Books, Featured, Headline »

[25 Feb 2011 | 2 Comments | ]

Howdy everyone! Because I travel a lot, I build a list of books which I should buy and read next in the airports, bus stations etc or everywhere I should wait some amount of time. This list contain everything what an System / Application Administrator should know. I’m usually dealing with Java/Tomcat/Glassfish/Jboss under Linux, but also I have a strong background of networking, security and cloud computing. This books are my choice and I think is a good choice for everyone who want to learn or improve your skills as …

Android, Google, Linux, Random »

[10 Feb 2011 | No Comment | ]

My new phone just arrived. Google Nexus S is a piece of “art”, full of features. For me is the perfect phone. I can read my email, rss feeds instantly and I can browse all my websites. Also the browser is a full featured browser (93 points from 100 in acid3 test, and in my firefox 3.6.13 under Ubuntu 10.10 I get 94 points 🙂 ) with Adobe Flash on a Super AMOLED 4 inch screen. Also the Android market is full of applications and games. Everything on this …

Bugs, Debian, Java, Kernel, Linux »

[8 Feb 2011 | 2 Comments | ]

This, probably, is a bug which was not spotted very often because is very obscure and the Debian guys moved very quick and fixed the problem. I know, I found a lot of bugs related to sun.jvm.hotspot.debugger.NoSuchSymbolException: Could not find symbol “gHotSpotVMTypeEntryTypeNameOffset”, but this is different. Usually was a problem of “striping symbols from libjvm.so”, but in my case wasn’t that. Also I found this error related to OpenJDK (I use Sun JDK) and the solution was to use -server flag to get the correct libjvm.so. Anyway it took me …

Debian, Linux »

[13 Jan 2011 | No Comment | ]

I’m curios how this Debian installer will look. The features are amazing:
Live Installer
Grub 2
Kernel 2.6.32
Xen support
UserMode Linux Support
Ext4

Share this post

Hide Bookmarks

Debian, Linux, Security »

[9 Jan 2011 | No Comment | ]

This is a little bit old, but is worth to mention it because on a lot of system is still working. The proof of concept code and a lot of details you will find here: http://bit.ly/fYpOtx . This exploit is based on 3 vulnerabilities found by Nelson Elhage (probably because of that exploit is named full-nelson). As I said the exploit is based on 3 vulnerabilities CVE-2010-4258, CVE-2010-3849 and CVE-2010-3850. The last 2 vulnerabilities are based on Econet protocol driver. If you don’t have this driver loaded exploit will not …

Apache, Debian, Featured, Headline, How-to, Linux, Security, Shell »

[30 Dec 2010 | No Comment | ]

Everyone, with a decent Linux security knowledge, should know about ModSecurity – Open Source Web Application Firewall. Personally, I know this mod from 2004 and it help me a lot in detecting and/or preventing malicious attacks before reaching my customers applications.

Desktop, Ubuntu »

[21 Oct 2010 | No Comment | ]

I experienced another nasty bug with vino server and Ubuntu 10.10 (some reports the same thing on other Distros, even on older versions of Ubuntu): After authenticating on VNC, the client windows is not updated.

Share this post

Hide Bookmarks

Desktop, Ubuntu »

[21 Oct 2010 | No Comment | ]

Long time, no see 🙂
I installed the alpha version of Ubuntu 10.10 and I had a small problem: VNC Server (vino-server) doesn’t start. If you take a look on your home folder, in file .xsession-errors probably you will find:

13/10/2010 07:47:39 PM Autoprobing TCP port in (all) network interface
13/10/2010 07:47:39 PM Listening IPv6://[::]:5900
13/10/2010 07:47:39 PM Listening IPv4://0.0.0.0:5900
13/10/2010 07:47:39 PM Autoprobing selected port 5900
13/10/2010 07:47:39 PM Advertising security type: ‘TLS’ (18)
13/10/2010 07:47:39 PM Advertising authentication type: ‘VNC Authentication’ (2)
13/10/2010 07:47:39 PM Advertising security type: ‘VNC Authentication’ (2)
** Message: Received signal 11, exiting…

Share …

Databases, Debian, Featured, Linux, Mysql, Recovery »

[6 May 2010 | 6 Comments | ]

I searched over internet, on several tens of posts, to find how to delete a crashed Innodb table. Short story: I tried to import a big table but it crashed in the middle of the process (power failure). The table was not very important so I didn’t care about the table, I just want to delete it and start from the scratch, but surprise! The table cannot be deleted! I use the latest MySQL Innodb plugin from Debian backports repository (is coming with Debian 5.1.xx) with file per table …

Apache, Debian, Featured, Headline, How-to, Linux, Security, Shell »

[4 May 2010 | 7 Comments | ]

mod_qos is becoming a very popular module for Apache, from the discover of Slowloris DDoS Attack. It seems, mod_qos is the best solution for Slowloris attack on Apache 2, but you can also check mod_evasive, mod_security or http accelerator “Varnish”. In this post I will try to present a step by step tutorial how to install mod_qos and configure to prevent Slowloris DDoS attack.

Share this post

Hide Bookmarks