?app=1

The StartSSL™ Free (Class 1) certificates are domain or email validated and mostly referred to as the free certificates. Because the checks are performed mostly by electronic means, they require only minimal human intervention from our side. The validations are here to make sure, that the subscriber is the owner of the domain name, resp. email account. You may find additional information on this subject in our CA policy.

The StartSSL™ Free certificates are intended for web sites which require protection of privacy and prevent eavesdropping. However information presented within these certificates, except the domain name and email address, are not verified. Should you need higher validated certification, please check out our StartSSL™ Verified (Class 2) certificates.

Security update for BIND name server

Amirvala Movahed — Sat, 23 Jan 2010 19:30:00 +0000

The Internet Systems Consortium (ISC), the company behind the open source DNS BIND, software, has released security updates to resolve a DNSSEC-related vulnerability that could lead to Denial-of-Service (DoS) attacks. According to the relevant advisory, the server’s domain validation code contains a flaw that can cause an NXDomain to be regarded as validated although it isn’t. With the usual protective measures (random transaction IDs and random source ports) in place, however, the cache is not said to be open to manipulation. However, the prevention of DoS attacks is apparently, compromised. No further details were given by ISC.

BIND versions 9.0.x, 9.1.x, 9.2.x, 9.3.x, 9.4.0 up to and including 9.4.3-P4, 9.5.0 up to and including 9.5.2-P1, and 9.6.0 up to and including 9.6.1-P2 are affected. Updating to 9.4.3-P5, 9.5.2-P2 or 9.6.1-P3 fixes the problem. Versions 9.0 to 9.3 are no longer supported. The BIND 9.7 beta is also affected, but the flaw will be fixed in a new version.

Cisco reports vulnerabilities in products

Amirvala Movahed — Sat, 23 Jan 2010 19:28:59 +0000

Cisco has discovered a buffer overflow in version 2.6 of CiscoWorks Internetwork Performance Monitor (IPM) and previous versions for Windows; the flaw allows attackers to compromise vulnerable systems remotely. The vendor says that attackers only need a specially crafted “CORBA GIOP” request. IPM 2.x for Solaris and IPM 4.x for Windows and Solaris are not affected. Cisco will not be providing an update, but instead recommends that users upgrade to the current version.

Cisco is also reporting the discovery of a denial-of-service (DoS) vulnerability in Cisco IOS XR that allows flawed packets to cause individual SSH processes to crash. According to the description, entire systems could also be detrimentally affected because each successful attack occupies a little more memory. An update (see Software Versions and Fixes in the second advisory) remedies the flaw.

Use USB Device over IP Network

Amirvala Movahed — Sat, 23 Jan 2010 19:20:58 +0000

Today, surffing the internet for a project to help for sharing a USB base devices, and guess what ! I found this project.

http://usbip.sourceforge.net/

The USB/IP Project aims to develop a general USB device sharing system over IP network. To share USB devices between computers with their full functionality, USB/IP encapsulates “USB I/O messages” into TCP/IP payloads and transmits them between computers. Original USB device drivers and applications can be also used for remote USB devices without any modification of them. A computer can use remote USB devices as if they were directly attached; for example, we can …

USB storage devices: fdisk, mkfs, mount/umount, file operations, play a DVD movie and record a DVD-R media.
USB keyboards and USB mice: use with linux console and X Window System.
USB webcams and USB speakers: view webcam, capture image data and play some music.
USB printers, USB scanners, USB serial converters and USB Ethernet interfaces: ok, use fine.

It is currently implemented as Linux device drivers and available under the open source license GPL. Its I/O performance is enough practical in local area network for all types of devices, including isochronous devices, without any modification of Linux-original USB device drivers.

How easy can boot linux from Flash Disk !

Amirvala Movahed — Mon, 09 Feb 2009 17:52:44 +0000

UNetbootin allows you to create bootable Live USB drives for a variety of Linux distributions from Windows or Linux, without requiring you to burn a CD. You can either let it download one of the many distributions supported out-of-the-box for you, or supply your own Linux .iso file if you’ve already downloaded one or your preferred distribution isn’t on the list.

HTTP Proxy Load Balancer

Amirvala Movahed — Fri, 16 Jan 2009 18:44:26 +0000

Perlbal is our Perl-based reverse proxy load balancer and web server.

Perlbal is a single-threaded event-based server supporting HTTP load balancing, web serving, and a mix of the two (see below).

Installing Perlbal

Perlbal is not available as a package for Debian Etch, but we can install it through the Perl shell. Before we do this, we install a few prerequisites:
apt-get install build-essential unzip lynx ncftp perl

Afterwards we invoke the Perl shell as follows:

perl -MCPAN -e shell

On the Perl shell, we run the following three commands to install Perlbal:

force install HTTP:: Dateinstall IO::AIO

force install Perlbal

Type

to leave the Perl shell.

KIWI now as a part of Solarwinds !

Amirvala Movahed — Thu, 15 Jan 2009 06:35:30 +0000

In a case of SOC or somewhere similar in usage with SOC , you need a Syslog server.

If you are a addicted of Linux/Unix OS , can use built in syslog or syslog-ng server for your job , otherwise , may be looking for windows based syslog , and will be so happy to find that it also could be used for free !

http://www.kiwisyslog.com/products/

http://www.syslog.org/

http://www.balabit.com/network-security/syslog-ng/