We are a leading, reliable and authentic news source for core topics related to Technology, InfoSec, Cyber Security, Warfare, and Hacking.
vendredi 19 août 2016
jeudi 18 août 2016
samedi 13 août 2016
samedi 23 juillet 2016
mardi 7 juin 2016
Just one in 10 IoT devices offer adequate security, warns research
Just one in 10 Internet of Things (IoT) devices has adequate security, underlining the risks posed by the rise in connected devices, according to security experts.
The IOActive IoT Security Survey warned that many IoT devices, especially those with a consumer focus, lack the security needed to ensure they are not at risk of being hacked using simple tactics.
The figure comes from a panel of senior security professionals interviewed by IOActive about the rise of the IoT.
They raised concerns that security is lacking in everything from wearables to household appliances, echoing concerns V3 has covered before.
Half of respondents believe that under 10 per cent of IoT products offer adequate support, while a staggering 85 per cent believe that less than half of products are secure.
Around two thirds felt that the security is probably better than you get on other products.
"Consensus is that more needs to be done to improve the security of all products, but the exponential rate at which IoT products are coming to market, compounded by the expansive risk network created by their often open connectivity, makes IoT security a particular concern and priority," said Jennifer Steffens, chief executive of IOActive.
"According to Gartner, 21 billion connected things will be in use by 2020. It's important for the companies that develop these products to ensure security is built in. Otherwise hackers are provided with opportunities to break into not only the products, but potentially other systems and devices they're connected to."
The problem is that security is not considered early enough in the design process so it has to be dealt with later, or presumably not at all.
"Companies often rush development to get products to market in order to gain competitive edge, and then try to engineer security in after the fact," she said.
"This ultimately drives up costs and creates more risk than including security at the start of the development lifecycle."
The rise in risks posed by IoT devices means that security spending on the IoT will reach a hefty $348m in 2016, according to Gartner, an increase of 23.7 per cent on the $281.5m in 2015.
Microsoft officially rolls out Apache Spark on Azure HDInsight cloud service
Customers can now access production Spark clusters on Microsoft's cloud
Microsoft has announced general availability of Apache Spark support for the Azure HDInsight cloud-hosted service for big data analytics, bringing the advantages of the Spark platform for in-memory processing of data to better support real-time analysis.
Apache Spark for Azure HDInsight was announced as a public preview almost a year ago, but Microsoft claimed that it has proved so popular that it already makes up 50 per cent of HDInsight clusters deployed on the Azure platform.
Spark was developed by the Apache community to address shortcomings in the MapReduce framework often used in Hadoop deployments. It runs data analytics processes in-memory, and can deliver queries up to 100 times faster than traditional big data solutions.
Now, with general availability of Spark for Azure HDInsight, Microsoft is offering Apache Spark v1.6.1 along with improvements to the service to make it more enterprise-ready and easier for users to access, the firm said.
Azure HDInsight has been developed in partnership with Hadoop specialist Hortonworks and is based on the Hortonworks Data Platform. Microsoft has worked with Hortonworks to add high availability features to the platform via updates to the YARN resource manager.
Meanwhile, Microsoft has integrated Spark with the Azure Data Lake Store to enable Spark workloads to operate at greater scale. This cloud-based repository allows Spark to store and process data of almost any size, without forcing changes to a customer's application as data scales, the firm said.
Microsoft said it is also making it easier to use Spark for analytics workloads by integrating Apache Spark for Azure HDInsight with existing tools for data professionals.
"Our goal with big data is to make it accessible for everybody. With Spark for HDInsight, we have designed new productivity experiences for the different audiences that use Spark, including the data engineers working on ETL jobs, the data scientists performing experimentation and the business analysts creating dashboards," said Oliver Chiu, Microsoft's senior product marketing manager for big data and data warehousing, on the Azure blog.
This includes integration with the IntelliJ IDE that enables data engineers and developers to code with native authoring support for Scala and Java, out-of-the-box integration with Jupyter (iPython) notebooks for data scientists, and integration with Microsoft's Power BI to help business analysts build interactive visualisations of data, Microsoft said.
HPE launches e-commerce site to ease IT procurement for SMBs
HPE Marketplace provides access to channel partner pricing for IT
Hewlett Packard Enterprise (HPE) has unveiled a pilot e-commerce platform for SMB customers in the UK designed to serve as a one-stop shop to procure IT infrastructure from HPE's channel partners.
The HPE Marketplace provides SMB customers with access to channel partner prices and the ability to purchase a broad range of HPE's servers, storage, networking products and services, the firm said. The UK launch follows the successful pilot of a similar platform in the US.
HPE has clearly seen growth opportunities in the SMB market since its formation last year, and considers it worth focusing on more closely with targeted products and services. The firm launched a hyperconverged appliance earlier this year making it easier for mid-size companies to get started with virtualised infrastructure.
HPE also introduced its Easy Connect appliance in partnership with Zynstra that delivers a set of IT services for smaller companies that are managed for them by a service provider.
The HPE Marketplace can be seen as a logical continuation of this strategy, allowing SMBs to find the right solution for their requirements from HPE's channel partners.
The HPE Marketplace can be seen as a logical continuation of this strategy, allowing SMBs to find the right solution for their requirements from HPE's channel partners.
"Our small and mid-size business customers now expect and demand a wide variety of choices and options from their online shopping experience," said Lee Hughes, HPE's vice president of indirect sales and service providers.
"Our new direct-to-partner model will give our customers the ability to choose which partner best fits their specific IT infrastructure needs. As an additional benefit, we'll also drive more revenue back to our participating channel partners."
The HPE Marketplace allows SMBs to get access to products and services at competitive market prices, according to the firm.
Customers can browse the available products on offer, get detailed overviews and specifications on products and services, and compare prices and any special offers from HPE's trusted partners.
Microsoft details zero downtime upgrades for server clusters with Windows Server 2016
Microsoft's Windows Server 2016 will introduce the ability for customers to upgrade Windows Server 2012 R2 clusters to the new version without taking the cluster offline and without the need for a second cluster to take over while the upgrade proceeds.
Windows Server 2016 is still slated for release sometime later this year, and is widely expected during the third quarter. The most recent pre-release version, Windows Server 2016 Technical Preview 5, was made available to testers at the end of April.
Microsoft has now detailed how an upcoming feature will enable customers to migrate any Windows Server 2012 R2 cluster to Windows Server 2016 with minimal impact. This can even be done with zero downtime for server clusters running physical Hyper-V and Scale-out File Server (SoFS) clusters, the firm claimed.
Known as the Cluster OS Rolling Upgrade, this feature introduces a new concept called Mixed-OS mode, which allows customers to start with a Windows Server 2012 R2 failover cluster and add Windows Server 2016 server nodes to the cluster, Microsoft said.
Using this and a sequential upgrade process, customers can migrate each server to Windows Server 2016 one by one, without having to take the entire cluster offline. Once the upgrade is complete, customers will then be able to take full advantage of the other new capabilities Microsoft is delivering with Windows Server 2016.
"After all nodes in the cluster have been upgraded to Windows Server 2016, the administrator uses the Update-ClusterFunctionalLevel cmdlet to commit the cluster to permanently running Windows Server 2016 nodes only - at which point the new Windows Server 2016 features become available," said Rob Hindman, Microsoft's senior programme manager for Windows Server, on the Windows Server Blog.
Hindman explained that zero downtime applies only to Hyper-V and SoFS clusters because a Hyper-V cluster makes use of VM Live Migration so any virtual machines will keep running during the process, while SoFS makes use of Continuously Available file handles which can move between cluster nodes without any data loss.
"Other cluster workloads like SQL Server AlwaysOn Failover Cluster Instance and SQL Server AlwaysOn Availability Groups can be upgraded with minimal downtime which is equivalent to failover time," he added.
Meanwhile, virtual (guest) clusters using Shared VHDX (shared virtual hard drives) need to be logically detached from shared storage before the upgrade and reattached after the upgrade process has completed.
"We've worked closely with many customers using Windows Server 2016 Technical Preview to ensure that Cluster OS Rolling Upgrade delivers the deployment agility that they need, reducing the time and cost needed to upgrade to Windows Server 2016," Hindman said.
Customers can download the Windows Server 2016 Techncial Preview for evaluation from Microsoft's TechNet site.
Running Bash Commands in the Background the Right Way [Linux]

Everyone’s been there: you’re looking to run a terminal program and keep it running. The trouble is this program is old or doesn’t include a feature that allows it to run as a daemon in the background. Luckily, there are several ways to force programs to work in the background anyway.
Bash can do this all on its own, and extra programs will not need to be installed. This article will go over several ways that you can push terminal programs into the background and keep them there. Each method listed is good for its own special-use case.
End a Command with &
If you want to push a command into the background, using
& at the end is an easy way to do that. It comes with a catch, though. Using & doesn’t disconnect the command away from you; it just pushes it in the background so you can continue using a terminal.
command &
When the terminal session is closed, the command ends. Using
& is good if you need to push something off for a bit, but don’t expect it to continue forever.& After a Command, Then Disown It
Running a command with just
& pushes it off to the back and keeps it running as long as the terminal window is open. If, however, you’re looking to keep this command running in constant, even with your terminal session ending, you can use the disown command.
To use this method, first start off adding an
&.command &
As mentioned above, using
& pushes this command into the background but doesn’t detach it from your user. You can verify this by typing jobs into the terminal. It’ll show the command running in the background.
Just type
disown into the shell, and it’ll do just that (and you can once again verify this with the jobscommand).& After a Command with /dev/null
Adding
& after a command will push a command into the background, but as a result the background command will continue to print messages into the terminal as you’re using it. If you’re looking to prevent this, consider redirecting the command to /dev/null.
command &>/dev/null &
This does not prevent the command from closing when the terminal closes. However, like mentioned above, it’s possible to use
disown to disown the running command away from the user.Nohup, with & and /dev/null
Unlike the previous commands, using
nohup allows you to run a command in the background and keep it running. How? Nohup bypasses the HUP signal (signal hang up), making it possible to run commands in the background even when the terminal is off. Combine this command with redirection to /dev/null (to prevent nohup from making a nohup.out file), and everything goes to the background with one command.nohup command &>/dev/null &

Conclusion
Most terminal programs on Linux today have features built in to allow them to run in the background with little effort. Along with that, modern init systems (like systemd) can allow users to start programs like services at boot or whenever.
Still, some programs on Linux lack the ability to run as a daemon or integrate with modern init systems. This is a real inconvenience but is understandable, as not all developers have the skill or time to add in new features.
Your WordPress Site and Telegram Are a Perfect Pair; Here’s How to Link Them

Publishers always try to find new ways to interact with their audience and reach a wider range of readers. One of the best ways to achieve that is by connecting the most popular publication platform with the latest rising star of the instant messaging system. That is why WordPress and Telegram are a perfect pair. Integrating your WordPress site with Telegram will give it the ability to make an instant connection with your audience.
The Plugin
To connect the two, we need a little help from a plugin called Telegram for WP. Install the plugin within your WordPress dashboard and activate it.

Then you can start customizing the plugin using its Settings menu accessible from the sidebar.

You will notice that there are two options available: Notifications and Post to Channel. The content of Notifications and Post to Channel is any information that is usually sent from WordPress via email. You should make sure that your hosting service and WordPress settings allow you to send emails.

Setting Up Notifications
Notifications can be sent to an individual Telegram user or group. A Telegram group is a small, moderated chat group with limited members (200 for a normal group and 5000 for a supergroup). If you only need alerts from your personal blog, set the notifications for yourself. If you have a small team managing the WordPress blog and want to update everybody on the team, set notifications for the group.
Send notifications to single user
Open the Telegram app (either on your mobile or your computer), and start a new chat with @Notifcaster_Bot.

Send the
/token command, and the bot will give you an API token for the user. (You might need to register first by using /start command.
Copy and paste the token in the field below the instructions and save.

Send notifications to group
Choose to add a new member to your group.

Find the “Notifcaster_Bot” and add it.

The bot will give you an API token for the group (token must be started with
g: ).
Copy and paste the token into the field.
Since there is only one token field under Notifications, you have to choose between sending the notifications to a single user or a group.
Setting Up a Channel
While a group is intended to communicate within a small circle of family, friends, or colleagues, a Channel is a tool for broadcasting public messages to large audiences. One Channel can have unlimited members, and messages are signed with a channel’s name and not individual identity. Posting to a Channel requires a different setup. First you need to create a Channel from the new chat icon.

After setting up the channel and adding the first members, you need to create a Telegram bot. Start a new secret chat with BotFather, and request that it create a bot for you by typing
/newbot command.
Botfather will create a bot and give you an API key. After setting up your bot, add it as the channel admin by clicking on the channel name and choosing channel admin.

Then go to your WordPress dashboard and open the Telegram for WordPress Settings menu and choose the “Post to Channel” option. Fill in all the necessary information that you got from BotFather and the Telegram channel.

Click “Save” to finish up.
Tips to Troubleshoot
During my experiment I failed to send the notification test from my WordPress blog. After a little digging in the TWP (Telegram for WordPress) support forum, I found this little trick to check where the problem lies.
After inputting all the API correctly in your WordPress dashboard, visit this link using your browser: “https://tg-notifcaster.rhcloud.com/api/v1/selfMessage?api_token=(your_token)&msg=ThisIsTest.”
Don’t forget to replace “(your_token)” with your token code.
If you get a test message in your Telegram, then the problem is in your hosting. Most of the time it’s about the outdated PHP version. You can contact your web hosting support for further help.
If you don’t get a test message, then you might have made some mistakes in the setup process, or you might have missed one or two characters in the token code. Retrace your steps, and make the necessary corrections.
If you still can’t make it work, then maybe it’s time to ask the plugin developer for help.
Conclusion
To wrap things up, Telegram is another great way to connect with your blog audience. It’s fast, secure, and more personal than the email or RSS because your reader will likely receive the messages on their mobile.
Have you tried using Telegram to connect to your readers, or do you plan to use it in the future? Share your thoughts and opinions using the comments below.
How to Convert Virtual Machines from VMware to VirtualBox and Vice Versa

Virtual machines are helpful in many ways. You can use them to try out new operating systems, test software, run old applications, etc.
Two of the most popular virtual machine software are VMware and VirtualBox. Both have their own pros and cons, and most of us spend a good amount of time and effort to create and maintain a virtual machine in either software. The good thing is that you can even migrate your VM from VirtualBox to VMWare, and vice versa, without having to recreate from the ground up. Here is how to do it.
Note:
- For this demonstration I’m using VMware Workstation as my other virtual machine software. Even if you are using VMware Player, the procedure is the same.
- Before starting the migration process, make sure that the VM you want to export is in “Power Off” state and not in Suspended or Paused state. This applies to both VMware and VirtualBox.
Migrate from VMware to VirtualBox
To migrate from VMware to VirtualBox, you first need to export the VM in an .ovf file. To do that open the VMwarefolder located inside the “Programs Files” folder in the C drive. Once you are there, open the “OVFTool” folder. Press “Shift + right-click,” and then select the “Open Command Prompt here” option.

In the command prompt window, use the below command, and press the Enter button. Don’t forget to change the path of the .vmx file of the VM you want to export and the destination for the new .ovf file.
ovftool "c:\path\to\original_vm.vmx" "c:\path\to\export.ovf"
As soon as you execute the command, the VM will be exported as an .ovf file to the marked destination.

Note: if you are using VMware Workstation, you can also export the VM as an .ovf file by navigating to “File” and then selecting the option “Export to OVF.”
Now, open up the VirtualBox and select the option “Import Appliance.”

The above action will open the “Appliance to Import” window. Here, browse and select the exported .ovf file, and click on the “Next” button.

In this window VirtualBox will show you all the VM settings. Leave them as is; you can always change them later. Just click on the “Import” button to continue.

The above action will start the import process.

Once the importing has been done, you will see your imported virtual machine in the VM VirtualBox Manager. Just select the VM, and click on the “Start” button to power on the VM.

You’ve successfully imported VM from VMware to VirtualBox.

Troubleshooting Import Errors in VirtualBox
If you are receiving importing errors, then follow the below steps.
1. Open the “export.ovf” file with your favorite text editor, find all instances of “ElementName” and replace it with “Caption.”
2. Next, find the instance of “vmware.sata.ahci” and replace it with “AHCI.”
3. Finally, calculate the SHA1 hash value of the “export.ovf” file using this online tool, and replace the old hash value with the new one found in the “export.mf” file. You can open it with any text editor.
Note: you need to replace the hash value of “SHA1(export.ovf).”

Once you are done with the changes, try importing again. This should solve the import errors. If not, you should probably create a new VM from ground up.
Migrate from VirtualBox to VMware
Migrating from VirtualBox to VMware is easy as well. Open the VirtualBox application, and select the option “Export Appliance” from the “File” menu.

The above action will open the export wizard. Here, select the VM you want to export, and click on the “Next” button to continue.

Here in this screen, select the destination, and click on the “Save” button.

VirtualBox will now show you the storage settings. Leave the defaults as is, and click on the “Next” button.

Check all the appliance settings, and click on the “Export” button to start the exporting process.

Depending on the size of the VM, the exporting process may take some time.

Once you are done exporting the VM, you can import it to VMware. To do that, open up VMwarePlayer/Workstation, and select the “Open” option from the “File” menu.

Now select the exported .ova file.

In this screen click on the “Import” button to start the importing process.

If you receive an error saying that the import has failed to due to hardware compliance issues, simply click on the “Retry” button. This action should start the importing process.
Note: if the above action didn’t solve the problem, then you have to create a new virtual machine from ground up.

If everything goes as planned, VMware starts importing the VM. Again, the process may take some time to complete.

Once the importing has been completed, turn on the VM by clicking on the option “Power on this virtual machine.”

Inscription à :
Commentaires (Atom)