Date: 08/20/05     Keywords: technology, security, virus

I just got my associate's in science for computer network technology. I'm working on my A+ certification. I would like to finish up with a bachelor's for network security. I would love to do cyber crimes to hunt down pedophiles and hackers that put out viruses. I've been looking into many schools that offers that online. But I'm not sure how seriously employers would take a degree from an online school. Has anyone gotten a degree in network security on here? and if so, which school did you get it from? or if you know of any good schools that are well respected. Let me know. Thanks!

Source: http://www.livejournal.com/community/itprofessionals/18443.html

Date: 08/19/05     Keywords: no keywords

am i the ONLY one here who is sitting back, sipping my fifth cup of coffee, and laughing quietly as i read report after report and release after release of the new win2k worms running (apparently, although i doubt it's so) rampant?

Am i the ONLY one sitting on a home Lan of 6 win2000 computers and one win2003 server that were all FULLY PATCHED the DAY the patch came out a couple of weeks ago and thinking that the actual fault of these infections lies purely with the sysadmins and other such people that did NOT patch their win2k computers immediately or as soon as possible, given the increasingly small window of time between an vulnerability and an exploit?

news flash to customers, patch your damned machines, cause you aren't going to get any sympathy from ME when you get hit by an exploit that was patched weeks earlier.

Valis

Source: http://www.livejournal.com/community/itprofessionals/17983.html

Date: 08/17/05     Keywords: no keywords

I know this may be a long shot, since the AS/400 administrator seems to be a dying breed..

But I've got an AS/400 system - a 9406 170 model. The system is failing with the SRC 10112551

As far as googling can get me leads me to believe its a power problem with some piece of hardware in the box - but thats as far as I can get.

IBM wants a stupid amount of money to give me even telephone support on this matter - even though I suspect the problem to be quite simple in nature.

So, does anyone have even a modicum of AS/400 experience that might know what that SRC represents?

Thanks
Jim

Source: http://www.livejournal.com/community/itprofessionals/17822.html

Date: 08/17/05     Keywords: security, virus, microsoft

Worm strikes down Windows 2000 systems
Problems reported in three continents




WASHINGTON (CNN) -- A fast-moving computer worm Tuesday
attackedcomputer systems using Microsoft operating systems, shutting down
computers in the United States, Germany and Asia.

Among those hit were offices on Capitol Hill, which is in the midst of
August recess, and media organizations, including CNN, ABC and The New York
Times. The Caterpillar Co. in Peoria, Illinois, reportedly also had
problems.

A small number of computers in an administrative office at San
Francisco International Airport also crashed, but they were not essential to
the airport's operation, spokesman Mike McCarron said.

The FBI said the computer problems did not appear to be part of any
widespread attack.

While the worm affects primarily Windows 2000, it also can affect some
early versions of Microsoft XP, said Johannes Ullrich, director of the Sans
Institute, a network security firm based in Jacksonville, Florida.

Symptoms include the repeated shutdown and rebooting of a computer.

Microsoft has a downloadable patch on its security homepage,
Microsoft.com/security, a company spokesperson said. The spokesperson told
CNN that Microsoft would not estimate how many users have been affected and
described the problem as low-impact.

Lysa Myers, a virus researcher for the computer security firm McAfee,
Inc., said the worm exploits a vulnerability in Microsoft's plug-and-play
service. "How it's spreading is it's looking for machines that are unpatched
and running itself," she said.

What was causing the damage was unclear, although experts pointed to a
new worm called worm-rbot.cbq.

David Perry of Trend Micro, an Internet monitoring firm, said the
latest worm may have been derived from the Zotob worm, which was first
reported over the weekend.

Ullrich, of the Sans Institute, said Zotob "will connect to a control
server to ask for instructions. It scans network neighborhoods and tries to
infect them, as well."

Typically, the worm enters a system via a laptop connected to
unsecured networks, Ullrich said. "This laptop will infect your systems from
the inside."

Several versions of the worm have been released, some as late as
Tuesday, he said.

Around 5 p.m. problems began at CNN facilities in New York and Atlanta
before being cleared up about 90 minutes later.

The New York Times also was able to bring its systems back up, and
"newspaper production will not be affected," spokeswoman Kathy Park said.

The White House said it did not have reports of computer problems.

At any given time there are thousands of computer worms and viruses in
existence.

So far, the impact has not been as great as the 2003 Blaster virus
attack, said Jeff Havrila, a technical analyst with the U.S. Computer
Emergency Readiness Team, a coalition of public and private groups that
combats computer attacks.

He noted that improved firewalls and faster patches may have limited
the worm's spread.

He also said it is unclear how long the worm may take to run its
course, noting that many people are away on summer vacation and may be
affected only when they return.

Source: http://www.livejournal.com/community/itprofessionals/17559.html

Date: 08/17/05     Keywords: software, security

CNN Reports:
A worm shut down computers running Windows 2000 software across the United States. More soon.

Zotob seems to only affect Win 2000 but it requires port 445 to be exposed to the Internet.. could that many Win2k machines really be that exposed?

xposted to itsecurity

Source: http://www.livejournal.com/community/itprofessionals/17180.html

Date: 08/16/05     Keywords: no keywords

Hi,

Are there any possibilities of using GPMC to set a schedule for a batch script to run at a specified time for all the PCs in an AD domain?

cheers

Source: http://www.livejournal.com/community/itprofessionals/17145.html

Date: 08/05/05     Keywords: php, mysql, css, xml, sql, java, web

ILoveJackDaniels.com has some really great cheat sheets that you may find handy.



He just added some javascript cheats which includes XMLHTTPRequest cheats, function cheats, etc.

http://www.ilovejackdaniels.com/cheat-sheets/

He has Javascript cheats, PHP cheats, RGB Hex Color chart, mySQL, CSS, mod_rewrite, regular expressions and others.

x-posted to webdev.

ps. Are any of you from the Bay Area?

Source: http://www.livejournal.com/community/itprofessionals/16669.html

Date: 07/25/05     Keywords: no keywords

I can't find it anywhere.
Veritas BackupExec 10.0 running on a Windows XP Pro PC backing up several servers W2K and W2K3, Notes, Exchange and Oracle. SCSI Attached Spectralogic Tape Library (AIT4 15 slot changer one tape drive). Worked fine until last week, no precipitating changes that I can find. It appears to have backed up all the data and is crapping out on the verify. The link at the end of the message goes to a veritas support page that says "I don't know what the hell this is!", the hex error code does not return any results searching their knowledgebase, nor does the exact text.

Job ended: Monday, July 25, 2005 at 6:03:15 AM
Completed status: Failed
Final error: 0xe00084bf - A restore Job is already in progress. Rerun your job, after the current job has finished.
Final error category: Job Errors

For additional information regarding this error refer to link V-79-57344-33983

Source: http://www.livejournal.com/community/itprofessionals/16639.html

Date: 07/24/05     Keywords: no keywords

Please delete this if it is not allowed.

My IT Consulting Firm is looking for someone with 5+ years of experience with MS Exchange in a hosted environment. We are desperate, but we are high end so we can't just take anyone. They have to be good and also not a total dickhead. The company is in the long-term looking for an in-house person (someone who is in or can relocate to Los Angeles), as we've been having bad luck with consultants, but will make do temporarily with any qualified person anywhere who will telecommute and get the work done.

Basically, if you are looking for some temporary extra money (the hours are v. flexible) please apply.
Or if you are in LA and want a great permanent job, please apply.

Please send resumes in pdf format to eso@withmomentum.com or fax to 310.470.9176.

Source: http://www.livejournal.com/community/itprofessionals/16290.html

Date: 07/24/05     Keywords: sql, java

Has anyone read/got Head First Design Patterns? What did you think? I'm considering getting it.

I'm not a hard core coder myself right now (I have been in the past but I was working strictly procedurally, this was before OOP really took off), in my job I just occasionally have to write the odd bit of code, generally to link a couple of existing apps together or to pull some data out of one app and make it ready for loading into another app or a reporting tool. I also sometimes have to talk to developers and think it would be helpful to get more of a grip on what they are talking about. I principally use PL/SQL or C/C++ but lately I've started to learn Java and it looks like I'm going to have to learn Perl and/or Python for a project that's coming up.

Do you think that book would be any use for me? Or should I be looking for something a bit more basic.

Source: http://www.livejournal.com/community/itprofessionals/16080.html

Date: 07/23/05     Keywords: software, asp, web, hosting

I had this conversation with FastHosts. Clearly they are either refusing to acknowledge my problem or I am being a bit thick. Please help me someone. I have included the conversation below, with my questions and responses in bold:

Here is an odd problem. When I run my ASP.Net on any server it works. When I run it on my fasthost server everything works except session variables do not persist across pages. Please resolve! It is probably an IIS setting that I can-not set programmatically.

Can you provide further information, including full replication steps on how we can see the fact that the session variables are being lost.

http://www.damn-them.com/login.aspx

username = tester@pcarney.me.uk
password = fish
then click "click here to submit details".

It sets the session variable "level" to 1 everywhere else but on fasthosts, which means that the page redirects to nothing I can use on your server. As I've said, It is MOST probably an IIS setting that I cannot change programmatically. Please resolve as this call should NOT be closed.

The domain is incorrectly configured, as the path to the site appears to be C:\Inetpub\wwwroot which is incorrect on our servers. This should be e:\domains\d\damn-them.com\user\htdocs

Please configure it correctly such that I might use session variables. It is after all a standard feature of ASP.

The problem is with your scripts - please re-configure them.

I do not use that anywhere in my scripts, compile or otherwise. Please give me access to the domain mapping so I might set it myself.

I have no idea unfortunately. I did take a look at the web.config file but couldn't see anything in there, I would advise you to contact the devel-opers of the software.

Here is the debug information:

Row handle is invalid.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Data.OleDb.OleDbException: Row handle is in-valid.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[OleDbException (0x80040e04): Row handle is invalid.]
System.Data.OleDb.OleDbDataReader.ProcessResults(Int32 hr) +63
System.Data.OleDb.OleDbDataReader.GetRowDataFromHandle() +105
System.Data.OleDb.OleDbDataReader.FindValueBinding(Int32 index) +34
System.Data.OleDb.OleDbDataReader.PeekValueBinding(Int32 index) +16
System.Data.OleDb.OleDbDataReader.GetValue(Int32 ordinal) +40
System.Data.OleDb.OleDbDataReader.get_Item(String name) +20
damn_them.CDataHandler.DoGetValue(String pQueryString, String pField-Name) in C:\Inetpub\wwwroot\CDataHandler.vb:90
damn_them.CRoutines.IsValidLogin(String ptxtRequestEmail, String ptxtPassword) in C:\Inetpub\wwwroot\CQueries.vb:26
damn_them.login.Button1_Click(Object sender, EventArgs e) in C:\Inetpub\wwwroot\login.aspx.vb:53
System.Web.UI.WebControls.Button.OnClick(EventArgs e) +108
Sys-tem.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +57
System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sour-ceControl, String eventArgument) +18
System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +33
System.Web.UI.Page.ProcessRequestMain() +1292

The path to your web folder is e:\domains\d\damn-them.com\user\htdocs. I would recommend you rebuild your application as this is clearly a scripting error.

C:\Inetpub\wwwroot\ is the path on the server it was build and it is pro-duced in line with the DLL and symbol debugging code. It does NOT pertain to physical files. I would like someone else to check my IIS settings please.

Unfortunately, IIS settings on the Shared Hosting servers are set up correctly, and cannot be changed. The path within your .Net Application will need to be updated if it is to be used on the Fasthosts servers.

I remain wholly unconvinced considering that the debug information re-ports symbolic debugging information at the time of compilation. Is there anyone there who actually knows about ASP.Net 1.1 and the necessary configuration for IIS?

Source: http://www.livejournal.com/community/itprofessionals/15789.html

Date: 07/18/05     Keywords: asp

Interesting read, a good article explaining WinDoz Patching - with some good hints for some of the normal problems faced with this issue:

http://redmondmag.com/features/print.asp?EditorialsID=488

Source: http://www.livejournal.com/community/itprofessionals/15541.html

Date: 07/11/05     Keywords: technology

This is a play on the whole IT vs Marketing Department thing that many of us are familiar with...

A man is flying in a hot air balloon and realizes he is lost. He reduces height and spots a man down below. He lowers the balloon further and shouts: "Excuse me, can you tell me where I am?"

The man below says: "yes you're in a hot air balloon, hovering 30 feet above this field."

"You must work in Information Technology" says the balloonist.

"I do" replies the man. "How did you know."

"Well" says the balloonist, "everything you have told me is technically correct, but it's no use to anyone."

The man below says "you must work in business."

"I do" replies the balloonist, "but how did you know?"

"Well", says the man, "you don't know where you are, or where you're going, but you expect me to be able to help. You're in the same position you were before we met, but now it's my fault."

Source: http://www.livejournal.com/community/itprofessionals/15338.html

Date: 07/01/05     Keywords: no keywords

I've been looking all over the net for info on this and have come up blank.

I'm hoping you guys could assist =)

I have a client who has a Sonicwall - Sonicwall VPN gateway. I've made sure that all NetBios traffic is allowed through both ends of the gateway.

One of the issues with this link, is that one of the end points of the tunnel is on a home class DSL line, with only 128kbps upload max.
So its expected that speeds aren't going to be great.

However, this machine takes FOREVER to authenticate to the AD server when the syste is first logged into in the morning.

Is this solely because of the poor upload speed, or is there something I am missing?

I do see some weird DNS errors in the computer in questions logs. Is there something in particular I need to do either on the DNS server or on the firewalls to properlly allow DNS updates to occur over a VPN link?

Is it possible that the end point computer isn't registering with the DNS/AD server because of the difference in subnets?

Any help or info would be appreciated.

Source: http://www.livejournal.com/community/itprofessionals/14874.html

Date: 06/28/05     Keywords: no keywords

I've been told that a job in my home town will be opening up in a few years and that in order to be qualified for it, I would need (in addition to MCSE and CCNA) at least an Associates degree, preferably a Bachelors.

I don't have the time, nor the desire, to go to college at this point.  So I'm looking for alternate schooling options, such as online classes.  One school, in particular, that I've been looking at is the University of Phoenix Online.

I wonder if anybody here has had any experience with this or any other online degree program and can tell me how viable an option online schooling is.

Source: http://www.livejournal.com/community/itprofessionals/14671.html

Date: 06/24/05     Keywords: security

theSummit 2005 - Thursday July 28, 2005 - Las Vegas


At the end of Black Hat and the beginning of DEFCON this year is theSummit 2005 - bringing together DEFCON & Black Hat speakers from past/present, as well as well known names in the computer security world. We all come together in a small, private venue for the evening summit to meet and discuss the important topics and socialize.

Note that there will be no more than 200 tickets sold (including featured guests), and all proceeds go to the Electronic Frontier Foundation [http://www.eff.org] with the sponsor covering event overhead.

theSummit is our gathering of BlackHat / DefCon speakers and big thinkers in the Information Security realm. Anyone interested in supporting the EFF, are highly encouraged to attend; meet with fellow Information security professionals, and talk with big thinkers from the Information security world in a more private and informal setting. Too many times people want to ask questions, or have ideas that cannot make it to the big thinkers. This is either because of time conflicts or they are nervous to come up and talk. This event plans to pull out the stops, and allow the free form of conversation to flow.

The Electronic Frontier Foundation [http://www.eff.org] is a nonprofit group of passionate people — lawyers, technologists, volunteers, and visionaries — working to protect our digital rights.

Where: Ice House Lounge, 650 S. Main Street, Las Vegas, Nevada
When: Thursday July 28, 2005, 9:00PM - 12:00AM
Tickets: $30 (pre-sale) $40 (at the door, if available)
All Ages welcomed!

For more information, and to purchase tickets for the event:
http://www.dc702summit.org/home/

Event is sponsored by the Hackajar Foundation, and by the members of DEFCON 702.

We all hope to see you there!

Source: http://www.livejournal.com/community/itprofessionals/14486.html

Date: 06/16/05     Keywords: web

I'm so confused! Part of this case study includes a NAT server and the only mention I've seen of it in the modules was that it's usually installed on routers. The assignment lists it as one of the servers to be dealt with.

They have separate servers for Inventory, Equipment, Bug Tracking, Contact Management, Internal Website, Print Server, Email, External website, DNS and NAT.

I've got six departments and a print server that use one or more of the different servers. and because it's a class C address serving them all, I have to figure out how to give those who need them separate IP addresses. That's fine. I can do that.

The senior lab aide told me each department would need a separate DHCP server of their own. I took her word for it. I'm a bit overwhelmed by this assignment.

I'm thinking of using routers to attach the relevant servers to the individual DHCP servers. The few servers that need internet access mixed with the DNS and NAT servers are what is confusing me.

The servers needing internet access are:
Bug Tracking
Email
External Website
DNS
NAT

Do I attach the DNS and NAT to a router and the other servers to a second router attached to DNS and NAT?

Or do I just attach the DNS server to the modem and use a router from it for the other servers?

Or do connect all the servers needing access to the router that's attached to the modem?


For the print server, do I actually need a separate DHCP server? That seems silly.

Source: http://www.livejournal.com/community/itprofessionals/14233.html

Date: 06/16/05     Keywords: no keywords

so, has anyone ever had the batteries of their UPS swell up, to the point they can't be removed?

I'm trying to change the batteries on an APC SU2200RMXL - and the damn things won't come out.

After calling APC this seems like a common issue - her answer was "if they are swollen and won't come out you have to replace the unit" - which sounds like a cop out.

So has anyone gotten the dang things to come out when they are in this condition?

Source: http://www.livejournal.com/community/itprofessionals/13906.html

Date: 06/12/05     Keywords: html, asp

Anyone considering moving to ASP.Net 2005 Beta 2 may want to read this: http://www.damn-them.com/it/2005/06/transition-to-aspnet-2005-beta-2.html

(Cross Posted)

Source: http://www.livejournal.com/community/itprofessionals/13823.html

Date: 06/11/05     Keywords: no keywords

Hi all,

I am wondering if anyone has any recomendations for an intro to python book for a novice at best programmer.. any recomendations of a quick and dirty VB/VBS book would be good as well... I am looking at scripting an an ESRI ArcGIS environment. I have posed the same question over in gis, but I wanted to see if you guys had more in depth recomendations than books that relate to python and VB beyond the narrowly tailored GIS books

also, if you were to develop a GUI frontend for DB data entry with multiple fields, what would you code it in (remember I am a crappy programmer, so I am guessing VB is my best route?)

Source: http://www.livejournal.com/community/itprofessionals/13545.html