Digital Forensics Tools For Linux

If you are using Fedora Linux Distro to perform Forensics works, you may want to look into this -

http://www.cert.org/forensics/tools/

CERT also provides vmware forensics appliance where you find at the link above.

Enjoy ;]

Re-look: Security Operation Tools

I haven't kept track of my favorite tools for awhile, and it's time to pay attention to them again -

- Bro-ids
- Splunk
- Suricata
- Argus
- Ntop

All of them have new version released and it seems there are numerous changes that worth re-look into ;)

High Tech Fix For "Nokia N900: All telephony functions are disabled" issue

Last week, my Nokia N900 phone suddenly popped up with the message -

All telephony functions, including emergency calls, are disabled due to communication error. To recover, you might have to reboot the device

You will see something like a sim card icon on the top panel when this message appears.

Awesome, it seems I couldn't make or receive call after this message is shown, I rebooted my phone and it works again ... until this week, the phone is dead, I can't use it as a phone but small tablet. Maybe I should try google to see if there's any solution and here's what I have found -

http://discussions.europe.nokia.com/t5/Maemo-and-MeeGo-Devices/N900-All-telephony-functions-are-disabled-and-No-IMEI/td-p/915441

http://talk.maemo.org/showthread.php?t=60881

Basically the solution is to claim the warranty and Nokia replaces a new one for you, what if you are out of warranty, just someone like me? Nokia has no answer for that, thank you Nokia ;)

I was thinking "Sim card icon and communication error", maybe it is sim card slot issue? I don't know, but here's what I try -

0. Switch off N900

1. Open up N900 case at the back(battery part)

2. Take out battery

3. Take out sim card from the slot, clean it

4. Put the sim card back to the slot

5. Tighten the slot

6. Take the toilet paper, yes I say toilet paper because it was on my desk when I was trying to fix this

7. Try to tear the toilet paper and make it thicker by layering them

8. Make the toilet paper slightly same size(square) as the sim card slot

9. Put the toilet paper on top of the sim card slot and push in a bit

10. Put back your battery and press it little hard, the toilet paper will be underneath

11. Close the case

12. Switch on your phone

The phone works automagically, don't ask me why, it's really high tech fix if you ever encounter this issue.

Have fun with N900 again, by the way no fun since not much apps for it(Thank you Nokia), BUT it works as PHONE again!

Cheers ;]

p/s: By the way let me know if this solves your problem, I would like to hear about it!

Time to Kill Bill

For all Malaysia IT people, do read this and spread out the words, it's time to kill Bill, what Bill? Computing Professionals Bill 2011!

http://www.scribd.com/doc/75107593/CPB2011-Draft

Do read it in detail! Currently it is in drafting processing, thanks to my best pal - Mel to share this nonsense bill. By the way, if you have facebook, support this -

https://www.facebook.com/pages/Malaysians-Against-Board-of-Computing-Professionals-Bill/289002177811647

I will constantly update this post if there's any progress regarding the matter, voice out while you can regarding CPB2011 to the document below -

https://docs.google.com/document/d/14E05jHZKQA0y6rP07n2PYtR4obBLEpiiK7OO1iQQ0PA/edit?hl=en_US

Mosti has put up their latest working draft which you can find here -

http://www.mosti.gov.my/mosti/images/stories/pdf/2011/ruu_bcpm_v17.pdf?PHPSESSID=b5a0a3c0faa9f630065896d7694435a1

Please review it and make your voice loud and clear!

Some opinions from the individual who works in IT industry ;)

http://www.youtube.com/watch?v=lCDHiWh6Ky4&feature=channel_video_title

Petition!

https://www.change.org/petitions/mosti-stop-computing-professionals-bill-2011-cpb2011

Follow the Tweets regarding CPB2011

https://twitter.com/#!/search?q=%23CPB2011

Flip-flop, uncertainty?

http://www.themalaysianinsider.com/malaysia/article/it-bill-may-be-dumped-says-mosti/

Makes yourself certified criteria?

http://www.mncc.com.my/members.htm

Mosti is just facilitator?

http://www.lowyat.net/v2/index.php?option=com_content&task=view&id=5849&Itemid=1

Role model of CPB 2011, seriously?

http://allafrica.com/stories/201107061218.html

Interview of Malaysia Deputy Minister Of Science, Technology And Innovation, Datuk Fadillah Yusoft by Astro Awani, if only you know Malay Language -

https://www.facebook.com/photo.php?v=10150460323294820&set=vb.11726505964&type=2&permPage=1

From Tony Pua, member of Parliament -

http://www.youtube.com/watch?v=6ilM5bKokkw&feature=youtu.be

While they can't define what is CNII properly during open meeting, now they want to include more sectors in this undefined crap? Seriously if the government sector has failed to deliver security all these years, that means PRISMA that was initiated to protect government ICT agency by our government is a big failure(so much money wasted and now this)? By the way if you read carefully at the last few paragraphs, you will notice "What we can do at CyberSecurity Malaysia is to continue to provide more training and capability building in cyber security, says CyberSecurity malaysia Chieft Executive Officer(CEO) Lt Col Prof Datuk Husin Jazri."

To me, that basically sounds like if this bill is passed, he can make big money by selling training and certification program, now we know who is really pushing this AGENDA at the back ;)


http://thestar.com.my/news/story.asp?file=%2F2011%2F12%2F18%2Fnation%2F10119744&sec=nation

Discussion about CPB 2011 on BFM radio station -

http://bfm.my/geeksquawks_ep53.html

The TeAM(The Technopreneuers Association Of Malaysia) objects to CPB 2011 -

http://techcentral.my/news/story.aspx?file=/2011/12/14/it_news/20111214141030&sec=IT_News

Speak out loud, geeks!

http://thestar.com.my/news/story.asp?file=%2F2011%2F12%2F18%2Fnation%2F10105092&sec=nation

No cheers this time, F it!

Intel X520

I want this for my Christmas present ;]

http://www.intel.com/content/www/us/en/network-adapters/gigabit-network-adapters/ethernet-x520.html

I never thought 10G network adapter can go very cheap, really need to get one for development and testing!

Virtual PF_Ring

Ntop development team has always developed high performance packet capture solutions that I would like to take a look into it -

http://www.ntop.org/products/pf_ring/vpf_ring/

Virtual PF_RING can only be used with KVM, with this it will bypass many copy operations and capture packets in line rate. I think I will test it on my Linux box and see how it goes. By the way you need to donate to obtain it.

Cheers ;]