Showing posts with label web. Show all posts
Showing posts with label web. Show all posts

Tuesday, August 22, 2017

What do you know about IPV6?



Like it or not IPV6 is behind just about anything with a screen these days.  IPV6 lies at the backbone of the Internet and has been for years.  The reason is simple.  4.3 billion addresses and 7 billion people each with multiple devices.  Something's gotta give.  

That's where IPV6 comes in and if you plan on doing anything with IP networks you'd better brush up your skills.  Below is a good place to start.  So get on with it!


Friday, March 13, 2015

Are you FREAKed out yet?


So maybe you heard about the latest round of security nightmares that plague what everyone thought was secure web traffic.

A few months back it was a serious security flaw in OpenSSL known as HeartBleed that sent webmasters scrambling.  Then came a left field sucker punch when it was discovered that all an attacker needed to do to compromise your entire server (not just a website) was to insert some code that a BASH prompt would respond to. 

Encryption be damned if you have root access to the server!

Which brings us to the latest security gaffe, otherwise known as a Freak attack...

This one has its roots in the earliest implementations of web security.  Back in the days when the U.S. government was so paranoid about not being able to clandestinely snoop on your encrypted communications that they enforced a ban on strong encryption ( aka: stuff they couldn't break.) It was deemed "export-grade" encryption which was just a fancy name for "weak."

They did it by forcing SSL to downgrade its encryption bit strength when traffic left the U.S. thus allowing easy surveillance of all "suspicious" (meaning all) traffic.

Well, as we know from the Snowden leaks there's not much need to worry about borders anymore.  The U.S. has monitoring bases worldwide now.  Besides, the juicy fruit of of the spy game is gathered from far less hardened sources these days.  Just bug a German chancellor's phone and you've got all the dirt you need on the EU.

But let's get back to the problem at hand. 

There are still remnants of this "backdoor" in SSL and because of it millions of websites are vulnerable to compromise using relatively simple "man in the middle" attacks that utilize the facilities of weak encryption still present in SSL implementations.

The worst part is that the problem exists on both the client (aka: your browser) and server sides.  A compromised client and a compromised server are a marriage made in heaven. 

So what's the solution?  Pretty much the same as always.  Keep abreast of security news and patch, patch, patch!  Which is why there were so many Internet Explorer security patches this week.  Open SSL will have a patch available too.

If you'd like to dig a little deeper the following site will let you test both your browser and your favorite SSL secured websites.



Do it now.

Wednesday, July 2, 2014

Web hosting for cheap on a virtual machine


The thing you have to remember about working in IT is that no two projects are ever alike.  Even if you're being asked to do the same thing for 10 different people you're still going to be surprised.  Sometimes even on the same project.

So it was with my latest foray into virtualization on the cheap.  The client could barely afford to pay me let alone invest thousands in licensing fees.  So we had to get creative without sacrificing stability. 

That can be a tall order especially when everything you're using is Open Source. 

Now I have my issues with the way the Open Source community does things but a good product is a good product regardless of who made it.

Of course, "good" is a relative term. 

It's always a trade off.  A bit of pain to save a lot of money is fair but too much pain can cost more than if you'd just went with a commercial option.  And I do mean "commercial" because I still firmly believe that any product that relies on a fractured support community or high priced "experts" to make a product work is just this side of an amateur effort. 

Not that all open source products are that way, however.  

Some communities are better than others and if they put together a solid package with "readable" documentation then I'm all for it.  If we're just stroking somebody's ego so they can get a guest spot on Floss Weekly I'll take a pass every time.

I put CentOS, the open source version of Red Hat Enterprise Linux, and Z-panel, the open source clone of C-panel squarely in the "good" category.

Together they offered a cost effective and relatively stable platform for web hosting.  Add in a virtual platform for them to live on and you've got a web host that could fit on a keychain.  Not bad...

Instead of bore you with 4000 words of text describing my latest open source virtualization adventure I've created a video that takes you from creating the virtual machine to administering your new web host. 

As you're watching you may miss a few of the links in the video.  I've provided them below.



Tuesday, January 8, 2013

Microsoft's pot calls out Google's kettle

Article first published as Microsoft's Pot Calls Out Google's Kettle on Technorati.


A friend of mine sent me a few links to a Microsoft blog where the company's legal department apparently has issues with the recent FTC ruling on Google's alleged anti-competitive practices. I could write paragraphs of babble but I think a direct quote sums up Microsoft's position best.

"Unfortunately, this agreement appears to be less demanding than the pledge the U.S. Department of Justice received from Apple and Microsoft nearly a year ago."

Microsoft's ruffled feathers come from Google's apparent blocking of the Microsoft YouTube app from Windows phones going back as far as 2010.  A service available to Apple and Android users by the way.  Again we'll let a direct quote tell the story...

"Google often says that the antitrust offenses with which it has been charged cause no harm to consumers. Google is wrong about that. In this instance, for example, Google’s refusal deprives consumers who use competing platforms of a comparable experience in accessing content that is generally available on the Web"

A more classic case of a jealous pot bashing the upstart kettle there has never been.  Replace "Google" with "Microsoft" in the preceding quote and it's 1996 all over again.  And there's the rub.  Microsoft doesn't think Google is getting punished enough and has somehow equated an inferior YouTube experience on Windows phones with Google's apparent monopoly on Internet search.

" We are concerned that the FTC may not have obtained adequate relief even on the few subjects that Google has agreed to address."

Microsoft appears to want to link two largely unrelated topics in their complaint which in spite of their claims to the contrary equate to little more than sour grapes. Microsoft's assertions bank on the short memory of the Internet and consumers in general.  Ironically a Google search can correct that.

Remember that the FTC went after Microsoft not because they had the leading operating system but because they abused their market position with it.  The tight integration of Internet Explorer with Windows operating systems starting with Windows 95 made competing browsers inferior on the platform.  It also allowed Microsoft to claim that the Browser and the Operating System were too closely interrelated to expose the details to competing browsers.  To do so would allegedly expose their trade secrets.  The FTC didn't buy it.

As for search, if Microsoft Bing is damaged by Google's dominant position in search and Google's related products it has less to do with anti-competitive business practices than it does with poor execution.   Let's be honest, nobody goes around saying, "I'll Bing that." Google's about search and has managed to leverage that simple fact in all of its products.  Bing isn't a poor search engine because of Google, It's just a poor search engine.

Consumer preference can be influenced but not controlled.  That's why Bing has been and always will be an also ran search engine just like Yahoo and the bygones like altavista or askjeeves.  Windows Phone still holds less than 5% of the worldwide Smartphone market and will likely continue to do so until it offers the features that can lure consumers away from Apple or Android.

Neither Google nor Apple have any obligation to help them improve that number.  A fact driven home by Google's impending removal of support for syncing Microsoft Exchange accounts (via Exchange Activesync) to its Gmail service as of January 30th.  Luckily Microsoft has it's hotmail service to fall back on.  Yes, that's a joke.

The bottom line is that right now Google's services are the consumer's choice for web applications.  Apple learned that the hard way with the Apple Maps fiasco but to their credit at least they tried.  Instead of complaining about being excluded from Google's services Microsoft should be trying to create a better competing service.  After all, software and servers are their thing, right?

Then again what else would you expect from a Microsoft legal blog?


570425_Up To 60% Off w/ Free Shipping 525x133