1. DNS greylisting to lessen the amount of incoming spam.

    25 January 2007

    Greylisting is a technique for slowing down the oncoming torrent of spam on the Net today by breaking spamware that isn't compliant with the SMTP RFCs. It consists of a simple alteration to your DNS zonefiles that places an IP address that doesn't have anything listening on port 25/TCP in the position of your primary MX, and the addresses of your real MX's in positions of lower priority in you DNS zone. Spamware that isn't compliant looks at your DNS records for the IP address of the primary MX, tries to contact it, fails, and gives up, or at …

    Read more...

  2. Interview with Muslix64.

    25 January 2007

    More from the front lines of the DVD content protection war - slyck.com has posted an interview with Muslix64, who cracked the copy protection of both HD DVD and Blu-Ray within a couple of weeks of work as an act of 'fair use enforcement'. When you consider the fact that you can't watch either of these kinds of DVD on anything but an HDCP High-Definition monitor (which very few people have), you have to wonder if you really have fair use of the DVDs you purchase anyway... the interview also goes on to explain how AACS works, and that by …

    Read more...

  3. A relaxing Wednesday night hanging around the apartment.

    25 January 2007

    Last night was one of the more fun and interesting nights I've had in a while. After Lyssa and I got home last night we took turns playing Dance Dance Revolution Supernova, which I'd gotten for her for Yule last year (she played first while I ate dinner and got some lifestyle maintenance done, then she took a shower while I played a few rounds), and then we picked up and got into the TARDIS to pick up Orthaevelve, who was celebrating signing her first publishing contract with Immanion Press. We first hit the local library to return Lyssa's library …

    Read more...

  4. New superdense memory cells at UCLA.

    25 January 2007

    And the hits just keep on coming.. researchers at UCLA have developed a memory circuit that can store 20KB of data in a physical space the size of a white blood cell. Compared to current random-access memory circuits of 2007, this new circuit has a data density of 100 gigabits per square centimeter, which is a new world record, if nothing else. That single memory cell can store the complete text of the Declaration of Independence of the United States of America and still have some room left over. Unfortunately, this is just a lab toy, and isn't anywhere near …

    Read more...

  5. Cue the David and Goliath jokes.

    25 January 2007

    In Tiajuana, Mexico, there is a shakedown and purge of the police department underway due to allegations of corruption. As a result, the police have been disarmed so that their weapons can be used in ballistics tests to see if any were used in a number of murders linked to drug cartels and re-issued slingshots and ball bearings as weapons. They're crude, and definitely underpowered when compared to a pistol, but anything small and hard moving very fast is going to put a hurt on you if and when it hits.

    Read more...

  6. Random knowledge X.

    25 January 2007

    How to set up a crossover ethernet connection between two Sun Solaris machines:


    • Connect both machines using a crossover ethernet cable.

    • root@solaris-machine-1# ifconfig plumb

    • root@solaris-machine-1# ifconfig netmask

    • root@solaris-machine-1# ifconfig up

    • On each machine, ping the other. If both are reported as being alive, you're golden.


    It would look something like this on a live setup:

    root@igg# ifconfig ce1 plumb

    root@ook# ifconfig ce1 plumb

    root@igg# ifconfig ce1 10.0.0.1 netmask 255.255.255.0

    root@ook# ifconfig ce1 10.0.0.2 netmask 255.255.255.0

    root@igg# ifconfig ce1 up

    root …

    Read more...

  7. Random knowledge IX.

    25 January 2007

    When all else fails, try doing what you know shouldn't work. I don't care if the docs say it doesn't work, if the FAQ says it doesn't work, if the books say it doesn't work.. try it anyway. Stuff like BIND is like that.

    In trying to get a domain working with BIND, what I wound up doing was changing a record for a single host (www IN A xxx.xxx.xxx.xxx) to the FQDN (fully qualified domain name - www.promiseofiris.org. IN A xxx.xxx.xxx.xxx), incrementing the zone's serial number, and then kickstarting the daemon. Lo …

    Read more...

  8. Random knowledge VIII.

    25 January 2007

    You're getting old if you consider sleeping until 0900 'sleeping in'.



    When configuring a firewall with IPTables you have to specify the protocol before the port number(s) in each command. Do this:

    iptables -A INPUT -s 1.2.3.4 -p tcp --dport 22 -j ACCEPT

    and not this

    iptables -A INPUT -s 1.2.3.4 --dport 22 -p tcp -j ACCEPT

    If you don't, you'll see error messages to the effect of "Unknown arg '--dport'"

    When writing Snort rules, there are a few things to keep in mind. First of all, rules come in two parts: the …

    Read more...

  9. Random knowledge VII.

    25 January 2007

    The /usr/bin/eject utility on a Linux system is a good way of figuring out which machine has what name in the KVM when you're dealing with a rack of machines, many of which are likely to be mislabelled. Use the eject utility to open the CD-ROM drive and see what machine you're really connected to; then update the labels in the KVM's configuration appropriately.



    If your fibre-optic network card isn't seeing any traffic at all, try switching the plugs on the card. Some optical network cables don't have colour-coded connectors so it's easy to plug them into the …

    Read more...

203 / 210