Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Saturday, May 26, 2012

redis ~ good to begin links

Redis

Download: http://redis.io/download 
@GitHub: https://github.com/antirez/redis

Redis Commands: http://redis.io/commands

MongoDB vs Cassandra vs CouchDB vs Riak vs Neo4j vs Redis vs HBase vs MemBase:
http://kkovacs.eu/cassandra-vs-mongodb-vs-couchdb-vs-redis

Try Redis Online: http://try.redis-db.com/

Redis Hosting: http://redistogo.com/
(Free Plan of 5MB 1DB 0Backup)


Webdis: http://webd.is/ a fast HTTP Interface to Redis

Taking advantage of Redis in your stack:
http://antirez.com/post/take-advantage-of-redis-adding-it-to-your-stack.html

Home Documentation for Creators
http://redis.io/documentation
Architecture of Redis: http://www.enjoythearchitecture.com/redis-architecture

The Little Redis Book (Free eBook):
http://openmymind.net/2012/1/23/The-Little-Redis-Book/

Quick Support:

Different Programming Language Clients: http://redis.io/clients


Using Redis from:



Resque, a Redis backed library for creating Background Jobs.
An example usage.
Resque Scheduler to actually benefit with cron-ification of Resuq Jobs.


Redis and Scripting:
http://antirez.com/post/redis-and-scripting.html
Update on Redis & Lua:
http://antirez.com/post/an-update-on-redis-and-lua.html
Redis Lua scripting is badass:
http://tjholowaychuk.com/post/19321054250/redis-lua-scripting-is-badass



Quick Tutorial:
http://simonwillison.net/static/2010/redis-tutorial/
Collection of Redis HowTos by Community:
http://rediscookbook.org/
Collection of Redis UseCases:
http://www.paperplanes.de/2010/2/16/a_collection_of_redis_use_cases.html
15 min Intro to Redis DataTypes:
http://redis.io/topics/data-types-intro


Have an Issue: https://github.com/antirez/redis/issues


Redis Persistence Dymestified:
http://antirez.com/post/redis-persistence-demystified.html

Using Redis transactions with CouchDB:
http://blog.mudynamics.com/2012/01/17/blitz-io-using-redis-transactions-with-couchdb/


Auto Complete with Redis:
http://antirez.com/post/autocomplete-with-redis.html



Security:
Brute-Force password auditing against Redis KeyValue store:
http://nmap.org/nsedoc/scripts/redis-brute.html
Redis own Security Doc: http://redis.io/topics/security

Sunday, May 20, 2012

mongoDB ~ the good to begin links

mongoDB

Download (OSX/Win/Linux/Solaris/Source): http://www.mongodb.org/downloads

Cloud MongoDB Hosting (240MB Free): https://mongolab.com/home/

MongoDB vs Cassandra vs CouchDB vs Riak vs Neo4j vs Redis vs HBase vs MemBase:
http://kkovacs.eu/cassandra-vs-mongodb-vs-couchdb-vs-redis


Home of Documentation by Creators
http://www.mongodb.org/display/DOCS/Home

MongoDB's Admin Zone Documentation
http://www.mongodb.org/display/DOCS/Admin+Zone


Quick Support


Little MongoDB Book (free e-book):  http://openmymind.net/mongodb.pdf


MongoDB Drivers for different Programming Platforms:
http://www.mongodb.org/display/DOCS/Drivers





Specific Links for Specific Problems


Performance Analysis


Security in MongoDB


Practical MongoDB (windows oriented):

Easy Web-App programming with Opa and MongoDB: ux-mongodb-easier-with-opa

Encode Video with MongoDB Work Queues: ibm developerworks mongodb-work-q

few nice articles and based projects: http://mongly.com

Monday, October 11, 2010

costly Samsung Tab, FB 'Group' flaw, Ubuntu 10.10, Windows7 Phones, 29 Java Vulns Patch

 Pop-Links@[11-Sep-2010]
==================================================


High Costs than Expected of Samsung Galaxy Tablet :
now Apple iPad costs $500 and the leaked cost of Samsung Galaxy Tab is $650 ($400 if you sign 2yrs long contract for services)... are they nuts or what, they got poor resolution and way poor brand-name than Apple... leave all that, its Android based tablet and even after using OpenSource platform they cost high

Link: http://www.itworld.com/mobile-amp-wireless/123579/samsung-galaxy-tab-price-leaked-it-too-high
==================================================

 Facebook flaw let you Add Anyone to Group :
 one more flaw recently noticed in Facebook is anyone could be added to a Facebook Group without the account owner's prior permission or choice. Suppose you create a Group and want anyone to be its member just add his/her name in members to be added and mark its 'Privacy' status as 'Closed'. Now, whom all you added as member will be directly added without any confirmation required... nice :)

Link: http://www.itworld.com/internet/123516/whats-wrong-facebooks-group-grope
==================================================

Ubuntu 10.10 released
newer version of Ubuntu has been relased on 10-10-2010... its giving games a next-gen graphics overhaul. The kernel 2.6.35 has seen graphics improvement and the OpenGL drivers included are DirectX 11 equivalent. When you will start playing a game or powerful HD Video, it will automatically shift onto nVidia or ATI(now AMD, :( ) card.



Link: http://www.ubuntu.com/desktop/get-ubuntu/download
==================================================

 First Look : Windows Phone 7 Hardware

Microsoft CVP Steve Guggenheimer tells how quick and easy Windows Phone 7 would be over newer fancy phone models displayed by him. He displays a Dell Phone (vertical slide-out tactile keyboard); HTC 7Surround, (slide-out speakers with surround sound, 720p video camcorder); and other models from LG, Smasung

Link: http://ecn.channel9.msdn.com/o9/ch9/3394/5cb9da58-c9f3-4001-9fee-9e0c002d3394/WP7Gugg_2MB_ch9.wmv
==================================================
 
Oracle made Java Critical Patch Update pre-release Announcement
The announcement is for 12th October 2010. The patch contains 29 security vulnerabilties fixes.
Products affected are
JDK, JRE 6 Update 21 and earlier for Windows, Solaris, and Linux
JDK and JRE 5.0 Update 25 and earlier for Windows, Solaris and Linux
SDK and JRE 1.4.2_27 and earlier for Windows, Solaris and Linux


Link: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

==================================================

Saturday, September 25, 2010

Orkut's Bom Sabado XSS, Stuxnet via Autorun, Nokia spends $10M on Symbian and NEW google, IBM

Pop-Link@[25-Sep-2010]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'Bom Sabado' bombs XSS attack over Orkut, just after Twitter XSS a similar spreading attack on Orkut, its actually a Portugese word meaning 'Good Saturday'...
Article: http://www.echoblogger.com/internet/cross-site-scripting-attack-on-orkut/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Stuxnet is using Autorun vulnerability to spread this .LNK File Vulnerability
Article: http://www.symantec.com/connect/de/blogs/stuxnet-lnk-file-vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Nokia is spending $10 million for Symbian to be popular, giving away money to several developers via online development contest
Article: http://www.colordev.com/50_links_in_a_day/2010/09/nokia-paying-10m-for-symbian-coders/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Get to know about all new Google Products being launched instead of wondering when it came anyway...
Article: http://www.google.com/newproducts/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM at new-pulsed-STM technique making DRAM cells about 200,000 times faster than before... SPEED <3 IT
Article: http://eetimes.com/electronics-news/4208749/IBM-characterizes-single-atom-DRAM

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Friday, September 24, 2010

Interpol spoofed, Web Redirect-Hell, Context-aware UI, IBM DW Cloud Event and XSS

Pop-Link@[24-Sep-2010]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


Cyber Criminals spoofed INTERPOL Chief's identity on Facebook to gain information on International Fugitives, great is this how 'InterPol' is supposed to discuss such information on the first hand i.e. Socially...
Article: http://www.net-security.org/secworld.php?id=9884

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


Short URLs and other web practices are increasing the hops between user and actual Web-content

Article: http://royal.pingdom.com/2010/09/22/is-the-web-heading-toward-redirect-hell/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Canonical's view about Ubuntu and Context-aware UI, they are working on features like video going full-screen mode automatically detecting user has laid back on chair in a resting position... nice :)

Article: http://www.thinq.co.uk/2010/9/14/canonical-designer-demos-context-aware-ui/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The actual code style for Twitter XSS attack, here you could have a look over what kind of 'onmouseover' tweet acted as a malicious script

Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Twitter-OnMouseOver-XSS/ba-p/82527#feedback-success



-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM DeveloperWorks Virtual Event in October on Cloud for Developers, Register Now


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


Thursday, September 23, 2010

BAE wins, Google hunted down, Security Success, Firewall and giant Zynga

Pop-Link@[23-Sep-2010]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

BAE Systems has won $40m for the deal to secure US Cyber Borders, covering FBI networks. What happened to Security Teams in US, and even if someOne hacks them after this.
Article: http://www.itnews.com.au/News/232968,fbi-awards-42m-cybersecurity-deal.aspx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google revealed that its fiber cable at Oregon was shot down by hunters... OMG!!! my data was there, is this how they securely transfer it, anyways thanks for telling that your cables lie there ;)
Article: http://www.itnews.com.au/News/232831,us-hunters-shoot-down-google-fibre.aspx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Is Firewall required on individual Desktops? Is it an over-KILL? If your machine is sitting behind a secure server, then still you require Firewall or it is slowing you down? see someone else's perspective...
Article: http://www.pcpro.co.uk/realworld/361375/do-we-really-need-a-firewall-on-our-desktops
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"HP Blog" on  how to measure success of a Security Program in your Organization. Some thoughts on reducing legacy defects and newer possible risks.
Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Measuring-quot-Success-quot/ba-p/82522
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Some details on fastest growing social-gaming giant Zynga... 10% of Internet Population has played their games
Article: http://techcrunch.com/2010/09/22/zynga-moves-1-petabyte-of-data-daily-adds-1000-servers-a-week/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Monday, September 20, 2010

Google 2x Security, UK Cyber, SNES on PS3, POET hack Oracle, childish MI5

Pop-Link@[20-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

image
Mr.Fox says UK Cyber Security should be handled by National Security Council also, it's not any small issue to be handed over to few officers.




Article: http://www.publications.parliament.uk/pa/cm201011/cmhansrd/cm100913/debtext/100913-0001.htm#1009137000024

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

image
Super Nintendo Emulator SNES9x pver PS3, some features yet to be supported.
Now go MARIO on your PS3 :)



Article: http://ps3-evolution.dcemu.co.uk/super-nintendo-emulator-snes9x-released-for-ps3-327501.html


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

image
Oracle based services are vulnerable for side-channel attack for padding Oracle against CBC mode encryption... this was discussed once in 2002 at EuroCrypt conference, in 2010 again its still active demo was presented at a Hacking Conference, they ares supposed to affect 25% of Internet Infrastructure (ASP.net, JSF, etc.)
Article: http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310
ALSO, a new ASP.net vulnerability responsible for Information Disclosure
https://www.microsoft.com/technet/security/advisory/2416728.mspx


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

image
a Twitter User @PigSpotter warning motorists of SpeedTraps, tension for Cops.
Now when Cops are monitoring his acts so he has gone on break stating his BlackBerry is in for repair.


Article: http://www.iol.co.za/index.php?art_id=vn20100918083241209C425606&singlepage=1

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

image
MI5 states cyber made espionage more strong but is more straightforward in blocking data stealing... 
They Are KIDDING right, land-water-air are much more safer to identify enemy... in Cyber World anyone can be MI5.
Article: http://www.theregister.co.uk/2010/09/17/mi5_cyber/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

image
The leaked master key of HDCP (High B/w Digital Content Provider) cracked it to strip down encryption... and thus Intel HDTV code got cracked.
How many times shall we repeat that 'Security should not depend on obscurity'.

Article: http://www.foxnews.com/scitech/2010/09/16/intel-confirms-hdtv-code-cracked/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


image
2 Step Auth by Google, currently just for some App users... to protect you from phishing, you will also have to enter the sms-code sent to your phone number added to your Google Account [ but what if I loose my Mobile :), logged out till arrange new sim with same number ]
Article: http://techcrunch.com/2010/09/20/google-secure-password


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Saturday, September 18, 2010

faulty (Diaspora, CIA , Facebook, Adobe), MS Secured, Botnet Sales

Pop-Link@[18-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The Open-Source initiative to replace Facebook, Diaspora isn't yet close to secure... need a lot more hardwork.


Article: http://www.thinq.co.uk/2010/9/17/alert-raised-over-diaspora-security/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Netezza bought geospatial softwares from IISI, reverse engineered it and sold flawed version to 'CIA' ...Big Daddy got Conned and used hacked software for its Drones

Article: http://www.aolnews.com/nation/article/cia-drone-program-using-hacked-software-company-claims/19638508

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Facebook, turning out to be the second name for Social Networking is also turning out to be the biggest Malware Infection source.

Article: http://www.net-security.org/malware_news.php?id=1466

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

SpyEye, a famous botnet kit not only let botnet owners steal Credit Card information but also let them make fake sales from any site where the many can be transferred using a cart.


Article: http://krebsonsecurity.com/2010/09/spyeye-botnets-bogus-billing-feature/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'EMET' i.e. Enhanced Mitigation Experience Toolkit by Micorsoft to make your computing experience more secure computing by securing any kind of application running over Windows to be exploited for its vulnerabilties.

Article: http://blogs.technet.com/b/srd/archive/2010/09/02/enhanced-mitigation-experience-toolkit-emet-v2-0-0.aspx

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

I don't beleive Adobe is still caught in 'strcat' over 'strncat' issues for Security... well its a well big bloated organization with big bloated code.

Article: http://www.theregister.co.uk/2010/09/15/unofficial_adobe_reader_patch/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Just for fun and Self-reminder... Epic Failures : 11 Infamous Software Bugs

Article: http://www.itworld.com/software/120117/epic-failures-11-infamous-software-bugs


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-