Tech/Computer advice from me

Happy hour starts in 5 minutes
people wonder why so much time, money, and resources are dedicated to making this stuff...

because it works.

some of the highest up people in some important companies/government agencies have bee fooled into giving over full access to their network because of this crap.
 
Ubuntu doesn't seem to come with any System Tools or Utilities, such as Disk Cleanup, etc.
The only method of cleanup I can find, is clearing the history in Firefox.
There has to be more, because surely it must need some type of system maintenance or cleanup, doesn't it ?
 
tshile said:
Thanks for the post al. Great read, lots to think about :)
Click to expand...

as noted: I've learned a lot from you. when it comes to IT and especially security...we're all part of a larger community and work best when teaming. man....just wait until "everything IP" becomes a total reality!

as you know - especially you!!! - run enough searches and you'll find great stuff that answers the mail.
 
You know, there's a huge part of me that looks at the bottom layers of the OSI model and says - yeah, no thanks.

Then I read that post of yours and think - man, it'd be neat to have to solve those problems for a living.
 
tshile said:
You know, there's a huge part of me that looks at the bottom layers of the OSI model and says - yeah, no thanks.

Then I read that post of yours and think - man, it'd be neat to have to solve those problems for a living.
Click to expand...

you're on the right path. at least from a security pov...a lot of the action is headed to the application layer. take your AI interests and couple them to big data/data science. not only will you be well paid :) but you will increasingly be at the center of everything IT! like or not...what the NSA (and Google, and Verizon, and Yahoo, and Facebook, and......) received unwanted attention for recently is where it's all headed.
 
T...haven't forgotten your question on DNSSec....haven't gotten around to remembering/updating my knowledge on that technology. some broader thoughts in the interim. soooooo....

- this is about a whole suite of technologies (when viewed just from web interface pov)

. browser security
. OS security
. resolver security
. DNS server security
. DNS protocol security
. network security
. communications protocols (e.g., e-mail, IM) that serve as vehicles for inserting malicious sw

- browser security has been getting better but still has some fundamental issues (CT probably knows a lot more about this than me)

- primary browser security (vis web page objects read/write to objects contained on pages from other domains) is the Same Origin policy. the design and implementation has a number of weaknesses that, simplifying, boil down to the fact that DNS, by design, can resolve a single host name to multiple IPs. there are multiple attacks at different layers in the stack that take advantage of this. your favorite, for example: Flash modules (through its scripting language) can make dynamic raw socket calls that implement same origin by a policy decision made by the DESTINATION server. the problem is that same origin policies are verified by host name....so IP changes aren't checked (there are fixes for this).

A key ingredient in all of this....you and your bosses know...is DNS server security. like I said...my attention is focused elsewhere at the moment...but I'll take a look. Immediate rec is that all internal client DNS requests be funneled through an internal DNS server/proxy. That way at least all the flows can be monitored and whit/black lists applied. This set-up van be hacked through the client by the same mechanism of DNS rebinding....but it's still better. Most orgs then build a split DNS architecture so that the internal server isn't directly accessible either.

I know you know all this. Putting it out so you and others can shoot it down or add to it!

Rogue/compromised DNS servers...yup...key weakness in the whole architecture. poor web app design...cough cough....another part of the problem.
 
Last edited by a moderator:
Fear The Spear said:
Ubuntu doesn't seem to come with any System Tools or Utilities, such as Disk Cleanup, etc.
The only method of cleanup I can find, is clearing the history in Firefox.
There has to be more, because surely it must need some type of system maintenance or cleanup, doesn't it ?
Click to expand...

Bleachbit program from the Ubuntu Software Download Center looks like a good solution
 
Last edited:
I used to use the CLI, and I would type in autoremove, then autoclean.

The autoremove command would remove any and all unused and obsolete software, whereas autoclean would clean out any leftover bit and pieces from installing/uninstalling software.
 
SkinnedAussie said:
I used to use the CLI, and I would type in autoremove, then autoclean.

The autoremove command would remove any and all unused and obsolete software, whereas autoclean would clean out any leftover bit and pieces from installing/uninstalling software.
Click to expand...

Could you tell me the complete command for autoremove and autoclean ?
I know there's more to type than just each of those words, but I'm not sure of the whole command, to run them.
 
You have to use sudo before every command. To make sure your system has autoclean and autoremove available, you need to type in sudo apt get autoclean, then click enter, then follow up with sudo apt get autoremove [enter]. you might be asked for username and password as this is an admin task. If you get an error message, you might have to make them available from the depositories.

If available to use, just type in sudo autoremove [enter], then sudo autoclean [enter].

If you have any problems, refer to the help section, or you can use the wiki how-to that is available.
 
I signed into a Ya-who email account I've had over a decade, and ALL of the emails in my inbox have disappeared that were prior to April of this year. That's thousands of emails, and years of emails - suddenly gone. Never heard of this issue. Googled it and people are just saying, "someone has your password, and got into your account, so change your password".
But I know that's not what's happening.
I don't think someone would go in just select every email prior to April of this year. Just doesn't sound right
Anyone know what the heck happened, or heard anything like this ?
 
Happened to me, too. Emails I had in special folders deleted and nobody to answer why.

My password is pretty complex and I don't think hacking was my issue.
 
I dont have Yawho

do you mean Yahoo?
 
its all good...yeah, I use Yahoo as well. Happened on both of my accounts.
 
A lot has changed at Yahoo over the last few months, and the email system was one of them. Fortunately, I just use ymail as my spam / sign up address so nothing of importance gets sent there (so it is no skin off my nose if they all get deleted), but people have had business emails deleted which to me, is their own fault. If something is important, you don't keep it on a web based email client!

I use my ISP supplied (and secure) email address for all important incoming mail. I have MailWasher display it BEFORE I download it from the server. I can read everything using MW, then delete what is crap. I then download what I want to keep to my Thunderbird client. Anything of importance then gets saved to a folder on my HDD (not inside the email client), and anything of REAL importance gets saved to an external drive, which gets backed up once a week, along with my contact list.

Everyone knows the dangers associated with computers these days, and there is no excuse for not ensuring your data is safe. Don't assume software will do it, or some other form will do it, it is up to the individual.
 
You must log in or register to reply here.

Users Who Are Viewing This Thread (Total: 0, Members: 0, Guests: 0)

Help Users

You haven't joined any rooms.

    You haven't joined any rooms.
    Top