Missing Keys

Ever wonder what some of those “random” keys on your keyboard are for?  The Straight Dope has an article about such keys.  If you are a programmer you are more than like recognize some of the keys; and if you use Linux/Unix/BSD you will recognize even more.

RHCT day

Just a quick note for today.  I just received word that I am now a Red Hat Certified Technician (aka RHCT). I will be taking my RHCE exam in late January (assuming I am still working for my current employer.) I know some of you have about a dozen certifications but hey, this is my first (well besides that whole Business, Global Studies, and Computer Science degree.)

OS Security

Recently the topic of Linux vs. Windows security has been making the rounds on the Internet.  Specifically some well known technocrats of the Internet world have commented on the increased usage of Linux and how this will affect the overall usage of it as a vehicle for virus reproduction. This article from Security Focus does a good job of covering some of the basics of the discussion.

You will find the most of the time a self indulged guru will start saying things like “When Linux becomes as popular as Windows it will have just as many virus as Windows does now.”  This logic is absolutely ridiculous and shows a distinct lack of understanding about the fundamental nature of computer security.  If that were true then the mostly commonly exploited web server would be Apache (considering that it is responsible for hosting more websites than all other web servers combined.)  but anyone who follows web attacks will quickly point out that IIS is the most commonly exploited web server.  No, Microsoft Windows OSes suffer from a completely different problem.  Bad design…

Lets be frank for just a minute. Microsoft Windows OSes are badly designed from a network security standpoint. Period! MS-Dos and Windows NT 3.51 (the OSes from which all subsequent Microsoft operating systems are based on) where never designed for global network connectivity. In the Blaster virus advisory, Microsoft went so far as to say the Windows XP was not designed to be run in its default configuration from within a hostel environment; like the Internet. Dos had no facilities for network connectivity until long after it was widely used. NT was designed to communicate with other computers but was designed to be used in a stand-alone, trusted, business network. This mindset is still prevalent in the Microsoft world and is evident from some of the mind-numbing default settings the Windows uses (default users having administrator access, non-privileged users being able to modify system libraries, firewalls the leave RPC ports open even when told to close them, etc..)

All of that aside there is anti-virus software for Linux. If you do a Google search you are unlikely to find what you are looking for since the vast majority of Linux anti-virus software simply gets rid of virus on their way to a Windows box (Linux proxy servers and the like.) The one Linux anti-virus program actually meant to be used to stop Linux virus is F-Prot for Linux. You can find a KDE based fronted for it here. If you really want to improve your Linux security you are better-off getting an IDS like Tripwire.

Unix (the grandfather of modern-day Linux, BSD, and OSX) has been designed, perfected, and used on hostel networks for 30 years now. If Microsoft actually developed their software in a secure fashion then the proportional number of virus would be closer to the numbers seen in every other OS in existence; not the other way around. If you want to see something funny be sure to check out this page from the F-Prot website. Its the current list of *nix OS virus that currently exist. Scalper is a FreeBSD worm, Slapper is a Linux worm (technically not a virus but close enough.) Two, thats it!

The Opening of Valve

Saw this on Security Focus and just had to post it.  Evidently the source code to Half-Life 2 (possible the most anticipated sequel in the history of computer games) was stolen via an IIS/Outlook buffer overflow protection error.  Then it was posted to the Internet! Dang… talk about your bad day at work.

While we are talking about Valve let me repost HL2 on Linux.

Penguin in a Suit

Some huge numbers coming out of Jupiter Group about the state of Linux on the small and mid-sized businesses.  Notably that some 19% of these businesses running Linux on some desktops in there environment.  OpenOffice.org got 6%, Linux server install got 26%.  All of these numbers (minus the server installs) come from out of nowhere considering Linux on the desktop and OO.org basically didn’t register last year.

To be entirely honest I am not wholly surprised by these numbers. Our organization is switching out almost our entire Windows Server install based because of speed, cost and dependability.  For example we currently run a DB2 setup to handle all database operations in our organization.  When we got new servers we got them with Windows 2000 (all dual proc boxes.)  The boxes cost about $20,000 a piece, DB2 was about $40,000 a piece, and Windows 2000 ES was around $32,000 a piece.  On a lark we decided to install Redhat AS 2.1 on one of them (our DB2 license supports any OS we want to install on.)  The systems run about 200% faster, had 0 down time, was MUCH easier to support (OpenSSH is GOD!), clustering was much easier with improved scalability, and all on an OS that cost us about $2,500 (support was $2,500; the OS was free.)

Needless to say we only run DB2 on Linux now.  In semi-related news Microsoft is urging channel partners not to pick up (higher margin) Linux service channels. Oh ya, OpenOffice 1.1 was released yesterday as well.

Fun and Games

Ever wonder who invented the venerable Ctl-Alt-Del?  Well here ya go.  I found it interesting how it was only intended as a programming tool.  I always find it funny to see how random events become mainstream…

For some mid-day fun, a friend pointed me to this helicopter game.  My best score is only 912 but I have not gotten much practice at work.  Some practice… but not a lot.

Love in an Elevator

In what has to be one of the coolest things I have heard about in a while, this story at space.com talks about host technologically close to producing a “space elevator” we actually are.

The theory goes something like this… get a super strong 62,000 mile long ribbon/nano-tube; attach it (very firmly) to the ground; attach other end to a large weight up in space.  If you can meet those criteria then the centrifugal force and the Earth’s gravity will keep it tight.  Then its imply a matter of sending electrical vehicles up and down it.

The idea has been around for a long time (the science is pretty sound for it) the problem is the strength of the materials involved.  Well, it looks like carbon nano-tubes can easily handle the load.  Maybe this is just the ticket to fixing the 40 year mistake that has almost screwed my generations aspirations for space travel.