Snail Site

Install MSCIM-googlepinyin Nokia N900

Snail — Fri, 05 Mar 2010 04:20:24 +0000

Application manager –> Application catalogs –> New

Catalog name: Maemo Extras-devel Web address: http://repository.maemo.org/extras-devel/ Distribution: fremantle Components: free non-free

App. Manager – Download – System

Choose: mscim-googlepinyin

Copyright © SnailVn Site. This Feed is for personal non-commercial use only. If you are not reading this material in your news aggregator, the site you are looking at is guilty of copyright infringement.

Nokia N900 Keyboard-Shortcut

Snail — Fri, 05 Mar 2010 03:45:39 +0000

General

* Ctrl + Backspace: From within an application this will take you back out to the visual task manager.
* Ctrl + C: Copy text
* Ctrl + V: Paste text
* Ctrl + X: Cut text
* Ctrl + A: Select all
* Ctrl + O: Open (if available)
* Ctrl + N: Create a new item (if available)
* Ctrl + S: Save (if available)
* Ctrl + Z: Undo (if available)
* Ctrl + Y: Redo (if available)
* Ctrl + F: Open search bar (if available)
* Ctrl + Right arrow: Move the insertion point to the end of the word
* Ctrl + Left arrow: Move the insertion point to the beginning of the word

Web browser

* Ctrl + N: Open a new window
* Ctrl + R: Reload the current page
* Ctrl + B: Open a bookmark
* Ctrl + D: Add a bookmark
* Backspace: Return to previous page

Email

* Ctrl + Enter: Send a message
* Ctrl + R: Reply to a message

RSS Reader

* Ctrl + R: Refresh the feed

Screenshots

* Ctrl + Shift + P: Capture a screenshot. Warm up those fingers first to try this out.

Linux ultra fast command line download accelerator

Snail — Wed, 10 Feb 2010 15:41:04 +0000

How Axel works?

Axel does the same thing any other accelerator does: it opens more than one HTTP/FTP connection per download and each connection transfers its own, separate, part of the file. It may sound weird, but it works very well in practice. For example, some FTP sites limit the speed of each connection, therefore opening more than one connection at a time multiplies the allowable bandwidth. Be forewarned that some FTP operators don’t like it when you do this. It is better to open the additional connections on several servers and download from all of them simultaneously. Axel supports this feature too. You may either specify a list of mirrors to use or tell the program to search for mirrors.

This is a perfect tool over remote ssh session for downloading large file.

Install axel

If you are using Debian, type the following command to install axel:
# apt-get install axel

Or you can download axel from official website:
$ wget http://wilmer.gaast.net/downloads/axel-1.0b.tar.gz

Untar the axel:
$ tar -zxvf axel-1.0b.tar.gz

Configre and compile axel:
$ ./configure

Install axel:
# make install

On the other hand, just upload a newly build axel binary to remote Linux server using scp. Usually I do not install gcc c/c++ compilers collection on any of my production web/ftp/MySql servers for security reasons.

How do I use axel?

Just type the command as follows:
$ axel http://download.com/file.tar.gz

Limit speed
You can also specify a speed (bytes per sec) for axel so that it will not eat up all your bandwidth. For example following will try to keep the average speed around 5242880 (5120 Kilobyte per/sec):
$ axel -s 5242880 http://download.com/my.iso

Limit a number of connection
You can also specify number of connection you want to open. For example open 3 connections for downloading:
$ axel -n 3 -s 5242880 http://download.com/my.iso

But how fast is axel?

Here is sample test that demonstrates how fast is axel

$ wget http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.11.tar.bz2

Output:

--12:10:31--  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.11.tar.bz2
           => `linux-2.6.17.11.tar.bz2'
Resolving kernel.org... 204.152.191.5, 204.152.191.37
Connecting to kernel.org|204.152.191.5|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 41,288,067 (39M) [application/x-bzip2]

100%[================================================================================>] 41,288,067     2.33M/s    ETA 00:00

12:10:48 (2.31 MB/s) - `linux-2.6.17.11.tar.bz2' saved [41288067/41288067]

$ axel http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.11.tar.bz2

Output:

Initializing download: http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.11.tar.bz2
File size: 41288067 bytes
Opening output file linux-2.6.17.11.tar.bz2.1
Starting download

[  0%]  .......... .......... .......... .......... ..........  [ 247.1KB/s]
[  0%]  .......... .......... .......... .......... ..........  [ 408.3KB/s]
[  0%]  .......... .......... .......... .......... ..........  [ 566.3KB/s]
[  0%]  .......... .......... .......... .......... ..........  [ 707.2KB/s]
[  0%]  .......... .......... .......... .......... ..........  [ 836.5KB/s]
[  0%]  .......... .......... .......... .......... ..........  [ 975.9KB/s]
[  0%]  .......... .......... .......... .......... ..........  [1079.9KB/s]
[  0%]  .......... .......... .......... .......... ..........  [1210.0KB/s]
[  0%]  .......... .......... .......... .......... ..........  [1303.1KB/s]
[  1%]  .......... .......... .......... .......... ..........  [1422.1KB/s]
[  1%]  .......... .......... .......... .......... ..........  [1508.0KB/s]
[  1%]  .......... .......... .......... .......... ..........  [1629.2KB/s]
..........
...
....
[ 99%]  .......... .......... .......... .......... ..........  [8710.2KB/s]
[ 99%]  .......... .......... .......... .......... ..........  [8680.7KB/s]
[100%]  .......... ..........

Downloaded 39.4 megabytes in 4 seconds. (8681.65 KB/s)

As you see axel downloaded same file in 4 seconds. Another great thing its binary size, I can put axel on boot disk and replace a wget.

prozilla – another good program with GUI frontend

One of the drawback of axel is you can not specify ftp username and password. You can use prozilla program, which also makes multiple connections and downloads a file in multiple parts simultaneously thus enhancing the download speed and dwnloading the file faster than a download with a single connection.

FTP passwords can be specified with the URL, or can be obtained automatically from ~/.netrc if it exists.

Install prozilla

# yum install prozilla

Or download prozilla from official web site.

To use prozilla just type the following command (command line version):
$ proz http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.11.tar.bz2

Source: cyberciti

曾轶可-狮子座

Snail — Wed, 03 Feb 2010 08:03:40 +0000

[See post to watch Flash video]

Download Tab: Here

Some Simulator Pictures

Snail — Fri, 29 Jan 2010 05:37:46 +0000

A Modern Simulator Circa 1930-1960, ish.

Outside a Modern modern Simulator.

Outside a typical Simulator.

At the left of the picture, the rounded section at the front of the simulator is the visual mirror, which wraps round the cockpit 180 Deg giving the Pilot, and Co-pilot a unobscured view all around. The mirror is not glass, but made from a reflective plastic film, held in shape by a vacuum. The image itself is projected on to a back projection screen above the pilots head, by the 5 projectors which can just be seen on the roof of the simulator, so the pilot is actually looking at a reflection of the image, which because of the geometry seems to be at infinity, ie. it does not look as though it is only a reflection of a picture on a screen just a few feet away.

And another one.

This gives more of a feel for its size.

The view from an A340 simulator.

Showing the view from the cockpit of the runway at dusk. Just below the window is the Auto Pilot control panel and below that from left to right is the Pilots Electronic Artificial Horizon, then his Direction Indicator, with map display, then the standby instruments. The two displays in the middle are the engine, and electronic warning displays, which is currently set to show the view from the external taxii cameras, then further left the landing gear lever and indicators, and finally the Co-pilots displays, which are repeats of the Pilots except the map display is set to arc mode.

A320 Cockpit, lit up a bit better.

The small side sticks which you can see on the left and right are how the Pilot, or Co-pilot flies the aircraft manually. In the middle of the picture you can see the throttles, on either side of the throttles are the Flight Management Computer displays, into which the pilot programs his route for the aircraft to fly, using the auto pilot, back from there are the communications panels, behind them, the flap lever, and speed brake, and behind them other miscellaneous panels. On the overhead panel which cannot be seen very well, are things like electrical power, hydraulics, fuel, airconditioning, pressurisation, fire indication and extinguishing, and inertial navigation panel etc.

B757 Landing at dusk at Hong Kong.

This picture gives a very good impression of how good the wrap round visual looks, as you can see there is a complete panaramic view out the window, including the side windows.

B767.

From this image you can probably see how similar a 767 and 757 are, from the pilots point of view, which makes it very easy to alternate between flying the two aircraft.

B747-400 Simulator.

The updated version of the 747, with an all electronic disply cockpit.

MD90 Simulator.

Manufactured by McDonald Douglas, who are now owned by Boeing.

Inside the Concord simulator.

B777 Simulator Cockpit.

Out the window you can see an aircraft in a near miss situation. By this stage the TCAS (Traffic & Collision Avoidence System) would be shouting very loud at the pilot. There are other visual indications on the displays, but at this size, you cannot realy see them.

B737, with the runway in the distance.

A340 FTD, full simulation using flat touch screen LCDs.

This is a Flight Training Device. It uses the same simulation code as the full flight simulator, except that all the aircraft displays and panels are images on flat touch screen LCD displays, in all respects it is fully functional, apart from pedals.

F16, with escort.

This is an example of a military fast jet trainer inside a sphere visual system. The cockpit only has very limited movement, supplemented by the pilot wearing a ‘G’ suit. The Image is projected onto the surrounding sphere wall which is specially coated, giving the pilot a very wide field of view, both horizontally and vertically. Some sophisticated systems even track the pilots’ line of sight, and put much more detail in his field of view to enhance the impression of reality even further.

Source: ntlworld

Traffic Monitoring with vnStat

Snail — Thu, 28 Jan 2010 08:57:48 +0000

Interested in how much bandwidth you are using? vnStat is a simple command line utility to track network traffic on a Linux computer. vnStat is easy to set up and use on Ubuntu, and works well on both server and desktop systems.

Run these three commands to install vnStat and set up permissions so every user can run it:

sudo apt-get install vnstat sudo chmod o+x /usr/bin/vnstat sudo chmod o+wx /var/lib/vnstat/

You need to find the name of the network interface you want to monitor. Most of the time it will be called eth0, run ifconfig to check if you are not sure. Then run this command, replacing eth0 with the name of your network interface:

vnstat -u -i eth0

That command creates a cron job (scheduled task) that will run every few minutes and collect traffic data for vnStat.

Check the collected data by running vnstat on a command line. It will bring up the daily usage information:

Database updated: Thu Aug 30 13:40:01 2007

        eth0

           received:          90.65 MB (11.9%)
        transmitted:         666.12 MB (88.1%)
              total:         756.77 MB

                        rx     |     tx     |  total
        -----------------------+------------+-----------
        yesterday     49.94 MB |  378.44 MB |  428.38 MB
            today     17.27 MB |  125.30 MB |  142.57 MB
        -----------------------+------------+-----------
        estimated        29 MB |     218 MB |     247 MB

Run vnstat -h to see an hourly graph:

 eth0                                                                     13:40
  ^   t
  |   t
  |   t
  |   t
  |   t           t                                                     t
  |   t  t  t     t        t                                t  t     t  t
  |   t  t  t  t  t  t  t  t  t  t                 t  t     t  t     t  t
  |   t  t  t  t  t  t  t  t  t  t  t        t  t  t  t  t  t  t  t  t  t  t
  |   t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t
  |  rt  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t  t
 -+--------------------------------------------------------------------------->
  |  14 15 16 17 18 19 20 21 22 23 00 01 02 03 04 05 06 07 08 09 10 11 12 13    

 h   rx (kB)    tx (kB)      h   rx (kB)    tx (kB)      h   rx (kB)    tx (kB)
14       2543      21517    22       1286       9950    06       1304       9431
15       1628      11561    23       1406       9223    07       1147       8576
16       1770      12431    00        999       7849    08       1775      12656
17       1388       9518    01        673       5071    09       1485      11738
18       1870      13693    02        932       6089    10       1063       7514
19       1392       9417    03        882       7620    11       1530      11656
20       1522      10194    04       1024       7629    12       2118      14688
21       1838      11744    05       1429       9662    13       1330       8130

vnStat has many more options as well. Run vnstat –help to more ways to look at the data. Also check out the screenshots section of the vnStat website for examples.

Source: tombuntu

How to make OpenOffice run faster in Ubuntu

Snail — Thu, 28 Jan 2010 08:51:39 +0000

Some simple steps make OpenOffice snappier.

Go to Applications > Office > OpenOffice.org Word Processor

The OpenOffice.org Word Processor is launched. Go to the Tools menu and select Options.

The Options window is opened.
Highlight Memory on the left panel, change the setting as shown below.

- Reduce the number of Undo steps to a figure lower than 100. Adelstein suggests 20 or 30 steps.
- Under Graphics cache, set Use for OpenOffice.org to 128 MB (up from the original 6MB).
- Set Memory per object to 20MB (up from the default .5MB).
- Set the number of objects under Cache for inserted objects at 20.
- Check OpenOffice.org Quickstarter.

Now highlight Java on the left panel, uncheck Use a Java runtime environment

Click the OK button and close OpenOffice.org. Start it up again to experience the change in speed!

Source: zolved.com

A Guide to System Backup and Restore in Ubuntu

Snail — Thu, 28 Jan 2010 08:41:37 +0000

It’s a good idea to ensure that you have a backup and restore system in place. Today we’ll see how in a few very easy steps you can setup system backup and restore in Ubuntu. The good part is that there’s no rocket science involved.

In order to achieve this we are going to need software called SBackup. This is not installed by default in Ubuntu and hence we need to install it. First, let’s see a little bit about this wonderful software.

Homepage: http://sbackup.wiki.sourceforge.net/

Description: SBackup is a simple backup solution for Linux. It is generally developed with a Gnome desktop in mind, but will also work in other desktop environments and also on the console.

Features of SBackup

Back up using GUI and hence avoid the terminal.
Restore using the GUI in simple steps.
You can easily setup automatic backup.
Custom choose the files to backup.
Exclude and include files using regular expressions.
Backup files depending on size and extension.
You can also use terminal to backup and restore.

Limitations of SBackup
As of now you can only backup data to local or remote machine. Backing up to DVD or CD is not available as of now. However, it’s not difficult to burn a backup to disk yourself manually.

Install SBackup
Install SBackup from the package sbackup (click the link to install), or by running the command below in your terminal:
sudo apt-get install sbackup

Launching SBackup
In order to launch SBackup go to System->Administration->Simple Backup Config.

Configuring and setting up backups using SBackup
Once you launch SBackup it’ll open a configuration window for you to configure backup and restore.

If you notice, there are three options available for setting up the backup and they are self explanatory. I’d suggest Use recommended backup settings for most users.

However, you can also select Use Custom backup Settings and setup your backups based on various criteria like file size, file extension, etc. You can also add and remove folders from the ones which you want to backup and the ones you don’t. All this can be achieved by navigating to the Include and Exclude tabs and changing settings as per your requirements.

You can also change the destination where SBackup will backup your stuff. This can be achieved by going to Destination tab.

By default SBackup backs up your files to your local machine in /var/backup. You can custom choose the location and backup stuff to another machine using FTP or SSH.

Once you have selected the mode of backup, all you have to do is click Backup Now!. You should see a confirmation dialog.

Scheduling Backup
Scheduling backup is as easy as it can get. Just go to the Time tab and setup when you want to backup.

Purging old backups to avoid replication and excessive disk usage can also be setup using the Purge Tab. As I said, in most cases the Use recommended backup settings option is the best.

Restoring the data using SBackup
You can easily restore data from your backup using SBackup restore. You can do a directory-wide restore or just restore the files. To restore the data you’ll have to start the SBackup restore manager, go to System->Administration->Simple Backup restore.

Click on Available backups.
Choose the backup from which you want to restore files or directories.
Select the specific file or directory.
Click Restore.

You’ll be prompted if you are sure, click Yes and your files/directories will be restored.

Hope this guide will make backing up and restoring on Ubuntu a cake walk.

Source: tombuntu

Lock On:Flaming Cliffs 2.0 coming Jan 2010

Snail — Sun, 20 Dec 2009 09:02:21 +0000

THE FIGHTER COLLECTION AND EAGLE DYNAMICS TO RELEASE LOCK ON: FLAMING CLIFFS 2.0 UPGRADE

DUXFORD, UK, November 17, 2009 – The Fighter Collection and Eagle Dynamics will release Lock On: Flaming Cliffs 2.0 in early 2010. This will be an upgrade to the unofficial Lock On: Flaming Cliffs add-on. Lock On: Flaming Cliffs 2.0 will feature all the flyable aircraft of Lock On: Flaming Cliffs and include several fan-requested upgrades to aircraft, sensor, and weapon systems. Lock On: Flaming Cliffs combines a large stable of modern U.S. and Russian aircraft to fly over Russia and Georgia with game play for both casual and hardcore flight simulation enthusiasts.

Lock On: Flaming Cliffs 2.0 will feature the same world environment and game functionality as the Digital Combat Simulation (DCS) series and will be online compatible with the Ka-50 attack helicopter simulation DCS: Black Shark www.digitalcombatsimulator.com. Lock On: Flaming Cliffs 2.0 will allow Lock On pilots and Black Shark pilots to now fly online together in both cooperative and head-to-head online play.

The Lock On: Flaming Cliffs 2.0 upgrade for owners of Lock On: Flaming Cliffs 1.12 will be available for sale as a download from the Eagle Dynamics Lock On web site for $14.99 USD. http://lockon.co.uk/. The upgrade will first be released in English and Russian with French, German, and Spanish versions to follow.

By using the DCS environment, Lock On: Flaming Cliffs 2.0 users will have improved terrain, mission editor, AI flight models, 3D objects, artificial intelligence (AI), and multiplayer. The aircraft of Lock On: Flaming Cliffs 2.0 will include:

• Su-25 (new 3D model)
• Su-25T
• A-10A
• Su-27
• Su-33
• MiG-29A
• MiG-29C
• F-15C

Several new missions and campaigns will be included in Lock On: Flaming Cliffs 2.0.

Due to a change in the world location and mission editor Flaming Cliffs 1.12 missions will not work with v2.0. However, when installing the upgrade you have the option to create both Flaming Cliffs 1.12 and Flaming Cliffs 2.0 parallel installs. Flaming Cliffs 1.12 and the upgraded Flaming Cliffs 2.0 will not be online compatible.

The following features are added:

Runs under DirectX 9C
Improved Mission Editor with trigger system
New terrain area to include much of Georgia. This will be same map as used in DCS: Blacks Shark. As such the Crimea has been replaced with the addition of Georgia.
More detailed terrain to include more ground objects, larger forests, and higher resolution elevation data
Improved clouds
High resolution airfield textures
Improved multiplayer system with embedded game browser
More robust online cheating prevention
New and improved menu system
Numerous new, highly detailed ground units including infantry
Improved flight performance for player-controlled aircraft
Improved flight models for all artificial intelligence (AI) controlled aircraft
New, more realistic G-tolerance modeling
Limited 6 DOF cockpits that move up, down and sideways according to maneuvering
New and highly-detailed Su-25 model
Advanced ballistics are implemented for all flyable aircraft, including ricochets of AP rounds
F-15C locked target IFF indication
More realistic ranges, seeker guidance and fuzes for air-to-air missiles
More realistic electronic countermeasure operation and performance
New and improved sound engine
New radio message voice-overs

WordPress 2.9 is so fine

Snail — Sat, 19 Dec 2009 13:09:09 +0000

On the official blog of WordPress the new version of WordPress is downloadable from today.

The coolest new stuff from a user point of view is:

Global undo/”trash” feature, which means that if you accidentally delete a post or comment you can bring it back from the grave (i.e., the Trash). This also eliminates those annoying “are you sure” messages we used to have on every delete.
Built-in image editor allows you to crop, edit, rotate, flip, and scale your images to show them who’s boss. This is the first wave of our many planned media-handling improvements.
Batch plugin update and compatibility checking, which means you can update 10 plugins at once, versus having to do multiple clicks for each one, and we’re using the new compatibility data from the plugins directory to give you a better idea of whether your plugins are compatible with new releases of WordPress. This should take the fear and hassle out of upgrading.
Easier video embeds that allow you to just paste a URL on its own line and have it magically turn it into the proper embed code, with Oembed support for YouTube, Daily Motion, Blip.tv, Flickr, Hulu, Viddler, Qik, Revision3, Scribd, Google Video, Photobucket, PollDaddy, and WordPress.tv (and more in the next release).

2.9 provides the smoothest ride yet because of a number of improvements under the hood and more subtle improvements you’ll begin to appreciate once you’ve been around the block a few times. Here’s just a sampling:

We now have rel=canonical support for better SEO.
There is automatic database optimization support, which you can enable in your wp-config.php file by adding define(‘WP_ALLOW_REPAIR’, true);.
Themes can register “post thumbnails” which allow them to attach an image to the post, especially useful for magazine-style themes.
A new commentmeta table that allows arbitrary key/value pairs to be attached to comments, just like posts, so you can now expand greatly what you can do in the comment framework.
Custom post types have been upgraded with better API support so you can juggle more types than just post, page, and attachment. (More of this planned for 3.0.)
You can set custom theme directories, so a plugin can register a theme to be bundled with it or you can have multiple shared theme directories on your server.
We’ve upgraded TinyMCE WYSIWYG editing and Simplepie.
Sidebars can now have descriptions so it’s more obvious what and where they do what they do.
Specify category templates not just by ID, like before, but by slug, which will make it easier for theme developers to do custom things with categories — like post types!
Registration and profiles are now extensible to allow you to collect things more easily, like a user’s Twitter account or any other fields you can imagine.
The XML-RPC API has been extended to allow changing the user registration option. We fixed some Atom API attachment issues.
Create custom galleries with the new include and exclude attributes that allow you to pull attachments from any post, not just the current one.
When you’re editing files in the theme and plugin editors it remembers your location and takes you back to that line after you save. (Thank goodness!!!)
The Press This bookmarklet has been improved and is faster than ever; give it a try for on-the-fly blogging from wherever you are on the internet.
Custom taxonomies are now included in the WXR export file and imported correctly.
Better hooks and filters for excerpts, smilies, HTTP requests, user profiles, author links, taxonomies, SSL support, tag clouds, query_posts and WP_Query

George Carlin’s Seven Dirty Words

Snail — Fri, 18 Dec 2009 12:01:59 +0000

The big seven words you weren’t allowed to broadcast were: Shit, Piss, Fuck, Cunt, Cocksucker, Motherfucker and Tits.

Here is the original Carlin comedy routine that caused the Fracas.

“I love words. I thank you for hearing my words. I want to tell you something about words that I uh, I think is important. I love..as I say, they’re my work, they’re my play, they’re my passion. Words are all we have really.

We have thoughts, but thoughts are fluid. You know, [humming]. And, then we assign a word to a thought, [clicks tongue]. And we’re stuck with that word for that thought. So be careful with words. I like to think, yeah, the same words that hurt can heal. It’s a matter of how you pick them.

There are some people that aren’t into all the words. There are some people who would have you not use certain words. Yeah, there are 400,000 words in the English language, and there are seven of them that you can’t say on television. What a ratio that is. 399,993 to seven. They must really be bad. They’d have to be outrageous, to be separated from a group that large. All of you over here, you seven. Bad words. That’s what they told us they were, remember? ‘That’s a bad word.’ ‘Awwww.’ There are no bad words. Bad thoughts. Bad Intentions.

And words, you know the seven don’t you? Shit, Piss, Fuck, Cunt, Cocksucker, Motherfucker, and Tits, huh? Those are the heavy seven. Those are the ones that will infect your soul, curve your spine and keep the country from winning the war.

Shit, Piss, Fuck, Cunt, Cocksucker, Motherfucker, and Tits, wow. Tits doesn’t even belong on the list, you know. It’s such a friendly sounding word. It sounds like a nickname. ‘Hey, Tits, come here. Tits, meet Toots, Toots, Tits, Tits, Toots.’ It sounds like a snack doesn’t it? Yes, I know, it is, right. But I don’t mean the sexist snack, I mean, New Nabisco Tits. The new Cheese Tits, and Corn Tits and Pizza Tits, Sesame Tits Onion Tits, Tater Tits, Yeah. Betcha can’t eat just one. That’s true I usually switch off . But I mean that word does not belong on the list.

Actually, none of the words belong on the list, but you can understand why some of them are there. I am not completely insensitive to people’s feelings. You know, I can dig why some of those words got on the list…like cocksucker and motherfucker. Those are…those are heavy-weight words. There’s a lot going on there, man. Besides the literal translation and the emotional feeling. They’re just busy words. There’s a lot of syllables to contend with. And those K’s. Those are aggressive sounds, they jump out at you. CocksuckerMotherfuckerCocksucker. It’s like an assault, on you. So I can dig that.

And we mentioned shit earlier, of course. Two of the other 4-letter Anglo-Saxon words are Piss and Cunt, which go together of course. But forget about that. A little accidental humor there. Piss and Cunt. The reason Piss and Cunt are on the list is that a long time ago certain ladies said ‘Those are the two I am not going to say. I don’t mind Fuck and Shit, but P and C are out. P and C are out.’ Which led to such stupid sentences as ‘OK, you fuckers, I am going to tinkle now.’

And of course the word Fuck. The word Fuck, I don’t really…well, this is some more accidental humor, but I don’t really want to get into that now. Because I think it takes too long. But I do mean that. I mean, I think the word fuck is an important word. It’s the beginning of life, and, yet it’s a word we use to hurt one other, quite often. And uh, people much wiser than I have said, I’d rather have my son watch a film with two people making love than two people trying to kill one other. And I of course agree. I wish I know who said it first, and I agree with that. But I would like to take it a step further. I would like to substitute the word fuck, for the word kill in all those movie cliches we grew up with. ‘Okay Sheriff, we’re gonna fuck ya now. But we’re gonna fuck ya slow.’ So maybe next year I’ll have a whole fuckin’ rap on that word. I hope so.

Uh, there are two-way words, but those are the seven you can never say on television. Under any circumstances you just can not say them ever, ever ever, not even clinically. You can not weave them in the panel with Doc and Ed and Johnny, I mean it’s just impossible, forget those seven, they’re out.

But, there are some two-way words. There are double-meaning words. Remember the ones your giggled at in sixth grade? ‘And the cock crowed three times.”Hey, the cock the cock crowed three times. It’s in the bible.’ There are some Two-way words, like it’s okay for Curt Gowdy [mis-spelled in original transcription. -ed.] to say ‘Roberto Clemente has two balls on him.’ But he can’t say, ‘I think he hurt his balls on that play Tony, don’t you? He’s holding them. He must have hurt them by God.’ And the other two-way word that goes with that one is prick. It’s okay if it happens to your finger. Yes, you can prick your finger, but don’t finger your prick. No, no.”

Installing HJSplit 2.3 for Linux

Snail — Sun, 15 Nov 2009 05:37:10 +0000

You’ll need to compile it, so you need build-essential installed:

Code:

sudo apt-get install build-essential

after that, you have to get the .tar.gz archive:

Code:

wget http://www.freebyte.com/download/lxsplit.tar.gz

now to extract the contents:

Code:

tar -xvvzf lxsplit.tar.gz

go inside the extracted directory:

Code:

cd lxsplit-0.1.1

and

Code:

make

finally

Code:

sudo make install

———————————————-
To split a file in files of 15 MB:

Code:

lxsplit -s FILENAME.EXT 15M

to join files:

Code:

lxsplit -j FILENAME.EXT.001

changing the FILENAME.EXT to the actual name of the file and its extension.

Mediafire download plugin for Rapidleech – Nov 02, 2009

Snail — Sun, 15 Nov 2009 05:34:15 +0000




php







if (!defined('RAPIDLEECH'))



{



        require_once("index.html");



        exit;



}



if($_POST["passfile"]){



$trynumber=$_POST["trynumber"]; ;



$post=array();



$post["downloadp"]=$_POST["downloadp"];



$page = geturl($Url["host"], $Url["port"] ? $Url["port"] : 80, $Url["path"].($Url["query"] ? "?".$Url["query"] : ""), $Referer, $cookie, $post, 0, $_GET["proxy"],$pauth);



is_page($page);



}else{



$page = geturl($Url["host"], $Url["port"] ? $Url["port"] : 80, $Url["path"].($Url["query"] ? "?".$Url["query"] : ""), $Referer, 0, 0, 0, $_GET["proxy"],$pauth);



is_page($page);



preg_match('/Location:.*error/i', $page) ? html_error("Invalid File", 0) : '';



if(preg_match('/Location: (.*)/i', $page, $redir))



{



        $Href = trim($redir[1]);



        $Url = parse_url($Href);



        $page = geturl($Url["host"], $Url["port"] ? $Url["port"] : 80, $Url["path"].($Url["query"] ? "?".$Url["query"] : ""), $Referer, 0, 0, 0, $_GET["proxy"],$pauth);



        is_page($page);



}



}



$cookie = GetCookies($page);







if(preg_match('/cu\([^qk](.*?)\);/', $page, $values))



{



        $values = str_replace("'", '', $values[1]);



        $value = explode(',', $values);



        $qk = $value[0];



        $pk = $value[1];



        $r = $value[2];



}



/*if(preg_match('/cu\((.*?)\);/', $page, $values)){



$value = preg_split('/\',?\'?/', $values[1], -1, PREG_SPLIT_NO_EMPTY);



$qk = $value[0];



$pk = $value[1];



$r = $value[2];



}*/



else{



echo("

");



$trynumber ++;



if($trynumber>1){



echo ("The file password entered not match, please correct the error
");



}else{



echo ("The file is password protect, please enter the password
");



}



$code = ''.$nn;



$code .= ' '.$nn;



$code .= ''.$nn;



$code .= ''.$nn;



$code .= ''.$nn;



$code .= '';



echo $code;



die;



}







$Href = "http://www.mediafire.com/dynamic/download.php?qk=$value[0]&pk=$value[1]&r=$value[2]";



$Url = parse_url($Href);



$page = geturl($Url["host"], $Url["port"] ? $Url["port"] : 80, $Url["path"].($Url["query"] ? "?".$Url["query"] : ""), $Referer, $cookie, 0, 0, $_GET["proxy"],$pauth);



is_page($page);







$mL = cut_str($page, "var mL='", "';");



$mH = cut_str($page, "var mH='", "';");



$mY = cut_str($page, "var mY='", "';");



preg_match('%http://"\+mL\+\'/\'\s\+(.+)\+\s\'g/%', $page, $parts);







$temps = explode("+",$parts[1]);



foreach ($temps as $temp)



{



        if (empty($temp)) continue;



        preg_match('/'.trim($temp).' ?= ?\'(.*?)\';/', $page, $temp2);



        $mpath1.= $temp2[1];



}







$Href = 'http://'.$mL.'/'.$mpath1.'g/'.$mH.'/'.$mY;



$Url = parse_url($Href);



$FileName = !$FileName ? basename($Url["path"]) : $FileName;



insert_location("$PHP_SELF?filename=".urlencode($FileName)."&host=".$Url["host"]."&path=".urlencode($Url["path"].($Url["query"] ? "?".$Url["query"] : ""))."&referer=".urlencode($Referer)."&email=".($_GET["domail"] ? $_GET["email"] : "")."&partSize=".($_GET["split"] ? $_GET["partSize"] : "")."&method=".$_GET["method"]."&proxy=".($_GET["useproxy"] ? $_GET["proxy"] : "")."&saveto=".$_GET["path"]."&link=".urlencode($LINK).($_GET["add_comment"] == "on" ? "&comment=".urlencode($_GET["comment"]) : "")."&auth=".$auth.($pauth ? "&pauth=$pauth" : "").(isset($_GET["audl"]) ? "&audl=doum" : ""));







// edited by mrbrownee70



//updated by szalinski 15-Sep-09



//update by kaox 01-oct-09  - support for password protected file



//update by szalinski 03-nov-09 (mediafire layout change)







?>

Core Temp

Snail — Sun, 15 Nov 2009 04:46:23 +0000

mùa đông

GA-X58-EXTREME Raid

Snail — Sun, 01 Nov 2009 05:41:18 +0000

SATA RAID/AHCI Mode [Disabled] << RAID
SATA Port0-3 Native Mode [Enabled] << This can be enabled or not, it just allows the system to assing a IRQ or not to the ports

Press Control + I on the IRQ screen at bootup time to enter the Intel RAID ROM and setup your RAID Array. The note at the bottom of the screen

Integrated Peripherals

RAID On the Intel ICH10R (Blue Ports)
SATA RAID/AHCI Mode (Intel ICH10R Southbridge) …………. RAID
SATA Port0-3 Native Mode …………………………….. Enabled (or Disabled, both will work)

RAID on the Gigabyte/J.Micron (White Ports)
Onboard SATA/IDE Device (GIGABYTE SATA2 Chip) …………. Enabled
Onboard SATA/IDE Ctrl Mode (GIGABYTE SATA2 Chip) ……….. RAID/IDE << The IDE is only there to show/remind you that your Actual IDE Devices will be in IDE/PATA mode as normal

Note

ICH10R can do RAID or AHCI or IDE
J.Micron can do RAID or AHCI or IDE as well
You can switch from IDE to AHCI and AHCI to IDE yes on ICH10R, but NOT TO RAID.
NO switching from RAID to anything, or anything to RAID without a Clean install.
And you cannot switch a AHCI or RAID from the ICH10R to the J.Micron Ports either, or the other way around.
You can Move an IDE install to and from either though

And Intel ICH10R controller is suggested for best Performance (Blue on X58)*

Web server security

Snail — Sun, 01 Nov 2009 05:34:43 +0000

Introduction

Once upon a time, the World Wide Web was a relatively static place. The Web server’s sole function was to simply deliver a requested Web page, written in HTML, to a client browser. Over time, developers started looking for ways to interact with users by providing dynamic content — that is, content that displayed a form or executed a script based on user input. Thus Server Side Includes (SSI) and the Common Gateway Interface (CGI) were born.

A Server Side Include page is typically an HTML page with embedded command(s) that are executed by the Web server. An SSI page is parsed by the server (a “normal” Web page is not), and if SSI commands are found they are executed before the resultant output is delivered to the requesting client. SSI is used in situations that demand a small amount of dynamic content be inserted in a page, such as a copyright notice or the date. SSI can also be used to call a CGI script; however, there is a performance penalty associated with SSI. The server must parse every page designated as SSI-enabled, which is not an optimal solution on a heavily loaded Web server.

The CGI is a standard for communication between a program or script, written in any one of several languages, and a Web server. The CGI specification is very simple: input from a client is passed to the program or script on STDIN (standard input). The program then takes that information, processes it, and returns the result on STDOUT (standard output) to the Web server. The Web server combines this output with the requested page and returns it to the client as HTML. CGI applications do not force the server to parse every requested page; only pages containing CGI-recognized arguments involve further processing.

This article is targeted at Webmasters and system administers responsible for securing a Web server configured to provide dynamic content to clients. It details general security issues related to SSI- and CGI-enabled content, reducing CGI risks with wrappers, and some brief language-specific caveats. This article does not cover the configuration steps required to enable SSI or CGI. Configuration examples provided are based on the latest 1.3 version of Apache, which at the time of this writing is 1.3.26. In addition, the following is assumed:

Your network is secure, behind a firewall, and the server itself is in a controlled environment.
The operating system has been properly secured and all unnecessary services are disabled.
The Apache user and group directives are correctly set, and appropriate permissions assigned.
The ServerRoot and log directories are protected.
User overrides are disabled.
Default access has been disabled, and access opened for only those system directories designated “public”. For example, on a system configured to host user Web pages from /home/username/public_html, Apache’s httpd.conf configuration file should contain the following directives:

ServerName www.sitename.com
UserDir public_html


	Order deny,allow
	Deny from all



	Order deny,allow
	Allow from all

In other words, in order to fully absorb the material discussed in this article, the reader should have a good working knowledge of general Web server security, installing and configuring Apache, Apache modules, Apache’s key configuration directives, the role of Apache’s .htaccess file, how to read log files, UNIX file permissions, and basic system administration. Readers should also be familiar with the syntax, commands, and functions of whatever programming language they intend to use to create CGI applications.

See the Resources section of this article for a list of useful online resources.

General considerations

The very first question a Web server administrator must confront is, “Do I really want/need to provide dynamic content from my server?” While dynamic content has allowed for a diverse range of user interaction and become a de facto standard for most large Web sites, it remains one of the largest security threats on the Internet. CGI applications and SSI-enabled pages are not inherently insecure, but poorly written code can potentially open up dangerous back doors and gaping holes on what would otherwise be a well-secured system.

The following are the three most common security risks CGI applications and SSI pages create:

Information leaks: Providing any kind of system information to a hacker could potentially provide a hacker with the ammunition they need to break into your server. The less a hacker knows about the configuration of a system, the harder it is to break into.
Access to potentially dangerous system commands/applications: One of the most common exploits used by hackers is to “take over” a service running on the server and use it for their own purposes. For example, gaining access to a mail application via an HTML form-based script, and then harnessing the mail server to send out spam or acquire confidential user information.
Depleting system resources: While not a direct security threat per se, a poorly written CGI application can use up a system’s available resources to the point where it becomes almost completely unresponsive.

A glance at the above list shows that a high percentage of security holes is invoked or leveraged through user input. One of the most common problems with applications written in C and C++ are buffer overflows. When a program overflows a buffer, it crashes. A good hacker can then take advantage of the crashed program to gain access to the system. For example, look at the following snippet of C code:

#include 
#include 
static char query_string[1024]

char* POST() {
int size;
size=atoi(getenv("CONTENT_LENGTH"));
fread(query_string, size,1,stdin);
return query_string;
}

An assumption is made that user input will be a maximum of 1024 characters in length. If the user supplies input of more than 1024 characters the above routine will break the program and allow someone to execute a system command remotely. The solution in this case is to ensure that memory allocation for the variable query_string occurs dynamically by using a call to either the malloc() or calloc() function.

Another common problem involves a system call that opens a subshell to process a command. In Perl such a call could be made using any of the following functions: system(), exec(), piped(), open(), or eval(). The lesson here is to never trust user input, and ensure all your system calls are not exploitable. The first is typically achieved by establishing explicit rules (for example, by checking input with a regular expression) for what is acceptable and what is not. The process of sanitizing system calls is language-dependent. The trick is to always call external programs directly rather than going through a shell. Using Perl, this is accomplished by passing arguments to the external program as separate elements in a list rather than in one long string like so:

system "/usr/bin/sort","data.dat"

A related trick used by many hackers is to alter the PATH environment variable so it points to the program they want your script to execute, instead of the program you’re expecting. This exploit can be easily subverted by invoking any programs called using full pathnames. If you have to rely on the PATH variable, get in the habit of explicitly setting it yourself at the beginning of the application. For example:

$ENV{'PATH'}="bin:/usr/bin:/usr/local/bin";

A denial of service (DOS) attack occurs when an attacker makes repeated calls to to one or more CGI applications. The Web server dutifully launches a CGI process and a child server process for each call. Eventually, if enough calls are made, the server runs out of system resources and comes to a grinding halt. Unfortunately, there’s not a lot you can do to prevent a DOS attack beyond banning the host access to the server using Apache’s directive. You might also want to look into the RLimitCPU and RLimitMEM directives which limit Apache’s CPU and memory usage respectively.

Later in this article we’ll discuss using a wrapper to limit the danger inherent in running CGI applications. The next two sections of this article detail potential risks and solutions specific to Server Side Includes and CGI applications.

Securing server side includes

Many Web administrators consider Server Side Includes (SSI) on a par with CGI applications when it comes to potential security risks. As noted in the previous section, any program or page that uses the exec command to call a system file presents a huge security problem if the call is made incorrectly. On the other hand, it’s a remarkably simple process to disable all exec calls from an entire Web site, or allow exec calls to be made from a specific directory only. This is accomplished with the Options directive.


Options IncludesNOEXEC
Order deny,allow
Deny from all

The Options line in the above configuration listing disables exec calls and includes for the Web site. To enable exec calls for a specific subdirectory of the Web, “scope-down” the directory container like so:


Options IncludesNOEXEC
Order deny,allow
Deny from all



Options Includes # (or alternately, +Includes)
Order deny,allow
Deny from all

This configuration segment allows the execution of exec commands from only the /subdirectory directory under the site’s DocumentRoot. Note that users can still execute CGI scripts from within a document, provided the scripts are located in a directory designated by a ScriptAlias directive (see the next section on Securing CGI applications for details on using the ScriptAlias directive).

The second consideration administrators need to be aware of concerning SSI was briefly discussed in the Introduction. It is not a good practice to allow SSI commands to be executed from pages with an .html or .htm file extension, especially on a high-traffic server. Remember, all SSI pages are parsed by the server. Poorly coded pages can consume system resources at an astonishing rate, and will eventually result in an unresponsive server. To avoid such a scenario, it is common practice to use a separate extension for SSI-enabled documents (typically, .shtml). This is done by adding the following lines to Apache’s configuration file:

AddHandler server-parsed .shtml
AddType text/html .shtml

The first directive tells Apache to treat all files ending in .shtml as SSI pages; the second directive is sent to the browser requesting the page, and tells it to render the content the same as it would for an HTML request.

Securing CGI applications

Administrators have two options for configuring CGI under Apache. The first method uses the ScriptAlias directive to designate the CGI program directory. The second method uses a combination of the Alias and AddHandler directives. Each method has a place, and its own set of pros and cons.

The ScriptAlias approach

The first step in securely configuring CGI under Apache is to create a central directory to store your CGI applications in. This directory should always be separate from the DocumentRoot tree. Why? Because the less the world knows about where your CGI scripts reside, the better. It also ensures only Web administrators can access the files that reside there. So if /www/mysite/htdocs is your DocumentRoot, /www/mysite/cgi-bin would be a good choice for your CGI directory. Some webmasters prefer to locate their CGI directory on another filesystem completely; for example, /var/www/cgi-bin. The next step is to inform Apache which directory contains CGI programs. This is done with the ScriptAlias directive.

ScriptAlias /cgi-bin/ /www/mysite/cgi-bin/

There are several points to note regarding the above directive:

To access the script, test.cgi, using the example path shown, a user would enter http://www.mysite.com/cgi-bin/test.cgi in their browser.
Note that both the alias and the path to the CGI directory must end with a forward slash (/).
Apache supports multiple ScriptAlias directories.
ScriptAlias designated directories are not able to be browsed (by default) for security reasons.
The directory referenced by the ScriptAlias directive should have very strict permission settings assigned to it. Ideally, no one but the lead CGI developer and the system administrator should have full access (read, write, execute) on the files contained there.

The last point above highlights one of the main advantages to enabling CGI using the ScriptAlias directive. It offers the administrator a central point to administer CGI programs from (typically, servers configured with the ScriptAlias directive have only one CGI directory), and allows access to the CGI directory to be tightly controlled. The disadvantage to using ScriptAlias to designate a CGI directory is that Apache will assume any executable file it finds in the aliased directory is a CGI application. In other words, Apache would see no distinction between test.cgi, test.pl, and test.bak provided they were all in the ScriptAliased directory, and all flagged as executable.

To overcome this last problem requires the use of the Alias and AddHandler directives.

The Alias/AddHandler approach

The AddHandler directive is used to specify which files are to be considered CGI programs. But first you need to tell Apache where your CGI directory is, as it resides outside the document tree.

Begin by commenting out any references to the ScriptAlias directive from httpd.conf. Next, add the Alias directive to the configuration file:

Alias /cgi-bin/ /www/mysite/cgi-bin/

Now you must tell Apache to execute CGI programs from this directory. This involves defining a container. This is accomplished as follows:


Options ExecCGI
AddHandler cgi-script .cgi .pl

The first line in the above configuration segment defines the full path to the CGI directory, the second line tells Apache that CGI applications can be executed there, and the third line denotes any file within the CGI directory with the extension of .cgi or .pl is considered a CGI application.

The above configuration can be expanded to provide individual users with access to their own cgi-bin directory:

ServerName www.company.com
UserDir public_html

When a request arrives at the server for www.company.com/~tom, it will be redirected to /home/tom/public_html and the index page for that directory sent to the client. In a similar manner, Apache translates any requests for www.company.com/~tom/cgi-bin/ to /home/tom/public_html/cgi-bin/ and allows any CGI program with the proper extension (.cgi or .pl) to execute. Note that the above Directory directive requires all usernames be lowercase. If your system allows for mixed-case or alphanumeric usernames, a different regular expression would have to be used.

Before closing out this section and moving on to the topic of wrappers, it should be noted that a third CGI configuration option is available for those who like to live dangerously: an .htaccess file. An .htaccess file provides a way for administrators to set configuration directives on a per-directory basis. To use an .htaccess file to enable CGI access you’d need to add the AllowOverrides Options statement to Apache’s main server configuration section, and add Options execCGI to the user’s .htaccess file. What’s wrong with .htaccess files? One, everytime Apache encounters an .htaccess file it has to parse and read its contents; two, if a user gains access to his or her .htaccess file, they could enable additional CGI options that violate system security policies. Do not rely on .htaccess files to control CGI access.

Reducing CGI risks with wrappers

Perfect system security is a lofty but unattainable goal. Securing any system is a dynamic process — checking for and applying operating system updates, program fixes and patches, scanning program revisions for desirable feature additions, reviewing user security and permissions, etc. When it comes to keeping a handle on CGI-related security issues, the very best solution is to not run any CGI applications at all. Unfortunately, such a course of action is rarely left to the same people tasked with actually securing the system. Administrators charged with maintaining a CGI-enabled server need to strike a careful balance: Users demand dynamic content capabilities, the potential danger inherent in CGI applications, and protecting systems that are typically exposed 24/7 to the “big bad world of the Internet.”

Ideally, in order to run a tight ship, every CGI application exposed to the public should be thoroughly checked by the system administrator or head developer for good coding practices and potentially dangerous system calls. Unfortunately, doing so often presents a two-fold problem: One, on a busy server, it severely strains administrative resources; and two, most system administrators often do not have time to stay current on a half-dozen different programming languages and administer their servers.

One common solution to reducing the risks inherent in CGI applications is to employ a wrapper program on the Web server. A wrapper allows CGI applications to be run under the user ID of the site owner — that is, the owner of the directories and documents that comprise a Web site. How does this increase system security? Simple. In a non-wrapper environment, CGI scripts are executed by the Apache user. This means the Apache user has to be a member of the same group as the site owner. It also means that anyone with a Web account on the server has the ability to execute a script in any other site directory on the server. Wrappering CGI applications restricts the damage a user can do to the user’s files alone. As an added bonus, most CGI wrappers perform additional security checks before they allow a requested application to execute.

In the following sections, two popular CGI wrappers are discussed: suEXEC and CGIWrap.

suEXEC

Apache comes bundled with its own security wrapper application called suEXEC. suEXEC allows users to run CGI and SSI programs as the owner of the site as opposed to the owner of the httpd process. Here’s how suEXEC works. When a request is made for a CGI or SSI file not owned by the Apache user, the request is passed to suEXEC along with the program name and the owner’s user/group ID. suEXEC then runs a series of checks to ensure the request is valid. If it is, the script is executed. If the request fails any of the checks, the script is not run and an error is logged.

For a complete list of all 20 checks performed by suEXEC, and for detailed installation/configuration instructions, see the Apache suEXEC Web site.

The most common way to use suEXEC is with the User and Group directive inside a VirtualHost container. For example:


DocumentRoot /home/tom/public_html
ServerName insights.syroidmanor.com
ScriptAlias /cgi-bin/ /home/tom/public_html/cgi-bin/
User tom
Group tom

Note that both the User and Group must be defined before suEXEC will work. Omitting one or the other will cause any request for a CGI application to fail, and will generate an error.

Two further notes regarding suEXEC. First, the owner of the Web server process must be able to ’su’ to the owner/group of the script. If Apache cannot do this, the script will fail. Second, you’ll know if suEXEC has been successfully installed and configured by checking Apache’s error log after restarting the server. You should see a line similar to the following:

[Mon Aug 7 20:39:20 2002] [notice] suEXEC mechanism enabled [wrapper: /usr/sbin/suexec]

CGIWrap

CGIWrap is similar to the suEXEC program in that it permits user access to CGI programs without the risk of compromising server security. It does this by running any program defined as a CGI application as the file owner rather than the Apache user. CGIWrap also performs several security checks on the CGI application; the application will not be executed if any of the checks fail.

CGIWrap is written by Nathan Neulinger and available from the Unix Tools Web site.

CGIWrap is independent of Apache and the operating system (suEXEC has some performance advantages over CGIWrap as it is compiled directly into the httpd source), and as such needs to be downloaded and compiled independently. On the plus side, CGIWrap allows you to create allow/deny files that can be used to restrict access to CGI applications. To install CGIWrap simply download the source tarball (current version as of this writing is 3.7.1), extract it to a directory of your choosing, and run the configure script.

When the program is compiled, simply copy the CGIWrap executable to the user’s cgi-bin directory. Note that this directory must match the cgi-bin directory specified during the configuration process. Next, change the ownership and permission bits as follows:

chown root CGIWrap
chmod 4755 CGIWrap

Finally, create symbolic links from nph-cgiwrap, ntp-cgiwrapd, and cgiwrapd to CGIWrap:

ln -s CGIWrap cgiwrapd
ln -s CGIWrap nph-cgiwrap
ln -s CGIWrap nph-cgiwrapd

You may also have to add an extension to the CGIWrap executable (for example, CGIWrap.cgi) depending on what, if any, file extensions you’ve associated with CGI applications.

Summary

This article discussed securing dynamic content on an Apache Web server. Topics included security considerations that apply to all dynamic content in general, Server Side Includes, Apache’s Common Gateway Interface, and two ways to wrapper CGI content. While an exhaustive discussion of securing all forms of dynamic content would be impossible within the confines of such a short article, we hope this document has provided a basic understanding of where the most common security holes lie, and how to address them.

As always, comments and feedback on the material presented are welcome.

Resources

The Apache Web site is the definitive online resource for all things relating to the Apache Web server. Here you’ll find source code, pre-compiled binaries, FAQs, and developer links. There is also extensive documentation available for both Apache 1.3 and Apache 2.0. Unlike some Open Source projects, the Apache documentation is kept relatively up-to-date thanks in large part to the documentation coordinator Ken Coar.
Another good online resource, especially for developers, is the O’Reilly OnLamp.com site.
For those who prefer paper-based resources, check out Apache Server Unleashed by Rich Bowen and Ken Coar (SAMS). Part III contains extensive material on Dynamic Content, and Part IV is a broad overview of setting up security and auditing. Also recommended is Laurie and Laurie’s Apache: The Definitive Guide (O’Reilly & Associates). While slightly dated as far as Apache revisions go, most material covered remains pertinent.
No discussion of Web server security would be complete without at least a passing reference to chrooting your installation. While beyond the scope of this article, a chrooted server is one of the most complete security measures available for Apache. For a detailed overview of the process involved, check out this online HOWTO put together by Denice Deatrich.

Source: ibm.com

Linux Remote Desktop For Controlling Windows ( rdesktop )

Snail — Fri, 30 Oct 2009 18:22:19 +0000

Windows XP box

Especially it is very useful to configure Outlook or something else when customers do not understand how to configure or troubleshoot problem. This is the best way to fix a problem.

Fortunately, Linux has rdesktop utility. It is a client for remote desktop protocol (RDP), used in a number of Microsoft products including Windows NT Terminal Server, Windows 2000 Server, Windows XP and Windows 2003 Server. You do not need to install VNC server. All you need is rdesktop client on Linux or BSD workstation.

Install rdesktop

# apt-get install rdesktop

Connect to MS Windows 2000/2003 server from Linux, type the following command at a shell prompt (connect to Windows server called snailvn.com)

$ rdesktop snailvn.com

Or connect to windows XP/Vista workstation having IP 192.168.1.17:

$ rdesktop 192.168.1.17

Remote windows XP desktop

Please note that you must first enable remote desktop connection under Windows Server/XP.

Go to Windows XP Desktop
Right Click on My Computer
Select properties
Select Remote tab
Enable Remote desktop.
Save the changes.

Make sure enterprise firewall allows incoming connection on TCP port 3389. rdesktop supports many other options, see man page of rdesktop or visit main website of rdesktop for more information.

Source: cyberciti.biz

Ftp Clients

Snail — Fri, 30 Oct 2009 18:21:27 +0000

1. Good GUI ftp clients

1.1. kasablanca

kasablanca is a very user friendly ftp client for KDE.

kasablanca 0.3.1 is 638 kB and requires QT and KDE.

Supports fxp (direct ftp to ftp transfer)
Supports encryption using ssl/tls.
Stores bookmarks

1.2. ftpcube

ftpcube is probably the best choice for a GUI ftp client.

Among other things it features:

Threaded browsing and multi-threaded downloading
Site Management (bookmarks)
Remote Directory Caching

The source for ftpcube is only 87 kB. It is made with wxPython, meaning that you need to install this 12,152 kB library to use ftpcube…

1.3. gftp

gftp is your choice for a other free GUI ftp client. It uses gtk2 (1.x uses gtk) and has all the features you expect from a modern ftp client. The interface is old school and simple, but not very userfriendly.

gftp supports bookmarking of sites, logging, ssl and bandwith limiting. The bookmark editor is, like most of the other features, quite hard to use. By hard I mean that doing common tasks requires too much effort.

1.4. iglooftp

iglooftp is the best GUI ftp client. There is also a Windows version.

iglooftp is non-free and closed source.

1.5. konqueror

Konqueror is the KDE file manager. It has support for ftp and much more. You can login to ftp sites with a username and password like this:

ftp://username assword@your.ftp.org

2. Console ftp clients

The console based ftp clients are generally speaking a much better alternative than the GUI ftp clients. Today commersial developers aim at making you click nice buttons with a mouse instead of telling your computer what you want it to do with cryptic commands. This may seem nice, but is not the most productive way of getting tasks done.

2.1. GNU Midnight Commander

MC (manual page) is the best filemanager ever made and will probably rule the earth for years and years to come. When it comes to manageing files, MC does the job better than most alternatives.

It supports both ftp and scp (manual page), among other things. To visit a ftp site you can use the menu or simply change into the folder:

  cd ftp://user  ass@your.site.com/

This is actually a standard that also works in kde’s konqueror.

2.2. ftp

ftp is the old common standard file transfer tool from netkit. This is a basic thing installed on all Linux systems. There is no good reason to use this as your regular ftp client.

2.3. yafc

yafc (Yet Another FTP Client) is a very good and feature-rich textbased ftp client.

Highlights:

cached directory listings
extensive tab completion
aliases
colored ls (ie, ls –color, uses $LS_COLORS like GNU ls)
automatic reconnect on timed out connections
recursive get/put/fxp/ls/rm
nohup mode transfers
multiple connections open simultaneously
tagging (queueing)
very configurable
autologin and bookmarks
automagically enters nohup-mode when SIGHUP received (in get and put)
redirection to local command or file
proxy support
Kerberos support (version 4 and 5, heimdal, kth-krb or MIT)
SSH2 support (sftp)

2.4. ncftp

ncftp is highly configurable and in short excellent.

In addition to the ncftp program you get ncftpput, ncftpget and ncftpbatch. These can with ease be used in scripts (and cron jobs).

ncftp has more than all the features you will ever need in a ftp client.

3. The best ftp client

The best overall ftp client is probably ncftp or yafc depending on your taste, MC if you want something with menus.

You do not need a seperate ftp client if you just want a quick peek, modern filemanagers commonly support

  cd ftp://user  ass@your.site.com/

and most browsers let you login and download files with the url

  ftp://your.site.com/

Source: linuxreviews.org

How to Firewall Your WordPress Blog

Snail — Fri, 30 Oct 2009 17:10:32 +0000

You already know to use a decent password for your blog, but brute-force or dictionary attacks aren’t the only attacks used against bloggers. It’s much cheaper and faster to exploit software flaws, and that the hackers do. A programmer’s oversight may allow a hacker to gain access to your blog to insert spyware, adware, or links to various pharmaceuticals you’d prefer not to speak about in front of your mother.

And it’s not just WordPress proper. WordPress has caught some major criticism for its security holes — but lately it’s been a bunch of insecure plugins, not WordPress itself. Matt Mullenweg counters the argument that WordPress is insecure over here. I think he’s totally right — WordPress has a rich “plugin ecosystem” that no other blogging platform can touch.

However, the problem remains. WordPress has some great plugins that are written by people with the best of intentions — but who may not understand the importance of sanitizing data provided by untrusted users, and its relationship with security. Upgrading often, setting permissions, using good passwords, etc. — that all helps a lot — but unless you have the time and ability to painstakingly audit all program code for security vulnerabilities, you’d be best off running one of the WordPress firewalls —

1. WPIDS

The WPIDS offers protection for your Blog from malicious code injections. Any Request considered as malicious is logged into a database for later analysis. You can also set up email notification for attacks with very high impact. The back-end pages of the plugin will notify you if new filter rules are available and you can check a list of latest intrusion attempts.

But the most important feature of the WPIDS is that you can block attackers for some time if they are running wild on your blog. The plugin is built on the 0.3.2 core of the PHPIDS – a version shipped with the coming 0.4 milestone will be released soon.

This hasn’t been updated in a while and only works with PHP5. I’d nag BlogSec guys for an update before using it. More info here

2. Maximum Security

This one looks pretty good. For now it’s vaporware. But I expect it will be good when it does come out, though. It does more than firewall. It also removes version signatures, sets Apache passwords, etc. There are plenty of plugins that do that, but if you like integration, it will probably be a good install.

Link: http://wpsecurity.net/

3. Firewall Script

Firewall Script has a WordPress module that can be installed to protect WordPress. It looks promising, but some of the claims on the web site make me nervous. I think it might be a great product, and I was going to try it — but he claims 100% protection, and that you don’t need to upgrade for security anymore. That was a turn-off for me. In fact, the folks at Maximum Seucurity say “Beware of those guys out there who claim that their so-called security solution can ’stop all attacks’ because that’s a flat out lie based in either deception or shear ignorance.”

Link: http://firewallscript.com/wordpressfirewall.htm

4. WordPress Firewall SEO

Disclaimer: This one’s by my company. While it’s not the most robust, it does what it does well. It basically has a set of hard-coded things that it rejects, prefitted whitelist to make it work out-of-box — so comments don’t blow up when someone types wp_whatever, and a configurable set of extra whitelists. Emails are sent when a bad boy attacks your blog. They look like this —

seoegghead

Link: http://www.seoegghead.com/software/wordpress-firewall.seo

Source: blogsecurity.net

MediaTemple Grid Hosting Review

Snail — Mon, 28 Sep 2009 02:51:44 +0000

Summary

I moved to MediaTemple’s Grid hosting platform in the beginning of January, I think I’ve used the service enough to post a review on the service. Personally I’m very happy with the service, no complains at all in fact, good customer service, barely any downtime and fast FTP which is all you pretty much look for in a host. Below is the detailed review covering every (for the most part) aspect of the service.

Reliability

MediaTemple’s GS hosting has been very satisfactory in terms of reliability, there’s virtually 99% uptime, I manage 7 websites on the GS server, there are occasional downtime situations (including yesterday), however this lasts for a few minutes the most. There might have been one time where downtime was around 1 hour. Apart from that the servers have been pretty fast and steady.

The GS server is mainly promoted by boasting uptime during traffic spikes and rightfully so, the server was steady with occasional traffic spikes I got from Stumbleupon maybe a couple of times.

Ease of use

The Media Temple account management and control panel are quite straight forward and easy to use, they provide 1-click installation of popular applications, Wordpress, Drupal and Zencart (they could work on the number of options here as comparatively, to similar services like the GoDaddy hosting connection which offers several more 1-click installations MediaTemple is quite far behind.) They provide several usage reports (bandwidth, GPU, Disk, visitors) to keep track of your server.

Price

Grid hosting with Media Temple costs $20/month. This is probably one of the factors that can be improved on, since grid hosting is still a fairly new concept and not available by many web hosting providers yet, it is compared to ‘economy’ hosting of other web hosting providers which are available from $5/month depending on the host. Personally, I think the price can be reduced a notch, while I am still happy to pay the $20 a month for a server that is really secure.

FTP

I use Filezilla to manage FTP transfers and Media Temple offers very fast transfer rates (as opposed to my previous host, Godaddy).

Email

I use Gmail to manage my custom email domains, and I suggest you do the same with whatever hosting provider you use. MediaTemple is equipped with SquirrelMail, Atmail and RoundCube to manage your email accounts, which are all popular web mail services, you may use the one you prefer.

Popularity

Media Temple is still appreciating in terms of popularity as more reputed brands shift towards the service, they already boast several established brands (including Sony, Adobe, Techcrunch, etc.) that host with the service so you’ll be in good company if you plan to host with Media Temple.

Help and Customer Support

Media Temple provides great customer support, I had to mail them a couple of times (the 1-click Wordpress installation creates a htaccess file that redirects your site to the Media Temple home page, wasn’t aware of it), and received a reply in just a couple of hours maybe, both times, thus very prompt customer support, also queries are to the point and not excessive or ‘indirect’ (as opposed to GoDaddy’s email support sometimes which can get a little excessive and doesn’t really solve the query. I didn’t have the need to call customer support yet (I generally would if there are several hours of downtime) but I’m pretty sure it should match the email support standards. (Any feedback on this in the comments would be appreciated).

Their knowledge base and user forums already contains a wealth of information which will probably cover all your doubts so you wouldn’t probably need customer support in the first place.

Overall

If you’ve read the review above, it’s mostly been on a positive note, some of the factors they need to work on are probably their price and 1-click applications, apart from that, it’s a pretty neat service and I’d recommend it to anyone who can fit $20/month into their hosting budget. Any feedback on the service in the comments would be much appreciated.

What To Look For In A Web Host For WordPress

Snail — Mon, 28 Sep 2009 02:24:19 +0000

If you are new to the web hosting industry and product line, realize that just about every web host out there offers the same basic features. In choosing a web host to host your WordPress blog, much of what you will want to rely on are feedback from friends and other users, the list above of “what to be aware of”, and the overall feeling the web host’s words speak in understanding if they can help you ultimately achieve success in what it is you’re trying to do.

1. Do they know anything about WordPress or do they just provide web hosting?

This is one that most people miss. Think about it for a moment, would you hire a web designer who knows nothing about WordPress to build you a WordPress designed site?

Of course not. You’d hire a designer familiar with WordPress.

So why in the world then would you want to host your WordPress blog with a web host that knows very little about WordPress? Remember, a product for everyone is a product for no one. The best products out there alienate lots of people but highly focus in on helping a select crowd.

Basically, look for high value while getting a good price.

2. Monthly payment options

Watch out with this one, many companies advertise $$/mo. in big font but in reality don’t offer monthly pricing. That was just a breakdown of the price if it were paid monthly.

3. Services that allow your blog to grow over time

As time goes on, your blog may begin to grow and gain tons of traffic. It would be nice if you had a web host who could provide multiple hosting and domain options for you when that time comes (e.g. virtual and dedicated hosting, domain forwarding, etc.).

4. Hosting allows for .htaccess files

Most hosting companies these days allow your website to have a .htaccess file. If, however, after signing up with them you find out they do not, jump ship! You need this file as a WordPress blogger.

5. Testimonials are always a good thing

6. Do they offer WordPress related services?

Blog design? Security enhancements? Ability to fix your broken blog for you?

No, these aren’t typical web hosting tools, but it would be nice if you could get everything you need from one convenient place.

7. Easy installs of WordPress

8. Help tutorials for using WordPress with their hosting

WordPress is a great community and you can find a lot of help online, but it sure is nice if the help you can find shows you step by step what you need to do and where to click using your hosting company’s exact control panel and services. If you’re new to WordPress and hosting, this will help immensely.

9. Linux web hosting

WordPress can be used with both Windows and Linux web hosting; however, you’ll soon find there’s a lot more help out there for those of you on Linux servers as that is the most common kind of hosting. If you have the option to choose and you have no specific reason to go with Windows hosting, I suggest Linux.

Source: wpbloghost.com

cPanel And Plesk

Snail — Mon, 28 Sep 2009 02:16:03 +0000

cPanel

cPanel (Control Panel) is a very popular graphical web-hosting control panel used to simplify the administration of websites. The cPanel is provided by the cPanel Inc. It is a proprietary product. cPanel is chiefly used by the commercial hosting services and being a proprietary product, it requires monthly license fees.

cPanel is a very popular control panel and is used by most of the web designers and web masters now-a-days. It was mainly designed for Speed Hosting. cPanel is based on Perl scripts and requires no access to the database most of the time. It is an excellent graphical user interface (GUI) which helps in developing and designing the website attractively and giving it a professional look.

cPanel has many features like the FTP, e-mail management, domain and sub-domain control, back-up facility, database management, etc. cPanel even takes extremely less time than most other to load. Web developers can have their own applications and add-ons like ‘Fantastico’ and ‘RVSkins’ installed using cPanel.

cPanel even has a statistics sidebar, which gives you every detail of your website, for example, the domain name, e-mail accounts, disk space usage, SQL database, monthly bandwidth used, sub-domains, parked domains, and many more exciting applications are provided by the cPanel.

cPanel even provides Web Host Manager (WHM), which is specifically used for simplifying the reseller web hosting. By using this feature, you can easily set up a reselling account and resell web hosting service.

Migration of your website and the web hosting account to another web hosting service is easily possible through the site migration module as the cPanel. This makes it very easy to transfer your entire site or some important data from one site to another.

Plesk

Plesk is the most preferred website control panel now-a-days, as it is more reliable compared to any other website control panel. The fact that, it is compatible with the world-renowned Windows operating system makes it more special. Plesk has different versions for Windows and the Linux operating systems. You can even use the same control panel for different operating systems. Plesk is also very easy to learn. This makes it very easy for the users to learn this control panel and, in turn, saves a lot of time and money.

However, the main disadvantage of Plesk is that the web developers and the web designers cannot create their own applications and add-ons in Plesk. Also, there is some security problem noted with Plesk. Hackers can easily gain access into this control panel even if the user name and password are changed often.

So, if you want the control panel which is compatible with Widows as well as Linux operating systems, then you can choose Plesk. However, if you want the easiest control panel which allows you to install many attractive programs, then you need to choose the cPanel.

More notes on the cPanel and Plesk that will help you decide further:

The cPanel and Plesk both have a great graphical user interface (GUI) to begin your work from. It is said that the cPanel has the better GUI and is user-friendly as well. The Plesk graphical user interface (GUI) can appear a bit difficult to a first-time user. cPanel must have been designed specifically for the novice users than the Plesk design, hence the cPanel is preferred by the novice and also by the professionals.

cPanel is being provided by almost all the major web hosting services and includes the Fantastico Deluxe installer that again includes many wonderful web utilities and powerful scripts. Using the Fantastico, you can easily install forum blogs, content management systems (CMS), e-mail accounts, community boards or forums, even install the e-Commerce shopping cart solutions, and other web tools to make your website very professional easily. There is absolutely no need to know web programming, coding, or advanced database knowledge. You can install all these utilities and scripts and have them running within minutes.

Plesk also provides an application pack. Plesk also can use major third-party web utilities, but the cPanel and Fantastico seems to be in more demand.

To credit Plesk, by the way, it can support both the UNIX and Windows based web servers while cPanel can only be used on UNIX-based web servers. As the UNIX based servers are not expensive to utilize, most of the webmaster will prefer the cPanel as it costs less to host their websites.

Source: eukhost.com

Cinebench Score

Snail — Mon, 24 Aug 2009 20:23:08 +0000

Cinebench 9.5: 8 seconds

Cinebench 10: 45 seconds

How to change a file’s owner and group in Linux

Snail — Thu, 20 Aug 2009 09:21:18 +0000

< chown – change the owner of a file >

You can change the owner and group of a file or a directory with the chown command. Please, keep in mind you can do this only if you are the root user or the owner of the file.

Set the file’s owner:
$ chown username somefile
After giving this command, the new owner of a file called somefile will be the user username. The file’s group owner will not change. Instead of a user name, you can also give the user’s numeric ID here if you want.

You can also set the file’s group at the same time. If the user name is followed by a colon and a group name, the file’s group will be changed as well.
$ chown username:usergroup somefile
After giving this command, somefile’s new owner would be user username and the group usergroup.

You can set the owner of a directory exactly the same way you set the owner of a file:
$ chown username somedir
Note that after giving this command, only the owner of the directory will change. The owner of the files inside of the directory won’t change.

In order to set the ownership of a directory and all the files in that directory, you’ll need the -R option:
$ chown -R username somedir
Here, R stands for recursive because this command will recursively change the ownership of directories and their contents. After issuing this example command, the user username will be the owner of the directory somedir, as well as every file in that directory.

Tell what happens:

$ chown -v username somefile changed ownership of 'somefile' to username

Here, v stands for verbose. If you use the -v option, chown will list what it did (or didn’t do) to the file.

The verbose mode is especially useful if you change the ownership of several files at once. For example, this could happen when you do it recursively:

$ chown -Rv username somedir changed ownership of 'somedir/' to username changed ownership of 'somedir/boringfile' to username changed ownership of 'somedir/somefile' to username

As you can see, chown nicely reports to you what it did to each file.

< chgrp – change the group ownership of a file >

In addition to chown, you can also use the chgrp command to change the group of a file or a directory. You must, again, be either the root user or the owner of the file in order to change the group ownership.

chgrp works pretty much the same way as chown does, except it changes the file’s user group instead of the owner, of course.
$ chgrp usergroup somefile
After issuing this command, the file somefile will be owned by a user group usergroup. Although the file’s group has changed to usergroup, the file’s owner will still be the same.

The options of using chgrp are the same as using chown. So, for example, the -R and -v options will work with it just like they worked with chown:

$ chgrp -Rv usergroup somedir changed group of 'somedir/' to usergroup changed group of 'somedir/boringfile' to usergroup changed group of 'somedir/somefile' to usergroup

chown nicely reports to you what it did to each file.

10 Best Apple Mac OS X Blog WordPress Themes

Snail — Tue, 18 Aug 2009 08:49:53 +0000

WordPress Chinese Forums

Snail — Tue, 18 Aug 2009 07:42:27 +0000

1 forum bằng discuz khá lớn và nhiều thứ hay ho: http://wordpress.org.cn

ngoài ra còn một số site khác:


http://www.wordpress-china.net/
http://www.wordpress-china.org/
http://www.wordpress-host.info/
http://www.wordpresschina.com/
http://www.wordpress-host.info/

Web Hosting in China

Snail — Tue, 18 Aug 2009 07:25:44 +0000

If your website visitors are not mainly from the United States but from the other side of the world, it is beneficial to get hosting that is closer to your visitor’s home location. The reason is because then the bandwidth does not have to go over that many hops and is arguably faster for your visitors. While this may not be a concern for some sites, if you are hosting something like multi-player gaming servers, this will have a large effect on ping times and lag during games.

One country with a rapidly growing number of online gamers and web surfers in general is China. If your site is Chinese or if most of your visitors come from China, it is sensible for you to buy Chinese hosting. Besides faster bandwidth, buying Chinese hosting has several advantages as well as disadvantages that stem from legalities and technical support issues. In this article, we will look at these issues and review a few Chinese hosts that might be right for you.

When we first consider Chinese hosting, we need to make sure of the type of Chinese hosting we are talking about. There are two types, one is where the company is based in China but the servers are based in the United States and the other is when the servers are based in China. The first type is not really any different from any US host. To check where the servers are located, you can ping their servers and check the IP against online country IP ranges located at http://www.proxyserverprivacy.com/ipaddress_range.php . Because the servers are in the states, you still need to abide by all American content and copyright laws. I would advise just going with a US host instead of choosing this option if you can’t speak Chinese as at least some of the technical support staff will not speak native English.

This article will focus on the second type of Chinese hosting, where the servers and the Company are actually in China. Obviously because the servers are physically closer to your visitors, page load times and game server connections speeds will be faster. However, unless you are hosting something where lag is important like a game server, the real difference between Chinese and US-based hosting is in the technical support and legal issues.

The first thing we are going to look at is technical support. If you do not speak Chinese, then the technical support will probably not be up to par with a US-based host. Chinese hosting companies generally hire Chinese staff who are trained in English but not native speakers. Many of them will have an accent which will hinder communication on technical support e-mails and calls. Support hotline calls are also international calls, which means they will be expensive. If technical support is a critical component for you and you cannot speak or understand Chinese, then going with a Chinese host is probably not all that great of an idea.

The other thing besides technical support is legal issues. One advantage of hosting on a Chinese server is that the Chinese Firewall is less likely to block servers physically located in China than elsewhere. However, because your server is in China and therefore under Chinese jurisdiction, the government can come in at any time and confiscate your server if it finds some reason to do so(or if they just feel like doing it). U.S. Copyright and content laws also do not apply in China and the United States government really cannot pursue copyright infringement laws if the servers are in China. This means you can get away with things like having downloads of copyrighted music an videos on your site(the police,however, can still come after you if the RIAA or some other organization deems you significant enough to chase). The same applies for other types of content such as images, flash content, multimedia, or scripts. In fact, one of the main reasons people go for non-US based hosting and are instead with Chinese hosting is the fact that you can get away with copyrighted content. However, the legal system also has other flaws. If your Chinese hosting company with servers in China decides to vanish overnight(and some of them do) or does not give you adequate service, there is not much you can do about it. You will most likely not be able to get your money back or will you be able to sue the company or start any kind of class-action lawsuit. The Chinese government does not really chase issues like this and there are many known cases of small companies vanishing into thin air overnight. There also have been cases of hosts stealing client’s content and other unethical behavior that would be prosecuted in the United States but can’t really be prosecuted in China. All sites that are hosted on Chinese servers also require something called a ICP license or they get shut down. Try to find a Chinese host who will take care of this for you and be aware it could take a month to get. In short, there may be some legal advantages of hosting in China but the risks are also great and may leave you high and dry. Note that if you are looking for hosting in the China region, you can also look at Hong Kong hosting, which many people consider to be of better quality.

Now that we have looked the ins and outs of Chinese hosting, lets take a look at some Chinese hosts:

1. http://www.sinohosting.net – Sino hosting is a Shanghai-based Chinese hosting company that have staff members active on many large hosting forums. They give you the choice of having your site hosted overseas in Europe and US or actually hosting in China in one of their many locations. Payment can be accepted through cash, Paypal, or Bank transfer and the company accepts a variety of different currencies although US dollar and RMB are preferred. They have an online support ticket system as well as a support hotline and even allow people to walk in and visit them at their office. Sino hosting is a legit Chinese hosting company worth considering if you are looking to host in China. Prices are expensive for what you get but you can be sure that they run a legit hosting business(which is hard to find sometimes in China).

2. http://en.www.net.cn/ – This is another large and established Chinese hosting company that takes care of domain registrations and hosts anything from small shared accounts to dedicated servers. They have a well-equipped datacenter with multiple 1GPS bandwidth lines and a high-security firewall to keep out intruders. They don’t list their shared hosting prices or specifications anywhere on their site but based on their dedicated offerings, bandwidth seems to be limited and the price is high compared to many American hosts. They do have a full client support system for technical supports. They are a large well-known Chinese company with a solid infrastructure and a presence in China that you can trust to be there for a long time.

3. Wild Web Widget(http://www.wildwebwidget.com/en/hosting/chinese/chinese-hosting.php) – This company offers hosting plans that are out of a Beijing datacenter and offers both Linux and Windows plans. Like other Chinese hosting, the price for the space and bandwidth you get is very high but they do have both a support forum and a support ticket system. I cannot vouch for this service as their support forum is down at this time but they do offer payment via both credit card and Paypal. They have both an Asia and a US division so support staff should be able to speak fluently in both languages.

4. Xinnet(http://www.xinnet.com/) – Another large Chinese hosting and domain registration company. Prices here are in the same range as other Chinese hosts. They also offer email and a variety of other services. I cannot find an English version of their site so its hard to tell about other features they have.

Now that we have looked at some key points in Chinese hosting as well as some hosting companies in China, I would like to end with the recommendation that you should consider US hosting before Chinese hosting as the quality of technical support is higher and the prices are much better for what your get. Unless you have a good reason to want to be within the Chinese firewall or are hosting a gaming server or something where ping times really matter, its better to stick with a US host

Source: hostingcoupons.org

Một vài site khác :

now.cn
west263.com
eb.com.cn
edong.com
todaynic.com
geisnic.com
7×24.cn
sinohosting.net
3322.net
uskongjian.com

Auto backup database on Mediatemple (Grid-Server)

Snail — Sun, 16 Aug 2009 20:12:00 +0000

Open up your favorite text-editor and copy and paste the following snippet:

#!/bin/bash
mysqldump --add-drop-table -h internal-db.s99999.gridserver.com -udb99999 -pPASSWORD database_name > database_name.sql

We will need to replace a few things here though:
- Replace all the instances of ‘99999′ with your gridserver account number.
- Replace ‘PASSWORD’ with your SSH password
- Replace ‘database_name’ with the name of the database you’d like to backup
If you’ve ever setup Wordpress or some other CMS which needs a database, you’ve likely come across this info before.

You could test if your command works by first SSHing in and then entering in the command. If an sql file is created, it worked.

If you have more than one database you want to backup, just create another mysqldump command.
Now save this file as something like ‘db-backup.sh’
Upload ‘db-backup.sh’ to your /data folder
I chose to put the script in this folder because when it runs, the .sql files are also dumped into this folder. This folder is nice because it is only accessible by you and you wouldn’t want the public to accidentally stumble upon an entire dump of your database.
Now log into your Media Temple Account Center
Go to the admin section of your primary domain and click the Cron Jobs link
Click on the ‘Add a new cron job’ button
Feel free to fill in your email address in the output email field if you’d like. This will send you emails whenever the cron job runs and will let you know if it was successful or not. However, the important field we need to fill out is Command to Run. In this field, enter:
/home/99999/data/db-backup.sh

Again, replace the ‘99999′ with your grid-server account number (it’s actually listed below ‘Command to Run’)
In the bottom half of the page, you can specify how often you’d like your script to run. This entire section is up to you. I’ve set mine to run daily at 2AM when traffic on my site is slower
Click Save and you’re all done!

Source: gosammy.com

New PC

Snail — Sat, 15 Aug 2009 16:35:41 +0000

haiz! cứ tưởng phải được hơn 20.000 benchmark chứ oc lên 3.2 160bus thì ko chạy được 3DMark đến đoạn test CPU thì bị blue screen

Some of the important cmd prompt commands

Snail — Sat, 15 Aug 2009 12:46:14 +0000

ADDUSERS –Add or list users to/from a CSV file
ARP — Address Resolution Protocol
ASSOC — Change file extension associations
ASSOCIAT –One step file association
AT — Schedule a command to run at a later time
ATTRIB –Change file attributes

BOOTCFG –Edit Windows boot settings
BROWSTAT –Get domain, browser and PDC info

CACLS — Change file permissions
CALL –Call one batch program from another
CD –Change Directory – move to a specific Folder
CHANGE– Change Terminal Server Session properties
CHKDSK — Check Disk – check and repair disk problems
CHKNTFS — Check the NTFS file system
CHOICE –Accept keyboard input to a batch file
CIPHER –Encrypt or Decrypt files/folders
CleanMgr —Automated cleanup of Temp files, recycle bin
CLEARMEM —Clear memory leaks
CLIP —Copy STDIN to the Windows clipboard.
CLS —Clear the screen
CLUSTER —Windows Clustering
CMD —Start a new CMD shell
COLOR — Change colors of the CMD window
COMP —Compare the contents of two files or sets of files
COMPACT — Compress files or folders on an NTFS partition
COMPRESS —Compress individual files on an NTFS partition
CON2PRT —Connect or disconnect a Printer
CONVERT —Convert a FAT drive to NTFS.
COPY —Copy one or more files to another location
CSCcmd —Client-side caching (Offline Files)
CSVDE —Import or Export Active Directory data

DATE — Display or set the date
Dcomcnfg DCOM —Configuration Utility
DEFRAG —Defragment hard drive
DEL —Delete one or more files
DELPROF— Delete NT user profiles
DELTREE —Delete a folder and all subfolders
DevCon —Device Manager Command Line Utility
DIR —Display a list of files and folders
DIRUSE — Display disk usage
DISKCOMP— Compare the contents of two floppy disks
DISKCOPY —Copy the contents of one floppy disk to another
DNSSTAT —DNS Statistics
DOSKEY — Edit command line, recall commands, and create macros
DSADD —Add user (computer, group..) to active directory
DSQUERY— List items in active directory
DSMOD —Modify user (computer, group..) in active directory

ECHO— Display message on screen
ENDLOCAL— End localisation of environment changes in a batch file
ERASE —Delete one or more files
EXIT —Quit the current script/routine and set an errorlevel.
EXPAND — Uncompress files
EXTRACT— Uncompress CAB files

FC— Compare two files
FDISK— Disk Format and partition
FIND —Search for a text string in a file
FINDSTR— Search for strings in files
FOR /F —Loop command: against a set of files
FOR /F —Loop command: against the results of another command
FOR —Loop command: all options Files, Directory, List
FORFILES —Batch process multiple files
FORMAT —Format a disk
FREEDISK —Check free disk space (in bytes)
FSUTIL — File and Volume utilities
FTP — File Transfer Protocol
FTYPE— Display or modify file types used in file extension associations

GLOBAL — Display membership of global groups
GOTO —Direct a batch program to jump to a labelled line

HELP— Online Help
HFNETCHK— Network Security Hotfix Checker

IF— Conditionally perform a command
IFMEMBER Is the current user in an NT Workgroup
IPCONFIG Configure IP

KILL Remove a program from memory

LABEL — Edit a disk label
LOCAL — Display membership of local groups
LOGEVENT— Write text to the NT event viewer.
LOGOFF — Log a user off
LOGTIME — Log the date and time in a file

MAPISEND —Send email from the command line
MEM — Display memory usage
MD — Create new folders
MKLINK — Create a symbolic link (linkd)
MODE —Configure a system device
MORE — Display output, one screen at a time
MOUNTVOL —-Manage a volume mount point
MOVE — Move files from one folder to another
MOVEUSER— Move a user from one domain to another
MSG —Send a message
MSIEXEC — Microsoft Windows Installer
MSINFO —Windows NT diagnostics
MSTSC — Terminal Server Connection (Remote Desktop Protocol)
MUNGE — Find and Replace text within file(s)
MV — Copy in-use files

NET — Manage network resources
NETDOM — Domain Manager
NETSH —Configure network protocols
NETSVC —Command-line Service Controller
NBTSTAT — Display networking statistics (NetBIOS over TCP/IP)
NETSTAT — Display networking statistics (TCP/IP)
NOW — Display the current Date and Time
NSLOOKUP— Name server lookup
NTBACKUP —Backup folders to tape
NTRIGHTS E—dit user account rights

PATH — Display or set a search path for executable files
PATHPING —Trace route plus network latency and packet loss
PAUSE — Suspend processing of a batch file and display a message
PERMS — Show permissions for a user
PERFMON —Performance Monitor
PING —Test a network connection
POPD — Restore the previous value of the current directory saved by PUSHD
PORTQRY— Display the status of ports and services
PRINT — Print a text file
PRNCNFG — Display, configure or rename a printer
PRNMNGR — Add, delete, list printers set the default printer
PROMPT — Change the command prompt
PsExec — Execute process remotely
PsFile — Show files opened remotely
PsGetSid — Display the SID of a computer or a user
PsInfo —List information about a system
PsKill — Kill processes by name or process ID
PsList — List detailed information about processes
PsLoggedOn —Who’s logged on (locally or via resource sharing)
PsLogList —Event log records
PsPasswd — Change account password
PsService — View and control services
PsShutdown —Shutdown or reboot a computer
PsSuspend —Suspend processes
PUSHD — Save and then change the current directory

QGREP — Search file(s) for lines that match a given pattern.

RASDIAL —Manage RAS connections
RASPHONE —Manage RAS connections
RECOVER — Recover a damaged file from a defective disk.
REG — Registry: Read, Set, Export, Delete keys and values
REGEDIT — Import or export registry settings
REGSVR32— Register or unregister a DLL
REGINI —Change Registry Permissions
REM — Record comments (remarks) in a batch file
REN — Rename a file or files.
REPLACE — Replace or update one file with another
RD —Delete folder(s) [remove dir]
RDISK —Create a Recovery Disk
RMTSHARE —Share a folder or a printer
ROBOCOPY— Robust File and Folder Copy
ROUTE — Manipulate network routing tables
RUNAS — Execute a program under a different user account
RUNDLL32— Run a DLL command (add/remove print connections)

SC — Service Control
SCHTASKS— Create or Edit Scheduled Tasks
SCLIST — Display NT Services
ScriptIt Control —GUI applications
SET — Display, set, or remove environment variables
SETLOCAL— Control the visibility of environment variables
SETX —Set environment variables permanently
SHARE — List or edit a file share or print share
SHIFT — Shift the position of replaceable parameters in a batch file
SHORTCUT —Create a windows shortcut (.LNK file)
SHOWGRPS —List the NT Workgroups a user has joined
SHOWMBRS —List the Users who are members of a Workgroup
SHUTDOWN —Shutdown the computer
SLEEP — Wait for x seconds
SOON — Schedule a command to run in the near future
SORT — Sort input
START — Start a separate window to run a specified program or command
SU —Switch User
SUBINACL —Edit file and folder Permissions, Ownership and Domain
SUBST — Associate a path with a drive letter
SYSTEMINFO— List system configuration
TASKLIST— List running applications and services
TIME —Display or set the system time
TIMEOUT— Delay processing of a batch file
TITLE — Set the window title for a CMD.EXE session
TOUCH — Change file timestamps
TRACERT — Trace route to a remote host
TREE — Graphical display of folder structure
TYPE — Display the contents of a text file
USRSTAT— List domain usernames and last login
VER —Display version information
VERIFY — Verify that files have been saved
VOL — Display a disk label
WHERE — Locate and display files in a directory tree
WHOAMI — Output the current UserName and domain
WINDIFF — Compare the contents of two files or sets of files
WINMSD — Windows system diagnostics
WINMSDP— Windows system diagnostics II
WMIC —WMI Commands
XCACLS — Change file permissions
XCOPY— Copy files and folders

BackTrack 4 Hard Disk Install

Snail — Sun, 26 Jul 2009 09:17:05 +0000

1. Start by partitioning the disk. Create 3 partitions for boot, swap and root.

root@bt:~# fdisk /dev/sda The number of cylinders for this disk is set to 1044. There is nothing wrong with that, but this is larger than 1024, and could in certain setups cause problems with: 1) software that runs at boot time (e.g., old versions of LILO) 2) booting and partitioning software from other OSs (e.g., DOS FDISK, OS/2 FDISK) Command (m for help): n Command action e extended p primary partition (1-4) p Partition number (1-4): 1 First cylinder (1-1044, default 1): Using default value 1 Last cylinder, +cylinders or +size{K,M,G} (1-1044, default 1044): +128M Command (m for help): n Command action e extended p primary partition (1-4) p Partition number (1-4): 2 First cylinder (10-1044, default 10): Using default value 10 Last cylinder, +cylinders or +size{K,M,G} (10-1044, default 1044): +1024M Command (m for help): n Command action e extended p primary partition (1-4) p Partition number (1-4): 3 First cylinder (142-1044, default 142): Using default value 142 Last cylinder, +cylinders or +size{K,M,G} (142-1044, default 1044): Using default value 1044 Command (m for help): t Partition number (1-4): 2 Hex code (type L to list codes): 82 Changed system type of partition 2 to 82 (Linux swap / Solaris) Command (m for help): a Partition number (1-4): 1 Command (m for help): w The partition table has been altered! Calling ioctl() to re-read partition table. Syncing disks. root@bt:~#

2. Format the file systems, mount them and copy over the directory structure. Chroot into new
environment.

root@bt:~# mke2fs /dev/sda1 root@bt:~# mkswap /dev/sda2 root@bt:~# swapon /dev/sda2 root@bt:~# mkreiserfs /dev/sda3 root@bt:~# mkdir /mnt/bt root@bt:~# mount /dev/sda3 /mnt/bt/ root@bt:~# mkdir /mnt/bt/boot root@bt:~# mount /dev/sda1 /mnt/bt/boot root@bt:~# cp --preserve -R \ /{bin,dev,home,pentest,root,usr,boot,etc,lib,opt,sbin,var} /mnt/bt/ root@bt:~# mkdir /mnt/bt/{mnt,tmp,proc,sys} root@bt:~# chmod 1777 /mnt/bt/tmp/ root@bt:~# mount -t proc proc /mnt/bt/proc root@bt:~# mount -o bind /dev /mnt/bt/dev/ root@bt:~# chroot /mnt/bt/ /bin/bash

3. Configure /etc/lilo.conf to reflect your setup.

lba32 boot=/dev/sda root=/dev/sda3 # bitmap=/boot/sarge.bmp # bmp-colors=1,,0,2,,0 # bmp-table=120p,173p,1,15,17 # bmp-timer=254p,432p,1,0,0 # install=bmp # delay=20 prompt timeout=50 # map=/boot/map vga=0x317 image=/boot/vmlinuz label="BT4" read-only initrd=/boot/splash.initrd append=quiet

4. Fix first line in /etc/fstab, and remove unnecessary mount lines. Add the swap partition to the fstab
so it gets loaded at boot time. Your fstab should look similar to this:

/dev/sda3 / reiserfs defaults 0 0 # AutoUpdate /dev/sda2 none swap sw 0 0 proc /proc proc defaults 0 0 # AutoUpdate sysfs /sys sysfs defaults 0 0 # AutoUpdate devpts /dev/pts devpts gid=5,mode=620 0 0 # AutoUpdate tmpfs /dev/shm tmpfs defaults 0 0 # AutoUpdate

5. Execute lilo and reboot!

root@bt:/# lilo -v LILO version 22.8, Copyright (C) 1992-1998 Werner Almesberger Development beyond version 21 Copyright (C) 1999-2006 John Coffman Released 19-Feb-2007, and compiled at 14:08:06 on May 15 2008 Ubuntu Reading boot sector from /dev/sda Using MENU secondary loader Calling map_insert_data Boot image: /boot/vmlinuz Mapping RAM disk /boot/splash.initrd Added BT4 * Writing boot sector. Backup copy of boot sector in /boot/boot.0800 root@bt:/# exit exit root@bt:~# reboot

9 Best Free Forum Scripts

Snail — Sat, 25 Jul 2009 02:29:05 +0000

1. Simple Machines Forum (SMF) – I consider this one to be the best. This is the one I am currently using for this blog’s forum. It is a professional grade forum software package that is easy to setup and has a powerful custom made template engine. The script is written in PHP and uses MySQL database. The script supports multiple languages and has all the security, settings, and tracking features you can find in an expensive community software.

If ever you will have problem with forum spammers, just activate the email activation feature to stop them from automatically registering on the forum.

2. MiniBB – This one I think is the simpliest but great forum script around. So if you want it to be simple but powerfull, I suggest you should try this one. The software only requires minimum technical knowledge so you can use and install it easily.

I’ve had problems with spam bots when I first used this script. To solve the problem, I enable that all who wishes to visit the forum will need to supply a password first. It works!

3. phpBB – Claims to be one of the most widely used Open Source forum solution with millions of installations worldwide. Like the previous scripts mentioned above, phpBB is also easy to get around with.

Now in version 3.0, phpBB incorporates a professional modular design, high security, multiple-language support, and complete layout customisation feature so you have full control over the entire forum operations.

There are a lot of unavailabe features I found on their version 2 but are now available in version 3 so its a good news for all phpBB users.

4. WWWthreads – Again one of the best free professional bulletin board software I’ve found. It has a high powered, full scalable, customizable open source bulletin board package that users can modify to their needs.

Here are some of its features:

• Unlimited Forums and Posts
• Multiple Language Interface
• The ability to create Public or Private Forums
• Supports Popular Database Servers
• Search Capabilities
• A Private Messaging System
• Customization
• Templates for Ease of Use

5. Vanilla – This is an open-source, standards-compliant, multi-lingual, fully extensible discussion forum for the web. You can quickly and easily see which discussions you haven’t read, and how many new comments are in each discussion.

Written in PHP and requires MySQL 3.23, it has a built-in spam control, an autonomous user and role management system for greater flexibility and ease of use.

Developers are welcome to create add-ons for Vanilla for greater functionality.

6. MyBB – Among all of the forum scripts I’ve mentioned, this one has a unique switching feature that easily allows you to convert from vB, IPB, phpBB, SMF, punBB, and XMB to MyBB using their official MyBB Merge System.

MyBB is a forum package full of useful and to-the-point features, helping you to make administrating your bulletin board as easy as possible.

Not very much different from other discussion boards in terms of functionality, features, and usage. What I liked the most about MyBB is its interface. Very clean and professional looking.

7. ImperialBB – ImperialBB is a free PHP/MySQL driven forum software package which is fully featured and highly customizable. It is compatable with all webserver / operating system setups providing PHP 4.x or higher is installed. It also benefits from a unique one click upgrader and mod installer to cut down the time you have to spend installing mods on your system and ensures that you keep it up to date.

Part of its main features are:

• One click upgrader and mod installer
• Fully configurable community
• Easy theme installation
• Powerful search capabilites to quickly and easily find the post / thread your looking for!
• Quick and easy creation of ‘announcement’ and ‘pinned’ threads

8. Orca 2 – A forum script that is 100% written in AJAX. Orca 2 has advanced self-moderation features, WYSIWYG editor, SEO-friendly URLs, RSS feeds, and real-time activity tracking.

Orca 2 features includes:

• Multiple languages support
• Improved template structure
• Search Engine friendly URLs
• Native integration with Dolphin
• Wider support of hosting setups
• Speed improvements

Although its free, you need to buy the premium version to get rid of the embedded ads.

9. NovaBoard – NovaBoard is a free, feature rich community message board software written in PHP & MySQL that allows you to set up your own forum within minutes.

It has the most intense spam fighting security out of all forum software that is currently available.

NovaBoard will also auto-moderate any posts it believes to be from a spammer and notify you immediately ensuring your user base is kept well away from malicious websites.

Source: wisecrunch.com

10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery)

Snail — Tue, 21 Jul 2009 01:37:32 +0000

1. BackTrack

The newest contender on the block of course is BackTrack, which we have spoken about previously. An innovative merge between WHax and Auditor (WHax formely WHoppix).

BackTrack is the result of the merging of two Innovative Penetration Testing live Linux distributions Whax and Auditor, combining the best features from both distributions, and paying special attention to small details, this is probably the best version of either distributions to ever come out.

Based on SLAX (Slackware), BackTrack provides user modularity. This means the distribution can be easily customised by the user to include personal scripts, additional tools, customised kernels, etc.

Get BackTrack Here.

2. Operator

Operator is a very fully featured LiveCD totally oriented around network security (with open source tools of course).

Operator is a complete Linux (Debian) distribution that runs from a single bootable CD and runs entirely in RAM. The Operator contains an extensive set of Open Source network security tools that can be used for monitoring and discovering networks. This virtually can turn any PC into a network security pen-testing device without having to install any software. Operator also contains a set of computer forensic and data recovery tools that can be used to assist you in data retrieval on the local system.

Get Operator Here

3. PHLAK

PHLAK or [P]rofessional [H]acker’s [L]inux [A]ssault [K]it is a modular live security Linux distribution (a.k.a LiveCD). PHLAK comes with two light gui’s (fluxbox and XFCE4), many security tools, and a spiral notebook full of security documentation. PHLAK is a derivative of Morphix, created by Alex de Landgraaf.

Mainly based around Penetration Testing, PHLAK is a must have for any pro hacker/pen-tester.

Get PHLAK Here (You can find a PHLAK Mirror Here as the page often seems be down).

4. Auditor

Auditor although now underway merging with WHax is still an excellent choice.

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working environment, so that the build-up of know-how and remote support is made easier.

Get Auditor Here

5. L.A.S Linux

L.A.S Linux or Local Area Security has been around quite some time aswell, although development has been a bit slow lately it’s still a useful CD to have. It has always aimed to fit on a MiniCD (180MB).

Local Area Security Linux is a ‘Live CD’ distribution with a strong emphasis on security tools and small footprint. We currently have 2 different versions of L.A.S. to fit two specific needs – MAIN and SECSERV. This project is released under the terms of GPL.

Get L.A.S Linux Here

6. Knoppix-STD

Horrible name I know! But it’s not a sexually trasmitted disease, trust me.

STD is a Linux-based Security Tool. Actually, it is a collection of hundreds if not thousands of open source security tools. It’s a Live Linux Distro, which means it runs from a bootable CD in memory without changing the native operating system of the host computer. Its sole purpose in life is to put as many security tools at your disposal with as slick an interface as it can.

Get Knoppix-STD Here

7. Helix

Helix is more on the forensics and incident response side than the networking or pen-testing side. Still a very useful tool to carry.

Helix is a customized distribution of the Knoppix Live Linux CD. Helix is more than just a bootable live CD. You can still boot into a customized Linux environment that includes customized linux kernels, excellent hardware detection and many applications dedicated to Incident Response and Forensics.

Get Helix Here

8. F.I.R.E

A little out of date, but still considered the strongest bootable forensics solution (of the open-source kind). Also has a few pen-testing tools on it.

FIRE is a portable bootable cdrom based distribution with the goal of providing an immediate environment to perform forensic analysis, incident response, data recovery, virus scanning and vulnerability assessment.

Get F.I.R.E Here

9. nUbuntu

nUbuntu or Network Ubuntu is fairly much a newcomer in the LiveCD arena as Ubuntu, on which it is based, is pretty new itself.

The main goal of nUbuntu is to create a distribution which is derived from the Ubuntu distribution, and add packages related to security testing, and remove unneeded packages, such as Gnome, Openoffice.org, and Evolution. nUbuntu is the result of an idea two people had to create a new distribution for the learning experience.

Get nUbuntu Here

10. INSERT Rescue Security Toolkit

A strong all around contender with no particular focus on any area (has network analysis, disaster recovery, antivirus, forensics and so-on).

INSERT is a complete, bootable linux system. It comes with a graphical user interface running the fluxbox window manager while still being sufficiently small to fit on a credit card-sized CD-ROM.

The current version is based on Linux kernel 2.6.12.5 and Knoppix 4.0.2

Get INSERT Here

Extra – Knoppix

Remember this is the innovator and pretty much the basis of all these other distros, so check it out and keep a copy on you at all times!

Not strictly a security distro, but definately the most streamlined and smooth LiveCD distribution. The new version (soon to be released – Knoppix 5) has seamless NTFS writing enabled with libntfs+fuse.

KNOPPIX is a bootable CD or DVD with a collection of GNU/Linux software, automatic hardware detection, and support for many graphics cards, sound cards, SCSI and USB devices and other peripherals. KNOPPIX can be used as a productive Linux desktop, educational CD, rescue system, or adapted and used as a platform for commercial software product demos. It is not necessary to install anything on a hard disk.

Get Knoppix Here

Other Useful Resources:

SecurityDistros
FrozenTech LiveCD List
DistroWatch

Others to consider (Out of date or very new):

SlackPen
ThePacketMaster
Trinux
WarLinux
Network Security Toolkit
BrutalWare
KCPentrix
Plan-B
PENToo

New ones added from authors e-mail/slashdotters and diggers:

Arudius
The Gentoo Forensic Toolkit
Anonym-OS

Source: darknet.org.uk

Cài đặt VNC-Server trên Centos

Snail — Sun, 21 Jun 2009 00:55:14 +0000

Đầu tiên cài gói KDE nếu chưa được cài

#yum grouplist #yum groupinstall "X Window System" "GNOME Desktop Environment" #yum groupinstall "X Window System" "KDE (K Desktop Environment)"

Tiếp đến cài vnc và config
Sử dụng yum

#yum install vnc-server

Sửa file vncserver

#vi /etc/sysconfig/vncservers

# The VNCSERVERS variable is a list of display:user pairs.
#
# Uncomment the lines below to start a VNC server on display :2
# as my ‘myusername’ (adjust this to your own). You will also
# need to set a VNC password; run ‘man vncpasswd’ to see how
# to do that.
#
# DO NOT RUN THIS SERVICE if your local area network is
# untrusted! For a secure way of using VNC, see
# .

# Use “-nolisten tcp” to prevent X connections to your VNC server via TCP.

# Use “-nohttpd” to prevent web-based VNC clients connecting.

# Use “-localhost” to prevent remote VNC clients connecting except when
# doing so through a secure tunnel. See the “-via” option in the
# `man vncviewer’ manual page.

VNCSERVERS=”1:root”
VNCSERVERARGS[1]=”-geometry 800×600″
~
~
~
~

Khởi động vncserver
#vncserver
nó có hỏi pass thì đặt pass rồi nhập lại pass ( hoặc sau khi config xong ta có thể đổi pass #vncpasswd)
Sửa file xstartup
#vi /root/.vnc/xstartup

$ vi ~/.vnc/xstartup
#!/bin/sh

# Uncomment the following two lines for normal desktop:
unset SESSION_MANAGER
exec /etc/X11/xinit/xinitrc

[ -x /etc/vnc/xstartup ] && exec /etc/vnc/xstartup
[ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources
xsetroot -solid grey
vncconfig -iconic &
xterm -geometry 80×24+10+10 -ls -title “$VNCDESKTOP Desktop” &
twm &

Khởi động lại VNCserver
#/etc/init.d/vncserver restart
Khởi động khi bật máy
#chkconfig vncserver on
Tắt firewall
#/etc/init.d/iptables stop
tắt firewall khi bật máy
#chkconfig iptables off
Trên client sử dụng vncviewer
Download:

http://www.stanford.edu/class/ee108b/tools/vncviewer.exe

đăng nhập bằng IP:1 hoac IP:2 do mình config trong files /etc/sysconfig/vncservers
Done!

Source: vnLamp

How to get Clip-Share 4.0.9 Working on FreeBSD 6.3

Snail — Sat, 20 Jun 2009 19:56:04 +0000

REVISED: Mencoder 1.0rc2 has too many problems with WMV files. Modified the guide to work with Mencoder 1.0rc1 instead. Also, added the necessary steps to install GCC 4.2 to compile FFMPEG correctly.

Introduction

For the past week, I have been trying to figure out how to get Clip-Share 4.0.9 working on a FreeBSD system. Uploading script files are easy, but when it comes to compiling and installing binaries, everything can go wrong and then some. I wanted to install everything from ports to keep the system clean and organized, and to make future upgrades easy. I also wanted all the options in CS 4.0.9 to work with minimal customization of the scripts, so if I ever update to the next version, I don’t have to worry about overwriting files that are heavily customized. This guide is for the user who can’t get Clip-Share to work on a FreeBSD 6.3 system. Basic understanding of the operating system is required to follow this guide.

My installation guide works with the following installs:

FreeBSD 6.3, Apache 1.3.41, PHP 5.2.6, MySQL 5.0.51a
Mplayer (mplayer-0.99.11_7)
Mencoder 1.0rc1 (compiled from sources)
FFMPEG (ffmpeg-2008.07.27_7)
libvorbis-1.2.0_2,3
libogg-1.1.3,4
lame-3.97_1

You will need root access to perform certain functions in this guide. If all the binaries are already installed for you, you might want to skip down a section or two and probably go to the convert.php file modification part.

While I have tried to simplify and remove unnecessary steps from this guide, I might become a bit redundant during the ports install. I have listed all the ports that you will need to install. Sometimes, installing one port (e.g. Mplayer) might install everything else for you automatically. Chances are that x264, xvid, speex, libtheora, faac, win32codecs, lame, etc. will all be compiled & installed for you as they can be dependencies (if selected during the configure step).

Just so you know, there is no need for ffmpeg-PHP or phpVideoToolkit. Lastly, you can follow this guide whether or not you have DirectAdmin or any other control panel installed.

Installation

First, let’s do some basic httpd.conf configuration. Open up your domain’s httpd.conf file (or global httpd.conf) and find the VirtualHost section for the domain you’re installing Clip-Share on. You will have to insert the following lines between the directives of your domain.

DirectAdmin users: login as Admin, go to “Custom HTTPD Configurations”. Select the domain you are installing Clip-Share on. Add the following lines in the top box (“Httpd.conf Customization for yourdomain.com”).

php_value upload_max_filesize 100M
php_value post_max_size 100M
php_value max_execution_time 1000
php_value session.gc_maxlifetime 14000
php_value output_buffering on
php_admin_value suhosin.executor.func.whitelist exec //if using suhosin

Ports, Binaries & Sources

Using your favourite SSH client (putty, SecureCRT, direct console access, etc.) login to your server as root.

While this is not required, I put this setting in make.conf to prevent any of the ports from installing X11 garbage. There is no place for X11 or GUIs on a web server, so this little setting enforces the rule.

In /etc/make.conf, put:

WITHOUT_X11=yes

Now, we get to install the necessary applications and libraries via Ports. Before you actually start installing everything, make sure your ports system is up to date. If you don’t know how to do this, check the FreeBSD handbook, section CVS.

Installing ports is very straight-forward and fun.

Install GD Library 2: cd /usr/ports/graphics/gd && make install clean
Install Flvtool++: cd /usr/ports/multimedia/flvtool++ && make install clean
Install lame: cd /usr/ports/audio/lame && make install clean
Install libogg: cd /usr/ports/audio/libogg && make install clean
Install libvorbis: cd /usr/ports/audio/libvorbis && make install clean
Install GCC 4.2 (for proper FFMPEG compilation): cd /usr/ports/lang/gcc42/ && make install clean
Note: this may take a few minutes, as compiling GCC 4.2 takes a while.
Install FFMPEG: cd /usr/ports/multimedia/ffmpeg && make USE_GCC=4.2 install clean
Note the USE_GCC=4.2 argument to enforce compiling of FFMPEG with a more recent version of GCC.
Install Mplayer: cd /usr/ports/multimedia/mplayer && make install clean
(make sure to disable X11 stuff and select the codecs you want to support)
Install Mencoder: The one from ports is version 1.0rc1 (which doesn’t work well). We’re going to compile this binary from source instead.As root, do the following at the console:
# wget http://www.mplayerhq.hu/MPlayer/releases/MPlayer-1.0rc1.tar.bz2
# tar zxvf MPlayer-1.0rc1.tar.bz2
# cd MPlayer-1.0rc1
# ./configure
# gmakeNext, we’re going to copy the compiled binary to /usr/local/bin/. Just type:
# cp mencoder /usr/local/bin/

We need to do a small tweak to get things running smoothly. Flvtool++ installs itself under /usr/local/bin/, while Clip-Share looks for this utility under /usr/bin/ (beats me as to why). Rather than have duplicate binaries, we’ll create a symlink. Just do the following (as root):

# cd /usr/bin/
# ln –s flvtool2 /usr/local/bin/flvtool++

Upload Clip-Share Files

Now it’s time to go ahead and upload the Clip-Share files. Don’t forget to transfer the files in Binary mode (as recommended by the developers).

Make sure the .htaccess file is uploaded correctly and that it’s present in the root directory of your website. On an OSX workstation, you won’t see this file as Leopard hides files that begin with a dot. Your best bet is to upload the entire Clip-Share archive file and extract it via console, this way making sure all the files are uploaded correctly and are present.

Make sure the CGI-BIN directory is chmod’ed 755, and both the user AND the group belong to YOUR username on the server. Double-check this now; it’ll take you 30 seconds and save you a lot of trouble. If it is different, do the following via the console:

# chown username:username cgi-bin

Where username is your login name on the server.

Follow the rest of the CS installation file. Change the absolute path in ubr_upload.pl accordingly and verify that it is correct. On a FreeBSD system with DirectAdmin installed, it’ll look like: /home/username/domains/yourdomain.com/public_html/

Changes to Script Files

Modify the convert.php script as follows:

*** Removed previous $encodecommand changes as we’re working with Mencoder 1.0rc1 now. ***

Replace:
exec($config['metainject']. ‘ –Uv ‘ .$config['FLVDO_DIR']. ‘/’ .$vid. ‘x.flv ‘ .$config['FLVDO_DIR']. ‘/’ .$vid. ‘.flv’);

With:
exec($config['metainject']. ‘ ‘ .$config['FLVDO_DIR']. ‘/’ .$vid. ‘x.flv ‘ .$config['FLVDO_DIR']. ‘/’ .$vid. ‘.flv’);

Testing, Verification and Miscellaneous Configuration

Login to your website’s administration panel (/siteadmin) and go to “System Checks”. Make sure there are no binaries missing, other than THEORA and FAAC support.

Go to “Media Settings” and enable “Video resize” if you want.

Upload several test videos of varying sizes and formats. Make sure the audio is in sync and that Clip-Share is resizing them accordingly. Take a look at your server load and see if everything is looking ok. The videos you upload must be error-free and encoded properly. I’ve noticed that videos that are poorly encoded or corrupt won’t convert correctly.

Pay attention to Apache error log file in case something goes wrong. If you get “No file given” errors, it’s related to Mencoder from my experience. Make sure you have 1.0rc1 or 1.0rc2 installed and nothing else.

Source : asksaro

Tesla – Love Song

Snail — Fri, 19 Jun 2009 22:50:16 +0000

[See post to watch Flash video]

Artist(Band):Tesla Review The Song (0)

Alright! Now this next song, I’m gonna leave the stage, I’m gonna leave
you people with the man on the acoustic guitar, mr. Frankie Hannon

[Solo]

So you think that it’s over, say your love has finally reached the end
Any time you call, night or day, I’ll be right there for you
If you need a friend

It’s gonna take a little time, I know, time is sure to mend your broken heart
But don’t you even worry, Philadelphia, ‘cos I know you’ll find love again

Love is all around you, love is knockin’ outside your door
Waitin’ for you is this love made just for two
Keep an open heart and you’ll find love again, I know

Love is all around you, yeah yeah, love is knockin’ outside your door
Waitin’ for you is this love made just for two
Keep an open heart and you’ll find love again, I know

[Solo]

It’s all around
It’s all around

Love will find a way – darlin’, love is gonna find a way
Find its way back to you
Love will find a way – so look around, open your eyes
Love is gonna find a way – love is gonna, love is gonna
Love is gonna, love is gonna find a way, yeah
Love will find a way – love is gonna find a way back to you, yeah yeah yeah

[Solo]

Love will find a way – darlin’, love is gonna find a way
Find its way back to you
Love will find a way – oh just look around, look around
Open up your eyes now, honey
Love is gonna find a way – love is gonna, love is gonna
Love is gonna, love is gonna find a way, yeah
Love will find a way – love is gonna find a way back to you, yeah, I know

You know what Philadelphia?

I know, I know, I know, I know

Whoo! Thank you very much, Philadelphia!

Whoa, wait a minute, wait a minute! Remember that song we were gonna sing now?
Okay, yeah

Tear ‘em up, cowboy!

We’re gonna go back there with drums from our heads
So tonight’s as good a night as any to try. Help us out

New server info

Snail — Fri, 19 Jun 2009 22:24:51 +0000

root@server [~]# cat /proc/cpuinfo

processor : 0

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 0

siblings : 2

core id : 0

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4405.75

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

processor : 1

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 0

siblings : 2

core id : 1

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4399.57

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

processor : 2

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 1

siblings : 2

core id : 0

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4399.58

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

processor : 3

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 1

siblings : 2

core id : 1

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4399.57

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

root@server [~]# cat /proc/meminfo

MemTotal: 524288 kB

MemFree: 177568 kB

Buffers: 0 kB

Cached: 0 kB

SwapCached: 0 kB

Active: 0 kB

Inactive: 0 kB

HighTotal: 0 kB

HighFree: 0 kB

LowTotal: 524288 kB

LowFree: 177568 kB

SwapTotal: 0 kB

SwapFree: 0 kB

Dirty: 0 kB

Writeback: 0 kB

AnonPages: 0 kB

Mapped: 346720 kB

Slab: 0 kB

PageTables: 0 kB

NFS_Unstable: 0 kB

Bounce: 0 kB

CommitLimit: 0 kB

Committed_AS: 666620 kB

VmallocTotal: 0 kB

VmallocUsed: 0 kB

VmallocChunk: 0 kB

HugePages_Total: 0

HugePages_Free: 0

HugePages_Rsvd: 0

Hugepagesize: 2048 kB

root@server [~]#

root@server [~]# cat /proc/cpuinfo

processor : 0

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 0

siblings : 2

core id : 0

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4405.75

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

processor : 1

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 0

siblings : 2

core id : 1

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4399.57

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

processor : 2

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 1

siblings : 2

core id : 0

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4399.58

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

processor : 3

vendor_id : AuthenticAMD

cpu family : 15

model : 65

model name : Dual-Core AMD Opteron(tm) Processor 2214 HE

stepping : 3

cpu MHz : 2200.131

cache size : 1024 KB

physical id : 1

siblings : 2

core id : 1

cpu cores : 2

fpu : yes

fpu_exception : yes

cpuid level : 1

wp : yes

flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov

pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdtscp lm 3dno

wext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy

bogomips : 4399.57

TLB size : 1024 4K pages

clflush size : 64

cache_alignment : 64

address sizes : 40 bits physical, 48 bits virtual

power management: ts fid vid ttp tm stc

root@server [~]# cat /proc/meminfo

MemTotal: 524288 kB

MemFree: 177568 kB

Buffers: 0 kB

Cached: 0 kB

SwapCached: 0 kB

Active: 0 kB

Inactive: 0 kB

HighTotal: 0 kB

HighFree: 0 kB

LowTotal: 524288 kB

LowFree: 177568 kB

SwapTotal: 0 kB

SwapFree: 0 kB

Dirty: 0 kB

Writeback: 0 kB

AnonPages: 0 kB

Mapped: 346720 kB

Slab: 0 kB

PageTables: 0 kB

NFS_Unstable: 0 kB

Bounce: 0 kB

CommitLimit: 0 kB

Committed_AS: 666620 kB

VmallocTotal: 0 kB

VmallocUsed: 0 kB

VmallocChunk: 0 kB

HugePages_Total: 0

HugePages_Free: 0

HugePages_Rsvd: 0

Hugepagesize: 2048 kB

root@server [~]#

How to: FFmpeg + FFmpeg-PHP + Mplayer + Mencoder + flv2tool + LAME MP3 Encoder + Libogg + Libvorbis + AMR on a Linux Based Server

Snail — Thu, 18 Jun 2009 17:16:23 +0000

The following Guide will show you exactly how to install the following packages on a CentOS system:

FFmpeg
FFmpeg-PHP
Mplayer + Mencoder
flv2tool
LAME MP3 Encoder
AMR (for 3gp file conversions)
Libogg
Libvorbis

Setup the directory to use

(Wouldn’t want /root to start getting crowded, would we?)
mkdir /usr/local/src cd /usr/local/src

Dowload the necessary files.

wget http://www3.mplayerhq.hu/MPlayer/releases/codecs/essential-20061022.tar.bz2 wget http://rubyforge.org/frs/download.php/9225/flvtool2_1.0.5_rc6.tgz wget http://easynews.dl.sourceforge.net/sourceforge/lame/lame-3.97.tar.gz wget http://superb-west.dl.sourceforge.net/sourceforge/ffmpeg-php/ffmpeg-php-0.5.1.tbz2 wget http://downloads.xiph.org/releases/ogg/libogg-1.1.3.tar.gz wget http://downloads.xiph.org/releases/vorbis/libvorbis-1.1.2.tar.gz wget http://ftp.penguin.cz/pub/users/utx/amr/amrnb-6.1.0.4.tar.bz2 wget http://ftp.penguin.cz/pub/users/utx/amr/amrwb-6.0.0.1.tar.bz2

Extract all the files

tar zxvf flvtool2_1.0.5_rc6.tgz tar zxvf lame-3.97.tar.gz tar zxvf libogg-1.1.3.tar.gz tar zxvf libvorbis-1.1.2.tar.gz tar zxvf flvtool2_1.0.5_rc6.tgz tar jxvf essential-20061022.tar.bz2 tar jxvf ffmpeg-php-0.5.1.tbz2 tar jxvf amrwb-6.0.0.1.tar.bz2 tar jxvf amrnb-6.1.0.4.tar.bz2

Create a folder to hold the codecs

mkdir /usr/local/lib/codecs/

Make sure we have all the necessary libraries as well as SVN + Ruby installed

yum -y install gcc gmake make libcpp libgcc libstdc++ gcc4 gcc4-c++ gcc4-gfortran subversion ruby ncurses-devel

Get ffmpeg and mplayer via SVN

svn checkout svn://svn.mplayerhq.hu/ffmpeg/trunk ffmpeg svn checkout svn://svn.mplayerhq.hu/mplayer/trunk mplayer cd /usr/local/src/mplayer svn update cd /usr/local/src

Copy Codes for Mplayer

mv /usr/local/src/essential-20061022/* /usr/local/lib/codecs/ chmod -R 755 /usr/local/lib/codecs/

Create a temp dir with 777 permissions (needed to install ffmpeg)

mkdir /usr/local/src/tmp chmod 777 /usr/local/src/tmp export TMPDIR=/usr/local/src/tmp

Installing LAME

cd /usr/local/src/lame-3.97 ./configure make && make install cd /usr/local/src/

Installing LIBOGG:

cd /usr/local/src/libogg-1.1.3 ./configure && make && make install cd /usr/local/src/

Installing LIBVORBIS:

cd /usr/local/src/libvorbis-1.1.2 ./configure && make && make install cd /usr/local/src/

Installing FLVTOOL2:

cd /usr/local/src/flvtool2_1.0.5_rc6/ ruby setup.rb config ruby setup.rb setup ruby setup.rb install cd /usr/local/src/ cd /usr/local/src/mplayer ./configure && make && make install cd /usr/local/src/

Installing AMR (for 3GP Conversion)

cd /usr/local/src/amrnb-6.1.0.4 ./configure make && make install cd /usr/local/src/amrwb-6.0.0.1 ./configure make && make install

Installing FFMPEG:

cd /usr/local/src/ffmpeg/ ./configure –enable-libmp3lame –enable-libogg –enable-libamr-nb –enable-libamr-wb –enable-libvorbis –disable-mmx –enable-shared make make install ln -s /usr/local/lib/libavformat.so.50 /usr/lib/libavformat.so.50 ln -s /usr/local/lib/libavcodec.so.51 /usr/lib/libavcodec.so.51 ln -s /usr/local/lib/libavutil.so.49 /usr/lib/libavutil.so.49 ln -s /usr/local/lib/libmp3lame.so.0 /usr/lib/libmp3lame.so.0 ln -s /usr/local/lib/libavformat.so.51 /usr/lib/libavformat.so.51 cd /usr/local/src/

Installing FFMPEG-PHP:

cd /usr/local/src/ffmpeg-php-0.5.0/ phpize ./configure make make install
Note: Make sure this is the correct php.ini for the box!!
echo ‘extension ffmpeg.so’ >> /usr/local/Zend/etc/php.ini

Restart and you’re done

service httpd restart cd /usr/local/src

Testing

Direct your browser to view a phpinfo() php file. Scroll down and you should see the ffmpeg extension.

Source: Andrew – laatedaa.com

6 multiclient IM apps to chat about

Snail — Mon, 15 Jun 2009 21:49:17 +0000

Multiclient IM resources

Adium Adium is my favorite multiclient instant-messaging tool for a few reasons. It supports practically any IM platform around, including AIM, Yahoo Messenger, Facebook, MySpace, Google Talk (via Jabber), and more. It even has a plug-in for Skype.

You’ll rarely have any trouble communicating with friends in the service. But its most redeeming quality is that it’s open source. So, if you want to modify the code to fit your own IM desires, that’s possible. And those in the open-source community are constantly improving the product, whose updates typically install with ease.

When you download Adium (it’s available for Mac OS X), you’ll have the option of choosing your IM service. By default, Adium takes on the same design as Mac OS X. But with the help of some plug-ins from Adium’s site, called “Xtras,” you can customize it as you see fit. Those add-ons include emoticons, dock icons, scripts, and more. I could go on about Adium, but I think that you get the point: if you’re a Mac OS X user, it’s worth trying out.

Adium takes on the look of Mac OS X by default.

Digsby Digsby is a multifaceted tool that lets you communicate with friends over instant messaging, e-mail, or social networks. I recently took a look at its social-networking capabilities. After having the opportunity to use its IM services, I was just as impressed.

After installing Digsby on my Windows PC (Mac and Linux versions are reportedly on the way), I was able to log in to my accounts on AIM, Yahoo Mail, Facebook, and others. Digsby’s app is designed well, with a more attractive interface than Adium’s default skin. Digsby also gives you the option of sending an SMS text message from the application. Overall, I liked Digsby.

Digsby lets you chat with anyone at any time.

eBuddy eBuddy is a Web-based multiclient instant-messaging app through which you can connect to AIM, Yahoo IM, MSN, Facebook, ICQ, and MySpace. Although it provides a bunch of options, eBuddy doesn’t quite stand up to the competition. It’s not as responsive as some of the other apps in this roundup, and I was unimpressed by its design. That said, I did like that I could view my Facebook friends’ profiles by clicking on a link in the client. I also liked that the app opens in a separate window–I find it more convenient than switching to a tab. Plus, it’s available for Android-based phones, as well as the Nintendo DS and Sony PSP.

eBuddy isn’t the best-looking service, but it still works well.

Meebo Like eBuddy, Meebo is a Web-based instant-messaging tool that lets you communicate with friends on AIM, MySpace, Yahoo, and MSN. You can also chat with Facebook and Google Talk friends.

When you go to the Meebo home page, you have the option of inputting your credentials for any of those services. The instant messaging on Meebo is outstanding. It’s the same interface for all the sites, but you can get buddies’ contact information, see their Facebook status, and even check out their entire Facebook profile by clicking on the appropriate link, which opens the profile in another tab. Meebo is one of the more popular multiclient IM tools on the Web for good reason–it’s simple, responsive, and boasts support for a variety of clients. Even better, you can use it on your iPhone.

Meebo lets you chat with your Facebook friends.

(Credit: Screenshot by Don Reisinger/CNET)

Pidgin Similar to Adium, Pidgin is an open-source IM client that allows you to modify it as you wish. If you don’t want to do that, you’ll still be satisfied with the software.

Once installed, Pidgin gives you the option of signing into your various IM accounts. You can chat with friends on AIM, Google Talk, ICQ, MySpace, and others at the same time. It’s not as good-looking as some of its competitors, but it’s designed more for the power user who wants to be able to chat with as many people at a time as possible. Pidgin is ideally suited for Windows machines, so that may be a problem for some. If you want to use an open-source instant-messaging platform on a Mac, Adium is your best bet.

Pidgin asks you to create accounts when you first start it up.

Trillian Trillian is a desktop IM client that supports instant messaging on AIM, ICQ, MSN, Yahoo Messenger, and Internet Relay Chat. Unfortunately, it’s available only to Windows users at this time. The company is promising Mac and iPhone support in its follow-up version of the software, called Trillian Astra.

Overall, I was really impressed by Trillian. It supports the standard features like group chat, audio chat, and the option to view profiles. But having the ability to change skins was quite appealing. I was able to customize the experience to match my tastes. From dark to bright, there’s at least one skin for everyone. Trillian is, quite simply, the most beautiful multiclient IM service in this roundup. If you want more functionality (such as bringing in your Google Talk contacts), you can also buy Trillian Pro, which costs $25.

Trillian Astra is coming to Trillian.

Credit: Screenshot by Don Reisinger/CNET

5 Best Torrent Tracker Scripts To Start Your Own Torrent Site

Snail — Wed, 03 Jun 2009 16:37:22 +0000

Xbtit

Xbtit is developed by Btiteam. It is released under Free BSD license. It is a highly recommended tracker and can certainly be regarded as one of the best available tracker. It even has option of integrating xbtt C++ tracker which is highly efficient. It uses SMF as its forum and the project is actively supported by a large group on members. Its definately the best choice if you want the best free tracker.

Download | Demo

Main Features :

Choice Of Tracker (PHP or C++)
Template System
Choice Of Forum
External Mail Server Support
Easy Modification Installs
Ajax Shoutbox and Poll
Cache System
Extensive Admin Panel
External Tracker Support

Some Live Sites Using Xbtit :

H33t
Fr33dom

Torrent Strike

It is one of the modded version of original TBDev Script. Torrent Strike has many flavors such as officially supported Nzb, Fullymodded etc, or even some unofficial ones. The script is lightweight good for a starting new site which doesn’t want many hassels. I really don’t like the admin panel and settings are pretty odd. Its recommended to those who want to run a very simple lightweight script.

Download | Demo

Main Features :

Template System
Poll and Shoutbox
Games
Embedded phpBB forum
Fast Tracker

Some Live Sites Using Torrent Strike :

Template Shares

This script is developed by xam and comes at a premium, its originally based on TBdev, but it has been modded beyond recognition, the script is encoded and released so that it cannot be copied. I have used the script on one of my friends site and also asked what are his views about the script,

I was originally using torrent strike and i mainly transferred to this script as it looks good and supports external scrape, integrated imdb easy plugin system and many other features. Truly saying at first i was very happy with the script but later i realised its pretty security freak script banning every ip, without support of multiple downlaods for same user which really was a drawback to me as i sometimes release torrents in public sites. More over this script uses encoding and has many excess stuffs which are not needed but takes up my whole system ram and processor, its very system heavy. I will not recommend this if you have low budget and can’t get yourself a great server, or if you want a script which you can mod it to suit your needs. I will also not recommend who wants to release torrents in public. Moreover i find the script admin and moderator panel highly complicated. This script is only for sites who wants to have very secure site and lots of restrictions in site, or want to have ssl layer. For a general regular site this isn’t worth investing.

Download | Demo

Main Features :

SSl and External Scrape Support
Silver, Double And Free Leech Torrent
IMDB Support
Cronjob
Plugins Support
Very Secure Admin, Moderator Panel
Subtitle Support
Easy Paypal Integration
Ajax Themation

Some Live Sites Using Template Shares :

PHP MyBittorrent

Main feature of this script is active support or other networks other than bittorrent. This is a recommended script for those who wants their site to have different protocol supported or wants to create public tracker. This is the only script having massive torrent upload and PHPBB3 forum integrated.

Download | Demo

Main Features :

Supports all latest BitTorrent Protocol Extensions, including Compact Announce, MultiScrape, DHT, Peer Count, Tracker ID, Unique Peer ID, Backup Tracker
There are many ways other than BitTorrent to share files. GNutella, Direct Connect, eDonkey are some of them.
Massive Torrent Upload
Low Requirements
Theme System
Easy to Mod
phpBB3 Forum Integrated

Some Live Sites Using Php My Bittorrent :

Torrent Trader

This is a classic script, does’nt really have anything special. So i can’t really say for whom the script is, maybe its for those who don’t like the above 4 scripts mentions and liked the settings and system of torrent trader. You need to try it to know.

Download

Main Features :

Fully Themable
14 Languages
Peerguardian Import Facility
IRC Integration
RSS Feeds
Additional Hacks

Some Live Sites Using Torrent Trader :

From pcandweb

WordPress 2.8 Beta 1

Snail — Thu, 21 May 2009 03:32:50 +0000

WordPress 2.8 Beta 1 has been released. For all the new features, refer to the WordPress 2.8 in Codex.

Good hunting, all you testers.

Download: WordPress 2.8 Beta 1

New Features

User Features

New Theme Installer routines

Add CodePress syntax highlighting to Theme and Plugin editors

Add Documentation(function) lookup to Theme and Plugin editors

Use “Custom Header” for menu text and revise Default theme to reflect change

Separate Comments into a separate postbox, from Discussion postbox, on the Edit Post screen

Make tags accessible without Javascript on the edit screen

Don’t ask for confirmation when marking a comment as spam

Don’t notify post author of own comments

Allow the dashboard widgets to be arranged in up to four columns as set via the Screen Options tab

Make titles into links in Dashboard Right Now module (this was in 2.7.1)

Improved Admin icons (grey-to-transparent shadows)

Update Blue Admin Color Scheme

Press This improvements UI, quoting fixes, plus ability for Contributors to use Press This

Add column “Rating” in Administration > Links > Edit

Improve installer to help people entering wrong email addresses

Improved Widget user interface

Allow editing of all plugin files (Ticket 6732)

Improved Plugin search (this was in 2.7.1) on Administration > Plugins > Add New

Per Page option for plugins

Move “Install a plugin in .zip format” to new Upload tab under Administration > Plugins > Add New

Show absolute date instead of relative date for scheduled posts

Fix tags suggest for post quick edit and bulk edit

Permalink editor changes and fix for pages

Autosave post/page when pressing Control/Command+S

Add toggle all button to the Gallery tab in the uploader

Support more than one gallery on the same page

Add per page option to Screen Options for comments, posts, pages, media, categories, and tags

Overhaul of LiveJournal importer (also add define WP_IMPORTING)

Import category descriptions for Administration > Tools > Import > WordPress

Show Tools menu for all users so they can access Turbo

Check for new version when visiting Administration > Tools > Upgrade

In upgrade process, provide better explanation for database upgrade message

Fix most popular link category list

Add description field for tags

WAI-ARIA landmark roles to added to WordPress Default theme

“Choose a city in the same timezone as you” for Timezone in Administration > Settings > General

Remove My Hacks option from Administration > Settings > Miscellaneous

Hide email addresses from low privilege users on Administration > Comments

Allow case-insensitive logins

Enforce unique email addresses in Add/Edit users

Make user_nicenames unique during registration

Add “Send this password to the new user by email” option to Administration > Users > Add New

Don’t set user’s Website url to http:// in Administration > Users > Add New

Add password strength meter to Add User and Edit User

Hide things that need to be available to screen readers via offscreen positioning

Use invisible class for hiding labels and legends

Use a semantic class name for text targeted to screen readers

Development, Themes, Plugins

Improved database performance

Drop post_category column from wp_posts table, and link_category column from wp_links schemas

Fix delete statements to ensure data integrity when innodb and foreign keys are used

Enforce consistent ID types to allow for foreign keys to be defined between tables

Add Sticky to list of post states

Add a filter to the post states list

Introduction and widespread use of transient and related fiters

Add filters so AIM, Yahoo, and Jabber IM labels, in user profile, can be changed

Add hook “after_db_upgrade”

Add hooks for the Users, Categories, Link Categories, Tags and Comments table columns

HTTP API updates and fixes

Add support for blocking all outbound HTTP requests

Updated List of HTTP status codes (Ticket 9297)

Use SimplePie for widget and dashboard feeds

Switch to pomo lib. Support gettext contexts. Deprecate long form functions

TinyMCE 3.2.3

Use Jcrop 0.9.8 for cropping

Update pclzip to 2.8

Update PHPMailer to 2.0.4

Update SWFUpload to 2.2.0.1

Improved performance for script loading

Improved archive and calendar queries

Cron spawning improvements

Timezone enhancements for PHP 5

Add WP_Widget class and move native widgets into WP_Widget

Allow other taxonomies (e.g. post categories) to be used with wp_tag_cloud (Changeset 10554)

Add echo argument to wp_tag_cloud()

Allow a plugin to control how many posts are displayed on edit pages

Add “style” and “html” arguments to wp_list_authors (Ticket 4420)

Add “exclude_tree” argument to wp_list_categories and make exclude behave like exclude_tree when hierarchical is specified–this was actually a 2.7.1 change (Ticket 8614)

New Template Tag, the_modified_author (Ticket 9154)

Enhanced support for custom taxonomies

Put page title before blog name in admin title (Ticket 9028)

Use https://api.wordpress.org/secret-key/1.1/ for the WordPress.org secret-key service

Various phpDoc updates

Refactor filters to avoid potential XSS attacks

XMLRPC improvements

Improved mysql2date coding

Make authentication more pluggable

Switch to using the ID when calling get_avatar internally to support caching plugins

Allow plugins to provide a canonical redirect_url even if WordPress does not provide its own

Drafts have post_date populated now, so look for a zeroed out post_date_gmt to determine non-scheduled nature

Fixes to query_posts (obey post_type, drop orderby=category, use group by for meta key queries, remove meta_value from selected fields)

Allow a plugin to filter the classes applied in wp_list_pages()

Functions (get_adjacent_post_rel_link() and adjacent_post_rel_link()) to display relational links for adjacent posts in the head (Ticket 8703)

Add the sticky post grey background to the default theme

Proxy support

Let a plugin filter the expanded capabilities returned by map_meta_cap

Allow the update period to be filtered in RSS/RDF feeds

Store field types in wpdb object

Add tag description functions tag_description and term_description

Add page class to get_body_class()

Deprecate get_catname()

Use comments_open() and pings_open() in WordPress Default and Classic themes

Add wp_trim_excerpt() filter

Consolidate plugin/theme/core upgrade/install functions

Add page-id-x class to body for pages

Return empty list in wp_list_bookmarks() if requested bookmark category does not exist

Allow menu reordering via plugin

Add hook for updating user profile

Add redirect argument to wp_loginout

Add get_the_author_meta() and the_author_meta() functions

Let plugins use screen layout columns

Add labels to titles and text inputs

Add hook for adding info to plugin update message

Don’t do core version check from front page loads

Allow a plugin to vary the comment cookie lifetime (or even remove the cookies altogether)

Allow plugin to replace just the default help while preserving the contextual help

New escaping naming convention Ticket 9650

Deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security

Deprecate sanitize_url() and clean_url() in favor of esc_url_raw() and esc_url()

Add number/offset arguments to get_pages() (same parameters can be used for wp_list_pages()

Make login more pluggable

Add a function to output a generic widget anywhere in a template

Allow plugins to override tz support enable/disable

Fix combining category and tag queries

Support IIS 7.0 URL Rewrite Module

Recognize Expression Web 2 as IIS

Updated Trac

Advanced Features

JS script loader Improvements

jQuery 1.3.2

Improvements to the script loader: allows plugins to queue scripts for the front end head and footer, adds hooks for server side caching of compressed scripts, adds support for ENFORCE_GZIP constant (deflate is used by default since it’s faster)

Load the minified versions of the scripts by default, define(‘SCRIPT_DEBUG’, true); can be used to load the development versions

Remove events from categories chechboxes in quick edit to speed up page unload

Make simple form validation and ajax-add new categories compatible with jQuery 1.3.1

Load farbtastic.js has to be loaded in the head

Note: see Lester Chan’s Loading Javascript in Footer blog and Andrew Ozz’s Script Loader Updates blog

New Widgets API

WP_Widget is a class that abstracts away much of the complexity involved in writing a widget, especially multi-widgets.

Basically, you extend WP_Widget with your own class that provides a constructor and three methods — widget(), form(), and update().

widget() – outputs the actual content of the widget.

update() – processes options to be saved.

form() – outputs the options form.

A widget is registered by passing the name of the widget class to register_widget().

All widgets written with WP_Widget are multiple instance capable.

Options

Options for old single-instance widgets ported to WP_Widget will be upgraded to the new multi-option storage format, which is simply a multi-dimensional array keyed by instance ID.

Options for widgets using the old multi-instance pattern should work as is.

If your widget has custom option storage needs, you can provide your own get_settings() and save_settings() methods.

The WP_Widget source can be viewed here (read the phpdoc for moreinfo on usage): http://core.trac.wordpress.org/browser/trunk/wp-includes/widgets.php

You can see examples of how to use it here: http://core.trac.wordpress.org/browser/trunk/wp-includes/default-widgets.php

If you author any widgets, try porting them to WP_Widget and give your feedback on what can be improved an Trac Ticket 8441.

Props to the MultiWidget class, on which WP_Widget is based: http://blog.firetree.net/2008/11/30/wordpress-multi-widget/

The above extracted from Ryan Boren’s wp-hackers post.

Menu reordering via plugin

Example plugin demonstrates menus with Dashboard, Posts, and Comments in the first menu group. The remaining menus follow in their usual order.

When filtering the order array, any menus that are not mentioned in the array will be sorted after ones that are mentioned.

Unmentioned menus are sorted in their usual order, relative to other unmentioned menus.

Information extracted from Ryan Boren’s comments on Trac Ticket 9652

Features That Didn’t Make it into Version 2.8

These features didn’t make it into Version 2.8 (or Version 2.7).

Some default shortcodes, maybe the most popular 10 from WordPress.com

oEmbed support, tied in with shortcodes

Better UI for post revisions, maybe an optional field to say what changed in a version

OAuth support

GeoData for posts, comments, attachments, etc.

Template tags to do everything the custom gallery on ma.tt does

Menu editor

Unbalanced tags across more and nextpage tags (Ticket 6297)

Sitemaps by default

Refresh of the importers (LiveJournal was refreshed)

Gallery post_type

Versioning of template edits

Documentation links for functions used in currently edited template

MPTT for hierarchies

Fieldrunners Cheat

Snail — Mon, 11 May 2009 13:07:13 +0000

With iPhonebrowser or your file browser of choice go to:

/var/mobile/Applications/*find the Fieldrunners folder*

and edit any of the *.enemy files with a text editor.

The text file will look something like this:

light_soldier sprite=”unit_light_soldier.asc” health=”100″ healthBarOffset=”-22.0″ speed=”1.5″ score=”1000″ resources=”100″ damage=”1″ renderFirstUponDeath=”yes”

Some of the stuff is pretty self explanatory. Resources is how much money you get for each kill. Edit this and you can bank tons of money.

Some source for Cydia and Installer

Snail — Tue, 10 Mar 2009 08:54:40 +0000

Cydia:

VNM: http://www.vnmagic.net/cydia
iPhoneHK: http://www.iphone.org.hk/apt
BigBoss : http://apt.bigboss.us.com/repofiles/cydia/
iPhoneStuff: http://iphonestuff.ru/
ModMyiFone: http://modmyifone.com/repo/
Ste: http://repo.smxy.org/cydia/apt/
Telesphoreo Tangelo: http://apt.saurik.com/
ZodTTD: http://www.zodttd.com/repo/cydia/
Andy Dam: http://repo.gafoogle.com/
Intelliborn: http://intelliborn.com/cydia/
iSpazio: http://ispaziorepo.com/cydia/apt/
Urban Fanatics: http://urbanfanatics.com/cydia/
Free Coder: http://iphone.freecoder.org/apt/
iFonetec: http://app.ifonetec.com/cydia/
Hack&Dev.org: http://iphone.hackndev.org/apt/
Tmgrepo: ftp://tmgrepo_docspages_com:9866058
Steffwiz: http://steffwiz.webs.com/iPhone/Repo
iClarified: http://cydia.iclarified.com
Iaccess:http://iaccess.com/apt
HHVN:http://iphone.handheld.com.vn/cydia
Soft4vn:http://iphone.soft4vn.net
xsellize: http://xsellize.com/cydia/pdaviet-pdaviet.net

———————————————————————
Installer

RiP Dev: http://i.ripdev.com
ipodtouchdude: http://ipodtouchdude.net84.net/
BigBoss:http://apptapp.thebigboss.org/repofiles/installer4/
iModZone: http://imodzone.net/repo/
Ste: http://repo.smxy.org/installer4/
iModZone Mirror: http://jmiz9000.extroverthost.com/
iSpazio: http://repo.neolinus.org/ispazio/
A27 Dev Team: http://a27dev.com/installer/repo
Clubifone: http://www.clubifone.com/repo/
Sendowski: http://sendowski.de/iphone/
Hackmyiphone: http://hackmyiphone.net/installer/
Wildcat: http://iphone.handheld.com.vn/installer
M2: http://repo2.indo.net.id/
iModZone: http://karldj.co.uk/imodzone/
Hackint0sh: http://hackint0sh.org/repo/
iClarified: http://installer.iClarified.com
Modmyifone: http://i.modmyifone.com/
Norwegian Source: http://installer.ifon.no
HHVN: http://iphone.handheld.com.vn/installer/
Navco: http://www.navco786.com/repo
tysiphonehelp: http://myrepospace.com/repo/tysiphonehelp
Installer apps: http://iphone.installerapps.com
Zodttd: http://zodttd.com/repo
gPDA.ru: http://gpda.ru/r
Andy Dam – http://repo.gafoogle.com/
iPhone-notes.de: http://i.iphone-storage.de/
ipodtouchdude – http://karldj.co.uk/installer/

http://zacklyn.110mb.com/

http://m2.iphoneall.org

Source HHVN

Guns N’ Roses–Don’t Cry

Snail — Sat, 31 Jan 2009 10:13:53 +0000

[See post to watch Flash video]

Talk to me softly
There’s something in your eyes
Don’t hang your head in sorrow
And please don’t cry
I know how you feel inside I’ve
I’ve been here before
Somethin’s changin’ inside you
And don’t you know

Don’t you cry tonight
I still love you baby
Don’t you cry tonight
Don’t you cry tonight
there’s a heaven above you baby
And don’t you cry tonight

Give me a whisper
And give me a sigh
Give me a kiss before you tell me goodbye
Don’t you take it so hard now
And please don’t take it so bad
I’ll still be thinking of you
And the times we had… baby

Don’t you cry tonight
Don’t you cry tonight
Don’t you cry tonight
there’s a heaven above you baby
And don’t you cry tonight

And please remember that I never lied
And please remember
how I felt inside now honey
You gotta make it your own way
But you’ll be alright now sugar
You’ll feel better tomorrow
Come the morning light now baby

And don’t you cry tonight
An don’t you cry tonight
An don’t you cry tonight
there’s a heaven above you baby
And don’t you cry
Don’t you ever cry
Don’t you cry tonight
Baby maybe someday
Don’t you cry
Don’t you ever cry
Don’t you cry
Tonight

“Don’t Cry” là một bài hát của Guns N’ Roses. Bài hát có hai phiên bản khác nhau: bài hát thứ 4 trong album Use Your Illusion I và bài thứ 13 trong album Use Your Illusion II. Hai phiên bản này có phần lời hát do Axl Rose hát lúc đầu thì khác nhau. Còn điệp khúc thì đồng nhất và toàn bộ phần còn lại của bài hát giống nhau.

Bài hát còn có sự tham gia của Shannon Hoon trong ban nhạc Blind Melon hát đệm cùng, anh là một fan cuồng nhiệt của Axl. Anh cũng có mặt trong video của bài hát.

Được xem như là một phần của bộ ba Illusion, “Don’t Cry” là bài hát đầu tiên do ban nhạc tự sáng tác cho giọng hát của Axl Rose. Cùng với “Estranged” và “November Rain“, bài hát đã dựng nên một câu truyện trong một phần của truyện ngắn “Without You” của Del James.

Axl nói rằng bài hát viết về một cô gái mà Izzy Stradlin hay đi chơi cùng. Axl đã bị cô gái đó cuốn hút.

Axl lúc đó đang ngồi bên ngoài nhà hát The Roxy khóc khi cô ấy chào tạm biệt và cô còn nói với Axl rằng “Don’t cry” 。

Axl và Izzy đã đi cùng nhau vào buổi tối tiếp theo và viết ra bài hát trong vòng 5 phút.

Video âm nhạc

Video âm nhạc của bài hát này giống như những video âm nhạc khác trong các album Illusion, là có quá nhiều hình ảnh mang tính phim ảnh hơn là hình ảnh về công việc của ban nhạc, miêu tả nhân vật chính trong sự tìm hiểu người vợ sau này của anh ấy như là một cuộc chiến đầy cảm xúc. Mặc dù không có âm thanh mạnh mẽ như những người hâm một vẫn thường thấy trong các bài hát của ban nhạc, bài hát vẫn được coi như là một trong những video hay nhất của ban nhạc đã phát hành trong thời gian ngắn ngủi bên nhau của ban nhạc.

Tay chơi ghi ta Izzy Stradlin, là đồng tác giả của bài hát, không có mặt trong video này nhưng có thể nhận thấy anh trong một tờ giấy có dòng chữ viết tay, “Where’s Izzy?” (”Izzy đâu?”). Axl cũng chỉ được nhìn thấy rất chớp nhoáng, đang đội một cái mũ chơi bóng chày của đội St. Louis Cardinals. Chi tiết này có liên quan tới việc vào năm 1991 Rose nhảy vào giữa một đám khán giả tại St. Louis ngay vào lúc đang hát dở chừng sau khi một người đàn ông đang cầm máy quay phim đang bị đuổi bắt và đã có sự náo động tiếp theo sau đó.

“Don’t cry” là bài hát nói về một người đàn ông và người yêu đang chia tay. Cả hai vẫn còn yêu nhau, nhưng… hình như trong cô gái có điều gì đó, hình như cô đang thay đổi. Anh chàng trong tâm trạng hỗn loạn của một người đau khổ lúc thì da diết, lúc thì như muốn gào thét… Nhưng nỗi đau đã không cho anh được khóc, anh… đã hát. Những ngôn từ xuất phát từ tận đáy lòng, tận con tim chân thành của anh… còn cô gái chỉ biết khóc. Tình yêu của anh dành cho cô tuy không nói ra nhưng người nghe có thể cảm nhận được đó là một tình yêu ấm áp, nhẹ nhàng và vĩnh cữu.

Tiếng guitar dạo đầu như sự dẫn dắt, đưa ta nhẹ nhàng vào nỗi đau, tiếp theo là tiếng rên của một người đàn ông. Rồi anh cất giọng. Giọng trầm, ấm, như một lời than thở da diết “Talk to me softly, there’s something in your eyes. Don’t hang your head in sorrow and please don’t cry. I know how you feel inside. I’ve… i’ve been there before somethin is changin’ inside you and don’t you know ” – Hãy nói với anh nhẹ nhàng thôi. Rằng có gì đó trong mắt em. Đừng để nói đau đè nặng trái tim em và xin em đừng khóc. Anh biết em cảm thấy gì. Anh… anh đã từng ở trong tâm trạng đó. Trong em đang thay đổi, và em không biết điều đó.

Cô ấy đang thay đổi, anh biết…từ trong sâu thẳm nỗi đau như được đè nén và anh nói tiếp: “đêm nay em hãy đừng khóc, anh vẫn còn yêu em, em yêu! Đừng khóc đêm nay. Đừng khóc đêm nay. Thiên đường vẫn ở bên em, em yêu! Và xin em đừng khóc đêm nay – Don’t you cry tonight. I still love you baby. Don’t you cry tonight. Don’t you cry tonight. There’s a heaven above you baby. And don’t you cry tonight. Bởi vì quá yêu cô ấy, nên những giọt nước mắt của cô ấy sẽ như những mũi dao, thấu vào tim anh. Nỗi đau ấy được thể hiện qua giọng hát, mà người nghe sẽ cảm nhận được từng giọt nước mắt không thành hình của anh. Anh nói với người yêu mà như nói với chính mình “đừng khóc…!”

Nhịp điệu của bài hát tăng dần theo mạch cảm xúc của chàng trai. Càng nói, anh ta càng như giằng xé hơn. Anh vẫn còn rất yêu cô ấy, vẫn muốn níu giữ mối tình kia. Nhưng tất cả đã quá muộn. Một khi tình cảm đã thay đổi thì không thể nào lấy lại được. Đó là một chân lý đau lòng.

Đoạn nghĩ giữa với những tiếng guitar réo rắt, dồn dập như tậm trạng dằn xé chàng trai. Anh không biết làm sao để giữ cô ấy. Anh trở nên rối bời trong mạch cảm xúc của mình. Anh và chính anh phải để cô ấy ra đi. Làm sao anh có thể làm được điều đó khi anh còn quá yêu cô ấy? làm sao?… làm sao đây?

Nhưng rồi anh phải chấp nhận và lại nhẹ nhàng: Hãy thầm thì cùng anh và ra dấu cho anh biết. Hãy hôn anh trước khi em, tạm biệt anh. Đừng làm điều đó một cách khó khăn. Và đừng làm một cách gượng ép. Anh sẽ vẫn nghĩ về em. Nghĩ đến những thời gian chúng ta đã có…em yêu – Give me a whisper And give me a sign. Give me a kiss before you tell me goodbye. Don’t you take it so hard now. And please don’t take it so bad. I’ll still be thinkin’ of you. And the times we had…baby. Cuối cùng anh buộc phải chấp nhận một sự thật mà anh buộc phải nhận ra rằng anh phải để cô ra đi. Những giọt nước mắt giờ đây hình như không đủ để nói hết tâm trạng và tình yêu của anh giành cho cô ấy. Nhưng bởi vì, vì “I still love you” nên anh phải buông tay…

There’s a heaven above you baby.
And please remember that I never lied.
And please remember
how I felt inside now honey?
You gotta make it your own way
But you’ll be alright now sugar
You’ll feel better tomorrow
Come the morning light now baby
And don’t you cry tonight

Thiên đường vẫn ở bên em. Xin em nhớ rằng anh chưa bao giờ lừa dối em. Và xin em hãy nhớ giờ đây anh đang cảm thấy thế nào,em yêu dấu ạ. Em muốn làm điều gì đó theo cách của riêng em. Rồi em sẽ ổn thôi! người yêu ạ. Ngày mai em sẽ thấy khá hơn. Hãy đến với ánh ban mai đi em yêu. Và xin em đêm nay đừng khóc.

Mỗi lần nghe đến đoạn này trái tim tôi như bị bóp chặt lại. Tình yêu chính tình yêu, và chỉ có tình yêu mới làm con người ta trở nên vị tha, cao thượng đến như vậy. Trong nỗi đau của chính mình anh đã an ủi người yêu “You’ll feel better tomorrow. Come the morning light now, baby”.

Như một câu nói mà tôi đã từng biết “Hạnh phúc là khi thấy người mình yêu được hạnh phúc”. Và điều tình yêu mách bảo anh chọn là việc mở rộng vòng tay, để cô ấy rời xa anh, đến với một chân trời, nơi có ánh ban mai của cô. Còn anh, anh chấp nhận trở thành đêm tối dõi theo cô trong những ngày còn lại.

Baby maybe someday… sẽ không có sự trở về nhưng anh vẫn mong: em yêu… có thể… một ngày nào đó… và thực tại đã nói với anh điều anh mong mỏi là không có, sẽ không bao giờ có một ngày nào đó… để anh mong cô trở về. Lúc này đây từ trong giọng hát của anh tôi nghe thấy những giọt nước mặt bất lực. Anh như nghẹn lời trong sự mong mỏi một ngày nào đó… Và điều cuối cùng anh có thể làm cho cô là mong cô đừng khóc. Nước mắt đau đớn của cô chính là điều làm cho cả hai phải dằn vặt.

Don’t you cry
Don’t you ever cry
Don’t you cry Tonight

“Đừng khóc em ơi. Em đã từng phải khóc. Nhưng cầu xin em đừng khóc đêm nay…

Ca khúc này cả về ca từ và nội dung và đặc biệt là giai điêu vừa mạnh mẽ nhưng cũng đầy tâm trạng sâu lắng đi vào nỗi buồn của con người! khi buồn mà được đắm chìm trong giai điệu ngọt ngào của Don’t cry bạn sẽ cảm thấy như vứt bỏ được nỗi buồn sẽ không còn cảm cảm giác chán chường tuyệt vọng và thay vào đó bạn sẽ tự tin hơn vào chính bản thân mình để tiếp tục tiến bước trên con đường của mình đã chọn. Don’t cry! một bài đông viên an ủi hoàn hảo.

Theo WK và ohloaloa

Gravatar

Snail — Wed, 07 Jan 2009 13:47:47 +0000

What is Gravatar?

Gravatar — abbreviation of “Globally Recognized Avatar”, i.e. avatar (small photo or picture which size not more then 80х80 pixels) which visualizes its owner, and can be used practically anywhere. Gravatar is attached to unique e-mail address, which is the avatar’s identifier at the same time.

How to register Gravatar?

It is necessary to make the following steps to upload your Gravatar::

Visit the registration service homepage Gravatar, input the e-mail address for which you would like to create the avatar, and which will be used while adding comments.

Confirm the registration by clicking on link that was send to you on entered e-mail.

After e-mail is confirmed it is necessary to enter the password and its confirmation required for login to administrative panel of your account.

Log in Gravater service by means of your e-mail and password entered on previous step.

After authorization it is necessary to click on «аdd a new one» link in «Choose a gravatar for the selected email or add a new one» string.

You will be offered two variants of avatar’s upload: «My computer’s hard drive» (from your PC) or «An image on the internet» (from Internet). Choose the most preferable, and upload the image.

After the image is upload you will be asked to choose censorship group of your gravatar. There are several. The most rated (allowed) is G group. While choosing this group you guarantee that your avatar does not contain any erotic elements, violence etc.

It is enough just to click on e-mail address then on avatar below to attach the upload gravatar to email.

How to turn on the gravatars displaying in JComments ?

The setup of gravatars displaying in comments list is carried out in component’s parameters. This parameter can be setup separately for each exist user’s group. Thus, you can turn off the gravatars displaying for guests and display them only for registered users.

What is Gravatar?

Gravatar là chữ viết tắt của “Globally Recognized Avatar – Hình đại diện được nhận dạng toàn cầu”. Đây là một hình đại diện có kích cớ 80×80, nó xuất hiện bên cạnh tên của bạn và có thể được hiển thị ở bất cứ đâu, chỉ cần bạn điền email của bạn là hình đại diện của bạn sẽ được hiển thị.Gravatar đã được Automatic, ông chủ sở hữu của Wordpress và Akismet mua lại. Hiện nay, Gravatar đã được nâng cấp cả về thuật toán và hệ thống, và nó chạy nhanh hơn xưa rất nhiều.

Gravatar dùng để hiển thị avatar của bạn trên blog của bạn hoặc các blog mà các bạn đã ghé thăm và viết comment trên đó. Khi các bạn viết comment trên các blog khác, thường thì các blog đó yêu cầu bạn phải nhập địa chỉ email, và cũng chỉ cần có vậy, khi bạn nhập xong địa chỉ email thì Avatar của bạn sẽ hiển thị ngay cạnh tên của bạn. Một email duy nhất sẽ chỉ cho hiển thị một Gravatar duy nhất.Gravatar có thể hiển thị trên các blog của Wordpress, TextPattern, MovablePad, Expression Engine, Nucleus, Blojsom, Blogger, Live Journal.

How to register Gravatar?

Vào http://gravatar.com Bấm Sign Up để đăng ký một tài khoản, sau đó add email và Avatar của bạn vào đó, mỗi khi comment trên blog này cũng như một số Site khác, thì Avatar của bạn sẽ được hiện lên dựa vào Email đã đăng kí ở http://gravatar.com

Snail

Snail — Wed, 07 Jan 2009 07:34:43 +0000

[See post to watch Flash video]

Nên hay ko nên

Quên đi cái gánh nặng của mình ?
Tìm kiếm một nơi tôi thấy được bầu trời xanh thẳm
Đi theo cơn gió nhẹ dịu dàng
Vết thương chẳng còn thấy đau đớn nữa

Tôi muốn từng bước một có thể trèo lên cao hơn nữa
Chờ đợi ánh ban mai, yên lặng ngắm nhìn khuôn mặt nó
Một bầu trời nhỏ
Có những ước mơ thật lớn
Gánh nặng được bao bọc bởi cái nhìn dịu dàng yêu thương

Tôi muốn từng bước một có thể trèo lên cao hơn nữa
Lên tới nơi cao nhất
Cưỡi trên một chiếc lá bay về phía trước

Một bầu trời nhỏ
Những giọt mồ hôi và nước mắt đã rơi xuống
Sẽ có một ngày khi tôi có một bầu trời của chính mình

Tôi muốn từng bước một có thể trèo lên cao hơn nữa
Lên tới nơi cao nhất
Cưỡi trên một chiếc lá bay về phía trước

Hãy để cơn gió thổi khô đi
Những giọt mồ hôi và nước mắt đã rơi xuống

Tôi muốn từng bước một có thể trèo lên cao hơn nữa
Chờ đợi ánh ban mai, yên lặng ngắm nhìn khuôn mặt nó
Một bầu trời nhỏ
Có những ước mơ thật lớn
Tôi sẽ có một bầu trời của riêng mình

Hãy để cơn gió thổi khô đi
Những giọt mồ hôi và nước mắt đã rơi xuống
Sẽ có một ngày khi tôi có một bầu trời của chính mình.

Snail Site

Install MSCIM-googlepinyin Nokia N900

You May Also Like:

Nokia N900 Keyboard-Shortcut

You May Also Like:

Linux ultra fast command line download accelerator

How Axel works?

Install axel

How do I use axel?

But how fast is axel?

prozilla – another good program with GUI frontend

Install prozilla

You May Also Like:

曾轶可-狮子座

You May Also Like:

Some Simulator Pictures

A Modern Simulator Circa 1930-1960, ish.

Outside a Modern modern Simulator.

Outside a typical Simulator.

And another one.

The view from an A340 simulator.

A320 Cockpit, lit up a bit better.

B757 Landing at dusk at Hong Kong.

B767.

B747-400 Simulator.

MD90 Simulator.

Inside the Concord simulator.

B777 Simulator Cockpit.

B737, with the runway in the distance.

A340 FTD, full simulation using flat touch screen LCDs.

F16, with escort.

You May Also Like:

Traffic Monitoring with vnStat

You May Also Like:

How to make OpenOffice run faster in Ubuntu

You May Also Like:

A Guide to System Backup and Restore in Ubuntu

You May Also Like:

Lock On:Flaming Cliffs 2.0 coming Jan 2010

You May Also Like:

WordPress 2.9 is so fine

You May Also Like:

George Carlin’s Seven Dirty Words

You May Also Like:

Installing HJSplit 2.3 for Linux

You May Also Like:

Mediafire download plugin for Rapidleech – Nov 02, 2009

You May Also Like:

Core Temp

You May Also Like:

GA-X58-EXTREME Raid

You May Also Like:

Web server security

You May Also Like:

Linux Remote Desktop For Controlling Windows ( rdesktop )

Install rdesktop

You May Also Like:

Ftp Clients

1. Good GUI ftp clients

1.1. kasablanca

1.2. ftpcube

1.3. gftp

1.4. iglooftp

1.5. konqueror

2. Console ftp clients

2.1. GNU Midnight Commander

2.2. ftp

2.3. yafc

2.4. ncftp

3. The best ftp client

You May Also Like:

How to Firewall Your WordPress Blog

1. WPIDS

2. Maximum Security

3. Firewall Script

4. WordPress Firewall SEO

You May Also Like:

MediaTemple Grid Hosting Review

You May Also Like:

What To Look For In A Web Host For WordPress