Thursday, October 4, 2012

How to use the System File Checker in Windows 7 and Windows Vista

About System File Checker

Sometimes, you wonder why your Windows computer doesn't cooperate and loads in a way that scares you. You might also get a message saying "Error loading XXXXX.DLL," or an icon becomes so arrogant it won't do a single thing even if you click it a million times. Can you related to this? Frustrating indeed.

I haved moved the original post to a more appropriate blog called
The How to Helpdesk - http://how-to-helpdesk.blogspot.com.au/

Please visit and see topics about windows utilities, tips, and tutorials.

Monday, October 1, 2012

Best Anti-Malware Defense for your PC? - A Review of Comodo Internet Security Complete 2012

After being plunged into the world of information security, I became more serious about my choice of free anti-malware programs. Yes, I am kinda thrifty (or cheap if you want to call me that).


I have moved the original post to a more appropriate blog called:
Cyber Security Reviews  - http://cybersecurity-reviews.blogspot.com.au/.

I found Entreprengineering to be a bit chaotic as it represents all my random thoughts. But since most readers prefer to look for specialized topics, I have a created different blogs to suite their needs. Cyber Security Reviews will focus more on cyber security topics (security news, tips, books reviews, software reviews, etc...)

Monday, September 24, 2012

A Look at CertifyDumps:A Home for Successful Certification Training


Looking for sample CCNA exam questions/answers? CertifyDumps might be the answer to your problem. I haven't tried them yet, but they have sample exams from different vendors like Cisco, SAP, VMware, etc..

Can someone out there give some inputs on the quality of materials that they have?

Below is taken from their website.
Certify Dumps is the best resource available online today for IT Professionals who wish to get certified instantaneously by achieving their desired IT certifications from different Certification vendors. Here at Certifydumps, we offer exclusive IT Certification Training Tools including Practice Questions & Answers with Explanations and Study Guides. Our advanced training tools are optimized for bringing you fastest success rate in any IT Certification Exams.
With thousands of satisfied clients, Certify Dumps is your ultimate Training resource for every major vendor and their Certification Exams. We stay ahead of the crowd with the latest and most accurate Questions and Answers. You can use our study guides anywhere you want for reference or for a comprehensive Certification preparation.
Below is a link to their website.

Cerify Dumps: A Home for Successful Certification Training

Book Review: The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws

I just read the Dafydd Stuttard's 2nd edition of The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws. I've read many book on penetration testing. But this one takes the lead as far as securing your web applications go.

I have moved the original post to a more appropriate blog called:
Cyber Security Reviews  - http://cybersecurity-reviews.blogspot.com.au/.

I found Entreprengineering to be a bit chaotic as it represents all my random thoughts. But since most readers prefer to look for specialized topics, I have a created different blogs to suite their needs. Cyber Security Reviews will focus more on cyber security topics (security news, tips, books reviews, software reviews, etc...)

Friday, September 14, 2012

Microsoft Disrupts the Emerging Nitol Botnet

Way to go Microsoft! Good job.

Microsoft has yet again stopped another botnet from spreading. This time, it's Nitol. It's the second botnet stopped in the last six months.


Check out the link to the Official Microsoft Blog.

Monday, April 23, 2012

Paranoia and Security

With all the havoc and mayhem happening in cyberspace these days, what do people still think of security? Is it still feasible/achievable? Should we still even care about it? Should we change our attitude towards security? 

One quote strikes me and I'll share it below:

"The only system which is truly secure is one which is switched off and unplugged, locked in a titanium lined safe, buried in a concrete bunker, and is surrounded by nerve gas and very highly paid armed guards. Even then, I wouldn't stake my life on it."

-- Gene Spafford, Director, Computer Operations, Audit, and Security Technology (COAST) Project, Purdue University

I don't think Mr. Spafford was really saying that security is unattainable. Well, maybe he was. But the message is to take security seriously and not to be complacent at all. Security professionals, especially the ones protecting the perimeter, should have a healthy dash of paranoia sprinkled on their psyche.




Thursday, April 19, 2012

Kompozer

Do you wan to create and edit web pages like they are office documents? Then look no further... Kompozetr offers the ease of use which you need to start creating and editing web pages immediately.

Kompozer's Screenshot

One can download Kompozer here. Another window will open after you click this.You will see that it is a free and open source software, so please feel free to support the project. This will really help the developers to create better versions of this tool.

Below is a series of video tutorials in YouTube.








Have fun and start creating your first website!

Wednesday, February 1, 2012

Notes on Understanding TCP SYN Flooding Attacks

The basis of the SYN flooding attack lies in the flaw of how the 3-way handshake initiates. The 3-way handshake is initiated at the start of a TCP connection. The third packet which completes the handshake, confirms the source's ability to receive packets at the IP address it used.

The key to success in this DoS attack is the Transmission Control Block (TCB). The TCB is a data set of structures in operations systems that holds all the information about a connection. Each TCB > 280 bytes, and can exceed 1300 bytes in other operating systems. After the first part of the 3-way hand-shake is finished, the connection is only half-open. TheIt is very important to note is that the TCB is already allocated based on reception of the SYN packet— before the connection is fully established.

 A flood of incoming SYN requests can cause the allocation of so many TCBs such that  a host's kernel memory becomes exhausted. Although there is a backlog mechanism in most operating systems, this can easily be filled up. Thus, new requests cannot be served until some TCBs can be freed up from the half open connection state.

Since TCP protocol is designed for reliability, the target host tends to wait for a long time with the half-open connections, until the 3-way handshake is completed. 

More on this article right here from Cisco.

Monday, March 21, 2011

1st Semester Performance

Finally got all my grades! So far, so good... I got all 1's!!! =)

The following are subjects which I personally feel deserve some particular attention:

Most challenging subjects - gave me a really hard time like all of my classmates:
  • Network Planning
  • Service Provisioning
  • Data Center Computing
Most interesting ones - these are areas which really grab my attention and curiosity:
  • Network Planning
  • Telecom and Internet Platforms
  • IP Security in Heterogeneous Networks
  • Linux Networks
Subjects I need to drill deeper in:
IP Security in Heterogenous Networks
Data Center Computing

As I went through the first semester, I looked at all my strengths and my interests. I think I would like to be in IT security. In cyberspace, heroes and villains also exist. And they will always be in a struggle, trying to outdo each other. Hence, I'm going to focus my thesis around the area of Web Applications security.

Prerequisites? Programming could be one. I guess it's time that I learn another language here in Austria aside from German.

Monday, January 31, 2011

End of My First Semester

Finally, my first semester ended! After4 months of struggle, pain, torture, peace and quiet arrive to give me a chance to recuperate my fighting spirit and gain back my energies. The semester didn't quite end all glorious and triumphant for me. Instead it ended rather quite painfully.

The load balancing exam hit my glass house with a solid brick and sent me crashing back to reality. All the 1's I earned so far, gave me a false sense of accomplishment and a consequential feeling of confidence. But this last exam just ripped my lovely cheerful painting to tiny little pieces. Looking back, it should have been easy. But I guess when you don't really use the Big IP software, 40 minutes of practical exam could be torture.

Although one final exam remains,  I don't have to go all the way to school. This one will be about network planning and telecommunications platforms. This was like having the CCNA course compressed to just about 6 3-hour sessions, and this already includes laboratory work. 

My instructor  thinks it won't be an easy exam, and so do all of my colleagues. I won't be taking my chances on this one. 

Let's see:

Command Line Interface;
Setting up console, telnet, and enable passwords for Router and Switches;
Setting up ip addresses for interfaces;
Static routing;
Dynamic routing;
VLANs and intra-vlan-routing;
Open Shortest Path First (OSPF);
Both versions of RIP;
Spanning Tree Protocol (STP) and Spanning Tree Protocol (RSTP);
Domain Name System (DNS);
Dynamic Host Control Protocol (DHCP);
Subnetting;
Classless Interdomain Routing (CIDR)/ Supernetting;
Variable Length Subnet Mask (VLSM);
Access Control Lists (ACL);
and Dijkstra algorith.

Looks like it's gonna be tough... 

But what would Hanzo do?


Monday, November 29, 2010

Some Notes on Using Crossover or Straight-through Ethernet Cables

UTP Cables for 10BASE-T and 100BASE-TXJust to make it easier for me to remember how cabling works specifically for Crossover and Straight-through I've decided to jot down a few notes for quick reference...


Ethernet straight-through cable connects using the following combinations:
  • Switch to Router
  • Switch to PC or Server
  • Switch to WAP (Ethernet interface)
  • Switch to LAN Networked printer
  • Hub to PC or Server
  • Hub to Router
  • Hub to WAP (Ethernet interface)
  • Hub to LAN Networked printer

    Ethernet crossover cable connects the following:
    • PC to PC, Server to Server, PC to Server
    • Hub to Hub
    • Switch to Switch
    • Switch to Hub
    • Router to Router
    • Router to PC, Server
    • Router to WAP (Ethernet interface)
    • Router to LAN Networked printer
    • PC or Server to LAN Networked printer
    • PC or Server to WAP (Ethernet interface)
    • LAN Networked printer to WAP (Ethernet interface)
    • WAP (Ethernet Interface) to WAP (Ethernet interface)

    It may also help to think of it using the following tables :

    Devices That Transmit on pins 1,2 and Receive on 3,6
    • PC, Servers
    • Routers
    • WAPs (Ethernet interface)
    • LAN Networked printers
    Devices That Transmit on pins 3,6 and Receive on 1,2
    • Hubs
    • Switches
    A device connected to another device using the same pin assignments must use a crossover cable, otherwise use a straight-through cable.


    A simpler way:



    Crossover Cable
    Switch-Switch
    Switch-Hub
    Hub-Hub
    Router-Router
    PC-Router
    PC-PC

    Straight-Through Cable
    Router-Switch
    PC-Switch
    Server-Switch
    PC-Hub
    Server-Hub

    Why Facebook Wants Your E-Mail

    Why Facebook Wants Your E-Mail
    Published with Blogger-droid v1.6.5

    Saturday, September 18, 2010

    My First Week in my Telecommunications and Internet Technologies Class

    I never thought I'd say this, but my first week wasn't exactly a walk in the park. I have a few things against me:

    • The instructors had a "European" English accent, the kind that girls in the US probably think is cute. I find it hard to understand them, given that I grew up watching Hollywood.films. I bet it wasn't easy for my American classmate as well, who by the way, is from Kansas. Yes, think of Dorothy and Toto. Howdy pardner!
    • I was the only one with a non-IT background. The rest of my classmates graduated from Internet Technologies, Computer Networking, Electrical Engineering, etc... courses. When it was my time to introduce myself, I managed to blurt out that I graduated with a Chemical Engineering Degree and have no background in IT. I did say that I have a very strong interest in learning about telecommunications and internet technologies. That managed to draw some looks that seems to say"Huh?! Are you sure you want to be here?!"
    • Hunger. The moment I leave work, I have to move it and get going. I have an hour to get to class.It turned out that my classmates don't seem to mind not eating. I can't do that. Food is my fuel. It gives me energy for physical and mental work. Our class is from 6pm to 9pm, and it seems like we have nor breaks. I need to eat something while I commute to class. A sandwich... maybe a nice juicy burger. There is just no other way to do it if I want to arrive in class on time.
    These are a few of those things. It seems I have a lot of catching up to do....

    So let's go! (in Zohan accent)

    Thursday, September 16, 2010

    My IT Battleplan

    In every war, there should always be a battle plan. As quoted from the Art of War by Sun Tzu:

    "Hence the saying:  The enlightened ruler lays his plans well ahead; 
    the good general cultivates his resources."
     
    I'm no soldier. Just an Entreprengineer. I have limited time on my hands, but 
    I want to live a balanced life. Man is afterall, multi-dimensional. Therefore, 
    have no to make use of plans and force myself to execute them as violently as I can.
     
     Let me see:
     
    
    • Learn new CMS. I decided it will have to be Joomla! for now.

    • Get a degree in Telecommunications and Internet Technology. 


    • Study Internetworking via Cisco's CCNA (Cisco Certified Networking Associate). 
    • Get myself CCNA certified (Thanks to Dennis and Arnold for introducing me to this wonderful company)
     





    I hope to finish all these in 2-3 years through professional and educational institutions. I already enrolled myself in a specialized university here in  Vienna which thankfully teach in English (I imagine myself to be totally devastated, defeated, and broken if these courses were taught in German. I can speak Deutsch but just a little. I frankly sound like a preschooler, but it get me by for now.

    Hmm... so far the plans looks all good from here. The question remains if I am really built for this. Let's see if the Entreprengineer can make it in IT.

    Wednesday, September 1, 2010

    How do I start Trading Stocks?

    This is a question I always get from everyone I know who's interested in learning about stock trading in the Philippines. I'll share what I know about the Phil Stock Market and how to trade it.

    I've actually began my adventure from learning about financial planning before trying to master stock trading. I have to insist that everyone learn this first. It will lay down your financial foundation and protect you from your inner greed. Everyone has one.That's also the reason why not many succeed in stock trading.
     
    Let's begin by reviewing the basics. I have an article on this somewhere on this blog. Oh well, let me

     
    1. Insurance - Protect the goose which lays the golden eggs. No goose, no golden eggs. Of course, that goose is  you. When the unforeseeable happens, you should also be ready for the defense. We all die, we all can have accidents. No one is exempted.  Only immortals don't die. You should prepare for this just in case.
     
    2. Debt management - To maximize growth, eliminate negative interest-bearing instruments first. Debt. You can't grow a 20% annual interest investment with a 36% yearly interest of debt. Eliminate debt. Otherwise, the negative interest on your credit card will just eat up whatever you earn from investments.
     
    3. Emergency fund - This should be 6 months to one year of living expenses (depends on where you are). In the Philippines, we compute it to be 6 months. How does this work? When you get laid off or if your business loses money, you still have some money to recover from such a disaster. It will cover your expenses while you look for a new job or start a new business. It will also cover other "emergencies" like medical expenses when necessary. This way, you don't have to apply for more debt or touch your investments.
     
    4. Investments - mutual funds, ITF's, stocks, etc... This is mostly done after you have covered the first three.
    So please keep these in mind before going into stocks. 

    Here are useful news resoureces.

    For news (they serve as catalysts):
     

    http://business.inquirer.net/ - and other local business news sites are ok.
     
    For international news, I use the following:
     
     International events have an impact on investor/trader sentiments, and can be used as signal for entry/exit  points while trading.
     
     There are two major philosophies in trading. Technical and Fundamental analysis. Technical analysts follow price movements, chart patterns, etc... to determine valid entry and exit points while trading. Fundamental analysts need to know what caused these price movements and gauge if the current stock price is cheap or expensive based on business fundamentals. One of the most famous and successful user of fundamental analysis is Warren Buffet, one of the world's richest men. He's known to have built his wealth purely from investing in stocks.


     
    If you want to learn technical analysis check out these links I found on the web.

    http://www.informedtrades.com/trades.php?page=school
    http://www.swing-trade-stocks.com/
    http://thepatternsite.com/

    There are more but these are the coolest ones.

    For the Philippine Stock Exchange and PSE graphs:
    http://www.pse.com.ph/

    There's even a cool Pinoy Community with seasoned traders, brokers, or fund managers willing to help out.
    You can check from the Online Trading and Brokerage Feedback Topics for advice on which
    companies you can use.

    http://financemanila.net/ - the forum is where most of the veteran traders hang out
    http://www.traderspizza.com - another nice forum with its own gurus as well.

    http://tsupitero.com/selection.htm - the broker (you can find his profile on this page too) he hangs out at financemanila.net as well

    I only use BPI Trade but they said COL is better (they have their own graphs and tools). I might shift to COL as soon as I get back to the Philippines. If you want to open a BPI Trade account, ask the nearest BPI near you on how to open one.
     
    Below is Citiseconline's website.

    https://www.citiseconline.com/


    Of course we can then chat, and share trades and learn which are possibly good ones or not. 
     
    Good luck on your trading!

    Thursday, August 26, 2010

    Content Management System

    I have been recently tasked at work to make a website for the company I work for. And to be honest, I had zero experience in making a website from scratch. The only thing I knew was to make blogs from Blogger, Wordpress, and Multiply.

    Luckily for me, I found out that Wordpress has CMS (Content Management System), which is also offered by Joomla and Drupal. And to top it off, all three are open-source, which is a fancy term for being free. BTW, I am sure there are others out there but these three came out on top.

    In case you don't know what CMS means, Webopedia has the definition as follows:

    Abbreviated as CMS, a content management system, also called a Web management system is software or a group or suite of applications and tools that enable an organization to seamlessly create, edit, review and publish electronic text. Many content management systems offer a Web-based GUI, enabling publishers to access the CMS online using only a Web browser. Also, a CMS designed for Web publishing will provide options and features to index and search documents and also specify keywords and other metadata for search engine crawlers.

    Some advantages cited in using CMS are as follows:

    • Increased control over the web site
    • Improved speed to market in terms of content changes
    • Lower cost per page
    • Decreased total cost of maintaining the website

    In short, CMS just made my life easier. Although I still need to learn a few HTML and CSS commands, I can now design and create a real website with almost no knowledge of both HTML and CSS. Yup you heard me right. A real live customized website.

    Tuesday, July 27, 2010

    Quotes from Reminiscences of a Stock Operator

    I did precisely the wrong thing.  The cotton showed me a loss and I kept it.  The wheat showed me a profit and I sold it out.  Of all the speculative blunders there are few greater than trying to average a losing game.  Always sell what shows you a loss and keep what shows you a profit.

    If all I have is ten dollars and I risk it, I am much braver than when I risk a million if I have another million salted away.

    I’ve got friends, of course, but my business has always been the same – a one-man affair.  That is why I have always played a lone hand.

    What beat me was not having brains enough to stick to my own game – that is, to play the market only when I was satisfied that precedents favoured my play.  There is the plain fool, who does the wrong thing at all times everywhere, but there is also the Wall Street fool, who thinks he must trade all the time.  No man can have adequate reasons for buying or selling stocks daily – or sufficient knowledge to make his play an intelligent play.

    It happened just as I figured.  The traders hammered the stocks in which they figured would uncover the most stops, and sure enough, prices slid off.

    For one thing, the automatic closing out of your trade when the margin reached the exhaustion point was the best kind of stop-loss order.

    The game taught me the game.  And it didn’t spare me rod while teaching.