Open Source Security

Last night I played with Nessus which is a good vulnerabilty scanner. I also messed with Nmap and its graphical front end. I read alot about TCP, IP, UDP, and SYN, ACK, FIN Flags and different responses. I analyzed network protcols with EtherApe. It is even possible to craft packets to contain any source, destination port, or tunnel through any port i.e. 80. For instance if firewall blocks everything except the internet it is possible to tunnel to port 80 and issue commands as long as it is acting as a server. more on this later.

Blog Testing

Im currently testing different blogs to see which one I like the best, currently using http://www.blogger.com/ as my main one. Just started using Yahoo 360 Beta. Now open Source LiveJournal. Pretty cool so far. Im looking forward to attending Southern California Linux Expo in Feburary and thinking of joining my local LUG, to the uninformed that's Linux Users Group. I want to learn the most out of Unix and Linux. I have currently taken Linux and Linux network administration in college. Truthfully I think I learn alot more from books and my computer. Last semester I was giving my professor tips on how to secure our class web server as it had been hacked :) Whats really sad is he is an author of a popular Unix book.Here is good site for free submissions to search engines
FreeWebSubmission.com

Things I did over the weekend.

This weekend I studied electronics, mostly about capacitors, resistors and inductors. Ohm's law and the different measurements for electronics. I want to go for my HAM license and this is what I need to study.
I reviewed some Python source code for a program that you can craft packets to contain a source port and destination port of your liking as well as put in the payload of your choice. More research on buffer overflows and how memory is arranged.
Zen- To really live in the moment and focus, concentrate extensively on that second or what your doing. I have been playing Xbox quite a bit this weekend as well. Planning to set up a *nix server.

Current Books

I started reading many books today after visiting my local library, they include Secrets of Executive Success, which has 56 chapters on business tactics and strategies, enjoyable reading so far.

The Radio Amateurs handbook. So far I've learned that Marconi invented radio. Nuclear fission is splitting atoms. Batteries produce DC current and all dry cells produce 1.5 v. Although Lithium batteries produce 3 volts and have a 10 year shelf life.

Zen Mind a book about Zen meditation and practice. This book has really got me thinking about my way of thinking :)

Power and influence (Mastering the art of persuasion) I got this book to learn how to get more sales and business appointments. I quote my sister as she told me "it's just common sense, i dont understand why your read those books."

Beside that it is Saturday night, and Im reading and anxious to set up my Linux box in the living room tommorow.

What's New

It seems that there are new worms floating around the net. Rbot and zotob.d it seems they are bots. Virus writers are having wars with each other right now. These exploit plug and pray vulnerability. Here is a technical description http://www.f-secure.com/weblog/#00000553
The new issue of Insecure magazine is out. This magazine is awesome: http://www.insecuremag.com/.
The article I found particularly intriguing was how easily a PDA could create a backdoor into your network. IT should be more stringent with PDA access inside the corporation.
I received the new catalog from http://www.tektronix.com tools from measurements good for signal analysis.

Motorola V330

Overall Im pretty impressed with this phone, I enjoy the capability to take pictures and record video. I like the fact it uses Java. I want to see the source code on my phone. The picture is sharp and clear on the screen. The animations even look good.

On a different note, I purchased a used XBOX, with Tom Clancys Splinter Cell, Im still getting used to the controls, but am moving right along.

Technology addiction

Havent posted in a while, been busy studying Java learning about javac, objects, functions, associations. Pretty interesting stuff, I want to code some apps for my website. I finally ordered my XBOX, and my cellphone. I got the Motorola V330 because of its bluetooth capabilities. I got a bag to drag along all my gear.

Another day gone.

I dont know if it is that Im getting older, but the things I used to consider cool or important are not. The only thing that seems to matter now are 1)God 2)Family 3)My Lady 4)Friends 5)books. All I want to do is learn and be a good son, boyfriend and friend. I had a good day today. Work was the same as usual. I cant wait to get a Motorola V330, XBOX and IPOD these are the toys I want currently. Im such a technology geek, its an expensive habit, but at least its not drugs :)

Funny

Open SSH

This is a free version of Secure Shell, you should use this to encrypt all traffic going over your network. For instance I can create a VPN from my workstation to my server at home without having to worry that my information is going out plain text i.e. Telnet. You can securley issue commands, transfer files and monitor your servers.

Open BSD

This is a Secure Unix operating system, it is constanly being audited. There are about twelve developers who go over the source continiously to search for more holes. It is secure by default with most services disabled to begin with. Personally I would run this OS if I had a ISP or hosting ccompany.

NMAP- Open source scanner

This application is awesome for port detection, OS identification and you can even set flags in TCP/IP packets.

My Public PGP key

Support Cryptography and Encryption if you want privacy.

-----BEGIN PGP PUBLIC KEY BLOCK-----Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com/>
mQGiBELe6ZQRBADDy9X6cILqN8Pea6CNhq7ShbR4Xqy7YvqWyRGf0w8G/RCHkEB+ejEccXy
ThyFJvFKpTgkayY6i/Aomnj6g5a4iIwy4C7fTqrPcXsFxtT5GxzktYwFmGfDDjaoDFqju5FpB1b7w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i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JnsO-----END PGP PUBLIC KEY BLOCK-----

A good weekend.

I spent most this weekend reading about and coding in HTML, DHTML, CGI and PERL. I looked at alot of javascript and am amazed at it's simplicity compared to Java. Im going to strat coding in both. Im looking for a second job to make more cash. Technology is an expensive hobby, but I love it. Next on my list IPOD and XBOX.

Open Source Solutions

Companies could save up to 90% on their database TCO by using MySQL, instead of Microsoft products. It is the fastest growing database in the industry. Its reliable and fast to deploy and fully customizable. Check it out here http://www.mysql.com.

Links

Here are some good scanning references:

http://www.freqofnature.com/
http://www.radioreference.com/
http://www.cityfreq.com/ca/orange/

Computer:
http://undeadly.org/
http://sagewire.sage.org/
http://www.f-secure.com/weblog/#00000553
http://www.procata.com/blog/archives/2005/05/10/expert-programmers/
http://technet.microsoft.com/default.aspx
http://www.sun.com/
http://slashdot.org/
http://www.newsforge.com/
http://www.unixreview.com/
http://www.43folders.com/

News

Risk Digest is now over 20 years old, a online zine about computer risks to us:
http://catless.ncl.ac.uk/Risks/

Cisco in the news again password protection for their website compromised!

From Cisco:*IMPORTANT NOTICE:*
* Cisco has determined that Cisco.com password protection has been compromised.* As a precautionary measure, Cisco has reset your password. To receive your new password, send a blank e-mail, from the account which you entered upon registration, to cco-locksmith@cisco.com. Account details with a new random password will be e-mailed to you.* If you do not receive your new password within five minutes, please contact the Technical Support Center.* This incident does not appear to be due to a weakness in Cisco products or technologies.

Rumour that astronauts travelling to Mars would be bombarded with radiation and about 10% would end up with cancer and die http://www.newscientist.com/article.ns?id=dn7753

Thats it for right now :)

Book I want to read about Nanotechnology

Here is a company I feel will do good in the future with nano: http://www.nantero.com

Current research areas

These are subjects I'm currently studying or have been studying: Algorithms,artificial intelligence,computer architecture computer graphics, data mining,design, file system design genetic algorithms,geographical information systems,grid computing, information retrieval,languagues,machine learning,natural language processing,operating systems,pattern matching, profiling,regular expressions, robotics,security, signal analysis,text processing,user interface design,unix programming,web information retrieval.

Scanner Frequencies

FRS Frequencies
FRS (Family Radio Service)
Channel 1 (462.5625)
Channel 2 (462.5875)
Channel 3 (462.6125)
Channel 4 (462.6375)
Channel 5 (462.6625)
Channel 6 (462.6875)
Channel 7 (462.7125)
Channel 8 (467.5625)
Channel 9 (467.5875)
Channel 10 (467.6125)
Channel 11 (467.6375)
Channel 12 (467.6625)
Channel 13 (467.6875)
Channel 14 (467.7125)

Finished Reading

I finished this book a while ago, its about Quantum Computing, Qunatum Cryptography and time travel. It is pretty heady when it comes to the physics and math but a good read.

Currently Reading

This book is also about the NSA. AI, and the goverment trying to control a corporation.


This book is awesome, NSA, algorithims, intelligence, and cryptography.

Cisco Update

Is Cisco killing their own reputation? by ZDNet's George Ou -- Last Wednesday in Las Vegas Nevada, Michael Lynn delivered a message to the IT world that they are not safe. On that same day, Mr. Lynn became unemployed and the target of a massive lawsuit from Cisco Systems. His only "crime" was that he exercised his first amendment right of free speech to talk about [...]