yum install tftp-server dhcp syslinux

#Edit the dhcp.conf file
vi /etc/dhcpd.conf

The dhcpd.conf assumes that the network’s IP address scheme is 192.168.0.0/24 with a router (with DHCP enabled) at the IP address 192.168.0.1 and the PXE boot server at 192.168.0.21.

If the PXE boot server and other computers are connected to a switch, then remove next-server and add in the IP address of the PXE boot server into option routers

ddns-update-style none;
allow bootp;
allow booting;
subnet 192.168.0.0 netmask 255.255.255.0
{
	range 192.168.0.30 192.168.0.39;
	option subnet-mask 255.255.255.0;
	option broadcast-address 192.168.0.255;
	option routers 192.168.0.1;
	next-server 192.168.0.21;
	filename "pxelinux.0"
}

#Make sure there is no error in dhcpd.conf
dhcpd -t /etc/dhcpd.conf

#Start dhcpd
service dhcpd start

#Edit xinetd.d/tftp
vi /etc/xinetd.d/tftp

disable = no

service xinetd restart

#Copy the files below to the tftpboot directory
cp /usr/lib/syslinux/pxelinux.0 /tftpboot
cp /usr/lib/syslinux/menu.c32 /tftpboot
cp /usr/lib/syslinux/memdisk /tftpboot
cp /usr/lib/syslinux/mboot.c32 /tftpboot
cp /usr/lib/syslinux/chain.c32 /tftpboot

#Make a directory so you can boot FreeDOS
mkdir /tftpboot/images
mkdir /tftpboot/images/hdderase

#Upload the FreeDOS fdboot.img and hdderase.exe, mount the image before copy hdderase over to it. Copy fdboot.img to the /tftpboot/images/hdderase directory.
mkdir /media/floppy
mount -t vfat -o loop fdboot.img /media/floppy
cp /root/hdderase.exe /media/floppy
umount /mnt/floppy

#Create a PXE boot menu.
mkdir /tftpboot/pxelinux.cfg
vi /tftpboot/pxelinux.cfg/default

default menu.c32
prompt 0

menu title PXE Boot Menu

LABEL hdderase
menu label HDD Erase
kernel memdisk
append iso initrd=images/hdderase/fdboot.img

[mysqld]
default_storage_engine=INNODB

My setup:

• Windows Server 2008 R2 Enterprise
• VMware Workstation 7.1.4 build-385536
• Exchange Server 2010 SP1

*Windows Server 2008 R2 Enterprise (with AD DS) is running as a virtual machine in VMware Workstation.
**Client Access, Hub Transport, and Mailbox roles will be installed for Exchange.

Steps:

1. Get the latest patches and updates with Windows Update
2. Install the Office 2010 Filter Pack.
3. Make sure the administrator account installing Exchange is a member of “Enterprise Admins” and “Schema Admins”.
4. Copy the following below into PowerShell:
• Import-Module ServerManagerAdd-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,RPC-Over-HTTP-Proxy -Restart
5. In the command prompt, go to the Exchange install CD and run the following:
• setup /PrepareSchema
• setup /PrepareAD /OrganizationName:Organization_Name_Goes_Here
• setup /PrepareDomain
6. Run setup.exe and proceed with the remaining steps.
7. After the installation is complete for Exchange, check in Server Manager that the WimRM IIS Extension feature is installed (without it I got an error message when I tried to enter in the Exchange product key in the Exchange Management Console).

Screenshots from the installation below (self-explanatory):

service NetworkManager stop
chkconfig NetworkManager off

service network restart
chkconfig network on

vi /etc/sysconfig/network-scripts/ifcfg-eth0
ONBOOT=yes

#Example of a temporary way of configuring a static IP address (it is lost on restart):

ifconfig eth0 down
ifconfig eth0 192.168.0.40 netmask 255.255.255.0
ifconfig eth0 up
route add default gw 192.168.0.1

Setup:
OS = CentOS 5.6 x86-64 (one running in vSphere, the other in VMware Workstation)
Network = 192.168.0.0/24
Replication Master IP address = 192.168.0.21
Replication Slave IP address = 192.168.0.25

#######Replication – Master#######

#Verify that SSL is enabled.

mysql -u root -p

show variables like '%ssl%';

#Enable SSL by adding ‘ssl’ (without the quotes) in the section under [mysqld]

service mysqld restart

#Create a directory, log file, and change the ownership

mkdir /var/log/mysql
touch /var/log/mysql/mysql-bin.log
chown -R mysql:mysql /var/log/mysql

#Create a self-signed CA

openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout root-ca.key -out root-ca.crt

#Create and sign a certificate for the replication MASTER

openssl req -newkey rsa:2048 -days 365 -nodes -keyout master-db.key -out master-db.csr
openssl x509 -req -in master-db.csr -days 365 -CA root-ca.crt -CAkey root-ca.key -set_serial 01 -out master-db.crt

#Create and sign a certificate for the replication SLAVE

openssl req -newkey rsa:2048 -days 365 -nodes -keyout slave-db.key -out slave-db.csr
openssl x509 -req -in slave-db.csr -days 365 -CA root-ca.crt -CAkey root-ca.key -set_serial 01 -out slave-db.crt

Copy root-ca.crt, slave-db.key, and slave-db.crt to the replication slave

scp root-ca.crt root@192.168.0.25:/root
scp slave-db.crt root@192.168.0.25:/root
scp slave-db.key root@192.168.0.25:/root

Edit my.cnf

vi /etc/my.cnf

#Add the follwoing under [mysqld]
server-id=1
log_bin=/var/log/mysql/mysql-bin.log
expire_logs_days = 10
max_binlog_size = 100M
binlog_ignore_db = mysql

ssl-ca="/etc/mysql/openssl/root-ca.crt"
ssl-cert="/etc/mysql/openssl/master-db.cert"
ssl-key="/etc/mysql/openssl/master-db.key"
ssl-cipher=DHE-RSA-AES256-SHA

Create an account for the replication slave.

mysql -u root -p

GRANT REPLICATION SLAVE ON *.* TO 'replication_user'@'%' IDENTIFIED BY 'averysecurepassword' REQUIRE SSL;
FLUSH PRIVILEGES;

#######Replication – Slave#######

#Edit my.cnf

vi /etc/my.cnf

#Add the following under [mysqld]
server-id=2
read_only
[/text]
1service mysqld restart

#Configure MySQL to be replication slave

mysql -u root -p

CHANGE MASTER TO
MASTER_HOST='192.168.0.21',
MASTER_USER='replication_user',
MASTER_PASSWORD='averysecurepassword',
MASTER_LOG_FILE='mysql-bin.000001',
MASTER_LOG_POS=98,
MASTER_SSL=1,
MASTER_SSL_CA='/root/root-ca.crt',
MASTER_SSL_CERT='/root/slave-db.crt',
MASTER_SSL_KEY='/root/slave-db.key',
MASTER_SSL_CIPHER='DHE-RSA-AES256-SHA';

START SLAVE;
SHOW SLAVE STATUS \G;

#Create and configure the named.conf file

vi /var/named/chroot/etc/named.conf

options{
	recursion no;
	version "Guess";
	directory "/var/named";
	allow-transfer {"none";};
	allow-query{
		127.0.0.1;
		192.168.0.0/24;
	};

	listen-on port 53 {any;};
};

#Create and configure the forward zone file:

vi /var/named/chroot/var/named/nguyen.home.zone

$ORIGIN example.com.
$TTL 1D; Default TTL value for the zone
@ IN SOA ns1.example.com. admin.example.com. (
20110514; Serial Number in YYYYMMDD format
3H; Time to refresh - 3 hours
1H; Time to retry - 1 hour
1W; Time to expire - 1 week
1D); Minimum TTL - 1 day

@ IN NS ns1.example.com.
ns1 IN A 192.168.0.21

linksys-router IN A 192.168.0.1

#Create and configure the reverse zone file:

vi /var/named/chroot/var/named/example.com.rr.zone

$ORIGIN 0.168.192.in-addr.arpa.
$TTL 3D
@ IN SOA ns1.example.com. hostmaster.example.com. (
20110514 ; Serial, todays date + todays serial
8H ; Refresh
2H ; Retry
4W ; Expire
1D) ; Minimum TTL

	NS ns1. ; VERY IMPORTANT TO HAVE TAB BEFORE NS!

1 PTR linksys-router.example.com.

#Add the forward and reverse zones into named.conf:

vi /var/named/chroot/etc/named.conf

zone "example.com" IN {
type master;
file "example.com.zone";
allow-update { none; };
};

zone "0.168.192.in-addr.arpa" IN {
type master;
file "example.com.rr.zone";
allow-update {none;};
};

service named start
chkconfig named on

OS used = CentOS 5.6 x86-64
Postfix and Dovecot with SASL authentication and TLS encryption

yum remove sendmail
yum install dovecot postfix

Check the status, start, restart, and stop Postfix

service postfix status
service postfix start
service postfix restart
service postfix stop

# Edit main.cf

vi /etc/postfix/main.cf

myhostname = mail.example.home
mydomain = example.home
myorigin = $mydomain
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mynetworks = 192.168.1.0/24, 127.0.0.0/8
relay_domains =
home_mailbox = Maildir/

#Postfix SASL authentication setup

smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous, noplaintext
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

#Generate a self-signed certificate for Postfix

openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout /etc/pki/tls/private/postfix.key -out /etc/pki/tls/certs/postfix.crt

#Enable TLS encryption for Postfix

smtpd_tls_key_file = etc/pki/tls/private/postfix.key
smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.crt

smtpd_tls_ciphers = high
smtpd_tls_protocols = TLSv1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_protocols = TLSv1

smtpd_tls_loglevel = 1
smtpd_tls_auth_only = yes
smtpd_tls_security_level = encrypt
tls_random_source = dev:/dev/urandom
smtpd_sasl_tls_security_options = noanonymous, noplaintext
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_cache

========================================================
Check the status, start, restart, and stop Dovecot

service dovecot status
service dovecot start
service dovecot restart
service dovecot stop

#Generate self-signed certificates for dovecot

openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout /etc/pki/tls/private/dovecot.key -out /etc/pki/tls/certs/dovecot.crt
chown root:root /etc/pki/tls/private/dovecot.key
chmod 400 /etc/pki/tls/private/dovecot.key
chown root:root /etc/pki/tls/certs/dovecot.crt
chmod 444 /etc/pki/tls/certs/dovecot.crt

Edit dovecot.conf

vi /etc/dovecot.conf

ssl = yes
protocols = imaps
ssl_cert = /root/dovecot.crt
ssl_key = /root/dovecot.key
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL

mail_location = maildir:~/Maildir
pop3_uidl_format = %08Xu%08Xv

# Required on x86_64 kernels
login_process_size = 64

========================================================

A simple script to create users

#!/bin/bash
echo Please enter a username:
read USERNAME
useradd $USERNAME
echo Please set the password:
passwd $USERNAME
mkdir /home/$USERNAME/Maildir
chown $USERNAME:$USERNAME /home/$USERNAME/Maildir
chmod -R 700 /home/$USERNAME/Maildir

yum install vsftpd

Start, stop, restart, and check the status of vsftpd

service vsftpd start
service vsftpd stop
service vsftpd restart
service vsftpd status

Location of vsftpd.conf

/etc/vsftpd/vsftpd.conf

Verify that vsftpd can support SSL

ldd /usr/sbin/vsftpd | grep libssl

Backup the original vsftpd.conf

cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf.bak

Edit vsftpd.conf

vi /etc/vsftpd/vsftpd.conf

Encrypt the FTP connection
Use openSSL to generate a self-signed 2048-bit RSA certificate with a lifetime of 365 days

openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout /etc/vsftpd/vsftpd.key -out /etc/vsftpd/vsftpd.crt

chmod 600  /etc/vsftpd/vsftpd.key
chmod 600  /etc/vsftpd/vsftpd.crt

Edit vsftpd.conf

ssl_enable=YES
ssl_sslv2=NO
ssl_sslv3=NO
ssl_tlsv1=YES

#Some ciphers you can use:
#RC4-MD5,RC4-SHA,AES128-SHA,AES256-SHA
#Use AES256-SHA if you are paranoid
ssl_ciphers=AES256-SHA

rsa_cert_file=/etc/vsftpd/vsftpd.crt
rsa_private_key_file=/etc/vsftpd/vsftpd.key

#Both login and file transfers are encrypted
force_local_logins_ssl=YES
force_local_data_ssl=YES

#Both login and file transfers are encrypted
allow_anon_ssl=YES
force_anon_logins_ssl=YES
force_anon_data_ssl=YES

Misc. options to add to vsftpd.conf

hide_ids=YES
force_dot_files=YES

#Directory for anonymous users
anon_root=/var/ftp/pub

#Uncomment to set the welcome banner
#banner_file=

#Allow/disallow anonymous users
anonymous_enable=YES

#Passive mode options
pasv_enable=YES
#pasv_addr_resolv=NO
#pasv_address=
#pasv_min_port=
#pasv_max_port=

Requirements:

-Slysoft's AnyDVD
-MakeMKV
-An optical disc drive that can read Blu-ray/DVD discs
-Lots of hard drive space
-A brain (a big FUCK YOU to those that don't use their gray matter and can't figure things out but instead ask STUPID questions online)

The trial version of AnyDVD can be used to rip DVDs (it’s great because it is constantly updated to handle DVD that may come with protection such as Disney’s Tangled). If I had the money, I’d purchase the AnyDVD HD version to rip Blu-rays as well.

To rip Blu-rays, use MakeMKV’s “Backup disc” option to have the entire disc decrypted and copied into the hard drive.

Don’t bother asking about it online. . .but yes you can copy the discs that you rented (and it is cheaper too)

http://www.rovio.com/index.php?page=privacy-policy

An excerpt of the privacy policy as of 24MAR2011:

Personal Data:

Rovio does not collect or use any personal data that may be used to identify or contact you. Rovio does not collect or use names, email addresses, photos, telephone numbers, credit cards numbers, account numbers or other information that would enable Rovio to identify you.

Non-personal data:

Rovio may use tools or third party analytical software to collect and use certain non-personal data that does not enable Rovio to identify you. The types of non-personal data Rovio may collect and use include, but are not limited to: (i) mobile device type and device properties; (ii) mobile device software platform and firmware; (iii) mobile phone carrier; (iv) geographical data no more accurate that metropolitan areas; (v) gamescore and achievements; (vi) other non-personal data as reasonably required by Rovio to enhance its services.

Rovio may use the collected data for purposes of analyzing usage of Angry Birds, managing and providing Angry Birds and to further develop Rovio’s services and products. Rovio reserves the right to use and disclose the collected non-personal data for purposes of advertisement by Rovio or Rovio’s partners.

Data Retention:

Rovio retains the information collected pursuant to this Privacy Policy for 12 months. Thereafter if the collected information if no longer needed for purposes specified in this Privacy Policy, Rovio shall delete all aforementioned information in its possession.

So, I was bored today and decided to fire up BT4 and use airodump to sniff my neighbor’s unencrypted wifi. People these days are so FUCKING STUPID when it comes to wireless security. The average Joe wastes a bunch of time twittering and Facebooking (is that even a word?) but don’t know shit about how the Internet works, how to build a computer, or how to secure a wireless network.

Anyway, my family is in possession of an iPad and someone loaded the Angry Birds (regular and the seasons) free version onto it. So the iPad was connected to my neighbor’s wifi and after looking at the airodump capture with Wireshark, I noticed that there was a strange file named aap.do. I decided to right-click and “Follow TCP stream” to see what its contents are. It turns out that someone in my family was playing Angry Birds Seasons on the iPad and connected to my neighbor’s wifi.

The aap.do file is sent to

data.flurry.com

with the application name and version in the user-agent field.

User-Agent=AngryBirdsSeasonsHDFree/1.2.0

The file’s contents seems to consist of the level(s) attempted, the number of birds used/available, whether the level was completed/failed/restarted, and the menu used (like levelselection, failed, paused, or completed). “levelselection” is spelled that way in the file.

Flurry seems to be a company that collects data on mobile applications and has offices in San Francisco and New York. If one was to go to

data.flurry.com

then there would be a simple message saying:

Nothing to see here, please move along.

I don’t know if it is a privacy concern to anyone out there, but it is apparent that Angry Birds sends unencrypted data back to Flurry on game usage (I am pretty sure it is not the only one app to do so).