The Trojan malware arms race

Geekdinner with Dr. Richard Clayton

So after the London Geekdinner with Doctor Richard Clayton from Cambridge University, (you can watch the videos here 1, 2, 3, q&a or listen to the audio in total here.) I had a little wonder around the net to see what I've been missing out on since I moved to GNU/Linux.

And as expected the battle over adware, spyware and trojans has grown into something extremely serious. A friend at work keeps talking about the problems she has with her windows machine. The things she describes sounds like trojan activity but I can never be sure, so I'm not quite at the point of saying to her reinstall Windows fresh again. (We actually rebuilt her machine over the Christmas period already, because things were so bad she couldn't login). However after hearing about this banking trojan on Security Now recently. I'm reconsidering my advice.

Not only does it Trojan.Silentbanker steal your passwords, but it can perform a man in the middle attack on SSL connections, rendering the secure nature of SSL totally useless. It can also modify HTTP and HTML, meaning when you log into your bank and try and pay your bills it will replace your bill details with ones of the trojans chooses. Yes click that button to transfer funds looks legitmate but it will go to a off shorebank you've never heard of. It can steal cookies, certificates, cache passwords and change your DNS settings on the fly. So type in your banks url and the browser gets sent to a site which looks like the banks site but actually its not. To finish off it automaticlly updates its self and for some reason can install it a midi driver which screws around with your sound. Maybe to play the sound “kuchhing” when you finish that hijacked transation?

Technorati Tags: , , , , , , ,

Comments [Comments]
Trackbacks [0]

eMail problems Fixed

If you have emailed me in the last 2 days, I may not have got it because I'm experiencing email issues at the moment. It should get fixed soon, but right now its best to ping me on one of my gmail addresses. End of public broadcast.

This has been fixed, and it wasn't my host's fault. Actually it was me forgetting to set remove the proxy settings. I wish Thunderbird and Firefox would support global/operating system wide proxy settings as its painful to change it multiple times when connecting to the BBC network.

Comments [Comments]
Trackbacks [0]

Gnome Launchy

Pidgin in Gnome Do

So I've wanted something like quicksilver for a while and I found launchy when I was on Windows but I couldn't find anything for gnu/linux. Till today when I found a few. Gnome-Do, Gnome launch box and Katapult.

I stuck with Gnome-Do because its smooth, the plugin support is pretty good and I love the blog of the developer (see quote later). I do kind of wish for the smaller box style of Launchy instead of the boxes of quicksilver but you can't have it all. Oh it would also be great if the background dimmed a little. You know add a little compiz-fusion power to the whole thing.

On a personal note, I have used Mac OS X, FreeBSD, and Linux exclusively for the last seven years. I don’t use Windows because it lowers my quality of life. I haven’t tried Vista. I recently made the switch from OS X to Ubuntu after realizing that all Steve Jobs wants is for you to shut up and buy a new iPod; don’t you dare criticize his taste or the way he treats third-party developers like dirt. Also, I’m fairly confident that propriety software has no future. Yes, I am aware that proprietary software has a multi-trillion dollar past and present, but this implies nothing about the future.

Nice!

Technorati Tags: , , , , ,

Comments [Comments]
Trackbacks [0]

Which VPN questions?

So I've been using Hamachi for my VPN for a while now but since switching to Ubuntu, its felt a bit out of place. First of all installing Hamachi is painful – you must compile it, theres no debs or universe repository support. The basic version is command line only and some people have created a couple of gui's including YAHG, Ghamachi and quamachi. But to be honest even with the guis it sometimes doesn't work as expected. For example right now I'm at my parents house on a broadband connection but can only access one of my 3 machines I have acttached to my Hamachi network. Two of the machines before I left for Christmas failed to connect to the Hamachi Medation server for some reason. Another reason why I'm a little down on Hamachi is the propitery nature of it. I know its been looked at deeply but if there was something like Hamachi which was actually open, I would switch.

So I've looked around and come across quite a few technologies like PPTP, Open VPN, IPsec, FreeSwan and OpenSwan. After reading this very long entry, I started understanding some of the VPN technologies a lot better. So it seems to me that PPTP is Microsoft driven and there is a couple of server versions for Linux. PPTP seems to be old and insecure? IPSec seems to be better but not as good as L2TP with IPsec? FreeSwan has forked into OpenSwan and StrongSwan. I still don't understand the whole Open VPN thing, as it seems to be part of everything rather that a complete solution (do correct me if I'm wrong).

So I looked into OpenSwan and StrongSwan and choose OpenSwan because it gets more mentions online and hey it was clearly documentated on the site – apt-get install openswan. I know strongswan is the same but hey i needed to start somewhere and the windowsmobile tutorial seemed straight forward (if someone knows other reasons why I should use strong over open please do say). Anyway as Hamachi is, I restarted the server after installing openswan to find its not quite started up correctly and I can't remember my standard ip address to talk directly to my smoothwall server. So anyone with some good tips for small time VPN usage let me know.

Technorati Tags: , , , , , , ,

Comments [Comments]
Trackbacks [0]

Ubuntu switch: If you ever want to sleep at night…

…don't try and create samba shares on top of NTFS formatted partitions.

Honestly it's been a ongoing problem for the last few months. My first lot of shares just worked on NTFS so I tried to duplicate the setup over other machines including my laptop and my ubuntu home server. Did it ever work? No. So I've finally juggled the data around and formatted all the drives in my ubuntu home server Ext3 (i was tempted with reiser3 but couldn't see the point) and now finally setup the shares. As expected, with some tweaking of my /etc/fstab file its all working correctly.

So hows the rest of my switch going? Well actually pretty well. I've not switched back into Windows for ages now. I actually deleted the virtualised image I had of Windows XP and although Wine is still installed, I have never really used it beyond seeing if particls will launch. Of course it didnt…

I'm now blogging using QTM and found a couple useful applications including Specto and Timevault. Timevault is like Timemachine on Mac OS 10.5 but without all the fancy crap and it can sync to a network drive. Yes this is very important and I realised after talking to Miles that Timemachine doesn't have this feature. Plus realisticlly Timemachine is actually just a app which allows unlimited undos, not really backup. Timevault on the other hand can back up to a local HD, Firewire drive or Network drive making it useful for real backup and with a VPN coonection very powerful.

My standby problems on my laptop are under control. I have a script which I can active via Natuitus Scripts to shutdown Gnome's Power manager control. Once the Gnome power manager is shutdown, the lid will put the machine to standby no problem. Sometimes I have to watch out because gnome will start the power manager again after a update. I had a problem a while back with my wireless card waking up afterwards but its all sorted now. I've also noticed my battery times have gone up again. Now I'm getting about 3.5 hours out of my 1 year old battery, so I'm not doing too bad. Maybe I'll get another battery later next year as a spare.

Another thing which got fixed recently was my calendaring solution. Now I'm using Google Calendar as a syncing tool between Mozilla lightning and Plaxo. My phone now talks directly to Plaxo and my work outlook calendar.

I'm glad I switched over and my next project is to get rsyncing working well with a couple of cron jobs. So for example my laptop will have the latest podcasts when I pick it up in the mornings. I'll also use it for backups in liu of amanda or bacula. I'm also still using Hamachi for my VPN solution and I'm finding it a pain on Linux, the gui version does crash a bit and the command line gives very little feedback. So I'm thinking about switching to OpenVPN as its got real Linux support and its highly recommended. Lastly I want to switch to Evolution and I need to upgrade my smoothwall server to version 3.0. Who knows a couple more late nights before Christmas and it might happen.

Technorati Tags: , , , , , , , , , , ,

Comments [Comments]
Trackbacks [0]

Finally an half decent blogging app for Linux

So after much searching a decent native blogging application graces the Linux platform. Finally I can get rid of BloGTK and I've now switched to QTM. Its at least has technorati tag support and basic things like undo and redo. QTM is open source and can be made to run on every single platform including even Windows. If your serious about your blogging and don't want to blog in a browser window everyday, give QTM a try. Right time to start some serious blogging…

Technorati Tags: , , , , ,

Comments [Comments]
Trackbacks [0]

Current state of Ubuntu switch over

Well to be honest it was going so well till I upgraded to Ubuntu 7.10. Now I can't put my laptop into standby/suspend or hibernate. This means I need to switch it off everytime I make a trip anywhere longer that a short walk. If I shut the lid, it locks up and I end up having to force the shutdown with the power button. I'm not the only one and there is an official bug been raised. George reckons I have 3 options… Live with it, downgrade or change kernal version. I prefer to keep 7.10 because I actually like some of the new features but hate not being able to suspend.

Another thing broke recently, Hamachi. It was working fine for ages then it broke. Problem is that it will launch as usual but hit the power button and I get a error saying could not log into Hamachi. Yes I have tried different Gui's and from the shell. Whats extra weird is my two other Ubuntu machines are running Hamachi without a problem now.

On the upside, Compiz graphics is seriously tuned now and you can really tweak the settings to your perfect taste now. Tomboy notes has webdav syncing now. I'm already thinking about syncing it with Exist DB (xmldb) which I'm going to run on my workstation in the near future. I have switched my windows home server over to Ubuntu 6.06.1 LTS because I wanted something rock solid. And to be honest its a dual Pentium 3 with tons of hard drive space and memory, it doesn't need 7.x.I Put Webmin on it and everythings working including Hamachi, SSH, Cups (printer server) and Samba. I'm trying out Amanda for backup again, so if anyone from Amanda wouldl like to help out, just comment.

Bluetooth support in 7.10 has come along a lot but the Bluetooth support in KDE seems a lot stronger again. George showed me the lock and unlock feature I've always wanted for my laptop. Unfortually it doesn't seem to see my windows mobile phone, I think maybe because its looking just for phones while my spv comes up as a computer on other scans. Also explains why it can see my work Nokia N80 all the time. Virtual Box is setup and running Windows XP SP3. I tried to run Virtual Dj and it does work but if you put it under any pressure it gets very slow and syncronisation of music becomes a joke. So for my digital djing, I'm going to have to switch back to Windows with a reboot. I've not attempted to put Particls on it but it might work virtualised.

Comments [Comments]
Trackbacks [0]

Beware don’t upgrade to Ubuntu 7.10 yet

So I stupidly upgraded from Ubuntu 7.04 (Feisty) to 7.10 (Gusty). Now I can't hibernate or suspend my laptop, so I have to power it off each time I want to go somewhere else. My Beryl effects I love have gone and been replaced with something. Thunderbird seems to fall over when starting up and RSSOWL beta 6 has stopped working now. Can I fix all of these soon? Maybe not, does anyone know how to downgrade back to 7.04?

Comments [Comments]
Trackbacks [0]

Months into the Ubuntu Switchover, rants and raves

Desktop Screenshot

So its been a while but I'm finally getting my head around the gnu/linux system and environment. There are some great things about the switch which makes me cringe everytime I go back into windows (on my work pc and when I want to read my busted sd card – more on this soon). But there are some bad things too.

First, pieces of pure joy. Since I've lost Outlook I've not really had a way to capture notes quickly. Dave showed me Tomboynotes which is build into Gnome. Tomboynotes is a local wiki but saves everything into a simple set of XML files. So now I have XMLstartlet and CWM installed, so I can apply XML processing and more to the raw xml. Combine this with Cron and Unix Pipes and I'm not even sure where to start because theres so many opptunities. I'm also looking at using one editor for unix because I've tried a couple but I need something serious before I start writing XSL again. Currently I'm using Nano for command line operations and Quanta plus for writing XML. I've downloaded Eclipse now and will try out both eclipse and emacs soon. Dave also alerted me to Conduit which is synchronsation solution for Gnome but looking a little deeper seems to be part of the solution for my pipelines application (which yes I've not talked enough about recently let alone updated for a while). So I'm super excited by this and the ability to pipe and process stuff with XML, including a KDE application called Tellico which also stores it records in XML. So I'm adding my music collection (from Amarok) and movie collection (from Myfilmz). I think Conduit is going to be one of those applications which I use a lot.

Other good stuff which is good is Stereo Bluetooth can be made to work in Linux, I just wish it was simplier. I get Cron now thanks to Kcron and Dave also showed me Anacron which works like Cron but will run tasks if your computer is off when you boot it back up. Glyn also showed me some battery saving technology () which looks like it will make its way into Ubuntu 7.11? On Windows I use to get about 4.5 hours of battery life out of my Dell laptop. I'm getting close to that on Ubuntu now but I reckon there is room for improvement, so this little app could help a lot. Samba is coming along, and I've now setup Hamachi ip addresses to shares in /etc/fstab. This means if I'm on my own network or on a internet connection I can still mount shares and its all secure. On the moan side, I still can't do real authentication with Samba for some weird reason. I still don't have a decent blogging application and if I switch my wireless card off, I have to reboot the whole machine to switch it back on again! Oh and Wireless and Bluetooth are lumped together it would seem and I can't find where to just turn off Bluetooth in Ubuntu. Not great for saving power. RSSowl is good but I'm still missing lots of features which could make it great. For example I now have a cron to grab my OPML (hopefully soon my APML too) from Bloglines. I was hoping that I could automaticlly update RSSowl with new subscriptions by over writing a bookmarks file but I can't find such a thing and the feature from RSSowl 1.x of automatic subscribing folders isn't in the new version. Last but not so important is, I still can't get the Wiimote to connect to the computer. Oh and I still need a decent piece of DJ software for Linux, I have to reboot into Windows to use Virtual DJ right now.

So generally things are better and I'm glad I switched to Linux over Vista or bought a Mac. Maybe you could be better off too?

Comments [Comments]
Trackbacks [0]

What kind of Home Server would you choose?

Windows home server - now its easy to keep and share documents, photos, videos and music

So I heard Windows Home Server is now ready to ship according to Paul Thurrott. As some of you already know I'm running pretty much every machine on my network on gnu/linux except my home server. Its strange, my laptop, my workstation and even my firewall/router is running Smoothwall. But the server which holds terabytes of storage is actually running a beta copy of Windows Home server. But my reason for sticking with Windows Home server have finally started to come undone. A friend sent me a link to a few projects including the Ubuntu Home Server Project and Linux home server. This all started by George Ou and his discussions about the difference between the two. George has added updates to the main post and people have gone nuts over the comments (260 to date). There's even the poll which has 2600+ votes is 56% towards linux or freebsd over windows home server. So after some more reading I'm thinking now has come the time to either upgrade or switch over.

Now I wish the switch was that easy. First up I will need to unmount all the harddrives from the Windows storage array and make sure my data is ok. Then I need to take the machine down from the loft and remove windows before putting on Linux. Before going back in the loft I need to make sure I can get back into the machine even when there is a power outage or some kind of error (its a dell with boot after suspend, so it should be ok). But it will be all worth it if I only need to go up to the loft to add addional storage.

So what options do I have? Well I was hoping the Ubuntu Home Server Project would have files or a beta to play with, but not yet. So i'm thinking keep it simple. Xubuntu or Ubuntu desktop version with some well thought-out software. Hey if it works out, maybe I could feed into the process of the Ubuntu Home server project? I was considering the server version but I'm thinking although I will run it headless most of the time, it would be good to be able to run Xwindow for VNC/RDP access. For Backup I'm going to try Amanda again or Bacula. If worst comes to worst, I now got the hang of the Cron and Rsync, I could just use that. On the storage front, I have no idea how to setup a distributed file system like windows home server on linux, but I've done little research and I'm sure someone knows. Sharing is not a problem because Samba shares can be installed easily enough, I also don't really need Universal Plug n Play, specially if I can get Daap working in Amarok or Rhythmbox working. Ideally I would love to have some simple web front end, but once again this is going to take some more research.

Comments [Comments]
Trackbacks [0]

What do you do when Gnome Display Manager dies? Fixed!

My Ubuntu install is working again thanks to Jon Callas from PGP. So I can finally bring you this entry from the Airplane trip 2 days ago. The mount command using the remount flag really made a huge difference. Otherwise I would still be running Windows!

Right so I'm in Boston after a nice but late flight. Get through customs, jump in the first cab which takes me to my Hotel (Westin Seaport) where I open my laptop to find that Gnome Display Bloody Manager fails. Now I can't get into my gnu/linux setup. Luckly I still have Windows on dual boot, so I can use the laptop and get on with stuff. But it seems a little setting in /etc/fstab which was recommended by Linux Format magazine which I bought for the portions of the flight when your not allowed to use electorinic equipment, has caused the root drive to be read only and hence why Gnome won't start. The problem is that I have no way to change this without (in my mind) booting into Linux with a live CD and then making the changes? If someone else knows a way to change /etc/fstab from windows or the recovery command line, drop me a email or comment. Damm you linux format and your No more disk thrashing which recommended adding this to /etc/fstab – defaults,noatime,data=writeback.

Right its 6:45am and I want to upload some pictures of Boston from yesterday and then head out for a day packed solid for the conference I'm at. Oh can I say I download the live Ubuntu CD already, I just need to find somewhere to buy blank CD-Rs, came down at 724.3kB/s from MIT over the hotels non-free (10 dollars per day) ethernet connection. So yes any tips on where I can quickly nip out and get a blank CD would be useful too. I'll quickly blog my post from the airplane too. Oh but I can't because its in my /home/ian directory! Damm it

Comments [Comments]
Trackbacks [0]

The perfect RSS aggregator on any platform

Under tons of pressure for my comments about the lack of a decent RSS reader on GNU/Linux systems. I've decided to list what makes the perfect RSS aggregator client in my head. A lot of the features I want will be specific and maybe out of scope for a lot of people, but its certainly something to consider as normal rss users turn into power or advanced users. I'm also going to try and avoid describing something as advanced as Particls which is really a desktop attention engine, but I'll add some key elements I do like.

  • APML support, I want to rank, sort and filter based on my own explict tags and what the computer thinks I might like (implicit).
  • If APML isn't supported, the application should support search/filter tags. Those tags should attract posts which are related to that tag. So when I click on Dell, I should get all posts about Dell no matter which category its in.
  • Should be able to handle 500 RSS feeds without paging like mad or using 100meg plus. The amount of RSS readers which hang after importing 350 is untrue.
  • Import should support Bloglines, Newsgator and Google reader syncing.
  • It should also support FTP, Webdav and Samba syncing of files, like Feed Demon
  • When I click on a category of feeds, it should display an aggregated view of all the feeds below it in date or feed order
  • The ability to blog, post, add to delicious, etc from the post with a couple of clicks
  • Software should be Free as in Freedom or at least Open Source
  • The abaility to add tags and notes to items and feeds as a whole, then be
  • Support for XSL transfoms on the actual its display pane. If not XSL, CSS at least.
  • Support for Microformats, eRDF and RDFa
  • Extention support like Firefox, maybe XUL support would bemazing
  • Support for assignable keyboard shortcuts
  • Export support for OPML 1.1
  • Ability to export or save current aggregated view without the style (XML/RSS output)
  • Support for wfw:Comments, so you can comment back directly in your own RSS reader instead of using the browser
  • Support for Gecko engine for rendering/display
  • Global search across all feeds and per catergory
  • Support Attachments
  • Automatic updates
  • Support for One/Two/Three Panel support
  • Support for One and Two click processing
  • Reminder/Timed tags, so it alerts you that you should be looking at it at certain time
  • Definable coloured labels for tags and items. As default tags will get a random colour
  • Support for Regular Expressions
  • Support for Xpath queries
  • Print support, PDF support too would be nice
  • Offline support with caching of items and images up to a set amount
  • Offline rules, so you can specifiy certain categories or feeds to be cached with or without images
  • Support for different backends including SQLite, MySql, etc. Plus support for XMLDB
  • Bluetooth OBEX push for pushing items, lists or categories

I think that will do for now…

Comments [Comments]
Trackbacks [0]

Current state of my GNU/Linux switch over

So its been about 2 months since I switched over to Ubuntu GNU/Linux on my Dell Laptop. Things have been a lot better over time and generally day to day I'm having no problems. Its only when I go to do something different is when I get the problems.

First problem, external display from the VGA port. During BarCampBrighton some of the projectors didn't like my laptop's native rez of 1280×800 and would fail to display anything at all. What made things frustrating was the fact I couldn't switch down to 1024×768 because my laptop driver seems to give me only one option.

I stilll have yet to find a decent RSS reader except the preview version of RSS OWL which actually works better that previous versions. I usually keep an eye on the heap memory and it tends to stay within the 40meg allocated memory. So for now its my choice for RSS reading

Blogging from a clinet under Ubuntu is working due to BloGTK but the general expeience is very basic and I closer to W.Blogger that Ecto. If there is a more rich feature blgging application/client do drop me a comment. I miss stuff like being able to update posts and read posts offline.

Battery life has imporved over the months. When I first switched over, it would run for about 4hours on batteries but now its up to 5hours (about the same as I would get out of Windows on the same machine). Hibernate support still fails but suspend now works correctly all the time. Networking still needs to be restarted when I switch on each time but it seems more consistent.

I've still not found something to totally replace outlook. Currently I'm using Plaxo online for most of my PIM type stuff. This is ok but sometimes when I'm offline its frustrating to look at Plaxo and hope I left the page on the calendar section.

I'm still looking to sync my phone with my laptop but I'm having very little sucess with this. I've seen mentions of Opensync but it doesn't work for myself. On the mobile phone front, I've tried to connect my nokia N80 to the laptop using this script but its not worked out so far. I've not even attempted this on my Windows Mobile phone.

Backup and Syncing is totally broken for me. I want to do simple things like backup my laptop to my storage server over samba but unison and rsync don't like samba! This is insane and I've tried many ways to trick it into thinking a samba share is actually a mounted drive but it doesn't work. There seems to be a solution here.I've yet to play with Baclua and Amanda (yes that guy from Amanda I will be contacting you very soon. I'm also looking for some way to generic.

Ok last few things, I've dumped Madma and Xmms in favour of Amarok which works so well now it supports Mpeg3! For ages I wondered why I got no sounds and only in later versions does it tell you your missing the codec in question, before that you were left to work it out alone. Lastly Bluetooth is working but I've not got the Wiimote talking correctly and I'm really missing GlovePIE. And finally to finish off for now. My logtech Camera still doesn't work and I can't find drivers for it anywhere.

Comments [Comments]
Trackbacks [0]

Give me a decent RSS reader on GNU/Linux please

This quote from the Greatnews Forum sums up my feelings about RSS readers on Linux. I'm actually tempted to run a cut down version of Windows using VMwareplayer and just Greatnews.

Annoyed with some of Microsoft's policies regarding their users, and disgusted with the looks and ridiculous size of Windows Vista, I've been slowly working on the switch from MS' operating system to Linux (Ubuntu 6.06, to be more precise).

So far, the experience has been great but there is one application that keeps me going back to Windows, and it is not Adobe Photoshop. It turns out that not only there is no RSS reader even remotely alike GreatNews on the penguin, there doesn't seem to be any decent reader at all. I've been trying to make do with RSS Owl, but that 3-pane e-mail client GUI just won't do, and the fact that it doesn't archive posts is absolutely exasperating.

My first impulse, of course, would be to suggest a Linux version of GreatNews. But I don't think that's a reasonable idea, at least in the near future. So, the next best thing I can do is try to run it with something like Wine.

I'm currently using the preview version of RSSOwl 2.0 simply because it has the advance functionality, handles 400 feeds ok but geez how memory does it want to eat? Yes I know some of you will say what about AKagregator, Liferea, etc, etc. Trust me I've installed them all and tried them out. Most crash when I try and load in a 400 feed OPML file or take forever to jump feed to feed. I even went through this frustration with a couple of friends and they were lost for words. Even Mark Pilgrims list of essential software for Linux does not have a RSS reader on it! I'm sorry but this is bad and very sad. I got use to using Particls but can live without it for a while, till I find a way of getting the benefit of my APML file in another RSS reader, or they release a Linux version? Linux is also missing simple things like wheres the slick RSS screensaver? Windows and Mac have plenty, including some opensource versions which I'm sure could be ported if needed.

My plead to the Linux world is get clued up about RSS on the desktop, its not going away and actually for some like myself prefered to reading web pages. Now can someone tell me I'm very wrong and debunk what I'm saying? Please…

Comments [Comments]
Trackbacks [0]