Sunday, January 27, 2013

Stephen Watt, a.k.a. “The UNIX Terrorist,” to Keynote Infiltrate Con, April 11-12 - First Public Talk Since Conviction in World’s Largest Financial Cyber-Heist

 It was the biggest identity theft case in U.S. history - between 2005-2007, 170 million credit card numbers were stolen from Heartland Payment Systems, TJX and other national companies. The operation - known as Get Rich or Die Tryin’ - was led by convicted hacker Albert Gonzalez. But the U.S. Attorney’s Office would later convict former rogue DefCon speaker and Wall Street programmer Stephen Watt of complicity in the crime for writing the packet-sniffing program “blabla” that was used by Gonzalez.

Now, after two years of incarceration in SeaTac Federal Detention Center, a $171.5 million restitution and still on probation, Stephen Watt a.k.a. ‘The UNIX Terrorist’ will be giving his first public talk at this year’s Infiltrate offensive security conference in Miami Beach, April 11-12, 2013.

“We’re happy that Stephen’s lawyer was able to get him approval to keynote at this year’s conference,” said Dave Aitel, CEO of Immunity Inc. and organizer of Infiltrate. “Stephen has a formidable reputation as a programmer and an original thinker, and we’re looking forward to his talk on the criminal justice system as it pertains to com-puter crime. This talk is especially relevant given the recent death of Aaron Swartz, who also faced the same prosecutor as Stephen.”

The title of Watt’s keynote presentation is, “Turning Down an Offer You Can’t Refuse.”

“My talk will be a journey through the legal system; essentially, what to expect if you don’t snitch on your friends,” said Watt. “I’m going to tell people the truth about what it’s like to be prosecuted under today’s computer crime laws - from the overzealous tactics of prosecutors to the near-impossibility of thriving in a post-conviction life. Federal litigation exponentiates fines and sentences by stringing endless amounts of charges together. Most notably, in the case of file-sharing charges. So basically, this talk will cover everything from pretrial, to the courtroom, prison and probation.”

On probation since February 2012, Watt is currently prohibited from using a non-Windows operating system on his government-monitored laptop. He’s also banned from using an iPhone or Android device. “I’m allowed to use a BlackBerry, but they’ve told me ‘there’s just too much you can do on an iPhone,’” he said.

In spite of the severity of his punishment, Watt never benefited financially from his involvement with Gonzalez. While in prison, he also turned down a movie studio offer to option his life story for the big screen. Eric Eisner has since optioned the rights to Rolling Stone’s story on the group, “Hackers Gone Wild: The Fast Times and Hard Fall of the Green Hat Gang.”

Watt remains an opponent of computer vulnerability disclosure and the commercialization of exploit development. He has since developed a passion for discussing matters such as free speech, as well as prosecutorial and investigative tactics as they apply to cybercrime cases.

Stephen Watt’s keynote isn’t the only noteworthy talk at this year’s Infiltrate. Here is a preliminary list of other talks at this year’s conference:

        Chris Eagle – Keynote Speaker
        Esteban Guillardoy - Jurassic Jar: Their World. Our Rules.
        Miguel Turner - Exfiltrate: Efficient Blind SQLi
        Matias Soler - The Chameleon: A Cellphone-Based USB Impersonator
        Alberto Garcia - Enterprise Malware, There Is Always a Way. (DNS/DNSSEC)
        Sergey Gordeychik - Siemens Under the X-Ray
        Ling Chuan Lee and Lee Yee Chan - TTF Font Fuzzing and Vulnerability
        S.A. Ridley and Stephen Lawler - Advanced Exploitation Of Mobile/Embedded De-vices: The ARM Microprocessor
        Josh Thomas - NAND-Xplore -> Bad Blocks = Well Hidden

The conference will also include advanced training classes for professionals:

        Unethical Hacking - Immunity’s most popular class focuses on teaching the fundamentals of Windows x86 exploitation by having students write exploits. This class attempts to teach a strategic approach to attack and penetration that goes beyond “penetration testing” to model how a real attacker targets your company. It’s recommended students be familiar with x86 assembler, some reverse engineering, debugging and Windows memory management.
        Immunity Master Class - Fun with modern exploit development and vulnerability discovery techniques. Intermediate to advanced exploit development skills are recommended for students wishing to take the Master class.
        Web Hacking - A favorite among developers as well as infosec professionals, this class focuses on understanding common web hacking techniques by having students exploit vulnerable systems.

ABOUT INFILTRATE

Now in it’s third year, Infiltrate (http://www.infiltratecon.com) is an exclusive offensive security conference for the infosec community, focused on advanced hacks, exploits and all things offensive. Organized by Dave Aitel and Immunity Inc., the conference is April 11-12, 2013 at the Fountainbleau Hotel in Miami Beach. Past speakers at Infiltrate include Charlie Miller, Andrew Cushman, Thomas Lim, Dan Rosenberg, Cesar Cerrudo and Jon Oberheide.

For the original version on PRWeb visit: http://www.prweb.com/releases/prweb2013/1/prweb10349836.htm

Thursday, January 24, 2013

South Africa: Mobile Ubuntu - a Unix Powered Smartphone

Mark Shuttleworth, South African IT millionaire and Open Source Champion recently announced and demonstrated the planned release of the Linux-based Ubuntu operating system (OS) for smartphones. The Canonical boss revealed that future devices will not only run the new mobile OS, but will also boot the desktop variant of Ubuntu when docked to a keyboard, mouse and monitor. This would mean that you will literally be able to use your phone to power your PC.

It is planned that you would be able to install Ubuntu on most Android devices, and although it is a totally new OS (not just an Android skin), because it is built on Linux in the same way that Android is, there should be no problem installing it on modern Android phones.

Visually the phone interface is very clean and makes no use of permanent buttons, instead the system is totally gesture-based and different functions are triggered by swiping the phone from sides or top or bottom, similar to Windows 8. From an overall design perspective, Ubuntu looks to offer a pretty dynamic home screen experience that's quite a bit different to Windows Phone, Android, or iOS. It's focused more around recently used content - like contacts you've spoken to recently, music you've added, and apps you've used - rather than a static grid of content.

During his keynote address earlier this year, Shuttleworth continually referred to 'emerging' markets as the battleground on which an Ubuntu Phone would fight it out for impact... "It's this sector, the low-end, that the battle for the hearts, minds and hands of the less tech-savvy will take place."

However, while Canonical has plenty of experience hosting cloud-based services and app stores (a major hurdle for new entrants to the mobile space), it doesn't have a great track record in bringing physical products to market that use its software. Hopefully, application developers will take the lead in ensuring a stream of new and exciting applications.

So, although a low-cost platform has appeal for handset manufacturers, there's hardly a shortage of them to choose from right now, with Firefox OS and Tizen being the most recent examples of what can be achieved by fully embracing and supporting HTML5.

An Android alternative

Carolina Milanesi, mobile analyst at Gartner, feels that there is place in the marketplace for an alternative platform to Android.

Wednesday, January 2, 2013

Sr. Unix Administrator (Indians only)

Saudi Networkers Services - SNS Group

Our client is looking for a Senior Unix Administrator having no less than 10+ years experience, IBM P-Series preferably Indian nationals, a 6 month contract extensible based in Egypt.
Package is lucrative and availability should be within a month or so.

Skills

Unix Administrator - 10+ years experience, IBM P-Series, clustering experience, managing an environment of 80-100 LPARS, + AS/400 LPARS, Performance and Management etc.

Company Profile

Saudi Networkers Services (SNS) is a Telecommunications, Oil & Gas and IT Consultancy Services Provider, founded in 2001 and has excelled ever since in providing the biggest multinational companies in MENA regions with very high standards of quality service in the recruitment field.

Today, SNS Group is one of the leading consultancy services providers with more than 1500 employees worldwide, ISO 9001:2008 certified company and is highly regarded.

Source  http://jobs.emirates247.com/en/job/?xid=1918997

Monday, December 24, 2012

Migration from Unix to Linux and Cloud are key driving factors for our business”

Arun Kumar, General Manager, Red Hat India, talks to KTP Radhika about their growing middleware business and the business opportunities in open source Cloud.

 You have made a few acquisitions in the recent past and tried to diversify business. Where do you stand now?

Till 2006, we were a single-product firm offering Red Hat Linux enterprise solution. After acquiring JBoss, open source application server in 2006, we got a whole set of middleware products. JBoss stands as the most popular middleware application available in market today. In 2008, we bought Qumranet, a software company offering desktop virtualisation kernel-based virtual machine (KVM) technology. In Virtualisation, KVM is a very important open standard-based choice for companies and enterprises. Last year, we acquired Gluster, which has Cloud storage and big data services. Recently, we took over FuseSource, a provider of open source integration and messaging from Progress Software Corporation and business process management (BPM) technology developed by Polymita Technologies. We have gone from a single-product solution provider from a broad portfolio to the middleware stack and to Cloud computing. We have been diversifying our portfolio for quite some time, working with the open source development community and through major acquisitions.

 What are the key verticals driving growth for Red Hat?

Globally, government, telecom and the BFSI sectors have been the biggest adopters of open source solutions. In India too, the trend remains the same. The government is an integral part of our business in this market. Apart from the central government, many state governments are also adopting open source solutions. Indian CIOs are looking for cost effective and open infrastructure solutions, and Red Hat is committed to address these growing demands for open source solutions in Indian enterprises by ourselves and also through partners.

Migration is one of the key aspects of our business globally and in India. Many companies, who are still working with Unix-based servers and infrastructure, are now migrating to the Linux platform. We see a big opportunity in this shift from legacy infrastructure to commodity architecture. Red Hat is working with those customers to help them migrate to a commodity architecture. While enabling migration, we will also help them virtualise. Once they virtualise, it will be easy for them to move to Cloud. In India, there is also a much bigger opportunity in greenfield infrastructure especially in the public sector.
How is your middleware business catching up?

After the Linux stack and the infrastructure stack, the middleware is what most customers are evaluating more seriously from an open source perspective. The main reason for this is the cost factor. Open source middleware can be made available at the fraction of cost than the proprietary stack. Globally, many customers, who have deployed proprietary stacks have shifted to JBoss. We are seeing that trend in India as well. Red Hat, as an open source company is bound to help customers in this migration. We explain to them the architecture, migration plans, risks in migration and so on. In the middleware space, we have to take maximum care since it actually touches business applications.

Further, integration remains a key driver for the adoption of middleware technology. Rising mobile phone connectivity, Cloud and hybrid infrastructure and the explosion in data are bringing in new requirements for integration technology. This is exerting huge pressure on existing systems. Today, the opportunity for integration middleware software is evolving from traditional solutions that focus on foundational integration capabilities to higher-level integration capabilities. These include business rules management and BPM. Red Hat has already provided a foundational integration offering with JBoss Enterprise SOA Platform as well as a business rules management offering via JBoss Enterprise BRMS. Complementing these, existing products with additional technologies and talent like SOA and BPM acquired from FuseSource and Polymita will help us enhance position in the enterprise middleware marketplace.

CIOs are now looking forward to Cloud for enhancing efficiencies. What are Red Hat's offerings in this space?

Cloud is going to be universal. We have very specific cases where Cloud has helped CIOs. Cloud promises commodity architecture, interoperability, IT-on-demand and is highly scalable. These factors are there with open source architecture as well. Open source provides high interoperability since it publishes the source code. Linux also has a highly scalable architecture, and provides interoperability. We work on a subscription-based model. Open source Cloud software is widely used today on commodity servers, so it is a natural evolution to leverage open source for Cloud computing on commodity storage.

Over the past 12 months, we announced two solutions on Cloud. One is CloudForms, which is an open hybrid Cloud-management framework. Another is OpenShift, a Platform-as-a-Service (PaaS). We also have introduced a port for OpenStack for which the preview is on. The Cloud world is evolving everyday. In Open source Cloud, it is all about where the developers are. We are seeing a huge rush in the developing community. We are actually monitoring all the activities in there. We are actively involved in this space and it is one of our focus areas for the next three years.

Monday, December 17, 2012

Windows/Linux/UNIX Team Lead

Job ID GBS-0524431
Job type Full-time Regular

Work country USA
Posted 13-Dec-2012
Work city San Jose,CA
Job area Consulting & Services
Travel No travel
Job category IT Specialist

Business unit
ConServ
Job role Infrastructure Specialist
Job role skillset AIX/UNIX
Commissionable/Sales-Incentive jobs only No
Job description
IBM is leading the way to a whole new generation of intelligent systems and technologies, more powerful and accessible than ever before. Be a part of our progress as an Infrastructure Architect.

The Team Lead will be responsible for providing direction for a technical team of server (Windows, Linux, and Unix) and VMWare specialists.. This position requires a good fundamental overall understanding of a Windows Server environment, Linux (Red Hat), VMWare, and Linux, Unix infrastructure. It does not require current hands on experience in these areas, but sufficient knowledge to direct with understanding. This person will be the principal person in the development of a overarching virtualized architecture consisting of Windows, Linux, Unix, SAN, virtual infrastructures, and network infrastructure components.

Partner with some of the best minds in the industry, and apply your technical know-how to manage and operate IT hardware, software, communications and/or application solutions. You'll manage the resources required to plan, develop, deliver and support expertly engineered IT services and products that meet worldwide clients' needs.

The challenges don't stop there. You'll be responsible for preparing for new or changed services, management of the change process and maintenance of regulatory, legal and professional standards. You'll also manage the performance of systems and services, as well as brought-in services, including public networks, virtual private networks and outsourced services.
Deliverables include service-level reporting, risk and contingency planning.

Virtual Architectural development is a key focus area for this position. Additionally, providing support direction for persons who are supporting the individual component areas (Window, Unix, Linux) .Support-related responsibilities include sizing, troubleshooting and critical customer situations. In this position you will primarily apply your technical skills in an internal or external customer billable services implementation environment.
Come develop some of the most exciting technologies and product innovations in the world today. Join us.

Interested in learning more about IBM? Check out the IBM Global Careers newsletter.

The work location for this position is Seaside, CA.
Required
  • High School Diploma/GED
  • At least 2 years experience in LINUX or UNIX Systems Administration and Maintenance.
  • U.S. citizenship required
  • English: Basic knowledge

Preferred
  • Bachelor's Degree
  • At least 4 years experience in LINUX or UNIX Systems Administration and Maintenance.
  • At least 1 year experience in directing a team of infrastructure specialists
  • Security clearance of Secret - Active
  • Certified in Security +
  • English : Intermediate

Additional information

To be an official applicant to IBM, you must submit a resume and online application. Resumes submitted remain active for six months.

To ALL recruitment agencies: IBM only accepts resumes from agencies on our Approved Agency List. Please do not forward resumes to our applicant tracking system, IBM employees, or send to any IBM company location. IBM is not responsible for any fees related to unsolicited resumes.

IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer.All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. 

Monday, December 3, 2012

El Reg Movember lads sprout mighty Unix beards for cancer charity alert print comment Your LAST CHANCE to donate cash to razor-free fundraiser

What is it about facial hair and computing? From the greats of SmallTalk and C++ to Java and Ruby, beards and moustaches are not a rare sight in the world of computer science.

James Gosling, Barjne Stroustrup, Alan Kay and Yukihiro "Matz" Matsumoto have expressed their genius not just through the curly braces in the machine but also the curly wurlies on their chins.

From data centers to dev teams, from the Ruby hipsters to Unix admins, top-lip warmers and jowl scratchers are more than well represented.

Inspired by these legends, El Reg staffers have been sending their top lips into the world unshaved for the whole of November in the name of a good cause: Movember.

The Reg Movemberists have been growing their tashes to raise money for the global fight against testicular and prostrate cancer. One in nine UK men will be diagnosed with prostate cancer in their lifetime, according to the Movember movement.

So far our Movemberists have raised £392. Last year, Mo Bros and Mo Sisters across the world raised £79.3m; this year we’re all hoping for more.


Monday, November 19, 2012

Setting limits with ulimit

Administering Unix servers can be a challenge, especially when the systems you manage are heavily used and performance problems reduce availability. Fortunately, you can put limits on certain resources to help ensure that the most important processes on your servers can keep running and competing processes don't consume far more resources than is good for the overall system. The ulimit command can keep disaster at bay, but you need to anticipate where limits will make sense and where they will cause problems.

It may not happen all that often, but a single user who starts too many processes can make a system unusable for everyone else. A fork bomb -- a denial of service attack in which a process continually replicates itself until available resources are depleted -- is a worst case of this. However, even friendly users can use more resources than is good for a system -- often without intending to. At the same time, legitimate processes can sometimes fail when they are run against limits that are designed for average users. In this case, you need to make sure that these processes get beefed up allocations of system resources that will allow them to run properly without making the same resources available for everyone.

To see the limits associate with your login, use the command ulimit -a. If you're using a regular user account, you will likely see something like this:
$ ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 32767
max locked memory       (kbytes, -l) 32
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1024
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 10240
cpu time               (seconds, -t) unlimited
max user processes              (-u) 50
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited
One thing you might notice right off the bat is that you can't create core dumps -- because your max core file size is 0. Yes, that means nothing, no data, no core dump. If a process that you are running aborts, no core file is going to be dropped into your home directory. As long as the core file size is set to zero, core dumps are not allowed.