Hacker testifies against Manning.

Lamo testifies against manning

In case you have been hiding under a rock for the last few years, a young Private First Class leaked thousands of classified documents to the popular website wikileaks.

Today CNN reports that a hacker came forward to testifie that Manning had been on a chat forumn, most likely irc which is commonly used on government computers to communicate. They did not release the medium used. The messages were simple in that the hacker was falsely trying to obtain information about the illegal activities of the soldier.

The young man could possibly see the death penalty. The question is “How dumb could this kid be?” My God, this kid copied thousands of classified documents and then went on line to talk about his great accomplishment! Essentially he aconplished nothing. Anyone with a secret clearance can so what he did. It took no skill, yet he thought that he deserved recognition for his accomplishment. The sheer stupidity of this character amazes me.

Amazing feats of programming magic deserve recognition. If this guy had hacked the SIPR from an outside source I’d say wow that’s impressive, treasoness and stupid but something to possibly boast about.

Its very sad that we spend millions possibly billions on defense network security. We hire the most intelligent mathmeticians and programmers in the world to work at the NSA and the Pentagon. Yet it only took one Army PFC and a few CDRs to accomplish the largest security leak in history.

Apple goes for the throat taking down htc, or did they?

wo corporate giants go head to head striking blows at one another Apple vs. htc. Ding, ding, ding. Apple comes in swinging claiming htc used proprietary source code from Apples coveted ios. The U S Trade Commission ruled in favor of apple, giving htc until April 2012 To pull its prized models from US distribution.

Taking sides!

                vs

There is still hope for htc, The President still has 60 days to veto the ruling. Will our commander in chief exercise his veto right and save htc?

More Importantly, now that Apple has the ball rolling will it roll over Google? I would assume that if given the opportunity, Apple may just try and knock out the competition all together. That will have profound impact on market prices and freedom of choice.

I will definitely take sides and say that I enjoy the experience of Android on an htc device. I have owned an iphone 4 and the htc incredible. I am much happier with the freedom I have using my Android device.

That seems to be a common thread for apple, closed, proprietary, greedy.  DOnt take me the wrong way I respect what Apple’s products are robust, refined and user friendly. They put out quality before quantity and stay on the edge of the their game.

I prefer a more open development, i.e. android+Google. I have to say I will be very disappointed to see htc devices taken off the shelves.

My theory is Apple will not stop and they will continue and try to take android out of the fight!

also see Redmond Pie

xampp

Recently I set out to learn PHP and MYSQL, so far I made great headway in the 24 hours since I started <p?echo “Hello World”; ?> I have gotten a litle passed that stage and have started to guild a website. I found that configuring a LAMP server from scratch a bit time consuming on s debian based server and I have left windows behind all together. The only time I deal with a Windows PC these days is at work and to fix them.

So linux was the obvious choice for me, but I also didnt want to spend all afternoon setting up my LAMP server like I have done in the past. I did a little search and found a few alternatives; foxserve, triad, xampp etc etc. xampp was most definitely the easiest to download and install. So thats why I whent with it. After all this is for the speed of install and ease of use while learning a new programming language. Documentation can be found easily with friends of apache. During the point and click days of Ubuntu Linux and software that just works this is perfect for a novice or a professional who doesn’t have the time to sort through con fig files. I enjoy using it, Its on my Ubuntu desktop, on my debian squeezw server and on a xubuntu laptop that just died the other day : {.

the installation is simple just follow the Link for Documenttaion I posted earlier and you will have a working LAMP server with 5 minutes no Joke. Enjoy.

My Ubuntu 11.10 Server: a work in progress.

Up and running again, this time I used Ubuntu 11.10 and this tutorial. I am a little on the fence about ISP Config but the server set up works alright. The hesitation regarding the ISP Config 3 is the documentation costs 5 euros or you must subscribe to sourceforge. I dont ike these types of shady sales tactics. Its like a mechanic replacing your oil for free and then charging you $50.00 for the oil filter. Or like when Cox cable gets you all set up for free HBO but doesn’t tell you that its only free for 90 days, at the end of that 90 days the full price is $45 a month.  This is OK I choose the cheaper more time consuming and difficult route. I choose to just figure it out on my own, with the pay to play documentation.  I will probably have many posts in the future about this learning experience. For now I present just a couple of quick tips. Instead of invoking init.d scripts which have been converted to upstart jobs:

instead of

sudo /etc/init.d/apache2 restart

Use

sudo service apache2 restart

or sudo service ssh restart

Y

The tutorial for ISPconfig 3 is in depth and very well put together, even if you have very little experience with Linux, you can copy and paste the commands using favorite Terminal Emulator and an ssh connection to the remote host. Also using multiple monitors helps the ease of reading the instructions and the output from the terminal.

There is an initial problem with squirrel mail log in, I have yet to explore the issue, but I will at a further date and I will post.

My Ubuntu server is behind a Smooth wall express firewall “smoothie” which provides the dns and DHCP for my internal lan. Acompanied by a couple of netgear switches, and I have a rock solid LAN, for dirt cheap. I just used an old Compag presario, upgraded the ram to 512 mb, picked up a few nic cards for 4.99 each, because a firewall has to have more than one network interface. Once the hardware was ready I just followed the official installation guide. Installation was simple and painless.You can follow the two hyper links to the installation guides.

First I logged into my smoothie admin portal by typing 192.168.1.1.:81 then I navigate to Services>static dns

Next you just input the ip address of the server you would like to access, then a short memorable name, check enabled and click add

thats it now try it out.

,

static dns entries

Open up your faviorite web browser: type the shortname you chose for me it looks like this

check out the url. This makes things super quick. this only works in your home lan obviously you cannot just go to the internet cafe and access your home vpn with your static dns entry. for that you can use something like no-ip or any other dynamic dns.

This makes it incredibly easy for ssh access or sftp access which I use frequently.

Hope this might help someone out and I will post more about the dynamic dns set up I use at a later date.

* in reguards to the ISPconfig “Copyright © 2011 Falko Timme
All Rights Reserved. “

Hisaces.com DOWN, rebuilding network infrastucture.

I am currently implementing a new firewall into my network, and removing nat redundancy. This was slowing down my network and causes service outages. I now use a single DHCP server. and have converted my routers to basic switches.

The web/email server will now sit behind the firewall, and all traffic will flow through a dedicated linux firewall I built:

  • Processor: 800 mhz AMD
  • Ram: 512 MB
  • Hard Drive: 250 G
  • Network Cards: 2x gigabyte
  • Operating system: SmoothWall Express

The processor is a little much for a home network application.  the ram on the other hand could use a bit of an upgrade. I have qos, snort, and the web proxy enabled and I am already at 40% load on the 512mb of ram. Thats average load, and it spikes under high traffic.

The hard drive I just yanked out of another box and thats why its way over the top.

After switching the ClearOS box to standalone and putting on the switch behind the smoothwall. I quickly did a bandwidth speed test at speedtest.net and was pleased with the results.

  • ClearOS – down 17mbps, up 4.3 mbps
  • Smoothwall -  down 22 mbps, up 5.4mbps

THe ClearOS server will still be utilized and now that I have broken down all the NAT walls I managed to get a data transfer rate of 10 megabytes per second down from the ClearOS server. great for backing up and sharing files at home.

That isn’t too great but for a simple cable connection thats pretty good. I have alot more testing to do but so far this configuration should be good.

www.hisaces.com

Check it out I am hosting my own domain over at hisaces.com, I have a free email service. Everything is hosted on a Linux server, with postfix mail server and horde web mail.  ssl secure. If you want to know more Email me.

ClearOS Enterprise Version 5.2 for home security: a simple review.

ClearOS 5.1 formerly known as Clarkconnect.

I downloaded Clear OS from here and used this page as a reference for the installation. The installation was extremely straight forward. I’ve used ipcop, pfsense, gibraltar, debian. Currently I have been using ClearOS  for the last 10 days, I found about Clear OS linux distribution at this site. If you are interested in using a Linux or BSD distribution for home security, there are many options available. Most options offer similar functionality and a web based user interface from which to administer your firewall. I will not be going over the features of the other firewalls that I mentioned if you would like a comparison look here. If you selected the previous link, you would find that iptables (base of Linux firewalls)  is number one for many reason. For the average user ease of use is important, if you are not to familiar with linux, firewall Lrules, networking then iptables might go right over your head. Don’t get me wrong you should be somewhat familiar with Red hat Linux, networking security, and yum package management to use ClearOS.  So since they are all similar and use iptables (Linux), why am I using ClearOS?

To put it simply it looks good, the webui during install and after located at https://system.clearos.lan:81 is easy to use, and it makes sense. I like the scalability of the install, adding server functionality or keeping it simple for more security. The install process was quick and painless.  Using common Linux names for the interfaces just makes things easy. Other distros implement color branding for interfaces, which just complicates things I think. If you are familiar with eth0 being your default Ethernet connection then why change it, right? It does NAT 1:!, DHCP, DNS. It has it all. Also because it is geared toward the corporate market and has that “enterprise” branding it is well documented. There is a whole host of How to’s out there which is why I didn’t make. It also has server functionality, Dynamic DNS service with domain hosting.

Based on CentOS and Redhat Linux, ClearOS falls under the GNU license.

In my set up the OS is utilized as a gateway, securing my various Linux and Windows clients. I have played around with the flexshare server, web server, smtp server, and others. They all work and are really easy to set up. It also has mysql for database, and uses phpmyadmin ui to administer that. I did some testing and I DO NOT suggest using your primary gateway firewall as a web server… From a security stand point its like an invitation for disaster. It will basically all direct connecting from the web into your lan… be careful.  Luckily Clear OS has a standalone feature allowing the user to deploy the OS as a linux server, which utilizes Apache 2.2, Samba, postfix, and several other well known server apps. Now things are not all good. Also for increased security clearOS implements snort detection and ip blocking which I like. The logging is extensive and very easy to use making trouble shooting a breeze.

The “enterprise” after Clear OS has its downside there are many “updates” available for the installed software. Unfortunately these updates are not free you must purchase them from Clear. Also the domain hosting which only allows you to use the Clear connect dyndns. A domain costs 25$ a year when you can get an identical domain from other providers for half the price. Either way if you are not worried about domain hosting and server functionality then ClearOS may be for you, I am planning on setting up a stand alone ClearOS server behind a ClearOS gateway and firewall.

The Distance Between Thoughts and Actions: an introduction to this blog and its editor.

I will be collecting thoughts and stories and keeping them on this blog. I like to read other peoples informative stories and “how tos”  so when I come across something that I think Is informative amd related to tech, psychology, news, family. My wife will be covering the family section, she is a child care professional, and she owns Snug Harbor For Kids.

I am a father of two, active duty U.S. Marine, and a student at Palomar College. I’m majoring in Computer Information Systems and I am interested in philosophy and psychology. I also enjoy writing which is why I created this blog. Please enjoy constructive criticism is welcome.

The posts to follow will be based on my experiences and interests in the following categories and sub categories:

Technology:  Linux, Windows, GNU, java

Psycology: Cognitive Behavioral Therapy

Travel: Where I’ve been and where I want to go.

Family: FCC, Camp Pendleton Ca,

Social networking
twitter
facebook

gmail : jthrash84@gmail.com

Follow

Get every new post delivered to your Inbox.

Join 214 other followers