Scad Programme

Archive for December, 2011

Choosing an MP3 player used to be a much easier shopping decision than it is today. Just a couple of years ago, only MP3 players played MP3 music. Nowadays, every man and his dog that has a mobile phone, laptop or memory storage device can play MP3 music. Now that there are a few more things to take into consideration, it is wise to think about a few issues before splashing out some serious money (or trying to save some serious money).

Part I – Do you need an MP3 player?

Probably the most important question you need to ask yourself. Why do you want one? Does your mobile phone already come with an MP3 player? What about your laptop? Why would you need one if you’ve already got one? The only reason MP3 players exist in their own right is because a mobile phone is a much better device for making phone calls on the go, and an MP3 player, well, it is a much better device for playing MP3 music. When there is a comprise in function, there is a comprise in function (i.e. quality and performance).

Part II – Do you need a good MP3 player?

Probably the second most important question you need to ask yourself. It does sound like a rhetorical question. Of course you want a good MP3 player, but please provide a definition for “good”. Do you want something that looks good, plays good (well is probably a better word) or sounds good (or all three perhaps). Remember that these days people will buy things for the image (looks/sounds good), performance (plays good) and quality (lasts good). All three come at a cost (though not necessarily equal in weighting), and usually you’ll find that two out of three ain’t bad. Sometimes big name brands not only looks good (the Japanese designers are experts at this), sounds good (for example, hey look, I’ve got a Sony -insert model here- !), but they might actually have good performance or quality as well (Some say the iPod belongs in that category, but I don’t want to start another online forum about it). But most of the time, practical people start with performance or quality, and just hope that it’s something they can hide in their designer label clothing’s MP3 pocket.

Check List for Linux Security

Linux is an amazing operating system considering how it was originally created. It was a modest program written for one person as a hobby – Linus Torvald of Finland. It has grown into a full-fledge 32-bit operating system. It is solid, stable and provides support for an incredible number of applications. It has very powerful capabilities and runs very fast and rarely crashes.

Unfortunately Linux machines are broken almost every day. This happens not because it is an insecure operating system. It contains all the necessary tools to make it very secure. But the truth is. It hasn’t become significantly more secure with the increase in popularity. On the other hand, our understanding of the hackers methods and the wide variety of tools and techniques available contributed to help system administrators to secure their Linux computers.

Our goal in this article is to list the most critical situations, and how to prevent an invasion with simple measures.

1- Weak passwords – By far the first and most used method used by hackers to try penetrating a Linux system is cracking a password, preferently of the user root. Usually they will target a common user first, and then, using his/her access to the operating system, try to get a privileged access cracking the root password. Good password policy, and good passwords are absolutely critical to the security on any computer. Some common mistakes when selecting a password:
A- use “password” as password.
B- use the name of the computer.
C- a well-know name from science, sports or politics.
D- reference to movies.
E- anything that is part of the user web site.
F– references associated with the account.

The latest version of Linux offer shadowed passwords. If a cracker can see an encrypted password, crack it would a simple task. So, instead of storing the password in the passwd file, they are now stored in the shadow file which is readable only for root. Before a hacker can crack a password he needs to figure out an account name. So, simple accounts names must be avoided as well. Another security measure is to apply a “no login” to the account in the passwd file. This must be done to all the accounts that don’t need to log in to the system. Examples are: apache, mysql, ftp and other.

Limit which terminals root may log in from. If the root account is allowed to log in only in certain terminals that are considered secure, it will be almost impossible for a hacker to penetrate the system. This can be done listing the allowed terminals on /etc/security. The login program will consider insecure any terminal that is not listed on this file, which is readable, only by root.

2- Open Network Ports

Any Linux default installation will provide the Operating System with tons of software and services. Several of them are not necessary or even wanted by the administrator. Removing these software and services will close the path to several attacks and improve security. The /sbin/chkconfig program can be used to stop services from automatically starting at run levels 3, 4 and 5. Log in as root and type /sbin/chkconfig –list to view all the services set to start automatically. Select the ones you don’t need and type /sbin/chkconfig 345 name_of_service off. You must do that to all services you don’t want to keep running. Also, the xinetd server can be used to disable other services as well.

3- Old Software Versions

Everyday vulnerabilities are found in programs, and most of them are fixed constantly. It is important, and sometimes critical, to keep up with the changes. There are mailing lists for every Linux distribution where one can have security related information’s, and the latest vulnerabilities found.
Some place to watch for security holes are:
· http://www.redhat.com/mailman/listinfo/redhat-announce-list
· http://www.debian.org/MailingLists/
· http://www.mandrakesecure.net/en/mlist.php
· http://www.suse.com/us/private/support/security/index.html
· http://www.freebsd.org/security/index.html
· http://www.linuxtoday.com/
· http://www.lwn.net/
It is crucial to insure that the security released patches are applied to the programs as soon as they area available. The hacker community will be aware of the discovered holes and will try to explore them before the fixes are applied.

4- Insecure and Badly Configured Programs

There are some programs that have a history of security problems. To name a few IMAP, POP, FTP, port map and NFS, are the most known. The good thing is that most of these programs can be replaced by a secure version like spop, sftp or scp.

It is important that, before deploying any service, the administrator investigate its security history. Sometimes simple configuration measures can prevent serious headaches in the future.

Some advices regarding a web server configuration are well worth to mention:

- Never run the web server as a privileged user;
- Do not keep clients’ confidential data on the web server – Credit card numbers, phone numbers, mailing addresses, must be recorded on a different machine.
- Make sure the privileged data that a user supplies on a form does not show up as a default for the next person to use the form;
- Establish acceptable values for data that is supplied by web clients.
- Check vulnerabilities on CGI programs.

5- Stale and Unnecessary Accounts

When a user no longer uses his /her account, make sure it is removed from the system. This stale account won’t have this password changed periodically leaving a hole. Publicly readable or writable files owned by that account must be removed. When you remove an unnecessary service make sure you remove or disable the correspondent account.

Security Resources in the web

Bugtraq – Includes detailed discussions of Unix security holes

http://www.securityfocus.com/

Firewalls – Discuss the design, construction, operation, and maintenance of firewall systems.

http://www.isc.org/services/public/lists/firewalls.html

RISKS Discuss risks to society from computers

http://www.risks.org/

Insecure.org

http://www.insecure.org/

Since the world of information technology has been well developing, the great development also happens in the world of video games. Video games have been amazingly developed from the very simple of monochrome design to the most recent development today of 3D technology. Those developments are dedicated by all game play lovers so that they can have much more enjoyable playing.

Besides the technology, the kinds of video game are also developing well day by day. There are many new games created and played by the gamers. One of the most well known games today is the Angry Birds. Firstly launched by Apple as a special game for their products with Apple operating system, the game is now so popular and played by huge numbers of game players today. However, Apple stuffs are not the only places to play the fun game, but the PlayVille website also provides the place to play the game online.

You can be happy because the angry birds game is now so easy to be gotten and played. You only need to visit the website on PlayVille.Org and then choose the angry birds game on its puzzle games category. It is easy and will be fun to enjoy the most popular game play in the world.