ips Archives

Home » ips

Finding and blocking an abusive host from your Apache log

Dave Farquhar Apache, security August 17, 2017August 17, 2017apache, datacenter, ips, New York, yahoo

My web site slowed to a crawl last night, my CPU usage soared to 100%, and my built-in security measures weren’t helping. I ended up having to do some old-school Linux sysadmin work to stop them.

I haven’t been an everyday sysadmin since 2009. But every once in a while I can still come off the bench and do this stuff.

Dave Farquhar

David Farquhar is a computer security professional, entrepreneur, and author. He started his career as a part-time computer technician in 1994, worked his way up to system administrator by 1997, and has specialized in vulnerability management since 2013. He invests in real estate on the side and his hobbies include O gauge trains, baseball cards, and retro computers and video games. A University of Missouri graduate, he holds CISSP and Security+ certifications. He lives in St. Louis with his family.

dfarq.homeip.net

Convert a list of hostnames to a list of IP addresses

Dave Farquhar security, Windows January 12, 2017December 29, 2017dell, excel, hp, IBM, ips, Roku, vulnerability

I had a client with a huge list of hostnames that they needed to convert to IP addresses so they could scan them. That’s common. I used to have a Windows batch file to convert a list of hostnames to a list of IP addresses, so I dug it out of my archives. This uses ping but isn’t like a ping sweep; they knew the machine names but their tool needed IPs.

I used the file to resolve lists of machines so I could load them into a centralized logging or vulnerability management system. This client had the same need and nobody there had a similar tool. So I shared mine with them. And I present it here so I won’t lose it again, and if you need it, you can use it too.

Dave Farquhar

dfarq.homeip.net

Blu Studio One review

Dave Farquhar Android September 28, 2016October 11, 2019android, AT&T, ips, McAfee, motorola, sprint, verizon, yahoo

I needed a phone in a hurry the other day when my wife’s Moto E started acting up. We turned to the Blu Studio One, specifically model# S0110UU. This is my Blu Studio One review.

It’s an inexpensive midrange phone for people who want to bring their own to their carrier rather than (over)paying on a monthly installment plan. It works with GSM providers like T-Mobile and AT&T. It does not work with Sprint or Verizon, since they use the CDMA standard. Some of the smaller carriers also work with GSM. Buying a Blu phone isn’t a bad way to go when you’re looking to save on a cell phone.

Dave Farquhar

dfarq.homeip.net

Digiland tablet review

Dave Farquhar Android June 7, 2016October 11, 2019acer, android, Angry Birds, best buy, black friday, chrome, ips, mediatek, nexus, power button, usb port

The Digiland DL718M tablet is an inexpensive (sub-$40) tablet sold at consumer electronics stores like Best Buy. Make no mistake, a Digiland tablet is a basic tablet for basic needs. But given reasonable expectations you can buy one of these and be happy with it.

This isn’t a new market by any stretch. But it seems like tablets in this price range are usually Black Friday specials, or only available on online marketplaces far abroad. The Digiland DL718M, or today’s equivalent, is one you can get today if you want.

Dave Farquhar

dfarq.homeip.net

What is Winshock?

Dave Farquhar security, Windows December 3, 2014December 2, 2014antivirus, code execution, excel, IBM, ips, Patch Tuesday, SSL, symantec, TLS, vulnerability, windows 7, windows 8, windows 9x, windows nt, Windows Server, Windows XP

So the other day I got blindsided with a question at work: What are we doing about Winshock. Winshock, I asked? I had to go look it up, and I found that’s what they dubbed what I’ve been calling MS14-066, the vulnerability in Schannel, which is Microsoft’s implementation of SSL/TLS for Windows.

Based on that, I’d argue it has more in common with Heartbleed than Shellshock, but I guess “Winshock” is catchier than “Winbleed.”

Then the lead of another team asked me to brief his team on Winshock. I actually managed to anticipate all but three of the questions they asked, too, which was better than I expected. Some of what I shared with them is probably worth sharing further.

Dave Farquhar

dfarq.homeip.net

The way home security ought to be

Dave Farquhar security August 25, 2014August 23, 2014ips

Last week, the show formerly known as Pauldotcom featured the creator of Iguardian, a dead-simple Internet security device. It’s a tiny computer a little larger than a pack of gum that you can plug inline between your router and your modem for extra protection. Basically it does what most people think a router does.

If you want to know what it actually does, read on. Read more

Dave Farquhar

dfarq.homeip.net

Coming soon to Monoprice: WQHD monitors

Dave Farquhar Hardware January 9, 2013November 30, 2018apple, CES, ips

Monoprice dropped a bomb at CES this week: a 27″ IPS LED monitor with WQHD 2560×1440 resolution for $390.

From what I understand, there are several Korean manufacturers who make monitors from surplus or rejected panels intended for Apple displays, then sell them for under $400.

This looks like Monoprice signed on to distribute them in the United States, which seems less risky than buying them from a small importer or exporter off Amazon or Ebay. These monitors are popular with enthusiasts, but I imagine with Monoprice distributing them, the following will only increase. Monoprice is a bit of a secret too, but I heard of Monoprice long before I heard of Korean-made WQHD monitors.

Monoprice estimates they’ll be shipping them by March.

If you want a lot of screen real estate in the form of pixels, WQHD is useful. If you just want a sharp display, though, calculate pixels per inch first.

Dave Farquhar

dfarq.homeip.net