Keep up with whats happening in Mark, Linda, Nathan and Traci's lives. http://www.grennan.com 2010-09-07T06:57:42+01:00 http://www.grennan.com http://www.grennan.com/images/M_images/joomla_rss.png text/html 2010-08-06T10:53:53+01:00 http://www.grennan.com http://www.grennan.com/index.php?option=com_content&task=view&id=99&Itemid=9 A little over a year ago I discivered a Yubikey Replay Attack (index.php?option=com_content task=view id=89 Itemid=9) . The YubiKey (http://www.yubico.com/products/yubikey/) is a hardware authentication token that looks like a small USB memory stick, but it is actually a keyboard. With the command of an integrated touch button, the device can send a time-variant, secure login code as if it was typed in from a keyboard. And because USB-keyboards are standard on all computers the YubiKey works on all platforms and browsers without the need for client software.I believe the YubiKey is the answer to many password / security problems we have. If you are not using a Yubikey are are not as safe as you could be. And it is easy.Everyone should be using a Yubikey (http://www.yubico.com) , LastPass (http://lastpass.com/) and TrueCrypt (http://www.truecrypt.org/). I believe in the Trush NoOne (TNO) ideal of information security. However, with a Yubikey you are required to trust Yubico. So, If you can't trust them, you should Trust But Verify (TBV). Here is a simple script to verify Yubico has not slipped. About the only problem with Yubikey is the Replay Attack. #!/usr/bin/perl#use strict;#use Yubico::Auth;use LWP::Simple;$id = 1 ; # Your Yubikey ID here$logfile = ./usedkeys ;@otp_list = ;$x = 0;open(LOG, >$logfile ) || die( Can't open $logfile\n );do } while ($otp ne stop ); # Redo while wrong inputprint LOG \n>>> Re-pay the keys\n\n ;$x = 0;foreach $reotp(@otp_list) close(LOG);print @otp_list. \n ; text/html 2010-05-24T00:00:00+01:00 http://www.grennan.com http://www.grennan.com/index.php?option=com_content&task=view&id=94&Itemid=9 I am building my own VMWare Whitebox server for home. I manage ESX system at work. I find using like equipment and software at home helps find, and resolve, issues before have to deal with them at work. I'm also interested in saving on my electric bill and increase my systems capabilities. With four computers in my small corner bedroom it gets hot. The air condition runs almost continuously during the summer. Along with the build project I'll be reporting on my energy savings.I have three Linux servers to convert. I'll use ESXi to re-create them into virtual systems. They are, a firewall, a web/s data store server and an email server. The firewall is a small system running Untangle with a single disk, the web server is a Fedora Core system with a four disk RAID 4 and the email system runs Zimbra with mirror disks. I'm also interested in experimenting with new systems. Some of these are Gentoo, MythTV (http://www.mythtv.org/) (MythBuntu (http://www.mythbuntu.org/)), OpenFiler (http://www.openfiler.com/), BackTrack (http://www.remote-exploit.org/backtrack.html) and Zarafa (http://zarafa.com/) email. I may report on these as well.In the next new posts I'll go over:Hardware - What I purchased and why.Server Construction - How I put everything together.System Migration - Moving from physical systems to virtual systems.Network configuration - How one Internet connection is connected to all the virtual servers and my desktop.Benchmarks - How fast is everything and are there better configurations.Power savings - Did I really save on my power bill? What is my return on investment.Tweeks, Hacks and Tuning - Little things that make life better in a virtual world.If you have questions about this project please email Mark @ Grennan.com or Tweet me at mgrennan (http://www.twitter.com/mgrennan) text/html 2010-05-10T10:12:47+01:00 http://www.grennan.com http://www.grennan.com/index.php?option=com_content&task=view&id=98&Itemid=9 Looks like I may have found something people are interested in. My Linux Fan Boy (www.linuxfanboy.com) blog is getting as many hits as this bog in only a few weeks. I got mentioned in Log Buffer (http://www.pythian.com/news/about-log-buffer/) #188, a Carnival of the Vanities for DBAs You can find it at URL : http://www.pythian.com/news/11865/log-buffer-188-a-carnival-of-the-vanities-for-dbas/ (http://www.pythian.com/news/11865/log-buffer-188-a-carnival-of-the-vanities-for-dbas/)but here is the jist. [...] [...] Starting off this week #8217;s issue is a request from Mark Grennan a DBA who would like to let the community know about his blog MySQL Fan Boy, where he wrote an interesting post on including a script to replace MySQL table files on a live system, making it faster and limiting locking on large table loads. Also a post this week on whether MarieDB is a drop in replacement for MySQL. [...] [...] text/html 2010-03-25T15:41:37+01:00 http://www.grennan.com http://www.grennan.com/index.php?option=com_content&task=view&id=97&Itemid=9 Yes, I’ve started yet another blog. You think I would learn. This time it’s bout MySQL. The database we all love. Check it out at WWW.MySQLFanBoy.com (http://WWW.MySQLFanBoy.com) text/html 2010-03-20T14:24:37+01:00 http://www.grennan.com http://www.grennan.com/index.php?option=com_content&task=view&id=96&Itemid=9 Snow on the Redbuds Here it is March, its already spring. The robins are back, every morning the birds sing. Oklahoma weather is strange, it can rain with the sun up high. But I love it when snow falls from the sky. When I got up this morning, it was cold and my window was bright. There was snow on the Redbuds. It fell through the night. Mark Grennan March 23, 2006