Friday, April 30, 2010

Disable Root SSH Login on Linux

One of the biggest security holes you could open on your server is to
allow directly logging in as root through ssh, because any cracker can
attempt to brute force your root password and potentially get access to
your system if they can figure out your password.

It's much better to have a separate account that you regularly use and
simply sudo to root when necessary. Before we begin, you should make
sure that you have a regular user account and that you can su or sudo to
root from it.

To fix this problem, we'll need to edit the sshd_config file, which is
the main configuration file for the sshd service. The location will
sometimes be different, but it's usually in /etc/ssh/. Open the file up
while logged on as root.

vi /etc/ssh/sshd_config

Find this section in the file, containing the line with
"PermitRootLogin" in it.

#LoginGraceTime 2m
#PermitRootLogin no
#StrictModes yes
#MaxAuthTries 6

Make the line look like this to disable logging in through ssh as root.


PermitRootLogin no

Now you'll need to restart the sshd service:


/etc/init.d/sshd restart

Wednesday, April 28, 2010

Find Ubuntu version

Method 01.

* cat /etc/issue

result
Ubuntu 9.10 \n \l

Method 02.

* lsb_release -a

result

No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 9.10
Release: 9.10
Codename: karmic

How to install Ubuntu multimedia codecs..

sudo apt-get install ubuntu-restricted-extras

Thats fix all :)

How to Break WinRAR Package Password in Ubuntu (Easy Way)

It is easy to break your Winrar Password Package in Ubuntu. You can use
this method in case you forget your Winrar Password or kind like that.
Ok, let's get started.

First, you must know that software that will perform the RAR Package
Crack, the software name is "RarCrack". And this is the method to
download and install RARCRACK. You can download the latest version (0.2)
from this http://rarcrack.sourceforge.net/ .

Or simply follow this simple tutorial to perform the installation.

First, download the rarcrack 0.2 by pasting this following code:

wget http://superb-east.dl.sourceforge.net/sourceforge/rarcrack/rarcrack-0.2.tar.bz2

Extract the RarCrack

tar xvjf rarcrack-0.2.tar.bz2

Get into the RarCrack Folder

cd rarcrack-0.2

install some needed dependencies by typing this following code:

sudo apt-get install libxml2-dev

Install the RarCrack

make ; sudo make install

Alright! That's the end of RarCrack Installation. Ok, that's not
entirely true, there's one of the most important part that you forget,
the cracking part ;) . To crack or break the RAR Package Password, type
in terminal:

rarcrack /home/UserName/example.rar

Just simply put your .rar directory and perhaps if it's not working try
to rename your rar file, it probably will help.

This software is also works for other Package (zip and 7z), just simply
replace .rar into .zip or .7z in case you must break zip or 7z passwd.

How to enable/disable Ctrl+Alt+Backspace in Ubuntu 9.10 (Karmic)

Ctrl+Alt+Backspace (i.e. the shortcut which was used to restart the X
server) has to be enabled in a different way with respect to previous
releases of Ubuntu.

This is due to the fact that "DontZap" is no longer an option in the X
server and has become an option in XKB instead.

Using GNOME

* Get to the System->Preferences->Keyboard menu.

* Select the "Layouts" tab and click on the "Layout Options" button.

* Then select "Key sequence to kill the X server" and enable "Control +
Alt + Backspace".

Using KDE

* Launch "systemsettings"

* Select "Regional & Language".

* Select "Keyboard Layout".

* Click on "Enable keyboard layouts" (in the Layout tab).

* Select the "Advanced" tab. Then select "Key sequence to kill the X
server" and enable "Control + Alt + Backspace".

Using the command line

You can type the following command to enable Zapping immediately.

setxkbmap -option terminate:ctrl_alt_bksp

If you're happy with the new behaviour you can add that command to your
~/.xinitrc in order to make the change permanent.

Using HAL

You can add the following line
in /usr/share/hal/fdi/policy/10osvendor/10-x11-input.fdi (inside the
<match key="info.capabilities" contains="input.keys"> section):

<merge key="input.xkb.options"
type="string">terminate:ctrl_alt_bksp</merge>

Wednesday, April 7, 2010

Software piracy in the private sector

The Criminal Investigations Division carried out another corporate end user raid this week when it nabbed a company using pirated software. The company was suspected to be infringing the intellectual property rights of the Business Software Alliance (BSA) -- Adobe, Autodesk and Microsoft by using pirated and unlicensed software in the course of running its business.

BSA said in a press release that the raid that took place simultaneously in Ratmalana and Horana on March 30/31 involved the seizure and examination of over 70 computers installed with an estimate of over 120 copies of pirated software valued at an Rs 10 million. Final results will be known upon further investigations, BSA said.

The law governing intellectual property rights under the Intellectual Property Rights Act No 36 of 2003 is very comprehensive and states that computer programmes are protected works and are original intellectual creations. Any person guilty of an offence shall on conviction be liable to a fine not exceeding Rs 500,000 or imprisonment for a term not exceeding 6 months or both the fine and imprisonment.
“We have conducted another enforcement action against a business suspected of using pirated and unlicensed software.

The use of pirated software is a clear violation of the country’s copyright laws, and we are determined to remind businesses of the severity of the violation through enforcement. Business users of software should not take the Police’s enforcement actions lightly as we will not let-up in our efforts to eradicate software piracy and upholding the intellectual property rights of copyright owners,” said CID director Wijaya Amarasinghe.

Senior Director – Anti Piracy of the Business Software Alliance (BSA), Tarun Sawney said, “The software industry in Sri Lanka, which includes local software developers, distributors, resellers and value-add partners, need to be protected against such criminal acts which cost millions in losses to the industry. If the industry is denied legitimate revenues, it will stunt the growth of this sector and legitimate taxes due to the Government.”



http://www.sundaytimes.lk/100404/BusinessTimes/bt15.html