Red Hat Certified Security Specialist: A New Hat for Linux Professionals

Red Hat Certified Security Specialist: A New Hat for Linux Professionals

Red Hat has long attracted industry notice through its use of live system, performance-based testing in its Red Hat Certified Technician (RHCT) and Red Hat Certified Engineer (RHCE) certification programs. Now, Red Hat is adding a first-of-its-kind performance-based security certification to its fold: the Red Hat Certified Security Specialist (RHCSS). Networked systems provide a gateway to useful information and applications, but also invite an unfriendly world through that gateway. For this reason, security capabilities have always been integral to Red Hat’s operating system products and thus to Red Hat’s curriculum and certification exams. RHCT tests just the core system administrative skills, although security-related skills such as setting passwords and attaching to an external directory for authentication are also required. RHCE requires candidates to implement multiple...

Linux Worm Not a Significant Threat

Linux Worm Not a Significant Threat

A worm targeting Linux by exploiting Web server holes has been spotted, although doesn't pose a significant threat. Linux.Plupiin spreads by exploiting holes in PHP/CGI, according to McAfee. It is a derivative of the Linux/Slapper and BSD/Scalper worms and attacks by sending malicious HTTP requests on port 80. If the server is configured to permit external shell commands and remote file download, the worm could be downloaded and executed. It can also harvest e-mail addresses stored in Web server files.

To read the complete story, click Here

Unsecured Wi-Fi to Become Illegal?

Unsecured Wi-Fi to Become Illegal?

Given a recent thread in The Lounge, I thought this story somewhat appropriate.

According to a new proposal being considered by a suburb of New York City, any business or home office with an open wireless connection but no separate server to fend off Internet attacks would be violating the law.

Politicians in Westchester County are urging adoption of the law--which appears to be the first such legislation in the U.S.--because without it, "somebody parked in the street or sitting in a neighboring building could hack into the network and steal your most confidential data," County Executive Andy Spano said in a statement.

The draft proposal offered this week would compel all "commercial businesses" with an open wireless access point to have a "network gateway server" outfitted with a software or hardware firewall. Such a firewall, used to block intrusions from outside the local network, would be...

Another critical Cisco bug discovered

Another critical Cisco bug discovered

Another critical hole has been found in Cisco's Internetwork Operating System (IOS), which runs on the network giant's routers. The French Security Incident Response Team has reported that the new flaw covers the system timers that IOS uses to run some operating system tasks. Under certain conditions, attackers may be able to take control of the router by tricking the system timers to run malicious code, Cisco said in a security advisory.

To read more, click Here

Microsoft patches may break Web sites

Microsoft patches may break Web sites

Two Microsoft security updates for Internet Explorer can break the functionality of Web sites that use certain custom applications. The problems occur after installing the patches Microsoft delivered with security bulletins MS05-038 and MS05-052, Microsoft said in two advisories posted on its Web site Wednesday. The bulletins were issued in August and October, respectively. Both patches can cause problems with ActiveX controls, small programs designed to perform simple tasks that can make a Web site more interactive. The MS05-038 patch can also hinder Java applications. After the patches are installed, applications that are programmed in specific ways will no longer work in Internet Explorer, Microsoft said.

To read the rest, click Here

Manage Linux servers from Windows

Manage Linux servers from Windows

New software will let sysadmins manage Linux servers from within Windows. The beta software from start-up Centeris makes it the third company attempting to offer interoperability between the two operating systems. Likewise 1.0 is targeted at IT managers in mid-size and large companies struggling to manage combinations of Windows and Linux servers. "The two platforms don't work well together," said Centeris CEO, Barry Crist. "We allow Linux servers to have a specific role in a Windows network." Using Likewise, sysadmins can join Linux servers to Microsoft's Active Directory, enabling them to manage and monitor the Linux servers through either Likewise or Microsoft Management Console.

To read the rest, click Here

Vista to get Symlinks?

Vista to get Symlinks?

In Vista/Longhorn server, the file system (NTFS) will start supporting a new filesystem object (examples of existing filesystem objects are files, folders etc.). This new object is a symbolic link. Think of a symbolic link as a pointer to another file system object (it can be a file, folder, shortcut or another symbolic link). So then you ask how is that different from a short-cut (the .lnk file)? Well, a shortcut will only work when used from within the Windows shell, it is a construct of the shell, and other apps don’t understand short-cuts.

To see the rest of this article, click Here

The Wireless# beta exam is now available

The Wireless# beta exam is now available

The Wireless# beta exam is now available at all Pearson VUE and Prometric testing centers worldwide.

The exam (#PW1-050) is intended for entry-level professionals who have no prior experience with wireless technology. The exam covers the skills required by computer technicians, network support technicians, and technical support specialists.

The test will cover topics related to the leading wireless network technologies, including

- Wi-Fi
- Bluetooth
- WiMax
- ZigBee
- Infrared
- RFID
- VoWLAN

Candidates who successfully complete the beta exam will receive the Wireless# certification.

The beta test is the result of subject-matter experts' extensive job-task analyses and exam-writing events. This beta exam phase is used to ensure that the content of the final exam is fair, accurate and relevant. After a targeted number of candidates have taken the exam, the results will be analyzed and the...

Certification VS Experience

Certification VS Experience

Interestingly enough, this article and the one I just posted about CCNA/CCNP labs were both written by a member of this board named Chris Bryant. He's not around much but he seems to be a fund of information.

Whether you're just starting your Information Technology career, or wanting to get further ahead in your current IT career, you have probably thought about earning one of the many popular computer certifications such as the Cisco Certified Network Associate (CCNA) certification, or the MCSE (Microsoft Certified Systems Engineer) cert.

A major point of frustration for individuals pursuing one of these certifications is a possible lack of experience with these technologies. Many future CCNAs or MCSEs simply stop trying to earn their certification, feeling that their lack of experience will hold them back.

Adding to this are those in IT who will stop everything they're doing at the drop of a hat to...

Passing The CCNA And CCNP Exams: Cisco Home Lab FAQ

Passing The CCNA And CCNP Exams: Cisco Home Lab FAQ

There is a real revolution today among CCNA and CCNP candidates. More and more of you are turning your back on "router simulators" and putting your own CCNA and/or CCNP Home Lab together, which is the best way to totally prepare to pass these tough Cisco exams. I get hundreds of emails every month from CCNA and CCNP candidate who are putting together their first lab or adding to their existing one. I'm always glad to help with suggestions, and I thought I'd list five common questions regarding home labs here.

To read the rest, click Here