tssci security

Feisty VMware install

Installing VMware Server is pretty straight-forward on Ubuntu 7.04 (Feisty Fawn). Make sure you have the build-essential package and the correct linux-headers for your kernel.

$ sudo apt-get install build-essential linux-headers-`uname -r`

Download VMware and extract the contents to vmware-server-distrib. Run the installation script and read through it all. I ended up just saying 'yes' throughout the entire script

$ sudo ./vmware-server-distrib/vmware-install.pl

I encountered a little problem compiling the vmmon module while installing VMware Server on Ubuntu Feisty Fawn (7.04). At some point, the install script will ask you if you'd like to run /usr/bin/vmware-config.pl automatically. I did and I ran into a problem while compiling the vmmon modules:

What is the location of the directory of C header files that match your running kernel? [/lib/modules/2.6.20-14-386/build/include]

Extracting the sources of the vmmon module.

Building the vmmon module.

Using 2.6.x kernel build system. make: Entering directory `/tmp/vmware-config0/vmmon-only' make -C /lib/modules/2.6.20-14-386/build/include/.. SUBDIRS=$PWD SRCROOT=$PWD/. modules make[1]: Entering directory `/usr/src/linux-headers-2.6.20-14-386' CC [M] /tmp/vmware-config0/vmmon-only/linux/driver.o In file included from /tmp/vmware-config0/vmmon-only/linux/driver.c:80: /tmp/vmware-config0/vmmon-only/./include/compat_kernel.h:21: error: expected declaration specifiers or ‘...’ before ‘compat_exit’ /tmp/vmware-config0/vmmon-only/./include/compat_kernel.h:21: error: expected declaration specifiers or ‘...’ before ‘exit_code’ /tmp/vmware-config0/vmmon-only/./include/compat_kernel.h:21: warning: type defaults to ‘int’ in declaration of ‘_syscall1’ make[2]: *** [/tmp/vmware-config0/vmmon-only/linux/driver.o] Error 1 make[1]: *** [_module_/tmp/vmware-config0/vmmon-only] Error 2 make[1]: Leaving directory `/usr/src/linux-headers-2.6.20-14-386' make: *** [vmmon.ko] Error 2 make: Leaving directory `/tmp/vmware-config0/vmmon-only' Unable to build the vmmon module.

If you experience this exact problem, download vmnet.tar and vmmon.tar and place them (do not extract their contents!) in /usr/lib/vmware/modules/source/.

After doing so, re-run the config script and you should not have any more problems.

$ sudo /usr/bin/vmware-config.pl

What is the location of the directory of C header files that match your running kernel? [/lib/modules/2.6.20-14-386/build/include]

Extracting the sources of the vmmon module.

Building the vmmon module.

Using 2.6.x kernel build system. make: Entering directory `/tmp/vmware-config2/vmmon-only' make -C /lib/modules/2.6.20-14-386/build/include/.. SUBDIRS=$PWD SRCROOT=$PWD/. modules make[1]: Entering directory `/usr/src/linux-headers-2.6.20-14-386' CC [M] /tmp/vmware-config2/vmmon-only/linux/driver.o CC [M] /tmp/vmware-config2/vmmon-only/linux/hostif.o CC [M] /tmp/vmware-config2/vmmon-only/common/cpuid.o CC [M] /tmp/vmware-config2/vmmon-only/common/hash.o CC [M] /tmp/vmware-config2/vmmon-only/common/memtrack.o CC [M] /tmp/vmware-config2/vmmon-only/common/phystrack.o CC [M] /tmp/vmware-config2/vmmon-only/common/task.o CC [M] /tmp/vmware-config2/vmmon-only/common/vmx86.o CC [M] /tmp/vmware-config2/vmmon-only/vmcore/moduleloop.o LD [M] /tmp/vmware-config2/vmmon-only/vmmon.o Building modules, stage 2. MODPOST 1 modules CC /tmp/vmware-config2/vmmon-only/vmmon.mod.o LD [M] /tmp/vmware-config2/vmmon-only/vmmon.ko make[1]: Leaving directory `/usr/src/linux-headers-2.6.20-14-386' cp -f vmmon.ko ./../vmmon.o make: Leaving directory `/tmp/vmware-config2/vmmon-only' The module loads perfectly in the running kernel.

Finish up configuration and you're good to go. To start VMware, simply run vmware from the command line or from Applications > System Tools > VMware Server Console.

Earth Day

Hey everyone, for those who don't know, it's Earth Day today. Stop by Home Depot and get a free light bulb. Plant a tree, clean up some garbage, ride a bike, carpool, get out there (weather is great!) and have fun. Cheers :)

Technobabylon hacked??

So I hit up the Security Bloggers Network and what do I see? A post on Technobabylon with a bunch of penises (sp?) some Indian dude with a Swastika shirt, and a whole slew of personal infromation.. Someone doesn't like Ross Brown or eEye Digital Security... Here's what was posted since the site was taken down:

WhiteHat Manifesto: Life at eEye

[img removed]

Hi,

My name is Ross Brown, eEye Squirting Research CEO.

I'm an addict. I'm addicted to the same all-dancing, all-singing crap that this so-called "security industry" is made of. I sell utterly flawed products through my company and employ brilliant individuals such as Marc Maiffret who can't even read. I also work for the company who was behind Code Red and nowadays pretends to promote "responsible disclosure". We are nothing but blood sucking animals. We suck the motivation and altruism out of the really talented people, and turn them into industry whores.

We are the ones making this whole security consultant image. College degree, responsible individual with a dog and nice family, with a feminist girlfriend who buys "French donuts" and cracks you up every night. We are utterly hopeless, and thus we are being owned by crack commandos from outerspace.

We have tainted the whole thing already. We manipulate people through press releases, we release "0-day patches" and products that allegedly protect from the problems that "the bad guys" create. We are the ones who buy "exploits", information from third-parties and anything that can boost our market share by spreading fear. We create the problems for the solutions we sell. But we are retarded enough that our own products are flawed to their knees. A single look over their source code would cause you deadly diarrhea. I know this because Tyler knows this.

All we do now is blogging, "podcasting" and utterly gay crap. We would rather shut the fuck up but we feel like telling the world how bad h4x0rs are and how they can snap off your cybercock.

[img removed]

We invented beautiful terms such as "responsible disclosure", "vulnerability response time", "proof of concept", "penetration testing", "ethical hacking", etc. We also invented rubber fists, but that's another story.

I'm a whitehat and this is my manifesto. You may snap off my cock, but you may not stretch my anus with a rubber fist. You may release your evil 0days or own me with them. I'll stand anyway. Because I have no other intention than buying CANVAS licenses and IDA Pro (ah, we employ Andre Protas too, don't tell Ilfak about his leak of IDA Pro 5.0 Advanced to CRACKLab.ru). I have no other intention than fucking up the real sense behind this. I have no other intention than building up a industry based on fear and public relations. Space monkeys have been sent on mission. Fuck yeah, I pen-test the world, ethically!

[img removed]

More information: http://technobabylon.typepad.com

In the meanwhile, please contribute to eEye's "Save a Whitehat" campaign and share your credit card details with us:

Ross Brown American Express [cc# info removed]

[address removed]

Call me ASAP at my personal phone: [removed] Erotic line, 10 cents/min. Travesties and goats welcome.

rbrown@eeye.com - 60fdabb8659569b94166592e53876404 (I don't like threesomes)

Regards.

What's your favorite RE tool?

I'm looking for suggestions on any tools to reverse engineer programs for Windows based systems. I have the *nix and BSD bases covered; I'm just lacking a good, Windows toolkit. Particularly, tools to analyze memory, disassemble, debug, etc... I've heard positive reviews for IDA Pro, from DataRescue. Any other, [free] alternatives?

Post a comment here, I appreciate any feedback. Thanks :)

What happens when you wait until the last minute

People panic!

Last night, TurboTax was unavailable for people to file their taxes. The problems have been since resolved, but let it be a lesson to all of us that we cannot depend entirely on technology. Technology will eventually fail us, like it did so many people last night. Hopefully, those people have now learned that waiting until the last minute to hand something in as important as your taxes, should prioritize and get it done a couple weeks before the deadline. These aren't your library books you'll be fined a couple cents for, these are your taxes (you're only fined when you owe the government). Taxes suck, but they make our economy go 'round.

At school, we hand in assignments and sometimes take quizzes or tests online. At times, the servers have been known to go down and were unavailable around midnight on Sundays (usually when maintenance was being done). I'd get a message from a couple students CC'ing the entire class they couldn't get their work in on time. You know what? Tough.. If you had done it before you wouldn't be shitting your pants right now.

Regardless of the customers, TurboTax screwed up big time. Someone at TurboTax should know its market share. People waiting until the last minute is not news, and any company getting into such a business should know that.

Lessons of the day:

  1. Don't wait until the last minute to do anything
  2. Plan for the worst, and implement solutions to mitigate (in this case, heavy server loads)
  3. Let all of your customers know of any maintenance windows and any unexpected periods of downtime
  4. Availability, Availability, Availability!

See Slashdot for more commentary, and IRS on Filing Late Returns

« Newer entries — 37 — Older entries »

blog comments powered by Disqus