Open Source Security Professionals

In economic times such as these it is imperative that architects and leads alike look beyond the glossy software catalog and instead to the web. In the past we often discounted open source as unsupported and hacker-like in the development efforts. One would hope that in this day of enterprise open source powering the majority of web applications that we could back away from the mantra of yesteryear. The argument often heard in corporate America is without a company backing it, how can you trust the source of the code? In the same bated breath they will speak to Microsoft and Oracle as pristine trophy holders of American Ideals. In this global economy and 24×7 development cycle there is very little code still developed stateside only. The pond and time zone allow for rapid development cycles and releases. It is ignorant to think that Microsoft’s code is not spattered with code developed in foreign countries. The bazaar development paradigm has extended well upon the weird GNU hackers in their basements, even Microsoft and other commercial entities have opened the doors to this development process. ...

July 13, 2009 · 3 min · Nick

Lexmark Drivers for Ubuntu/Debian

Lexmark provides subpar Linux drivers for any distro, but Ubuntu/Debian is horrible. At work we moved from HP Printers to Lexmark. The situation reminds me of ATI hardware in the late-90’s, great hardware and crappy drivers. I converted the Red Hat RPM for Debian based systems. Attached below: To install sudo dpkg -i drivers-lexprtdrv_552-2_i386.deb

May 5, 2009 · 1 min · Nick

Fix for Songbird showing songs still on iPod

I formatted my iPod recently and noticed that Songbird still thought the Library had media on it. Loading up a factory restore didn’t help. To clear the iPod cache here is the location: In the profiles directory you will see a db folder. Remove all iPod* folders and restart Songbird. Now the Library will show the blankness that is your iPod.

January 3, 2009 · 1 min · Nick

Securing MySQL

Here is my quick secure guide for MySQL: Rename root user account mysql -u root -p use mysql; update user set user=”mydbadmin” where user=”root”; flush privileges; Set the root password for database mysqladmin -u mydbadmin password ‘the-new-password’ Drop default test database mysql -u mydbadmin -p drop database test; quit; Edit the MySQL server config vi /etc/my.cnf and under [mysqld] skip-networking <– Disables network access set-variable=local-infile=0 <– prevent against unauthorized reading from local files bind-address=127.0.0.1 restart mysql /etc/init.d/mysqld restart

December 31, 2008 · 1 min · Nick

Keeping on my Toes &#8211; Mac to Linux and back

I love my MacBook Pro more than I love my motorcycle. There I said it. When I don’t get a chance to ride my motorcycle I get cranky and irritable, but when I don’t know where my computer is…death to all. The only thing that exceeds my love of Mac is my love of Linux. The reason I began using Apple products was from the consulting days of my life. I needed a machine that when I opened the lid, turned on, and began doing what I told it to do. Linux does this just spiffy, but the problem is I am fiddgity. My work machine was in a constant state of subversion dumps and compiles. A new kernel patch set? Sure why not. GIT Release of GNOME looking spiffy, download away. The problem is that when you live on the edge it is sharp. Bleeding edge releases in Linux made my laptops constant compiling machines. I tinker and therefore I Mac. ...

December 27, 2008 · 3 min · Nick