Our annual data consumption estimated at 9.57 zettabytes or 9,570,000,000,000,000,000,000 bytes

<div style="text-align: center;"><img alt="" border="0" height="282" hspace="4" src="http://img64.imageshack.us/img64/1554/11x0407mbsc.jpg" style="margin: 4px;" vspace="4" width="360" /></div><br/>The internet is a mighty big place that's only growing larger each day. That makes it a perfectly unwieldy thing to measure, but the traffic it generates has nonetheless been subjected to a rigorous estimation project by a group of UC San Diego academics. Their findings, published online this month, reveal that in 2008 some 9.57 zettabytes made their way in and out of servers across the globe. Some data bits, such as an email passing through multiple servers, might be counted more than once in their accounting, but the overall result is still considered an <em>under</em>-estimation because it doesn't address privately built servers, such as those Google, Microsoft and others run in their backyards. On a per-worker basis (using a 3.18 billion human workforce number), all this data consumption amounts to 12GB daily or around 3TB per year. So it seems that while we might not have yet reached the bliss of the paperless office, we're guzzling down data as if we were. Check out the report below for fuller details on the study and its methodology.

Our annual data consumption estimated at 9.57 zettabytes or 9,570,000,000,000,000,000,000 bytes

The internet is a mighty big place that's only growing larger each day. That makes it a perfectly unwieldy thing to measure, but the tra...

Continue Reading>>

FCC report finds 68 percent of US broadband connections aren't really broadband

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwash2KfeDJnIVblxo6A5bp9PVUlbm72TPezaHw7dISPGXPHIWdEaeJ9SCK24uO4tP59d4r3hB3MX0cSpue1i035tKnpDDCyRNhqx502pNopwdA7o8MjY2yBhj9VNxqWlWyxkVv6OrUOA/s1600/fcc-broadband-12-10-2010.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwash2KfeDJnIVblxo6A5bp9PVUlbm72TPezaHw7dISPGXPHIWdEaeJ9SCK24uO4tP59d4r3hB3MX0cSpue1i035tKnpDDCyRNhqx502pNopwdA7o8MjY2yBhj9VNxqWlWyxkVv6OrUOA/s320/fcc-broadband-12-10-2010.jpg" width="320"></a></div><br> <iframe align="left" frameborder="0" marginheight="0" marginwidth="0" scrolling="no" src="http://rcm.amazon.com/e/cm?t=latesttecompu-20&o=1&p=8&l=bpl&asins=B001V7AYLG&fc1=000000&IS2=1&lt1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr" style="height: 245px; padding-right: 10px; padding-top: 5px; width: 131px;"></iframe>As the FCC itself has made abundantly clear, the definition of "broadband" is an ever-changing one, and its latest report has now revealed just how hard it is for the US to keep up with those changes.<br> <br>

FCC report finds 68 percent of US broadband connections aren't really broadband

As the FCC itself has made abundantly clear, the definition of "broadband" is an ever-changing one, and its latest report has now...

Continue Reading>>

How To Check Unix Logical Security And Report Them

<br /> <p>Test Logical security of Unix servers.</p><p>This area covers the technical security assessment of Unix, Linux servers (commands are similar but some are different. Please check with the respective man pages).</p><p>Stage 1 scan using Nessus and check for vulnerabilities and Nmap for ports. Highlight the ports and refer to IANA for details. Print report.<br /><br>Scan using Nessus (ensure latest updates are done).</p><p>Stage 2 more etc/passwd and /etc/shadow > to password.txt and shadow.txt in home directory. Check the security of these files, check IDs and /etc/group.</p><p>1. This is like the basic security measure that any server MUST take. i.e. IDs and Groups.</p><p>2. What to check. More /etc/passwd and /etc/shadow.</p><p>3. Look out for normal IDs - are all these active and belongs to users that have resigned ?</p><p>4. Lookout for system IDs - active, are they required - they may be powerful</p><p>5. Test ID, Developer IDs, Root equivalent IDs - active ? Why ?</p><p>6. Intruders often use finger or ruser to discover account names and then try simple passwords. Please let your users know that complex passwords are a must. Simple passwords just make the hacker's job easier.</p><p>7. If intruders can get a password file, they usually move or copy it to another machine and run password guessing programs on it. These programs involve large dictionary searches and run quickly even on slow machines. Most systems that do not put any controls on the types of passwords used probably have at least one password that can be easily guessed.</p><p>8. It is a good practice to change all your passwords. For extremely critical servers, passwords should be change everytime root equivalent, developer IDs are used. If this is not practical, perhaps 3 months or 6 months interval.</p><p>9. Intruders exploit system default passwords that have not been changed since installation,including accounts with vendor-supplied default passwords. Be sure to change all default passwords when the software is installed. There are software upgrades that can change account passwords to a new default at the background. Review and change passwords after updates are done.</p><p>More /etc/passwd > /home/Gabriel/password.csv</p><p>More /etc/shadow > /home/Gabriel/shadow.csv</p><p>Stage 3 Check world writable files and directories. This is also a must. Imagine your most critical business files are accessible to everybody. Find them and take the necessary steps to control their rights.</p><p>find / -type f -perm -22 -exec ls -l > /home/Gabriel/worldfiles.csv ;</p><p>find / -type d -perm -22 -exec ls -l > /home/Gabriel/worlddirectory.csv ;</p><p>Stage 4 Search for SUID and GUID files</p><p>* SUID and GUID can allow normal users to become root equivalent when these programs are owned by Root.</p><p>* To mitigate this risk, it will be prudent that these files are not world readable as power users may find ways to run these programs. Or remove them if not necessary</p><p>* SUID and GUID are normally found in /bin, /etc, /usr/bin, /usr/ucb, /usr/etc, pay attention if they are found in other directories.</p><p>* Look for SUID files (especially SUID root files) everywhere on your system. Intruders often leave SUID copies of /bin/sh around to allow them root access at a later time. The UNIX find program can be used to search for setuid files.</p><p>Find / -user root -perm -4000 -exec ls -l > /home/Gabriel_ng/rootsuid.csv ;</p><p>Find SUID and GUID on root directory.</p><p>Find / -xdev -perm -004000 -exec ls-l {} > /home/Gabriel_ng/suid.csv ;</p><p>Find / -xdev -perm -002000 -exec ls-l {} > /home/Gabriel_ng/guid.csv ;</p><p>Stage 5 Check for network files - /etc/hosts.equiv, .rhosts, /etc/hosts.allow, hosts.deny</p><p>* Important factor in network security is controlling network access. The /etc/hosts.equiv, .rhosts and /etc/passwd control whether access is given to rlogin, rcp, and rsh. The /etc/hosts.equiv contain a list of hosts that can be trusted or considered equivalent to that machine. Some systems uses /etc/hosts.allow and /etc/hosts.deny rather than a single /etc/hosts.equiv. The .rhosts files holds a list of hosts that are permitted access to a specific user.</p><p>* Because .rhosts files allow access to the system without using a password it is recommended that users do not create them in their home directories.</p><p>Check for /etc/hosts.equiv, .rhosts , /etc/hosts.deny and /etc/hosts.allow<br /><br>Find /home -name .rhosts -print</p><p>Stage 6 Check system monitoring - logs.</p><p>Check /etc/sudoers - ability for users to run commands as "root" with sudoers.</p><p>More /etc/sudoers > /home/Gabriel/sudoers.csv</p><p>Other includes /var/adm/acct, /var/adm/wtmp, var/adm/btmp, var/adm/syslog/syslog.log</p><p>Check /var/adm/sulog</p><p>1. SU 10/19 14:15 + tty q3 root-test1 - list the date and time, + indicate successful and - failure. If there is repeat failure could be indication that someone is trying to break in using su.</p><p>Stage 7 By piping all files in csv or text files, it will be easier to analyze the details and work with the relevant parties to tighten the security.</p> <br /> <br /> <br /> <br /> <br /> <br /><br /> <p>Gabriel Ng is the author of [http://www.comsectutorial.com] This site is setup to provide information, recommendation on hacking prevention, controls to minimise security threats from viruses, trojans, spywares, hacking based real life experience while conducting security assessment and penetration tests. This video touches a bit on unix security.</p><p>[http://www.comsectutorial.com/server-vulnerabilities.html] Enjoy!</p> <br />

How To Check Unix Logical Security And Report Them

Test Logical security of Unix servers. This area covers the technical security assessment of Unix, Linux servers (commands are similar bu...

Continue Reading>>

3 Important Things to Keep Your Information Secure and Get a Clean Free Credit Report

<br /> <p>With almost everything being powered by technology, it is quite easy for most people to steal personal information, and the number of people being identity theft victims is increasingly growing each and every year. This is due to the fact that there are various "phishing websites" offering various services like an annual credit report, while in reality, they just do this kind of stuff to gather personal information and details and hack someone else's credit account.</p><p>Being an identity theft victim is one of the most frustrating things that a person may have to go through. However, did you know that you can stop and avoid being an identity theft victim by merely obtaining your yearly credit report? Of course, with extra caution and care, you will remain protected and get the chance to take a peek at your financial standing and financial history as well.</p><p>Your annual credit report will indicate all your purchases and all your credit history for the previous year. By making sure that you obtain a free credit report from a trusted and reputable company, you won't be having problems dealing with people trying to steal identities and use it for their selfish acts. Here are some relevant tips that can be helpful in avoiding having your identities stolen:</p><p>? The number one target of these criminals is your social security number and tax identification number. It is best that you always keep this information in tact - do not give out information to people that you don't know or trust at all.</p><p>? Do not open suspicious e-mails, or click links that may seem like a fraud - sometimes, there are these kinds of viruses that will try to pull up some of your personal information.</p><p>? Make sure that whenever you access your online banking statement, clear cookies and passwords, most especially if you are not in a secure connection.</p><p>Unfortunately, there are some people who are being fooled by some scam sites - and that their experiences should serve as a lesson to you. Do not allow the same things to happen to you - choose a company offering a free credit report and make sure that they are authorized by the government.</p><p>A free credit report can greatly benefit you, but by giving out sensitive information to other parties may cause harm. A little common sense would not hurt you a little, and a little research won't cost you at all. Make sure that you dedicate some of your time and research these companies first before you even fully trust them.</p> <br /> <br /> <br /> <br /> <br /> <br /><br /> <p>free-credit-reports.com provides you with <a href="http://www.free-credit-reports.com/" target="_new">credit report</a> for free, and thus ensures that you don't become a victim of <a href="http://www.free-credit-reports.com/" target="_new">identity theft</a>.</p> <br />

3 Important Things to Keep Your Information Secure and Get a Clean Free Credit Report

With almost everything being powered by technology, it is quite easy for most people to steal personal information, and the number of peo...

Continue Reading>>

How to Report Web Fraud

<P>File a formal complaint with the Internet Crime Complaint Center, or IC3 -- a partnership of the FBI and the National White Collar Crime Center -- that accepts complaints from those who are victims of both attempted and actual fraud. See the link to the online complaint form in the References section. Fill out the form thoroughly. IC3 forwards web fraud complaints to local, state and government authorities for investigation.</P><P>File a formal complaint with the Federal Trade Commission. The FTC protects consumers by investigating businesses that operate fraudulently. The FTC investigates companies on which they receive reports and has the power to shut down deceptive businesses. To access the FTC's "complaint assistant" form, click on the link in the Resources section.</P><P>Send details of scam emails to Consumer Fraud Reporting for inclusion in its database. Click on the link in the Resources section to access the feedback form.</P>

How to Report Web Fraud

File a formal complaint with the Internet Crime Complaint Center, or IC3 -- a partnership of the FBI and the National White Collar Crime Ce...

Continue Reading>>

Report: Xbox Kinect costs just £35 in parts

<img src="http://cdn.mos.techradar.com//Review%20images/TechRadar/Home%20Entertainment/Kinect%20Xbox%20360/product_005-200-200.jpg"><br /><P>A report has suggested that Microsoft's claim to be making a profit on each Kinect for Xbox 360 it sells is by no means an exaggeration, with a predicted bill of materials cost of just $56 dollars per unit. </P><br /><P>The <a href="http://www.eetimes.com/electronics-news/4210649/Kinect-s-BOM-roughly--56--teardown-finds-">EETimes report</A> on a teardown by UBM TechInsights suggests that the total cost of materials is just under £35, which given that it sells for £130 in the UK, represents a significant mark-up. </P><br /><P>Considering that Microsoft is apparently spending a billion dollars split between marketing Kinect and its Windows Phone 7 mobile OS, you can safely project that a good percentage of that profit is going on advertising. </P><br /><P><STRONG>R&D</STRONG></P><br /><P>Of course, there are other factors such as research and development to consider, something that Microsoft has already publicly stated cost hundreds of million dollars. </P><br /><P>The console is already selling well in the UK following its launch this week, with demand outstripping supply for the time being. </P><br /><P>And with the busy Christmas shopping period now in full swing, you'd imagine that Microsoft's big investment will begin to show some returns in the coming weeks. </P>

Report: Xbox Kinect costs just £35 in parts

A report has suggested that Microsoft's claim to be making a profit on each Kinect for Xbox 360 it sells is by no means an exaggeration,...

Continue Reading>>