Archive for June, 2008

  • 30
  • Jun

If you have a Wordpress blog it is crucial that you do certain things to keep it secure. Blogsecurify can help you accomplish this by scanning your Wordpress web blog for known vulnerabilities.

From the blogsecurify.com:

In order to verify that you are the owner of the URL, you have to include <!-- tested by blogsecurify --> or <!-- wpscanner --> somewhere on your front page. You can use HTML comments for that matter.

If you wish not to modify your template, they also provide a Wordpress plugin. Just drop it in your plugins directory and activate.

[via gnucitizen.com]

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 30
  • Jun

HP just announced the release of a new Windows security tool named Scrawlr – “SQL Injector and Crawler”.


image by cogdogblog

Scrawlr will crawl up to 1500 pages on your web site to check for the possibility of SQL injection points. More info:

Technical details for Scrawlr

* Identify Verbose SQL Injection vulnerabilities in URL parameters
* Can be configured to use a Proxy to access the web site
* Will identify the type of SQL server in use
* Will extract table names (verbose only) to guarantee no false positives

Scrawlr does have some limitations versus our professional solutions and our fully functional SQL Injector tool

* Will only crawls up to 1500 pages
* Does not support sites requiring authentication
* Does not perform Blind SQL injection
* Cannot retrieve database contents
* Does not support JavaScript or flash parsing

Download Scrawlr from the HP site. [via hackademix.net]

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 27
  • Jun

This modded Eveready flashlight is acually brighter than a $95 dollar SureFire E2:

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 24
  • Jun

Tech.shantanugoel.com writes about how to create a do-it-yourself security system using nothing more than a Linux PC, Webcam, and a Twitter account.

No more brother, Mother, burglar, etc. stepping into your private space or home with out you knowing. Also, don’t forget about enabling Twitter mobile alerts for when a PC might be far from reach.

image via MShades

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 23
  • Jun

Similar to the Hat:

Thanks to Dave for the tip!

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 23
  • Jun

EDIT: This seems to be a hoax as confirmed by Gizmodo. My apologies.

Are you running Windows Vista? Chances are you are also sporting a dual core CPU.

Did you know that Vista doesn’t take advantage of more than one core during boot? Go Microsoft!

Fortunately, you can easily change this using the system configuration editor.

1. Open the run box by pressing the Windows button + R.

2. Type ‘msconfig’ in the run box:

3. Click on the Boot tab, then click the Advanced options… button:

4. Click the check box next to Number of Processors and select the total number of cores that you wish to use:

Nice! Let us know how much this decreases your boot time in Windows Vista.

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 19
  • Jun

Readers – do you have any tips and tricks like this one? We would love to hear them.

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 10
  • Jun

PHP Speedy

PHP Speedy is a PHP script by aciddrop.com that can increase your web site loading time by as much as 500%.

The key to this decrease in loading time is “making fewer HTTP requests, adding a far-future expires header, gzipping your page’s components, and minifying your JavaScript, CSS and HTML”. PHP Speedy accomplishes all of these techniques.

Now, there is also a PHP Speedy Wordpress plugin available. It would be interesting to see a comparison between PHP Speedy and WP Super Cache.

Personally, I haven’t tested PHP Speedy, but it looks promising. Let me know if you have tried PHP Speedy and what your results are.

PHP Speedy [via codefusionlab.co.cc]

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  • 09
  • Jun

MySQL is an excellent open source database system. Replication is a great way to keep data redundant in case of a server crash. However, replication should not take the place of backups in case of data corruption or mis-entered data – as this data will also be replicated to the slave.

MySQL Replication

MySQL replication takes place in a master-slave configuration. Be aware that by using the configuration – only changes made on the master are replicated to the slave. Any changes on the slave will not be replicated to the master.

Following the steps below, you can have MySQL replication setup in no time at all.

Source: MySQL Dev Site
Read the rest of this entry …

  • 05
  • Jun

If you haven’t noticed, my posting has slowed to a crawl lately. I have been very busy at working on maintaining hundreds of systems and that leaves little time for much else. Enough with excuses and on to a bash script that you might be interested in.

Speedometer
image by Kirill

Ever have bandwidth issues and wish you could automated the testing process instead of manually testing every other hour of the day? I have.

By using the bash script below we are able to automate an upload and download of a file and email the speed results.

  1. #!/bin/sh
  2.  
  3. cd /path/to/choosen/working/dir
  4. filename="/path/to/test.file"
  5. hostname="ftp.server.com"
  6. username="user"
  7. password="password"
  8. echo -e "***FTP SERVER DOWNLOAD SPEED***\n" >> speedtest.log
  9. ftp -inv $hostname >> speedtest.log  <<EOF
  10. quote USER $username
  11. quote PASS $password
  12. binary
  13. put $filename
  14. bye
  15. EOF
  16.  
  17. echo -e "\n"
  18. echo -e "***FTP SERVER UPLOAD SPEED***\n" >> speedtest.log
  19. ftp -inv $hostname >> speedtest.log  <<EOF
  20. quote USER $username
  21. quote PASS $password
  22. binary
  23. get $filename
  24. bye
  25. EOF
  26.  
  27. #REMOVE GARBAGE (REMOVE EVERY LINE EXCEPT FOR ONES CONTAINING '*' AND 'MB') FROM LOG FILE AND EMAIL IT
  28. sed -n -e '/*/p' -e '/MB/p' speedtest.log >> email.log
  29. mail -s "Speed Test Results" youremail@whateva.com < /path/to/choosen/working/dir/email.log
  30. rm /path/to/choosen/working/dir/speedtest.log
  31. rm /path/to/choosen/working/dir/email.log

Now we need to add it to cron for execution every hour:

crontab -e

Add the following to your crontab file:

@hourly /path/to/your/speedtest.sh

Don't forget to chmod 755 the script to make it executable. I have also attached the script in case of any formatting issues on this web page.

FTP Speed Test Bash Script

If you have any questions about how this script works, please leave a comment and I will be glad to explain.

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]