Friday, July 27, 2007

Defensive Googling: Using google to see if your site has been hacked.

Found this on isc.sans.org

Using some keywords with a Google search you can pretty quickly find some embarrassing content that may have been added to your site by a hacker.

A couple quick searches like this may come up with all sorts of stuff:

This is an example of searching University Sites for cialis or viagra. Look how many of them have been hacked. Click here to see it in action.
site:.edu (cialis OR viagra) buy

Here are some other examples given by ISC:
site:myorg.org porn
site:mygov.gov cialis buy

Tuesday, July 24, 2007

OT: Bicycle commuting - Fuji Newest 2.0


Just got a new road bike for my small 10 mile commute to work... actually my wife got it for me as a surprise birthday gift. :) My wife is RAD!

What a huge upgrade. about 7lbs lighter than my old borrowed Centurion 12 speed I've been using this summer. Plus she added some triathlon bars that really help with the wrists, especially after sitting on the computer for 10hrs. I only ride about 40 - 60 miles a week, but for a newbie commuter this bike is great. Even took the kids out over the weekend and pulled them in the bike trailer with no problems. (I have a little 2 seater in-step - about 45lbs with the kids). The gearing allowed me to pull a pretty steep hill with little effort. The adjustable stem gave me the option to add a little height to the bars for some extra comfort.

Only think I need now is to go pick up some clipless pedals.

Mac vs PC



This made me laugh... Give the guy his red stapler and let him out of the building quietly.

Friday, July 6, 2007

Here's my VMware ESX 3 Server Patch Process

Download Patches:
  • Find new patches from VMWARE.com -> Downloads -> ESX 3.X.X
    ( only download patches for current version of ESX Server )
  • Download all Patches available for current version
  • Using WinSCP upload all patches to /tmp on esx server

Create List of updates and order to be applied:

Create a text file installorder.txt in the /tmp folder with the order to install patches. Install them in order by release date from oldest to newest. Add files in order to be installed from top to bottom with the patch names (without the .tgz at the end)

cd /tmp
vi installorder.txt

--------------------------------------

ESX-5140477
ESX-5095559
ESX-4825991

--------------------------------------

Create the following shell script:

cd /tmp
vi esxpatches.sh

--------------------------------------
!#/bin/sh
# ESX Patch Script

for x in `cat installorder.txt`
do
tar -zxvf $x.tgz

cd ./$x

esxupdate -n update
cd ..
done

--------------------------------------

Set permissions on the shell script

chmod /tmp/esxpatches.sh 777

Using the Virtual Infrastructure Client:

  • Move all VM’s to ESX Server you are not patching.
  • Put the ESX Server in Maintenance Mode.
Run the patch update script

./esxpatches.sh

Using the Virtual Infrastructure Client:

  • Reboot newly patched VMWare ESX Server
  • Exit Maintenance Mode
  • Slowly Move VM’s back to newly patched ESX Server