Archive for the ‘Linux News’ Category

Linux 2.6.30+ Local Kernel Exploit 0day, disabling SELinux/AppArmor/LSM ;)


Hello to my new vendor-sec visitors! Haven’t we learned yet that the kernel can do whatever it wants? Guess not ;) Once I own the kernel (which SELinux does nothing to prevent), I just destroy everything (SELinux, AppArmor, LSM, auditing, and more!), in honor of the curse of Cheddar Bay! 100% reliable too BTW, you can exploit the same machine as many times as you like. No alerts, no warnings, and this weekend it will work on x64 too.

Ntp Time Servers for Precision Timing

Network Time Protocol, or NTP as it is most commonly known, provides a mechanism to synchronise the time of computer devices and other network infrastructure. The protocol was originally developed for the Linux operating system by Dr D Mills of the University of Delaware. For more than two decades, NTP has provided time synchronisation of critical devices on the Internet making it one of the oldest protocols still in continuous operation. This article provides a brief overview of NTP and some of the technical phrases used in computer timing.

NTP was originally developed to solve the requirement of synchronisation of critical time processes across the Internet. The Network Time Protocols primary platform is the LINUX operating system. NTP is provided under the GNU public licence; however, it has also been sucessfully ported to the Windows operating system. NTP is most widely used on LINUX as many of the algorithms needed to provide precise time are embedded into its kernel.

NTP utilises the UDP (User Data-gram Protocol) over TCP/IP. NTP messages are communicated using UDP port 23, which is reserved solely for the use of NTP traffic. The protocol basically consists of a number of fields, which specify: clock-offset, round-trip delay and dispersion relative to a precise time source. The information stored in each NTP packet allow a network time client to accurately synchronise time with a NTP server.

NTP is a structured protocol that operates in a hierarchical manner. At the top of the tree, a primary time reference is known as a stratum 1 time server. Servers that synchronise to a stratum 1 server are known as stratum 2 servers and so on down each level of the hierarchy. As the stratum increases, so generally precision decreases.

Over a number of years NTP has been enhanced to operate with a plethora of precision hardware clock devices, or reference clocks. NTP reference clocks are available for GPS hardware and also many of the National Radio Time and Frequency standards such as MSF, DCF-77 and WWVB. A number of third-party timing hardware manufacturers have installed precision crystals into their reference clocks to provide an accurate backup timing reference,.

A spin-off of the NTP protocol is SNTP or Simple Network Time Protocol, which is basically as the name implies, a simplified version of NTP. SNTP is generally used in small low-powered computing devices such as micro-controllers. It allows low-powered devices the ability to synchronise time to NTP servers over a network.

To summarise, NTP is a long-standing and widely used protocol for synchronising time between time critical processes. It has a straightforward hierarchical structure that allows synchronisation of large numbers of network time clients. For applications that require critical timing, NTP provides a de-facto standard solution.

Dave W Evans provides technical authoring services to the time and frequency industries. Dave has published a number of articles and white-papers detailing the operation of NTP. Click here, if you would like more information on NTP server solutions.

Jn0-400 Training Tools

JN0-400 Exam Information
EX, Associate (JNCIA-EX)
Exam Number/Code : JN0-400
Exam Name : EX, Associate (JNCIA-EX)
Questions and Answers : 104 Q&As

Why choose Testinside JN0-400 braindumps
After you purchase our product, we will offer free update in time for 90 days.
Quality and Value for the JN0-400 Exam
100% Guarantee to Pass Your JN0-400 Exam
Downloadable, Interactive JN0-400 Testing engines
Verified Answers Researched by Industry Experts
Drag and Drop questions as experienced in the Actual Exams
Practice Test Questions accompanied by exhibits
Our Practice Test Questions are backed by our 100% MONEY BACK GUARANTEE.

Teatinside JN0-400 Exam
With so many high quality Juniper Networks JN0-400 Training Tools, you could pass the Juniper Networks JN0-400 exam and get your Juniper Networks certification on the first try as long as you make efficient use of the practice exams. If by any chance you fail Juniper Networks JN0-400 exam  exam, you could get back all the money for purchasing products no matter what the reason is.

Guaranteed to outperform Juniper Networks JN0-400 exam sites and the braindumps they provide. Juniper Networks JN0-400 exam exam training is the best available. Our collection of practice exams questions is most comprehensive and detailed.he Question and Answers are in PDF format that makes it easy for a student to study on any system. The Juniper Networks JN0-400 exam Downloads provide you with a 100 success guarantee.

You can familiarize yourself with the question format for the exam by doing the Testinside online JN0-400 practice questions such as for those offered by us. Any other practice exam, Juniper Networks product practice test, and Download Juniper Networks JN0-400 exam Study Guides And Juniper Networks JN0-400 exam Training Tools can also be useful.

Related exams:
pk0-002 IT Project+ Certification (2003 Objectives)
RH302 Red Hat Certified Engineer on Redhat Enterprise Linux 5 (Labs)
SY0-201 CompTIA Security+(2008 Edition) Exam
tt0-201 Convergence Technologies Professional 2007
VCP-310 VMware Certified Professional on VI3

Pk0-002 Training Tools

pk0-002 Exam
IT Project+ Certification (2003 Objectives)
Exam Number/Code : pk0-002
Exam Name : IT Project+ Certification (2003 Objectives)
Questions and Answers : 206 Q&As

Free pk0-002 Demo Download
TestInside offers free demo for Project+ pk0-002 exam (IT Project+ Certification (2003 Objectives)). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.

Exam : CompTIA PK0-002
Title : IT Project+ Certification Exam(2003 Objectives)
1. Which of the following processes is MOST significant to meeting quality management objectives?
A. Inspection
B. Trend analysis
C. Quality audits
D. Planning
Answer: D

The whole package includes not only braindumps, study guide but also test question which are real time exam simulations. Easiest way to get these certifications is to log on to the pk0-002 Testinside and download the CompTIA pk0-002 questions and answers to do CompTIA pk0-002 Testinside practice exam to obtain your free CompTIA pk0-002 certification exam.

Testinside’s pk0-002 Study Materials and pk0-002 Training Tools are prepared by Industry Experts and Professionals who keep an eye on the latest pk0-002 Certification Exam Objectives and change the pk0-002 questions and answers accordingly.

You will not only get the top quality pk0-002 Study Materials and Training Tools from Testinside but can be assured of it being up to date as well.

Testinside offers economic pk0-002 Certification Training Tools packages with best quality and dynamic updates. Use Testinside for accurate pk0-002 Study Materials for a successful preparation of pk0-002 Certification Exam.

Related exams:
000-210 IBM Storage Networking Solutions,Version 4
000-253 Test253. IBM WebS.App.Svr.Ntwork Develoyment V6.1.Core Admn
000-289 Test289, IBM WebSphere DataPower SOA Appln. Firmware V3.6.1
000-316 IBM WebSphere Integration Developer V6.1
000-331 Power Systems Sales for AIX and Linux

Understanding Web Hosting

You have your new business and you are planning to set up your website and tell the whole world about your business and that you have a lot of products and services that you want to share. You also have in mind the design of your site and a catchy domain name. So what will be the next step? The answer is, to find a web hosting provider that will host your website. Puzzled? Let us start with the basics.

What is Web Hosting?

In simple terms, web hosting is renting a space on a web server. A website is not simply a domain name, it is a collection of files linked together by HTML code to display text and graphics on a computer. In order for anybody to see this collection of files you’ve created, it has to be housed on a computer somewhere that has access to the internet. Not just any computer will do, of course. A web server is a computer set up with special software that allows it to receive requests from the internet for the website files it has stored on it and to send those files out over the internet so that the requesting computer can display them. It is very much like a waiter in a restaurant taking your order and bringing the food that you ask for from the kitchen, hence the name “server.”

Along with making sure your files can be seen by internet users around the world, a web server provides other important services as well. First and foremost is the ability to create email addresses based on your domain name and to send and receive email with them. The web server also has various types of software installed on it that allow your website to run programs, create and manage databases, display video, and many other functions you might find useful. Almost any type of computer can function as a web server, but it’s the software that’s on it that makes it a server.

When you avail of the web hosting services, the fee that you are going to pay goes to the maintenance of the server’s hardware and software. You also pay the cost of keeping the website online 24 hours a day, 7 days a week in a secure data center with a fast and powerful internet connection with repetitive uninterruptible power supply. And to pay for the expertise of the people who do all the work.

What kinds of web hosting services are offered?

Shared Hosting – Most websites are not huge affairs with hundreds of pages and thousands of files and graphics, and they are targeted toward a particular audience, so they will not get as many visitors as the large general sites like Yahoo! that are targeted at everybody who uses the internet. As such, the average website therefore is not going to require the full resources of an entire web server to run it. Web servers are designed to be able to handle dozens, even hundreds of websites at once because they are powerful machines.

Shared hosting is simply the concept of hosting more than one website on a particular server. Over 95% of all websites on the internet are being run in a shared hosting environment. Since the resources of the server can be split among the clients hosted on it, so can the costs of operating the server, so shared hosting is universally cheaper than any other type. Shared hosting packages are generally designed so that each client is allotted a certain amount of each resource, with different payment levels representing different amounts of resources such as disk space, bandwidth, email addresses, and so on. Shared hosting is also known as virtual hosting.

Dedicated Hosting – If you do have a big, powerful website that gets lots of visitors and has a tendency to hog resources, then you might want to have a web server all to yourself. Some companies also prefer the extra security of not having to share the server with anyone else who could do something accidentally or on purpose to crash it. Renting the use of an entire server is known as dedicated hosting. The web hosting company still owns the machine and takes responsibility for maintaining the hardware and the web hosting software, but you have greater control over the configuration and use of the server. There is also such a thing as semi-dedicated hosting, in which a web server is only split between a very small number of clients, such as 2 to 4, with strong partitions between each to prevent them from interfering with one another. Since the hosting company is still responsible for the upkeep of the server, this type of hosting is also known as managed hosting. For obvious reasons, dedicated hosting always costs significantly more than shared hosting.

Server Co-Location – If you really want complete control over every aspect of your web server, you might very well choose to buy one and maintain it yourself if you have sufficient knowledge. However, chances are that you still don’t have the resources to keep your server completely safe from power outages, roof leaks, thieves, unwary employees and other hazards and keep it on the internet on a fast, high-bandwidth connection at all times. You need a data center to provide those services for you. Co-location is the rental of physical security, continuous electrical power and a fast, reliable internet connection for a server that you own. The data center is not responsible for any of the hardware or software maintenance of a co-located server, you are. This can be a cheaper alternative to dedicated hosting if you have the necessary expertise and time to run a web server yourself.

Are there any platforms to choose from?

Web hosting providers offer both Linux and Windows platforms to choose from. Web hosting providers typically use free editions of Unix based Linux operating systems such as Debian, Red Hat, or Free BSD, this alone reduces the end cost of a web hosting plan to the consumer due to there being no licensing fees incurred like there is with the Windows operating system.

The free editions of Linux are released under what is known as the GNU license, this license has no costs involved, and also allows access to the source code of the operating system to allow for modification and optimization which is very important, this allows the host to optimize the operating system to their hardware requirements, and also allows quick fixes for any security issues that may come up.

Typically Unix web servers are the most stable, with the flexibility required to allow upgrades and expansion. Almost always Unix servers that are setup for serving websites are configured in text mode which uses fewer resources, they do not run a graphical user interface which allows the server to devote as much of its own resources to the websites it is hosting. Unix based operating systems support the following. PHP, MySQL, PostgresSQL, Perl, CGI-BIN, Ruby on Rails and many more.

Windows is of course is the most widely known operating system, and as you know, you pay to use the Windows operating system on your desktop, and this is no different when it comes to using the Windows Server operating system. The Windows Server operating system does support some technologies that Unix currently does not. Only Windows hosting plans support scripting languages such as Active Server Pages (ASP), Cold Fusion, Active Perl, C++, C#, and Visual Basic.

Only Windows Server operating system will run Microsoft applications such as Microsoft Access Databases, Microsoft SQL Databases, IIS. If you are planning to use any of the above languages or database types on your website, you will need to purchase a Windows hosting plan.

You could spend a long time trying to learn everything there is to know about web hosting, but if you’ve read this far then you should be armed with the basic knowledge you need to understand what different web hosts are offering you. Your next task is to figure out what you need and go out and find a host that wants to give it to you at a great price! To know more about web hosting, you can visit our site BNS Hosting and we will be glad to entertain all your questions.

Kristin Tiong
Web Hosting Provider – BNS Hosting
29 Ab Fernandez Avenue
Dagupan city, Pangasinan
Philippines 2400

http://www.bnshosting.net

kristin.tiong@gmail.com