Savannah W-ITS

VirtualBox Security Tools – testing or installing Live CD images as virtual machines
I noted that this seems to be a popular approach for VMWare images and decided to try a few tools out using VirtualBox.   As with any such ’security solution’ you should carefully evaluate the tools that you allow (or the OS builds that you [...]

Unfortunately there is no direct path (I did not find one) to migrate a Drupal 4.x site to Drupal 6.x (current version) – note that most likely you would face the same hurdles with any other CMS where you are making large version ‘jumps’.  Note that I previously explored Drupal and I am not an [...]

Hmm, imagine this – The C-HACK! of 2009
Update (2/7/2010) – it will be interesting to see ‘the facts’ for this event – A post by Bruce Schneier (1/23/2010) on the CNN web provides some additional thoughts, i.e. Are we doing this to ourselves? (Do our national policies increase the chances that these types of events [...]

GEO Blocking network access – blocking specific IP blocks (GEO-blocking – do you really need those connections from Asia?)
CAVEAT: The flow of packets through your system is fairly complex – I am limiting this discussion and I encourage you to RTM as well as the tutorial referenced in below…
There are a number of approaches to [...]

What are your shoe’s like?  Comfortable? How do your feet feel in a garden of needles where you are endlessly/randomly pricked?
Isn’t my ISP supposed to protect me? Hmm – yes & no.   Your ISP provides connectivity and attempts to allow the connectivity without intruding  – privacy concerns loom – how is the ISP supposed [...]

Part 101b:  Some example rules for your Linux Firewall

Creating a custom chain
Creating a LOG rule
Creating a  DROP rule

Some basic/simple rules you should implement – blocking RFC 1918 (or similar) traffic at your gateway.
Your Internet Gateway is the connection between your internal network and the public Internet.  For many consumers and small businesses this is [...]

Whoops! You just ran:
rm -rf ../*
instead of:
rm -rf ./*
Now what???? Remember the THREE Bs?**
For Linux (Guis), Windows (and perhaps Mac) users when you delete a file it is essentially ‘moved’ to the trash can.  The file is not actually removed until you empty the trash. However, if you delete a file from the command line [...]

Part 101a: Where should you start with a Linux firewall?
Review your configuration (review ALL tables – save the short script below to the file /tmp/show.firewall – you must be ‘root’ or use ’sudo’)
#!/bin/bash
for TABLE in raw mangle nat filter
do
printf “\t##### Table: ${TABLE} ####\n”
iptables [...]

I started this post a while back and settled on Back in Time (Rsync based solution) for my needs.  The post includes references (and in some cases, brief descriptions) of other tools.  The best tool for any solution will vary based on requirements, budget & time – as usual, your mileage will vary – just [...]

ROR (Ruby on Rails) is advertised as a data-centric development framework.  I did what I considered Data-dev back in the 1980’s using 4GLs:

you created a schema for your data (it was a bit more involved since data fields were ‘typed’)
you created views, reports, etc. for your data (just drop your fields onto screen forms, apply [...]