Attack against Linux Apache servers intensifying

Attack against Linux Apache servers intensifying

A mass attack ongoing for the past month against Linux Apache Web servers has become increasingly successful because its break-in method makes use of an automated password and installation process, according to a security researcher monitoring its progress. Don Jackson, senior security sesearcher at SecureWorks, says the attack, which was first thought to have compromised several hundred Web sites, has hit at least 10,000. He says the attack relies on making use of stolen passwords to Linux Apache servers by automating the installation process to force it to serve up attacks against vulnerabilities on Windows clients.

No, Linux and Apache aren't "bulletproof". Read the entire article at NetworkWorld.com.

Microsoft Finds Excel Security Flaw

Microsoft Finds Excel Security Flaw

Microsoft Corp. said hackers have found a way to use some older versions of its Excel spreadsheet program to take over control of people's computers.

Microsoft said late Tuesday that it is investigating reports of such attacks, but has not yet determined whether it will patch the hole, or when,people who open a specially crafted Excel file from an e-mail attachment or visit a compromised Web site could be inviting hackers to take over their PCs for malicious purposes such as stealing passwords and other personal information, or sending out spam. Microsoft Office Excel 2003 Service Pack 2, Excel Viewer 2003, Excel 2002, Excel 2000 and Excel 2004 for Mac all contain the security hole.

The software maker said in a statement that users of these programs can protect their computers by using a tool that scans the files for bad code before opening, called Microsoft Office Isolated Conversion Environment....

Cisco Announces New Expert-Level Cert for Design: CCDE

Cisco Announces New Expert-Level Cert for Design: CCDE

Cisco Systems today announced a new expert-level certification, the Cisco Certified Design Expert (CCDE), for high-level IT pros who design and architect enterprise networks.

The CCDE is modeled after the company's flagship Cisco Certified Internetwork Expert (CCIE) certification for high-level networking pros. Like the CCIE, the CCDE will have a qualification exam and an eight-hour hands-on exam. Pricing is the same: $315 for the qualification exam and $1,400 for the hands-on exam.

Read more here

Cisco Certified Design Expert

Microsoft to Force IE7 Update on February 12th

Microsoft to Force IE7 Update on February 12th

Microsoft has warned corporate administrators that it will push a new version of Internet Explorer 7 their way next month, and it has posted guidelines on how to ward off the automatic update if admins want to keep the older IE6 browser on their companies' machines. The IE7 upgrade scheduled to roll out via WSUS (Windows Server Update Services) on Feb. 12 was announced last October, when Microsoft said it would no longer require users to prove they owned a legitimate copy of Windows XP before they were allowed to download the newer browser. Microsoft explained that the move was prompted by security concerns.

Full story at InfoWorld.com.

Building a Home File Server

Building a Home File Server

Setting up a file server doesn't need to be complicated. With three desktop machines (Kubuntu, Win XP and a testbed, which is currently running ReactOS) and a laptop (Xubuntu) in use at home, our IT is reaching small office proportions, and like many small offices, we run into file sharing problems. Peer-to-peer networking is fine when all the machines are on, but inevitably it happens that the file I want is on a PC that isn't running. Even worse, it be on my testbed machine that is currently in pieces or undergoing yet another upgrade. So, we need an always-on server that any of us can access any time, but if it is always on, it needs to be quiet, reliable and cheap to run.

If you like do-it-yourself projects and are interested in the potential of running a Linux file server at home, find out how at the Linux Journal.

Microsoft to Office 2003 Users – 'Our Bad'

Microsoft to Office 2003 Users – 'Our Bad'

After a sudden and heated controversy arose last week over blocking older file formats in the latest service pack of Office 2003, Microsoft late Friday all but reversed itself. Along with apologies to both users and other software makers, Microsoft also provided automated tools for restoring access to those older files. The brouhaha began last week when a user whose online handle is time961 complained on tech gadfly site Slashdot that Office 2003 Service Pack 3 (SP3) defaults to blocking the opening or saving files in many older application file formats, including Office 97 and earlier, but also files created by CorelDraw, among others.

The full story can be found at DevX.com.

Is It Too Late to Earn a Windows Server 2003 Certification?

Is It Too Late to Earn a Windows Server 2003 Certification?

The answer is "no." The strength of Windows Server 2003 in the market today indicates that demand for IT-related expertise will continue for years to come. The best way to demonstrate that you have those skills is with the Microsoft Certified Systems Administrator (MCSA) and Microsoft Certified Systems Engineer (MCSE) credentials.

These certifications will not change or retire with the release of Windows Server 2008. MCSA and MCSE will continue to be recognized and supported by Microsoft, and will be valued by organizations seeking skilled professionals on the Windows Server 2003 infrastructure all over the world. In the future, you can leverage your Windows Server 2003 certification for a shortened path to Windows Server 2008 certifications, when that makes sense for you.

Find out more at Microsoft.com

Troubleshooting Broadband Linux Connectivity

Troubleshooting Broadband Linux Connectivity

This article is written for beginners who are having difficulty with their broadband connectivity. Please note that this article does not review how to get started with a broadband modem on Linux. I assume that at some point broadband connectivity had worked for your Linux system. Perhaps one day you find yourself opening the Firefox browser but only getting Timeout errors or Server Unavailable messages. Here are a few tips that have reconciled nearly all problems I have personally experienced with broadband connectivity.

I seem to remember a few threads on this forum expressing difficulty in getting Linux to connect to the Internet via Broadband. I thought this article at ReallyLinux.com might help.

Cisco takes a first step in revamping IOS distribution

Cisco takes a first step in revamping IOS distribution

Cisco next week is expected to announce what it calls a simplified software distribution model for its routers and switches, and a new software tool to help users more easily manage large-scale networks. The company plans to simplify how it delivers IOS software by shipping all of its gear with full-blown versions of IOS, in which users would activate feature packages via software licensing keys. Cisco’s new software distribution model and licensing controls will let managers of large networks deploy router software and new features more easily, the company says. Administrators will also be able to get a better handle on what IOS versions are running across various devices, the company adds.

Network World has the full story.

IPv6 Set for Root Adoption?

IPv6 Set for Root Adoption?

IPv6 adoption has a key adoption deadline looming this year, but is still facing plenty of barriers to adoption. Key among them is this: IPv6 address information is not included in most of the root DNS servers that power the Internet. This makes IPv6 to IPv6 connections a difficult proposition. At a time when the current IPv4 protocol is running out of address spaces for Web sites, the barriers to IPv6 adoption need to be addressed, experts say. Starting on February 4th, at least one of those adoption barriers will be addressed as AAAA records for IPv6 addresses are added to four of the key root DNS servers. IPv6 AAAA records are a key resource record type for storing IPv6 address information on DNS servers. The IPv6 AAAA additions were announced by ICANN at the end of December in an e-mail announcement by Barbara Roseman, general operations manager for Internet Assigned Numbers Authority, an organization working...