Blogs Counter
2009-03-02 12:03:08
Blogs Counter
Blogs Counter Users online Counter , display the current users online and in stats page view country , OS , pages visited and moreclick here to create your counter
Category : Open Source Softwares | 0 Comments | 0 Trackbacks
SELinux
2009-01-19 03:21:27About a couple of months I bought a new computer (a laptop) and until
now couldn't setup like my desktop and haven't figured out why (until
today).
There were 2 annoying aspects that kept me on my nerves:
I couldn't set my Gnome to a different language from the system
language (I like to have the system in English a for me in German). The
second point that kept me pissed off was a strange SSH error "
could not chdir /home/...".
For the language it is pretty straight forward:
#---
cat > $HOME/.dmrc << __END__
[Desktop]
Language=de_DE.utf8
__END__
#---
But somehow didn't work.
My
other problem, SSH login was somehow cryptic for me (how could it
be?!?). But today it strikes me: SELinux (I tried a local login, in the
terminal, and the same error came). Somehow SELinux prevents "
login" from accessing the home directory.
Anyway,
the solution, which some security freaks would recommend, was to change
SELinux from "ENFORCING" to "PERMISSIVE" and reboot. To do the same:
1. Edit as root:
/etc/sysconfig/selinux
2. Change the
SELINUX variable to:
SELINUX=permissive
3. Reboot
New spyware system mimics Windows Security Center
2008-11-03 10:02:48What's wrong with the screenshot to the right? Ignoring those red boxes added for emphasis, it looks identical to the Windows Security Center... only it's not. In fact it's a spyware hoax designed to mimic the Security Center almost identically, not to mention trick you into purchasing WinDefender 2008 software, a phony security app which will clear up only the phony security alerts its malware component creates.
WinDefender is just the latest in a series of malware attacks designed to look like legitimate Windows components. But people have finally started to wise up to those smallish "alert" pop-ups, so malware creators are upping the ante with full-blown knockoffs of real security apps. Computer Associates has the details.
In addition to the fake Security Center, WinDefender nags you further by blocking web pages from opening (blaming the blockage on "adware/spyware on your PC"). It adds a yellow drop-down box to Internet Explorer like you get when you try to download something from the web, again with text urging you to install WinDefender 2008 in order to unblock the sites. Just $40 of extortion money makes it all go away...
Most anti-malware software ought to be able to scrub WinDefender 2008 off your machine, but the more important lesson is that you pay close attention to the interface of anything security-related on your PC to ensure that you aren't being scammed while you're actually trying to address any security problems. Anything you see in Windows that recommends a specific program to solve any sort of problem should immediately be considered suspect.
Category : Security | 0 Comments | 0 TrackbacksGoogle patches Android security flaw (CNET)
2008-11-03 09:59:36Google has begun distributing a patch to its Android mobile phone operating system, an early test for how nimbly the company can respond and how well the infrastructure works to distribute and install updates.
For the Android test phone I'm using, a T-Mobile G1, the update was smoother than the process by which the software problem came to light publicly on October 24.
The handset I'm testing gave me a message Saturday afternoon: "A system update is available," and a choice to update now or later. When I clicked the button to begin the update, it downloaded new software, which took a few minutes, then installed it, then resumed working with no hitches.
The patch fixes the highly publicized security problem with Android's Web browser and makes a few other minor changes, according to a Google spokesman quoted in IT World on Friday.
The researchers-- Charlie Miller, Mark Daniel, and Jake Honoroff of Independent Security Evaluators-- called the Android Web browser flaw serious, but Google said its severity was mitigated by Android's design, which restricts each program to its own area.
Earlier, Google appealed for what it called " responsible disclosure" of security vulnerabilities--in other words, a grace period to fix problems before they're made public to reduce the likelihood an attacker will get a chance to exploit a vulnerability. There's an ages-old tension between companies that want to fix their products and security researchers who want to get the word out, in part because attackers also are trying to find the vulnerabilities.
Google didn't respond to a request for comment Saturday.
Category : Security | 0 Comments | 0 TrackbacksImprovements to Ads Quality
2008-11-03 09:53:47We're always working on improvements that will help us show the most
relevant ads to our searchers, and we're excited to tell you that we'll
soon introduce two changes designed to enhance how we calculate Quality Score
and rank ads. The first change helps better evaluate the precise
quality of your ad - regardless of its position on the page. The second
change improves how we promote ads to positions above the search results. Let's take a look at both of these changes in more detail.
More precise Quality Score calculation
Clickthrough rate (CTR)
is the most significant component of Quality Score because it directly
indicates which ads are most relevant to our searchers. As you probably
have observed, ads in high positions typically earn better CTR than
those in low positions, because ads in high positions are more visible
to searchers. To calculate the most accurate Quality Scores, it's
important that the influence of ad position on CTR be taken into
account and removed from the Quality Score.
In the coming days,
we'll update the portion of the Quality Score algorithm that accounts
for ad position. This will result in more accurate Quality Scores,
ensure that ads compete fairly for position based on their quality and
bid, and enable Google to show the most relevant ads to searchers by
rewarding high-quality advertisers with better ad positions.
Higher quality ads above the search results
We're
also improving the way we determine which ads show in the yellow region
above the search results. These positions are particularly valuable to
advertisers because they are prominently positioned on the page. Given
their prominence, it's especially important that these ads be high
quality; we therefore place extra emphasis on quality when determining
which ads to show in this location.
To appear above the search results, ads must meet a certain quality threshold. In the past, if the ad with the highest Ad Rank
did not meet the quality threshold, we may not have shown any ads above
the search results. With this update, we'll allow an ad that meets the
quality threshold to appear above the search results even if it has to
jump over other ads to do so. For instance, suppose the ad in position
1 on the right side of the page doesn't have a high enough Quality
Score to appear above the search results, but the ad in position 2
does. It's now possible for the number 2 ad to jump over the number 1
ad and appear above the search results. This change ensures that
quality plays an even more important role in determining the ads that
show in those prominent positions.
Keep in mind that these
enhancements may cause changes to your ad position, spend, and
performance. We're launching these updates soon so that you'll have
enough time to review your accounts and prepare for your holiday season
advertising. While we don't believe that any immediate changes are
needed on your part, we encourage you, as always, to watch your key
metrics and to make adjustments as appropriate.
We'll post again once these changes are live.
Posted by Amanda Kelly, Inside AdWords crew
Clicks, conversions, and Christmas 2008
2008-11-03 03:00:00One of our favorite and most useful posts from last year was an in-depth look at cost-per-click
behavior during the 2006 holiday season by none other than Google's
Chief Economist, Hal Varian. In the post Hal explained how CPC's and
CPA's (cost-per-actions) vary over time to affect advertisers' ROI.
This year we have two new posts about CPC's and holiday trends over at the newly launched Google Retail Advertising Blog, a great source of information tailored to the needs of retail advertisers. The first post is Hal's updated look at the new data from the 2007 holiday season. The second
has some tips regarding scheduling and consumer behavior specifically
for your campaigns this winter. Remember, it's never too early to start
your holiday planning.
Posted by Christian Yee, Inside AdWords crew
PHP 4.4.9 released!
2008-10-29 08:54:11
The PHP development team would like to announce the immediate availability of PHP 4.4.9. It continues to improve the security and the stability of the 4.4 branch and all users are strongly encouraged to upgrade to it as soon as possible. This release wraps up all the outstanding patches for the PHP 4.4 series, and is therefore the last PHP 4.4 release.
Security Enhancements and Fixes in PHP 4.4.9:
- Updated PCRE to version 7.7.
- Fixed overflow in memnstr().
- Fixed crash in imageloadfont when an invalid font is given.
- Fixed open_basedir handling issue in the curl extension.
- Fixed mbstring.func_overload set in .htaccess becomes global.
For a full list of changes in PHP 4.4.9, see the ChangeLog.
Google Adds RSS Feeds For Web Search Results
2008-10-29 08:52:34

As expected, Google has added an RSS feed for web search results to the Google Alerts service. As seen in the screenshot above, when creating a new alert, you can now choose to get the alert via email or RSS feed. RSS feed alerts are only available to logged-in Google account holders.
As we reported earlier this month, Google is the last major search engine to offer its web search results via RSS.
This is a good addition, but I have to agree with Google Operating System today: “The new feature from Google Alerts is useful, but Google should’ve provided an option to subscribe to feeds for each search result.”
Category : SEO | 0 Comments | 0 TrackbacksSecrets for controlling VirtualBox from the command line
2008-10-29 08:49:19
Sun's recently released VirtualBox 2 is one of the best virtualization applications for desktop users. It's available in two wallet-friendly flavors, with a few extra features in the closed-source variant. The software sports a nice graphical user interface, but few users realize that it can also be completely controlled via a powerful command-line interface.
The CLI works well for users who want to control a VirtualBox running on a headless server with no monitor or keyboard attached. Even desktop users, running and managing VirtualBox from the same machine, can pull a stunt or two with the CLI that they can't do in the GUI, such as shrinking or cloning virtual disks, customizing the BIOS logo, and collecting metrics data from virtual machines.
While you can create a VM from the CLI, unless you are running VirtualBox on a headless server it's easier to use the GUI. The most common VM creation options are available in the GUI, which saves a lot of time compared to creating a VM from the CLI. But once you have created a VM, you can use the CLI to tweak it as you please.
From the CLI, you control VirtualBox with the VBoxManage command. Depending on how you want to modify or control the VM, there are various sub-commands and options you can use with VBoxManage. You'll also need to identify the VM or a particular component, such as a virtual disk, that you want to control with the CLI. You can do this by specifying the name of the VM or its unique identifier (UUID). You specify the former when you create a VM; the latter is automatically assigned by VirtualBox.
To find out the UUID, use the list command followed by the type of device you want a UUID for. VBoxManage list vms
prints a lot of details about all the VMs, including the assigned
memory, the VM's current state (running or powered off), its UUID, and
the UUID of the virtual disks attached to it:
$ VBoxManage list vms
VirtualBox Command Line Management Interface Version 2.0.2
(C) 2005-2008 Sun Microsystems, Inc.
All rights reserved.
Name: Fedora
Guest OS: Fedora
UUID: 50da82bf-9c03-48d2-99ad-66f9885f30c1
Config file: /home/bodhi/.VirtualBox/Machines/Fedora/Fedora.xml
Memory size: 128MB
VRAM size: 8MB
Boot menu mode: message and menu
ACPI: on
IOAPIC: off
PAE: off
Time offset: 0 ms
Hardw. virt.ext: off
Nested Paging: off
State: powered off (since 2008-10-15T20:29:41.000000000)
Monitor count: 1
Floppy: empty
SATA: disabled
Primary master: /home/bodhi/.VirtualBox/VDI/eightgig (UUID: c00ef0b0-173a-4f10-aa9b-94f38a5306af)
NIC 1: MAC: 0800273EBD00, Attachment: NAT, Cable connected: on, Trace: off, Type: Am79C973, Reported speed: 0 Mbps
Using the UUID you can modify the VM. For example, VBoxManage modifyvm 50da82bf-9c03-48d2-99ad-66f9885f30c1 -memory "512MB" increases the memory of VM to 512MB. Similarly, VBoxManage modifyvm 50da82bf-9c03-48d2-99ad-66f9885f30c1 -vram "16MB" increases video RAM to 16MB.
While the project advises you use UUIDs when working with the CLI, in this article I'll use the name of the VM instead to make it easier to read.
If your VM boots slowly, you can shave a few seconds by reducing the BIOS logo display time. VBoxManage modifyvm "Fedora" -bioslogodisplaytime 1000
sets the time to 1000ms (10 seconds). You can also replace the default
Sun BIOS image with any uncompressed 256-color BMP file, using VBoxManage modifyvm "Fedora" -bioslogoimagepath
path-to-the-image.
As is common with most BIOSes, the VirtualBox BIOS lets you
interrupt the boot process and select a temporary boot device. This can
be a potential security risk, since most computers can now boot from
USB devices. VBoxManage modifyvm "Fedora" -biosbootmenu disabled prevents users from selecting a temporary boot device.
Finally, you can also change the boot order of the VM without entering the BIOS. VBoxManage modifyvm "Fedora" -boot1 dvd -boot2 disk -boot3 floppy -boot4 net makes the VM first access the DVD drive, followed by hard disk, diskette drive, and the network. You can also specify none as a boot device to leave a slot empty.
You can also configure a VM to log all network traffic. VBoxManage modifyvm "Fedora" -nictrace1 on -nictracefile1 /tmp/nictraffic.log enables the trace on the first virtual network card and logs all traffic to the file specified.
Controlling virtual disks and removable devices
In the virtual realm of VirtualBox, a VM can have three virtual hard disks -- a primary master, primary slave, and secondary slave -- with the secondary master reserved for removable devices. When you create a VM using the GUI, VirtualBox asks you to add a virtual disk using the built-in Virtual Disk Manager tool. In the example above, the Fedora VM uses an 8GB disk named "eightgig" as the primary master.
You can also create disks with the createvdi command, specifying a name and size (in MB). VBoxManage createvdi -filename fourgig -size 4096 -register creates a 4GB (4096MB) disk and registers it with VirtualBox; you need to register a disk before it can be used by a VM.
Once a disk has been created and registered you need to assign it to a VM. VBoxManage modifyvm Fedora -hdb fourgig adds the newly created disk as the primary slave disk in the Fedora VM.
As for removable devices, VirtualBox can use a registered ISO image or a physical drive as the virtual CD/DVD drive. VBoxManage modifyvm "Fedora" -dvd host:/dev/hdc
attaches the physical /dev/hdc drive on the host to the VM. By default
VirtualBox allows read-only access to the host drive. To write DVDs,
you need to enable the experimental DVD writing support with VBoxManage modifyvm "Fedora" -dvdpassthrough on.
If you have a VM running and need to use an image temporarily, you can do so without registering it first. VBoxManage controlvm "Fedora" dvdattach
path-to-ISO-image will attach the ISO to the specified VM.
Managing snapshots
One of the most useful feature of virtualization software is its ability to take snapshots of VMs. It's always a good idea to take a snapshot of a VM before making changes to it. Snapshots help on the hardware level to recover a system that has been rendered unusable due to changes to the hardware configuration, and on the software level they protect against data loss due to accidental deletion or virus.
Taking a snapshot from the VirtualBox CLI is child's play. VBoxManage snapshot "Fedora" take snap1-stable-system
takes the snapshot of a stable Fedora VM when everything is working
perfectly. Saving a snapshot might take some time, depending on the VM
and the resources on the host. To make sure you don't make changes to a
system while a snapshot is being taken, VirtualBox grays out the whole
VM interface, and you cannot use it until the snapshot has been saved.
With a stable snapshot in hand, go ahead and play with the system.
If you get in trouble and your machine won't boot or starts behaving
abnormally, you can revert to the snapshot of the stable machine. To do
this, first power off the VM with VBoxManage controlvm "Fedora" poweroff, then revert to last snapshot with VBoxManage snapshot "Fedora" discardcurrent -state. If you have multiple snapshots, you can revert to the last but one snapshot with the -all switch instead of -state.
Of course when you revert to an older state, all the changes you made since that snapshot was taken are lost, including all configuration changes and changes to old and new files. You can work around this by specifying that your data should be stored on a "writethrough" disk, which behaves like a normal disk but isn't affected by snapshots. Put another way, when you take a snapshot, VirtualBox ignores the writethrough disk. You can store all your important data and files or your complete /home directory on that disk.
To add a writethrough disk, use the -type writethough
option when creating a new disk with createvdi. You can also change a
disk you created earlier and make it writethrough. To do so, first
unattach it from the VM with VBoxManage modifyvm "Fedora" -hdb none, and then unregister it with VBoxManage unregisterimage disk fourgig (using the name of the disk on your system in place of fourgig). Now register it back again but as a writethrough disk with VBoxManage registerimage disk "fourgig" -type writethrough. Finally, attach it back to the VM using VBoxManage modifyvm "Fedora" -hdb fourgig.
Now you can safely save data on this disk, and no matter what state the VM is in, the data will always be safe. But remember not to revert back to a state that was saved before this disk was created; if you do, VirtualBox will simply delete the disk, becase it didn't exist in that state. Also, VirtualBox doesn't currently let you take a snapshot of a VM that has a writethrough disk attached, so you have to unattach a writethough disk before saving the state of the VM and then reattach it. I hope in upcoming VirtualBox versions the presence of a writethrough disk will have no influence on the snapshot process.
Measuring performance
VirtualBox can monitor the performance and resource utilization of both the host and the VM. VBoxManage metrics list
displays all the metrics VirtualBox can monitor for both guest and
host. Some of the metrics it can monitor are CPU/Load/User (percentage
of processor time spent in user mode both by guest and VM), CPU/MHz
(average of current frequency of all processors), RAM/Usage/Free
(physical memory currently available to applications), and
RAM/Usage/Used (size of resident portion of VM process in memory).
VBoxManage metrics setup -period 10 -samples 5 host
activates the process of collecting the data by specifying the interval
after which samples are collected (10 seconds) and how many of them it
should retain (5). You can replace host with the name of the VM if you
want to activate the process for the VM. You can also limit the metrics
monitored by specifying them. For example, to collect processor and
memory information about the Fedora VM, type VBoxManage metrics setup -period 10 -samples 5 "Fedora" CPU/Load/User, RAM/Usage/Used.
The collected data is retrieved with the query command. VBoxManage metrics query host CPU/Load/User
displays the processor information for the host. If you don't mention
the name of the metric, values of all metrics are displayed.
If you wish to observe a continuous stream of metrics, use a collect command such as VBoxManage metrics collect -period 3 -samples 5 "Fedora" CPU/Load/User,RAM/Usage/Used,
which displays the processor and RAM usage for the VM every three
seconds until the process is terminated with the Ctrl-C key combination.
Conclusion
VirtualBox keeps its GUI simple by packing in only the most used functions, and offers complete control to users from the CLI. The CLI is essential for controlling VirtualBox VMs remotely but is also useful for accessing some advanced features locally, such as measuring performance. You can also save yourself some time by using the CLI when performing repetetive operations that require multiple commands. For example, if you are a developer and revert back to a particular state often, you can throw the commands used to revert to a snapshot into a script. All in all, VirtualBox's comprehesive CLI is impressive, and can improve your productivity.
OpenOffice v3.0 sets download record, 80% by Windows users
2008-10-27 10:41:56The newest version of OpenOffice, version 3.0, has set a download record in its first week of availability. Most surprising is the fact that over 80% of downloads were from Windows users.
PC World is reporting that over 3 million downloads were recorded in the first week alone. The demand was so heavy that the download servers were temporarily overwhelmed. With these numbers, OpenOffice is closer to its goal of winning 40 percent of the market share for office software.
While you would think OpenOffice would be most popular among Linux users, the demand for Windows users came as a surprise to many people. The numbers are skewed however, because many Linux users receive their updates from Linux distributors rather than the website. Still, it shows that Microsoft’s Office software is slowly losing its market dominance now that there are suitable alternatives available.
Microsoft isn’t taking the threat of OpenOffice lightly, however, stating that “Microsoft Office is well integrated, well supported and up-to-date with modern workforce requirements like collaboration, which is not always the case with open source alternatives. As a result, most customers will continue to seek the productivity improvements they can get from Office.” In reality, Microsoft really has nothing to worry about- Office is installed on nearly 550 million units. What the future holds is up for discussion.
Some marked improvements with the newest version of OpenOffice include compatibility with Mac OS X, which accounted for some 320,000 downloads in its first week, as well as continued compatibility with many Office extensions. One of the only extensions that cannot be saved natively are OOXML files.
I’ve used OpenOffice for a long time, primarily because I refuse to pay the hefty price just to have Microsoft Office. In the past, it’s always been included on my computers which is fine, but when it comes to a choice between almost identical software, the price was my determining factor.
Category : Open Source Softwares | 0 Comments | 0 Trackbacks


