This got me thinking, what would my soundtrack for my show sound like. While this will probably change, and I only put a small amount of effort into it, for now this is my play list.

Looking At The World From The Bottom Of A Well – Mike Doughty
Nothing Left To Lose – Mat Kearney
King of the Rodeo – Kings of Leon
The Mob Goes Wild – Clutch
Don’t Wait – Dashboard Confessional
In The Beginning – K’Naan
Wow – Snow Patrol
Skinny Love – Bon Iver
Use Somebody – Kings Of Leon
Ooh La – The Kooks
Slow Down Chicago – Canasta

• Apple IIe (x2)
• Apple IIgs (x1) + (x1 Woz edition)
• Macintosh IIcx
• Macintosh Quadra 950
• Macintosh 7200/120
• Macintosh Beige G3 desktop
• Macintosh Blue & White G3 tower
• Macintosh  G4 tower

..and the list goes one. While I may repurpose a few of these boxes, (I have a project for the Macintosh IIcx) most will stay dormant in dust.

In the mean time I have found several old OSes on virtual appliances scattered across the interwebs. In the past liking BeOS, I have become fond of Haiku based on BeOS and usable on current hardware (i586 or newer). You can either grab an ISO or grab a VMware disk file (.vmdk).

While I havent used VMware in awhile, preferring Sun’s Virtualbox for the desktop without a web interface, one issue I have come across is the importing of VMware files into Virtualbox. If it was a OVF file this would be easy with the built in importer, but really, it’s just as easy with VMDK files.

Zero: Unpack your VMware disk to your Virtualbox disk folder.

One: Fire up Virtualbox and open the Virtual Media Manager.

Two: Click on ‘add’ then navigate to your VMware file, and click open.

Three: Create a new virtual machine, when you get to the disk creation step choose ‘existing disk’ and choose the VMware file.

Four: Boot your new VM and check to see if everything works, if so, you’re done!

Output:

sh-3.2# port install metasploit3

—>  Computing dependencies for metasploit3

—>  Verifying checksum(s) for rb-activesupport

Error: Checksum (md5) mismatch for activesupport-2.2.2.gem

Error: Checksum (sha1) mismatch for activesupport-2.2.2.gem

Error: Checksum (rmd160) mismatch for activesupport-2.2.2.gem

Error: Target org.macports.checksum returned: Unable to verify file checksums

Error: The following dependencies failed to build: rb-rails rb-actionmailer rb-actionpack rb-activesupport rb-activerecord rb-activeresource rb-rake rb-sqlite3

Error: Status 1 encountered during processing.

Update:

I can only assume the package was not compromised, and a stealth update was done. The Md5 was still a mismatch. So, in turn I uninstalled all of rb-*, ruby, and metasploit2, metasploit3. Cleaned everything, then reinstalled. As done on the commands below.

sh-3.2# port -u uninstall rb-* metasploit2 metasploit3 ruby && port clean –all ruby rb-* metasploit2 metasploit3 && port install -f -p ruby metasploit3

After Macports was done with this, All worked fine. One side note, if you want to have both metaspoit2 and metsploit3, since some exploits work better on older versions, you will need to deactivate metasploit3 to use metasploit2 and vice versa. FYI.

This mug is about as old as I am, if not older (mid > late 70’s to late 80’s). Has no markings, and is ceramic. If anyone out there has information on these mugs, and I know they had plates, & bowls too, I would like to know more, and would be looking to buy one or two, if possible.

Below is an image of the cup, the crack, can’t be seen well in the brown area.

Account status audio

Having a current account, he was unsure why his service was turned off with no warning. AT&T wanted him to call 611, but his iPhone would not let him call AT&T or use the automated system any more than to get an account balance.

In turn he had to use my T-Mobile Android device to finally call AT&T to get them to fix his account.

AT&T eventually fixed the issue, with service restored minutes later, but as to why this happened to his account, AT&T was clueless, as well as us.

Below is the chat transcript of the automated system, for those of you resistant to listen to the audio, or can’t.

Transcript:

We’re sorry but your service has been temporarily suspended, due to a past due balance on your account.

[Spanish]

[System Pause]

To restore your wireless service, a payment is due immediately, you will also be charged a fee up to $36 on your next bill to reconnect your wireless service. If you would like AT&T’s express pay line for wireless services, to make a payment now, press 1.

You can also make a payment…

[Pressed 1]

Your account has a zero balance. No payment is due at this time.

To repeat this information press star.

[Pressed Star]

Your account has a zero balance. No payment is due at this time.

To repeat this information press star.

Thank you for calling the new AT&T about your wireless service, goodbye!

[End of Call]

The Academy Pro: Free training videos on various software and techniques, such as firewalls, pen-testing, operating systems & more!

Arch Linux: a fast, lightweight, simple and current Linux distro, of which I am a convert to. Give it a go!

imeem: Normally a Last.fm user, but I signed up recently and like it so far, go check it out. They have an Android client too!

<dualcore>: Speaking of music, check out Dual Core, h@xor teh beats!

“A password reset is time-consuming. Please make every effort to remember your password. It is best to develop a secure storage location, such as a password-protected Word file, for all of your passwords.“

You may remove your palm from your face now….

Where do I start? Lets start with the basics.

First, you should be using complex passwords, passwords with length, and they should be changed often. When I say ‘complex’ I mean a passwords with numbers, letters (both upper case and lower,) use special characters like colons, commas, and percent signs. Your password should never have dictionary words in it, or consecutive letters or numbers. Also the longer the better. (That’s what she said!)

Finally change your passwords often, every month, 60 or 90 days.

Here are some bad passwords:

love
sex
secret
password
god

Here are some good passwords:

Eu6xqm4b
NmPL92d6
hNjPwE58
Ea7xS8hJ
Fysn6H8U

Here are better passwords:

dfp#=;vE63]u(7
p5(V!HQs]W26%u
L=?t(NA2S:QGyr
X7]@dw2k6K;B89
EH%2=7b(nCX9Pm

Here are the best passwords:

b3V4TYu]yxskPcUv?L)E
zYt*EbsTr@Q[nA3R?v45
k=pKh87dDxrB]46+Qbv2
k=4%8JXwK7j-NR]p;Won
x.](7e546uQfPTJE,%;h

Also, don’t have one password for everything. Have a different passwords for each service/system you use, in case one system in compromised, your whole life won’t be.

Create ‘throw away’ passwords, something simple for those times when you are going to be using it once for something non-critical.

Never give your passwords to anyone! Tech support should never need to ask for your passwords, if they do, enter it yourself, never write it down on a post-it note.

It is a good idea to remember your passwords, unless some one has figured out how to implant a USB device into your brain stem, and access the nether regions of your gray matter, they will be safest there. If, for some reason you can’t count on your memory use a program like Truecrypt to create a secure, portable volume, which can be encrypted, and, if lost will take an attacker (if the Truecrypt volume was properly setup) decades or centuries to crack.

If possible, use two form authentication for your services, some credit cards and even PayPal offer a RSA like token for an extra layer of security.

If possible never use public computer systems where you data might be stored for someone else to look at like cookies, or browsing history, these systems may have spyware or key loggers to capture our passwords or activities. If you do use a public computer system, change you passwords as soon as possible after.

This is just the start of good password use, but remember if it looks fishy, trust yourself and not the system.

]]> http://www.fiberoverethernet.com/?feed=rss2&p=367 0