2009
07.03

Apple, we love your beautiful OS and amazing hardware designs. They are among the best. But seriously you need to take some lessons from the security crowd or the insane security guys @OpenBSD.

Today’s post on /..
This will be covered at blackhat and likely covered at DC17(see you there). Arbitrary code execution through SMS.

2009
07.01

I don’t know if it works but there is a way to unlock tethering on AT&T in the US and other countries.

clickity with your iph0ne.

I see this as a big security issue with iphone/safari software. sure there is an “install warning” when you open the file, but since when should a browser on any platform be able to trigger opening a registry file or a plist file?

2009
06.09

mmmmm ribs

one critical flaw. I forgot the brown sugar! sprinkled some on though and wrapped in foil. now I have a slight sweetness to some burning HOT Spicey ribs.

2009
06.08

trying this out tomorrow night. 5 pounds of pork spare ribs for from PW Market, fresh spices from the herb room(Santa cruz), and a gambing obsession with BBQ ribs.

1/2 cup chilli powder
3 tbl spoons garlic powder
2 tbl spoons cayenne
1 tbl spoon paprika
1 tbl spoon fine ground black pepper
2 tea spoons sea salt
1 tea spoon ground cummin
1 tea spoon onion powder

Here are the ribs and the left over rub. Let the rub soak in for 12+ hours then slow cooking tomorrow night. yummers.

2009
06.04

For the longest time(my career as a sysadmin) if I would see a byte count in gigabyte/terabyte length, I would whip out `bc -l` in a terminal and run /1024/1024/1024. I do this because long’ish strings(to me) mess up my brain and can’t decipher the number of characters there. Dyslexia maybe?

Today my braing decided to wake up and think “what about powers?”. so for example, I have this string which is the size of last nights complete backup of a work webserver
1259958130
punch in to bc (cli calculator on linux/unix)
1259958130/(1024^3)
and you get
1.17342744953930377960

which is the same thing as:
1259958130/1024/1024/1024
1.17342744953930377960

So now you know how bad I suck at math, Powers may not even be the correct terminology.

2009
05.31

Stupid seagate firmware bug that causes data loss. fail for my PVR! time to backup what I can and re-install KnoppMyth/LinHES.

update: My xorg.conf got replaced some how? weird. maybe the recent apt-get update. not sure. fixed xorg.conf by setting the correct screen resolutions and driver. PVR is all happy again. drive may be heavily fragged though as some commands take a very long time to run.

2009
05.26

Today i’m back at work! it felt great to get some time away from the chaos but am kind of glad to be back. I really need to do the “take time off and not check email” thing more often. Makes me love my job again.

Here is a random thought I had while driving back home with the wife from visiting her mom at the tail of our vacation.
Say you saw a couple of young guys dressed down in (gag) 80’s era clothes, nasty huge blue/yellow framed aviator sun glasses, checkered slip on shoes, pegged pant jeans, you know this look? with skateboards and hitch hiking.
you pull over and offer them a ride that is not out of your way and they tell you they are from 1984. What questions would you ask them to validate their time traveled claim? totally weird thought I know but what if?

now that I have that off my chest… I should get back to work. :)

2009
05.13

I wish I had more time & money to play with this, but for now check out Matty’s post here: http://prefetch.net/blog/index.php/2009/05/11/turning-an-opensolaris-host-into-a-fibre-channel-storage-array/

2009
05.12

I found this nice article on security focus covering step by step instructions for creating a site to site IPSec tunnel.

http://www.securityfocus.com/infocus/1859

Using this as a reference I’ve been setting up LAN-to-LAN IPSec VPNs for work. Works great with Cisco VPN Concentrators and Nokia IPSO as well.

2009
05.12

This morning I was tasked with adding an additional 32GB of swap space to a cluster of ten Sun X4540(thor) systems at work. Doing this by hand can take a while to be absolutely sure not to break anything accidentally.
I triple checked the slice mapping on all ten systems making sure the first free cylinder were the same on all disks.
I did a manual run through of creating the slices using the format command in solaris.
Once I collected the format command list I created an SDS md device(software RAID for solaris).

Here s the command list:

partition
4
swap
wu
18805
32gb
label
verify

The two disks to be mirrored on the X4540 are c0t0d0 and c1t0d0. Put the above commands in to a file, in this case formatcmdlist, then run:

format -d c0t0d0 -f /var/tmp/formatcmdlist
format -d c1t0d0 -f /var/tmp/formatcmdlist

Now we create the software mirror device, define names for disk slices, and attach them, and activate swap.

metainit d41 1 1 c0t0d0s4
metainit d42 1 1 c1t0d0s4
metainit d40 -m d41
metattach d40 d42
swap -a /dev/md/dsk/d40

Now to make the manual part pay off. I again checked that all systems had free space above cylinder 18804. copied my formatcmdlist to each node with a shell for loop and scp, then ran this big one liner command:

for((i=1;i<10;i++)); do echo "---------host${i}" ; ssh host${i} "format -d c0t0d0 -f /fcmdlist ; format -d c1t0d0 -f /fcmdlist ; metainit d41 1 1 c0t0d0s4 ; metainit d42 1 1 c1t0d0s4 ; metainit d40 -m d41 ; metattach d40 d42 ; swap -a /dev/md/dsk/d40" ; done

Everything worked and the work peeps are happy. It took 20-30 minutes for all of the software mirrors to sync on an idle system. kind of a long time for empty space to sync but hey, it works. :)

So in short, create new disk slices, initialize meta device, add to swap.