I.T. Security and Linux Administration:

security


April 30, 2013  10:23 PM

Web App/Vulnerability Scanner



Posted by: Eric Hansen
security

I want to know something: what scanner(s) do you use to assess the security of your systems, programs, network, etc...? For example, Metasploit and Nessus are two of the most popular in this field, but there's also ones such as OpenVAS, W3af, Nikito. Of the one(s) you use, why do you? What...

April 30, 2013  7:38 PM

Usability Systems



Posted by: Eric Hansen
security

While I've kind of put a hold on the monitoring solution (kind of shifted gears, so twiddling between that and another project), one thing is true regardless: usability needs to exist at the highest level. Bluntly, when writing UI, you have to write it with the mindset of people not knowing how...


April 24, 2013  1:54 PM

Quick Shell Trick – Find Memory Usage



Posted by: Eric Hansen
security

Unlike Windows (hear me out), its not as easy to find out how much memory a process is using.  Tools like ps report the RSS (resident set size), which "significantly overestimate memory usage" while PSS (proportional set size) measures "each application's 'fair share' of each shared area to give a...


April 21, 2013  10:33 PM

Writing a Full-Serviced Sysadmin App from Scratch – Part 3



Posted by: Eric Hansen
security

Probably the last post I'm going to make for the night (not sure, though) is about presenting the monitoring data. As mentioned, I was working on a backup solution previously.  In it, I used a Python module called Tornado to interact with HTTP requests that the client would issue.  This was...


April 21, 2013  10:18 PM

Writing a Full-Serviced Sysadmin App from Scratch – Part 2



Posted by: Eric Hansen
security

I touched up on a bit regarding why I'm writing my own monitoring solution.  This will cover some of the design aspects I had thought of initially and talk some on how things have progressed since. One of the first things that came to me was an authentication system.  Right now its still...


April 21, 2013  9:53 PM

Writing a Full-Serviced Sysadmin App from Scratch – Part 1



Posted by: Eric Hansen
security

For the past week or two now I've been working on an application to help monitor systems and services.  Kind of a bastard child of Nagios and Cacti.  There's a few reasons why I'm "reinventing" the wheel, so to speak.  But, I've decided to post here explaining the details, trials and...


March 31, 2013  3:15 PM

Kali: The new pentester?



Posted by: Eric Hansen
security

Earlier this year (this month?), BackTrack developers announced a new version of their distro, but this time seemed completely re-developed, called Kali. Its a nice distro, and is based on Gnome 2 (MATE??).  It has more tools than you can ever imagine, and from my experience so far runs pretty...


March 31, 2013  3:10 PM

CLI password manager



Posted by: Eric Hansen
security

I'm a strong opponent of using password managers.  To me, they're nothing better than writing info down on a post-it note.  You know sensitive info is there, but they just use security by obscurity.  However, as I'm also a strong lover of the CLI, I thought it was interesting that a CLI-based...


March 31, 2013  3:02 PM

Want some calamari with your OS?



Posted by: Eric Hansen
security

So apparently someone decided to build a Linux distro (boy, how many do we need of those, huh?), but this one isn't based off of Debian, Ubuntu, Cent, etc...  Nope, this one is based off of OpenSUSE, and its dubbed CalamariOS: 


March 31, 2013  2:53 PM

Managing databases the easy way



Posted by: Eric Hansen
security

I remember back in the late 1990's and early 2000's, phpMyAdmin was the go-to way to manage a MySQL database.  Even to this day a lot of people swear by it (and at it).  But, especially if you're working in a mixed environment that runs MySQL and PostgreSQL, for example, a single solution is...