Linux kernel exploit And privilege escalation

A flaw in Reliable Datagram Sockets protocol (RDS) implementation in the Linux kernel can be exploited to gain root access. The kernel exploit released by http://www.vsecurity.com

I used OpenSuse 11.3 with latest kernel to try this exploit on my local machine.
And compiled, executed the exploit.
 
Indeed, it works great. Below is snapshot of this exploit in running condition on my local machine. I used 'id' CLI on Linux to verify privilege escalation.

HP-UX Patch naming conventions

Unlike other operating system, HPUX maintains specific nomenclature for every patch that is released.

Below is list of prefixes for every patch category and its short description.

PHCO_: refers to a patch for commands and libraries

PHKL_: refers to a kernel patch

PHNE_: refers to a networking patch

PHSS_: refers to a patch for HP-UX subsystems

Every patch is then post-fixed with unique number that identifies a specific patch.

Virtualization trends…who is winning?

We all know that cloud computing is driven by virtualization. However, considering many virtualization vendors and products in market we cannot easily gauge what exactly happening from perspective of users’ interests. I have tried to put together a test using Google Insights for search and Google Trends for different virtualization solutions available.

And the results are in.

Web Search Interest: "vmware vsphere", kvm, "microsoft hyper-v", xen, "vmware esx" 
Worldwide, 2004 - present

Web Search Interest: vsphere, kvm, hyper-v, xen, esx
Worldwide, 2004 - present

This one is interesting as VirtualBox seems to be way ahead from other peers. I tried to craft into desktop virtualization though xen and kvm are also included.

Web Search Interest: “vmware workstation”, kvm, virtualbox, xen, “parallel desktop”
Worldwide, 2004 - present

And approximately same results observed from Google Trends.

Web search Interest : “vmware vsphere”

Web search Interest : “xen”

Web search Interest : “kvm”

Web search Interest : “vmware esx”

Web search Interest : “microsoft hyper-v”

Web search Interest : “virtualbox”

Twitter visits for last week

+ Bit.ly Raises $10M to Build Out Features http://dlvr.it/6jh8L 4:54 PM Oct 7th

+ iPhone and Android apps leaking private data? http://tek.io/bmtJkl 7:50 PM Oct 7th

+ Ubuntu Extends Cloud Service to Smartphones http://dlvr.it/6g3yV 12:24 AM Oct 7th

+ Is Ubuntu 10.10 yet another chance to ditch Windows? http://zd.net/a6pbdF 1:25 AM Oct 7th

+ LinkedIn Launches Career Explorer For Grads http://t.co/lfpjcaQ

HPUX query file for package

This is a small post that helps identify file belonging to certain package.

--------------------------Start Of Shell---------------------------

# swlist –l file | grep <path_to__file_name>

# find /var/adm/sw/products -name INFO -exec grep -i <path_to_file_name> +

---------------------------End Of Shell----------------------------

First command will consume considerable amount of time. However, second CLI proves to be fastest way to query file for a package.

Twitter visits for last week

+ BlindType acquired by Google! http://bit.ly/diPyhG

+ If VMware acquires SUSE Linux, then what? zd.net/bawjMi

+ Google URL Shortener http://goo.gl/

+ Mahindra Satyam FY-10 loss at Rs 124.6 cr, net sales at Rs 5481 cr - The Economic Times - http://toi.in/bkGw75

+ Google Phone Gallery http://www.google.com/phone/#

+ Private Browsing by securing tracks on your disk http://bit.ly/dbBTJl

+ SEO starter guide from #Google http://goo.gl/fb/ULwid #blogging #internet #tipsandtricks

+ AOL acquires TechCrunch blog network | Relevant Results - CNET News news.cnet.com/8301-30684_3-2…

+ #Google #Chrome Ad in Times Of India http://goo.gl/fb/eFnPR

+ #Bing Maps at TED http://goo.gl/fb/kDkLM #microsoft

+ Twitter Hit By Another Worm http://bit.ly/b9pUJK

+ HP gooses Integrity server virt with PA-RISC emulation http://reg.cx/1KR6

+ Twitter new interface preview http://goo.gl/fb/tvej4 #blogging #web20 #internet

Tab candy to organize web browsing experience

How many of us use tabs in Mozilla Firefox for 20+ sites and keep it open all the day? If you are from one of such users then this post will introduce some good news for you. Meet Tab Candy project from Mozilla.

Tab Candy helps users manage their web experience by grouping their tabs in their respective contexts. Context can be retrieved and referred again. Someday solutions like these might replace bookmarks when integrated with tools like Mozilla Sync. Below is short video that explains Tab Candy.

If you want to try out Tab Candy, experimental prerelease builds of Firefox 4 that have the Tab Candy enabled can be download from http://nightly.mozilla.org/

Tab Candy : http://azarask.in/projects/tabcandy/