Spamer was condemned in Virginia

The Court of Appeals of Virginia upheld yesterday what is believed to be the first conviction in the nation under a state anti-spamming law that makes it a felony to send unsolicited mass e-mails.

A North Carolina man was convicted in Loudoun County two years ago of illegally sending tens of thousands of e-mails to America Online customers. Prosecutors said Jeremy Jaynes flooded the servers at the Internet company's headquarters in Loudoun with bulk e-mail advertisements for computer programs and stock pickers.

Jaynes was sentenced last year to nine years in prison on three counts of violating the state's anti-spam law and was allowed to remain free on $1 million bond while his case was appealed. Thomas M. Wolf, an attorney for Jaynes, said he plans to appeal yesterday's decision.

source: http://www.washingtonpost.com/wp-dyn/content/article/2006/09/05/AR2006090501166.html
and http://it.slashdot.org/article.pl?sid=06/09/08/1237230

Splitting Large Files to Span Multiple Disks using TAR

The two extra command line options you need to use over and above the standard syntax are -M (--multi-volume) which tells Tar you want to split the file over multiple media disks. You then need to tell Tar how big that media is, so that it can create files of the correct size. To do this you use the --tape-length option, where the value you pass is number x 1024 bytes.

The example below shows the syntax used. Lets say the largefile.tgz is 150 Meg and we need to fit the file on two 100 Meg Zip drives.

tar -c -M --tape-length=102400 --file=disk1.tar largefile.tgz

The value 102400 is 1024 x 100, which will create a 100 Meg file called disk1.tar and then Tar will prompt for volume 2 like below :-

Prepare volume #2 for disk1.tar and hit return:

In the time of tape drives you would have taken the first tape out of the machine and inserted a new tape, and pressed returned to continue. As we want Tar to create the remaining 50 Meg in a separate file, we issue the following command :-

n disk2.tar

This instructs Tar to continue writing the remaining 50 Meg of largefile.tgz to a file named disk2.tar. You will then be prompted with the line below, and you can now hit return to continue.

Prepare volume #2 for disk2.tar and hit return:

You would repeat this process until your large file has been completely processed, increasing the disk number in the file each time you are prompted.

Other example:
tar cvf arq1.tar -M --tape-length=500000 bigarq.txt


Putting the File Back Together

The process is similar when putting the large file back together from its split-up files. Below is the syntax used to re-create the large file from the disk1.tar and disk2.tar images.

C:\tar>tar -x -M --file=disk1.tar largefile.tgz
Prepare volume #2 for disk1.tar and hit return: n disk2.tar
Prepare volume #2 for disk2.tar and hit return:


Source: http://www.cgi-interactive-uk.com/splitting_large_files.html

SMTP reply codes

500 Syntax error, command unrecognized [This may include errors such as command line too long]
501 Syntax error in parameters or arguments
502 Command not implemented
503 Bad sequence of commands
504 Command parameter not implemented

211 System status, or system help reply
214 Help message [Information on how to use the receiver or the meaning of a particular on-standard command; this reply is useful only to the human user]

220 Service ready
221 Service closing transmission channel
421 Service not available, closing transmission channel [This may be a reply to any command if the service knows it must shut down]

250 Requested mail action okay, completed
251 User not local; will forward to
450 Requested mail action not taken: mailbox unavailable [E.g., mailbox busy]
550 Requested action not taken: mailbox unavailable [E.g., mailbox not found, no access]
451 Requested action aborted: error in processing
551 User not local; please try
452 Requested action not taken: insufficient system storage
552 Requested mail action aborted: exceeded storage allocation
553 Requested action not taken: mailbox name not allowed [E.g., mailbox syntax incorrect]
354 Start mail input; end with .
554 Transaction failed

Source: RFC 821

Debian Installers

http://linuxmafia.com/faq/Debian/installers.html

Convert CUE/BIN images to ISO in Linux

It's simple:

bchunk image.bin image.cue image.iso

Then you can mount ISO image with "mount" command:

mount -o loop -t iso9660 image.iso /mnt

Linux Test Tools

The purpose of this Linux Test Tools Table is to provide the open-source community with a comprehensive list of tools commonly used for testing the various components of Linux.

http://ltp.sourceforge.net/tooltable.php

Linux Command line Tips

http://www.pixelbeat.org/cmdline.html

Comparison of Linux distributions

The many available Linux distributions differ for a range of reasons including technical, organizational, and philosophical.

Technical variations include support for different hardware devices and systems or software package configurations. Organizational differences may be motivated by technical decisions but also by philosophical or even historical reasons. Some distributions specialise in use on desktops, servers or routers. Other criteria include security, including how quickly security upgrades are available; ease of package management; and number of binary packages available.

These tables compare the latest stable release of major distributions on a range of objective criteria. It does not cover the subjective merits of each operating system, branches marked as unstable/beta, nor compare Linux distributions with other operating systems.

Look at: http://en.wikipedia.org/wiki/Comparison_of_Linux_distributions

Warsaw's Laws of Hackering

In the great tradition of Murphy's Law and other related laws, I offer my humble few. I'm not sure I have rightful claim to originating all these, so if you find a previous reference to these laws, please let me know!

Warsaw's First Law: The Rule of Estimate Accuracy Insurance
When making a time estimate for any programming task, make your best formalized guess, then multiply by two and bump it up a unit. E.g. "I think it will take me three days to hack in those changes to the frobnicator"; My official estimate: 6 weeks.

Warsaw's Second Law: Unbending Law of Commit Scheduling
Never change anything after 3pm on a Friday.

Corollary to Warsaw's Second Law
If you do change anything after 3pm on Friday, you will break it, and thus end up fixing it for the entire weekend. You will probably not be able to sleep, and if you do fall asleep, you will dream about the breakage. On Monday morning, you will fix the problem in five minutes.

Warsaw's Third Law: Law of Software in a Vacuum
All software sucks. Make sure yours sucks less.

Warsaw's Fourth Law: The Law of Pinball Machine Instructions
It doesn't matter a wit if the instructions are printed clearly for all to see, nobody will read them. They'll just drop their quarters and start pushing buttons like a Tommy. Software is the same.

Warsaw's Fifth Law: A Rose By Any Other Name (a.k.a the Pink Floyd Rule)
All names are stupid until you become rich and famous with it.


Source: http://barry.warsaw.us/software/laws.html

YouOS - A Web Operating System

YouOS is an experiment in a new kind of computing platform.

https://www.youos.com

The Top 20 Most Critical Internet Security Vulnerabilities

Top Vulnerabilities in Windows Systems
W1. Windows Services
W2. Internet Explorer
W3. Windows Libraries
W4. Microsoft Office and Outlook Express
W5. Windows Configuration Weaknesses

Top Vulnerabilities in Cross-Platform Applications
C1. Backup Software
C2. Anti-virus Software
C3. PHP-based Applications
C4. Database Software
C5. File Sharing Applications
C6. DNS Software
C7. Media Players
C8. Instant Messaging Applications
C9. Mozilla and Firefox Browsers
C10. Other Cross-platform Applications

Top Vulnerabilities in UNIX Systems
U1. UNIX Configuration Weaknesses
U2. Mac OS X

Top Vulnerabilities in Networking Products
N1. Cisco IOS and non-IOS Products
N2. Juniper, CheckPoint and Symantec Products
N3. Cisco Devices Configuration Weaknesses


Source: http://www.sans.org/top20

Server monitoring

To make all sorts of graphs:

apt-get install munin munin-node

Example: http://munin.ping.uio.no

To compute more statistics:

* anteater
* isoqlog
* mailgraph

Monitor system logs: logcheck:

* sends you mail with abnormal log lines
* It's important to customize what is normal and you do it with regular expressions

Source: http://www.enricozini.org/blog/eng/seventh-day-in-addis.html

Games for Linux

http://forums.gentoo.org/viewtopic-t-429035-postdays-0-postorder-asc-highlight-monsterz-start-0.html

Phoronix Linux Compatible Hardware

Phoronix LCH is designed to be a community-driven indexing system for computer hardware under GNU/Linux. This system allows you to post GNU/Linux information on hardware as well as sharing your own personal experiences when it comes to GNU/Linux compatibility. You are also able to browse and search the database for other hardware as well. This is designed to make it much more effortless when deciding what GNU/Linux compatible hardware to go with during your next upgrade. Phoronix LCH is not distribution specific, and allows comments from all versions of GNU/Linux. Phoronix LCH is to spread what works and what doesn't when it comes to hardware under Linux.

http://www.phoronix.com/lch

Dell laptop explodes at Japanese conference

A laptop reported to be a Dell burst into flame and was caught on camera during a recent Japanese conference. Guess this laptop could be a poster child to prove that laptops really can cause sterility if they are on your lap. :-)

Fully Open Source NTFS Support Under Linux

The Linux NTFS project has released a beta version of its fully open source userspace (using FUSE) 3G-Linux NTFS support driver. According to the developer, this driver beats hands down other NTFS support solutions performance-wise (including commercial Paragon NTFS driver and also Captive NTFS, which is using windows ntfs.sys driver under WINE).

http://www.linux-ntfs.org

The Ten Most Critical Wireless and Mobile Security Vulnerabilities

1. Default WiFi routers: By default, wireless routers are shipped in an un-secured state.

2. Rogue Access Points: set up an authorized access point, without informing the network administrator.

3. Wireless Zero Configuration: When a computer connects to an access point, it generally stores the details of that connection locally. The next time the computer is turned on, the wireless network card immediately looks for the connection and re-establishes the connection. Since the SSID value is sent as plain text, anyone with a sniffer can see it. Programs like Karma automate this process.

4. Bluetooth exploits: BlueSnarfing, BlueBugging, BlueJacking, BlueTooth DoS attacks.

5. WEP Weaknesses: passwords can easily be cracked using Airsnort.

6. Clear Text Encryption Passwords: Some of the most popular mobile encryption programs even store the password in plain text in the registry.

7. Malicious Code: "Airborne" mobile viruses.

8. Autorun: Windows Mobile devices contain a little-known autorun feature that can provide an attacker with a quick and easy method of infection. When a media card is inserted into the PDA, Windows Mobile will copy over the autorun.exe (if it exists), create a copy in the /Windows directory, and execute it. A user can prevent this by creating a read-only dummy executable called autorun.exe and put it in the /Windows folder.

9. Multiple VoIP attacks: VoIP is mostly sent in an unencrypted format. As a result, anyone can see the connection information and capture/record the conversation. Programs like VoMiT and Cain & Abel can easily capture and record conversations. Other programs like sipbomber can kick a user offline. In addition, SiVus (a VoIP scanner) can quickly locate VoIP enabled systems.

10. Lost and stolen devices: All mobile databases should be encrypted. A good, written security policy and user education are also important. Mobile devices should all have a login copyright banner, along with return information.


Fonte: Help Net Security ( http://www.net-security.org/article.php?id=927&p=1 )

Partimage

Partition Image is a Linux/UNIX utility which saves partitions in many formats (see below) to an image file. The image file can be compressed in the GZIP/BZIP2 formats to save disk space, and split into multiple files to be copied on removable floppies (ZIP for example), ... Partitions can be saved across the network since version 0.6.0.

http://www.partimage.org

nUbuntu

The main goal of nUbuntu is to create a distribution which is derived from the Ubuntu distribution, and add packages related to security testing, and remove unneeded packages, such as Gnome, Openoffice.org, and Evolution. nUbuntu is the result of an idea two people had to create a new distribution for the learning experience. Many people ask, "What makes it better than X?", or "Why should I use this over Y". Our answer to this question is, we do not think about whether people are using it or not. We are more concerned about the learning process. If you want to try something with a clean interface, fast, and an excellent range of programs please don't hesitate to download nUbuntu.

http://www.nubuntu.org

Top 100 Network Security Tools

After the tremendously successful 2000 and 2003 security tools surveys, Insecure.Org is delighted to release this 2006 survey. Fyodor asked users from the nmap-hackers mailing list to share their favorite tools, and 3,243 people responded. This allowed me to expand the list to 100 tools, and even subdivide them into categories. Anyone in the security field would be well advised to go over the list and investigate tools they are unfamiliar with.

http://sectools.org