16 April 2011

Virtualization Software

Virtualization software allows a single host computer to create and run one or more virtual environments. Virtualisation software is most often used to emulate a complete computer system in order to allow a guest operating system to be run, for example allowing Linux to run as a guest on top of a PC that is natively running a Microsoft Windows operating system. Storage virtualization refers to the process of abstracting logical storage from physical storage.

Virtualization Software :
  1. OpenVZ is an operating system-level virtualization technology based on the Linux kernel and operating system. This is OSS.
  2. Xen is a virtual machine monitor for 32 / 64 bit Intel / AMD (IA 64) and PowerPC 970 architectures. It allows several guest operating systems to be executed on the same computer hardware concurrently. XEN is included with most popular Linux distributions such as Debian, Ubuntu, CentOS, RHEL, Fedora and many others. This is OSS too.
  3. Linux-VServer is a virtual private server implementation done by adding operating system-level virtualization capabilities to the Linux kernel.This is OSS.
  4. VirtualBox is an x86 virtualization software package, developed by Sun Microsystems as part of its Sun xVM virtualization platform. Supported host operating systems include Linux, Mac OS X, OS/2 Warp, Windows XP or Vista, and Solaris, while supported guest operating systems include FreeBSD, Linux, OpenBSD, OS/2 Warp, Windows and Solaris. This is OSS.
  5. VMware ESX Server and VMWare Server - VMware Server (also known as GSX Server) is an entry-level server virtualization software. VMware ESX Server is an enterprise-level virtualization product providing data center virtualization. It can run various guest operating systems such as FreeBSD, Linux, Solaris, Windows and others. This is proprietary.
S0urce :
Top 10 Linux Virtualization Software
Wikipedia

14 April 2011

Restrict Interconenction between LAN on Mikrotik

I have 2 LAN on different interface port on Mikrotik. I used Mikrotik RB1100. LAN A use port eth9 and LAN B use port eth10. LAN A use IP Address 192.168.16.0/24 dan LAB B use IP Address 192.168.17.0/24. Eth9 use IP Address 192.168.16.1 and eth10 use 192.168.17.1.

The rules are : every clients on LAN A can't connect clients on LAN B, except IP Address from 192.168.x.y, where x = 16 and 17; y = 1 until 6.

Therefor 192.168.16.10 can't connect to 192.168.17.8, but can connect to 192.168.17.2. Otherwise, 192.168.17.10 can't connect to 192.168.16.8, but can connect to 192.168.16.2.

To do this, run winbox and enter the RB1100. Click menu IP --> Firewall --> Filter Rules.

Rule #1 :
Click +, on tab General, fill Chain : forward, Src. Address : 192.168.16.0/29, Dst. Address : 192.168.17.0/29; on tab Action, fill Action : accept. Click Apply --> OK.

Rule #2
Click +, on tab General, fill Chain : forward, Src. Address : 192.168.16.0/24, Dst. Address : 192.168.17.0/24; on tab Action, fill Action : drop. Click Apply --> OK.

Be carefull, don't invert between rule #1 and rule #2.

12 April 2011

Reset Linksys SRW224G4

There are two methods to do this that I know of:
Method #1 (you don't need to know about the IP Address):
1. Connect to the console port using terminal emulation parameters (typically 38400, 8, , 1, None). I used UTP Straight Thru Cable (1 piece), RJ45 to Serial Port (DB9) Adapter (2 pieces), USB to Serial Port (DB9) converter from ATEN Model UC-232A (1 piece). Terminal emulator use Hyperterminal. Serial port use COM24, sometime COM19.
2. Reboot switch (Remove power)
3. Hold down Ctrl U while rebooting
a. Menu will be displayed
4. Select> [D] Delete file
5. Type startup-config (be sure that this is the ONLY file that you delete – if you delete other files, you will have to reload the firmware)
6. Now, you have erased the configuration file and you should be able to reboot and login with the default username and password.

Method #2:
1.) Connect the Linksys serial cable that came with the switch between the switch serial port and a nearby computer serial port. For Windows, use Hyper Terminal or VanDyke CRT/SecureCRT. For Linux, use minicom. For other unix types, try cu/tip.
2.) The switch default serial port configuration is set to 38400 baud, 8 data bits, no parity, 1 stop bit, no flow control.
3.) Confirm that you have a valid serial connection by pressing enter a few times. You should be prompted with a login screen.
4.) If you have successfully established serial communication with the switch, reboot the switch by disconnecting and then reconnecting it's power cable.
5.) The switch will begin it's POST procedure as displayed in the serial terminal emulator. Be ready at the keyboard to press the Esc key.
6.) Watch for the following line to appear during the boot sequence. When you see it, immediately press the Esc key;
"Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom."
IMPORTANT: Do not hold down the Esc or Enter/Return key during the boot sequence. Only press the Esc key when prompted.
7.) If you successfully interrupted the boot sequence, you will be prompted with a Startup Menu. Option number 3 will be the "Password Recovery Procedure". Select this option.
8.) The terminal will display, "Current password will be ignored!". Press enter to continue with the boot sequence.
9.) The default account "admin/" will be enabled and you can log into the switch using this account. From here, you can set new accounts without having lost the switch configuration.
10.) After you have configured new accounts and documented the passwords, reboot the switch and log in normally to confirm that passwords have been recovered successfully.
11.) You are done. Disconnect and store the serial cable in a safe place for future use. Be sure to document a login username and password somewhere safe for future reference.

31 March 2011

Perbandingan Canon EOS 450D dan EOS 550D

Saat ini Canon EOS 450D baru sudah sulit didapatkan di pasaran. Bagi Anda yang berencana untuk meng-upgrade 450D dengan 550D, Anda bisa melihat hal-hal sebagai berikut: Penggunaan kontrol dasar masih tetap sama sehingga pemilik 450D cepat beradaptasi dengan 550D. Tentu ada perubahan kecil seperti tombol dan tuas yang secara ergonomis telah didisain untuk memudahkan penggunaan.

Fitur Baru

Yang tidak dimiliki 450D adalah fitur movie clip. 550D tidak hanya sekedar merekam video, tetapi dapat merekam video dengan kualitas baik. Format HD tersedia dalam beragam pilihan: 1920 x 1080 (HD 30/25/24 fps), 1280 x 720 (HD 60/50 fps), 640 x 480 (60/50 fps).

Selain itu, yang lebih mencolok adalah jumlah peningkatan pixel CMOS sensor. 550D memiliki sensor sebesar 18 mega pixel, sedangkan fotografer yang menggunakan 450D harus puas dengan sensor sebesar 12.2 mega pixel. Demikian pula tingkat sensitivitas ISO. 450D memiliki ISO 100 hingga 1600. Sedangkan 550D memiliki ISO hingga 12800 (mungkin tergantung lensanya?). Untuk layar LCD, kedua kamera memiliki layar dengan ukuran yang sama, 3 inchi. Namun, 550D memiliki tampilan lebih baik karena memiliki layar dengan resolusi 1.040.000 pixel, sedangkan resolusi layar 450D besarnya 230.000 pixel saja. 550D memberikan alasan kuat bagi mereka yang hendak meng-upgrade 450D.

Keunggulan 550D adalah
  1. Jumlah mega pixel
  2. Tampilan LCD
  3. Fungsi video
  4. ISO tinggi
  5. Noise rendah
Biaya untuk upgrade:
Harga 550D +/- : Rp 6.700.000,-
Harga 450D second +/- : Rp 3.700.000,-
Investasi +/- : Rp 3.000.000,-

Sumber harga lain :
Canon EOS 550D body : Rp 5.878.000,-
Canon EOS 550D kit (include EF-S 18-135 mm f/3.5-5.6 IS) : Rp 8.499.000,-
Canon EF-S 18-135 mm f/3.5-5.6 IS : Rp 3.764.000,-

07 October 2010

Bruce Schneier: The Story Behind The Stuxnet Virus

A government-produced worm that may be aimed at an Iranian nuclear plant? Of course it's made headlines.

Computer security experts are often surprised at which stories get picked up by the mainstream media. Sometimes it makes no sense. Why this particular data breach, vulnerability, or worm and not others? Sometimes it's obvious. In the case of Stuxnet, there's a great story.

As the story goes, the Stuxnet worm was designed and released by a government--the U.S. and Israel are the most common suspects--specifically to attack the Bushehr nuclear power plant in Iran. How could anyone not report that? It combines computer attacks, nuclear power, spy agencies and a country that's a pariah to much of the world. The only problem with the story is that it's almost entirely speculation.
Article Controls

Here's what we do know: Stuxnet is an Internet worm that infects Windows computers. It primarily spreads via USB sticks, which allows it to get into computers and networks not normally connected to the Internet. Once inside a network, it uses a variety of mechanisms to propagate to other machines within that network and gain privilege once it has infected those machines. These mechanisms include both known and patched vulnerabilities, and four "zero-day exploits": vulnerabilities that were unknown and unpatched when the worm was released. (All the infection vulnerabilities have since been patched.)

Stuxnet doesn't actually do anything on those infected Windows computers, because they're not the real target. What Stuxnet looks for is a particular model of Programmable Logic Controller (PLC) made by Siemens (the press often refers to these as SCADA systems, which is technically incorrect). These are small embedded industrial control systems that run all sorts of automated processes: on factory floors, in chemical plants, in oil refineries, at pipelines--and, yes, in nuclear power plants. These PLCs are often controlled by computers, and Stuxnet looks for Siemens SIMATIC WinCC/Step 7 controller software.

If it doesn't find one, it does nothing. If it does, it infects it using yet another unknown and unpatched vulnerability, this one in the controller software. Then it reads and changes particular bits of data in the controlled PLCs. It's impossible to predict the effects of this without knowing what the PLC is doing and how it is programmed, and that programming can be unique based on the application. But the changes are very specific, leading many to believe that Stuxnet is targeting a specific PLC, or a specific group of PLCs, performing a specific function in a specific location--and that Stuxnet's authors knew exactly what they were targeting.

It's already infected more than 50,000 Windows computers, and Siemens has reported 14 infected control systems, many in Germany. (These numbers were certainly out of date as soon as I typed them.) We don't know of any physical damage Stuxnet has caused, although there are rumors that it was responsible for the failure of India's INSAT-4B satellite in July. We believe that it did infect the Bushehr plant.

All the anti-virus programs detect and remove Stuxnet from Windows systems.