Category Archives: Sh*ts

Identifying Back Doors, Attack Points, and Surveillance Mechanisms in iOS Devices

Upon receipt of a valid search warrant, Apple can extract certain categories of active data from passcode locked iOS devices. Specifically, the user generated active files on an iOS device that are contained in Apple’s native apps and for which the data is not encrypted using the passcode (“user generated active files”), can be extracted and provided to law enforcement on external media.   Apple can perform this data extraction process on iOS devices running iOS 4 or more recent versions of iOS. Please note the only categories of user generated active files that can be provided to law enforcement, pursuant to  a valid search warrant, are: SMS, photos, videos, contacts,  audio recording, and call history. Apple cannot provide: email, calendar entries, or any third-party App data.

http://www.zdziarski.com/blog/wp-content/uploads/2014/07/iOS_Backdoors_Attack_Points_Surveillance_Mechanisms.pdf

HAProxy, Docker, Shipyard, CoreOS etc.

Some readings for today.

HAProxy as a static reverse proxy for Docker containers

You can’t have lots of containers listening on the same public port 80, so you have to have your containers listening on some random port like 4553, 4566, 4333 etc. But your site’s visitors are coming to port 80 so you need to somehow listen to port 80 and forward requests to the right Docker container on the right port.

There are several ways to do this and I started out with Nginx as a reverse proxy. This works fine but I don’t want a web server doing that. I’ve used HAProxy in the past for load balancing. And it is actually just what I need, a load balancer is made for forwarding requests.

Read more at http://oskarhane.com/haproxy-as-a-static-reverse-proxy-for-docker-containers/

rock ssd

Auto-loadbalancing with Fig, HAProxy and SERF

http://www.centurylinklabs.com/auto-loadbalancing-with-fig-haproxy-and-serf/

 

Shipyard

Management from a Single View
Shipyard gives you the ability to manage Docker resources including containers, images, hosts, and more all from a single management interface.

Multi-Host Support
Shipyard can manage multiple Docker hosts giving the flexibility to build redundant, highly available applications.

Container Metrics
Shipyard monitors and reports container metrics such as CPU and Memory utilization.

 

http://shipyard-project.com/

 

SERF, from hashicorp, the creators of Vagrant

A decentralized solution for service discovery and orchestration that is lightweight highly available, and fault tolerant.

http://www.serfdom.io/

 

CoreOS

CoreOS is a new Linux distribution that has been rearchitected to provide features needed to run modern infrastructure stacks. The strategies and architectures that influence CoreOS allow companies like Google, Facebook and Twitter to run their services at scale with high resilience. We’ve implemented them correctly so you don’t have to endure the slow, learn-as-you-go infrastructure building process.

Today we’re excited to announce that official CoreOS images are available on Google Compute Engine. This means it’s now even easier to spin up a CoreOS cluster on GCE using the API or from the command line. Adding an instance is as simple as:

Strange characters, even using meta charset=”UTF-8″

I’v deployed a work on one of my clients – a french one – server and even using charset=”UTF-8″ meta in HTML, some characters were displayed different from what they should.

cópia was showed cópia

I had to add the following line to .htaccess – forcing the Charset to be UTF-8

AddDefaultCharset UTF-8

or

AddDefaultCharset Off

disabling Default Charset! 🙂

http://httpd.apache.org/docs/2.0/mod/core.html#adddefaultcharset

Microsoft stopped supporting Windows XP in April just for some people.

Microsoft stopped supporting Windows XP in April, but a simple registry hack lets users continue to get security updates.

The hack, as reported by ZDNet, fools Microsoft into thinking the system is running Windows Embedded POSReady 2009, a variant of XP that’s used by ATMs and cash registers. Those systems will keep getting security updates until 2019.

All XP users need to do is create a text file with the following contents:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]

“Installed”=dword:00000001

Then, change the file extension from “.txt” to “.reg,” and run the file in Windows Explorer. Opening Windows Update at this point should reveal several new security updates.

On the downside, the hack only works on 32-bit systems.

Read more at http://www.pcworld.com/article/2310301/windows-xp-registry-hack-keeps-the-security-updates-rolling.html