22 Years of Computer Experience

I first saw word of this on the #centos. A city manager for Tuttle, OK accused Johnny Hughes of CentOS fame of hacking their city sites. His proof? A default Apache post-installation page included in CentOS installations when the website is unconfigured. That's right, the default post-installation web page for Apache. Email after email with Johnny Hughes being more polite than I ever could be with the city manager (who claimed "22 years in computer systems engineering and operation").

Read some of the stories yourself:

The Emails (CentOS site)

The Register

Unbelievable....

VMware Impressions Continued

I have been making some heavy use of VMware in a corporate test environment and at home in my own test environment. I have used VMware in the past for various small tasks, but due to low powered machines I wasn’t able to utilize it as much as I would have liked. For testing it has proven awesome.

At work I have been able to roll out some testing servers for development in no time at all - without the need to add new hardware or rebuild a box from scratch. I also needed to test something where the server would have a second disk. It was only a matter of minutes before I had a VM rebooted with a new disk to continue my test. No hardware swapping, just add a new virtual disk and set it up in Windows. Nice.

This weekend I have been playing a lot with Grub, Lilo and software RAID under Linux. The snapshot feature has been a *huge* time saver. Re-installing boot loaders, removing disks and using the snapshot to roll back to a good config. It has definitely sped up my testing process at home for some things I am working on. There is no way I could have gone through as many configurations as quickly as I did this weekend with a more traditional hardware setup.

Jeff's World Cabled

With the help of a friend this past weekend I finally finished getting the home network punched down. When we built the house a few buddies came down to help run cable to several of the rooms. Sixteen network drops in total.

It took getting a new computer to finally get me moving on finishing the project! The new computer sits upstairs in the dinette area, right where I had put drops with that in mind. Since I have been running VMs on the new machine it was really easy to over burden the wireless NIC I had in there to get me by.

So we have everything wired up now. My friend loaned me a GB switch, so once I get a GB NIC for my file server in the basement I can get some wicked fast transfers between the new machine and the server in the basement. It’s nice to finally have that project wrapped up!

VM Rootkits?

There was an interesting article on Slashdot yesterday about Virtual Machine based root kits. Apparently some Microsoft and University of Michigan security researchers have figured out a way to hijack your OS and get it to run on top of a VM. This can be done through any number of unpatched exploits (either existing or future). Suddenly you are running your OS on a VM layer which can be doing any number of things your current scanning software has little chance of detecting. Worth a read and some insight as to what the future may hold for security professionals.

Red Hat Enterprise Linux 4 Update 3

Looks like Red Hat released Update 3 to RHEL4 today. Here is a list of errata in this update:

https://rhn.redhat.com/errata/rhel4es-errata.html

If CentOS follows true, they should be pusing CentOS 4.3 out in the next two weeks or so. Looks like I will have a few servers to update at work in the near future.

Replacement RAM

My replacement RAM has arrived and I am up and running on 2GB now! We’ll see how it runs later this weekend, I have remote installation stuff to hack around on in the VMs which will have me running several of them at once while doing some intalls of nfs and/or http running on the main host machine.

Remote Linux Install Hacking

First, it’s way too late for me…. I am certain to regret this in the morning, but every so often you hit a groove and you just have to stay up learn a little something new. Tonight? linux vnc

I am working on some remote installation procedures on my home network for an upcoming project I am working on. Part of this meant looking closer at the ‘linux vnc’ option. Pretty nice option! Enable VNC for your Linux install by using linux vnc on your boot line. Now you have to add some more options to that to make sure you reach the point where the VNC Server kicks on, because if you are remote you really don’t want any prompting before that point.

Tweak a little on your grub.conf and point it to a http install location and you have a complete remote install solution. I’ll write more up on this later, but when I am tired tomorrow I wanted to remind myself of what exactly I was playing with last night!