Re: [osdcmy] Contract programmer (web/system-based)

2012-05-20 Terurut Topik Ihsan Junaidi Ibrahim
Whatever time. As long you can commit to the delivery.

Please reply to me directly rather than replying to the list.

Thanks.

On May 21, 2012, at 3:14 AM, Soire Meira wrote:

 hi..
 part-time or full--time..
 i need partime job TQ! :)
 
 2012/5/21 Ihsan Junaidi Ibrahim ihsan.juna...@gmail.com
 Hi,
 
 Apology upfront for spamming this list every so often with a job offer.
 
 I have a small project that needs to be completed by 31st May.
 
 It's just a simple web application that needs to access/configure UNIX 
 applications (root permission required and for now only within the same host) 
 and parse web client variables i.e. IP addresses etc.
 
 The web app should be based on PHP/Django/Java (Tomcat).
 
 Platform is FreeBSD so some elementary sysadmins stuff are required.
 
 The high-level design has been thought out but the low-level implementation 
 can be discussed.
 
 Payment will be based on deliverables but since the scope of this project is 
 very small, the amount is not going to great.
 
 Please reply to me if you're interested.
 
 p.s: There's also a 6-month salaried contract offer (EPF/SOCSO/PCB included) 
 stemming from this project if I find you fit and this goes without saying, if 
 you are also interested.
 
 ihsan
 
 
 --
 To unsubscribe from and detail about this group 
 http://portal.mosc.my/osdc-my-mailing-list-information
 
 OSDC.my Discussion Group In Facebook
 http://www.facebook.com/groups/osdcmalaysia/
 
 Malaysia Open Source Conference 2012
 MOSC2012 http://portal.mosc.my/
 
 
 
 -- 
 --
 Maui Sabily 2011
 GPG KeyID: DBDA3074
 GPG Fingerprint: 3CCE D281 C894 4FB0 3D22 2141 75C6 E41F DBDA 3074
 
 Soire Meira 2008 - 2011
 EascobaNET, Inc 2006 - 2010
 Ch0kL@Thack 2002
 PaleoY2K 1998 - 2000
 
 http://www.sabily.my
 http://www.sabily-my.tk
 
 Developer:
 Sabily NetBook Remix 10.10 Al-Quds
 Sabily Zakat Calc 0.3.5-2 Stable (Debian/Ubuntu)
 Asmawi Office 0.1 Alpha (Webase Presentiton)
 Soire TV  Radio (Windows Only - continue version on Linux)
 BrutuSamaDia (Remote Desktop Penetration Testing)
 Mauiware.AYU.0.6 (Virus Cleanner  Get Back Hidden Files)
 
 Malicious of Dark Knight - Hack To Learn, Don't Learn To Hack
 
 
 -- 
 To unsubscribe from and detail about this group 
 http://portal.mosc.my/osdc-my-mailing-list-information
  
 OSDC.my Discussion Group In Facebook
 http://www.facebook.com/groups/osdcmalaysia/
  
 Malaysia Open Source Conference 2012
 MOSC2012 http://portal.mosc.my/

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

OSDC.my Discussion Group In Facebook
http://www.facebook.com/groups/osdcmalaysia/

Malaysia Open Source Conference 2012
MOSC2012 http://portal.mosc.my/


Re: [osdcmy] MOSTI: Stop Computing Professionals Bill 2011 (CPB2011)

2011-12-10 Terurut Topik Ihsan Junaidi Ibrahim
Hi,

The novel idea behind this bill is to enforce more accountability behind any 
critical public infrastructure engagement which is what we as taxpayers 
desperately need due to mostly opaque project management and layers of 
accountability  structure that we have now.

Having said that I do agree that the present draft raises more questions and 
issues that what it intend to solve.

I believe the bill needs to balance the dynamics of technology industry, 
encouraging innovation, promoting transparency and accountability.

I don't necessarily agree with wholesale scraping of the bill but it is 
critical to make fundamental changes to the content so that it reduces the 
questions and eventually strenghten the stakeholders I.e. Public, industry, 
enterpreneurship etc.

I'm sure MOSTI has the resources to do this correctly with the stakeholders 
being in the picture.

ihsan

-Original Message-
From: Harisfazillah Jamel linuxmalay...@gmail.com
Sender: osdcmy-list@googlegroups.com
Date: Sat, 10 Dec 2011 15:48:32 
To: osdcmy-list@googlegroups.com
Reply-To: osdcmy-list@googlegroups.com
Cc: Dunia DIgitaldunia-digi...@yahoogroups.com; ha...@yahoogroups.com
Subject: [osdcmy] MOSTI: Stop Computing Professionals Bill 2011 (CPB2011)

http://www.change.org/petitions/mosti-stop-computing-professionals-bill-2011-cpb2011

MOSTI: Stop Computing Professionals Bill 2011 (CPB2011)

Greetings,

I just signed the following petition addressed to: MOSTI.


Stop Computing Professionals Bill 2011 (CPB2011)

If this Bill becomes and Act, it will hamper the growth and innovation
that is coming from the ICT sector. It will increase the cost to all
spending in ICT and more importantly, it will encourage uncertified
ICT experts to look for better opportunities abroad and accelerating
the brain drain.

Stop this bill and save the ICT sector of Malaysia.



Sincerely,

http://www.change.org/petitions/mosti-stop-computing-professionals-bill-2011-cpb2011

Discuss about this here

https://www.facebook.com/groups/osdcmalaysia/

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

OSDC.my Discussion Group In Facebook
http://www.facebook.com/groups/osdcmalaysia/

Malaysia Open Source Conference 2012
MOSC2012 http://portal.mosc.my/

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

OSDC.my Discussion Group In Facebook
http://www.facebook.com/groups/osdcmalaysia/

Malaysia Open Source Conference 2012
MOSC2012 http://portal.mosc.my/


Re: [osdcmy] Looking for Python-Django developer

2011-12-06 Terurut Topik Ihsan Junaidi Ibrahim
main banyak la kau.

On Dec 6, 2011, at 3:37 PM, azs...@gmail.com wrote:

 Can i apply? What the package like? 
 
 Sent from my HTC
 
 - Reply message -
 From: Ihsan Junaidi Ibrahim ihsan.juna...@gmail.com
 To: osdcmy-list@googlegroups.com
 Subject: [osdcmy] Looking for Python-Django developer
 Date: Mon, Dec 5, 2011 11:45 pm
 
 
 Hi folks,
 
 As per titled.
 
 Permanent assignment for a local startup.
 
 Preferably 1-2 years experience in building/maintaining cross-platform 
 Python, Django apps and Javascript/HTML/CSS stuffs. Some basic networking 
 knowledge as we're into network routing  IPv6 stuff.
 
 We're not just limited to Python and all that stuff so as systems developer, 
 we do expect some good grasp of fundamental programming paradigm across 
 languages.
 
 We're not picky though but we do expect good working and learning attitude.
 
 It's a startup so expect to do a lot of other things that eventually (with 
 the right attitude) make you really good in the resume. :)
 
 Email me directly.
 
 p.s: We really need a osdcmy-job group list.
 
 
 -- 
 To unsubscribe from and detail about this group 
 http://portal.mosc.my/osdc-my-mailing-list-information
 
 OSDC.my Discussion Group In Facebook
 http://www.facebook.com/groups/osdcmalaysia/
 
 Malaysia Open Source Conference 2012
 MOSC2012 http://portal.mosc.my/
 
 -- 
 To unsubscribe from and detail about this group 
 http://portal.mosc.my/osdc-my-mailing-list-information
  
 OSDC.my Discussion Group In Facebook
 http://www.facebook.com/groups/osdcmalaysia/
  
 Malaysia Open Source Conference 2012
 MOSC2012 http://portal.mosc.my/

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

OSDC.my Discussion Group In Facebook
http://www.facebook.com/groups/osdcmalaysia/

Malaysia Open Source Conference 2012
MOSC2012 http://portal.mosc.my/


[osdcmy] MyNOG conference - CfP opening

2011-11-11 Terurut Topik Ihsan Junaidi Ibrahim
Hi all,

I know this is slightly off-tangent to the software-centric spirit of this list 
but I hope to trigger the interest of a few great minds here.

On January 16-17 2012, the inaugural Malaysia Network Operators Group (MyNOG) 
conference will be taking place in SKMM building in Cyberjaya.

The Call for Papers is taking place now so if any of the esteem members of the 
list that would like to publicize your work (relevant of course), your 
submission is very much valued.

Copied from the website, www.mynog.org (more details can be found here):

Malaysian Network Operators Group (MyNOG)
16 January - 17 January 2012, Cyberjaya, Malaysia

--
Call for Papers
--

The MyNOG-1 Programme Committee are now seeking contributions for Presentations
and Tutorials for MyNOG-1.

We are looking for people and proposals that would:

- Offer a technical tutorial on an appropriate topic; and/or
- Participate in the technical conference sessions as a speaker; and/or
- Convene and chair a Birds of a Feather (BoF) session.

Please submit proposals online at:

prog...@mynog.org

CONFERENCE MILESTONES
-
o Call for Papers Opens: 14 October 2011
o First Deadline for Submissions: 8 November 2011
o First Draft Programme Published: 22 November 2011
o Final Deadline for Submissions: 20 December 2011
o Final Programme Published: 6 January 2012
o Final Slides Received: 10 January 2012
o Conference starts 16 January 2012
--

The MyNOG-1 Programme is organised in two parts, including tutorials and the
conference.

Topics for tutorials and conferences would include amongst others relevant to 
Internet
operations and technologies:

- IPv4/IPv6 routing and operations.
- IPv4 address run-out.
- IPv6 deployments, transition technologies and experiences.
- Network backbone operations.
- ISP and network carrier services.
- Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware, Anti-Virus, 
e.t.c.).
- Peering and Internet exchange points.
- DNS/DNSSEC.
- Internet policy (Security, Regulation, Content Management, Addressing, 
e.t.c.).
- Access and transport technologies, e.g., xDSL, wireless, MPLS, Ethernet, 
FTTx, e.t.c.
- Content and service delivery, e.g., Multicast, VoIP, video, TelePresence, 
IPTv, gaming, e.t.c.
- Data Centre and Virtualization technologies.

CfP SUBMISSION
--
Draft slides for both tutorial and conference sessions MUST be provided with CfP
submissions otherwise the Programme Committee will be unable to review the 
submission.
For work in progress, the most current information available at the time of 
submission
is acceptable.

Final slides are to be provided by the specified deadline for publication on 
the MyNOG
website. While the majority of speaking slots will be filled by the first 
submission
deadline, a limited number of slots may be available up to the final submission 
deadline
for presentations that are exceptionally timely, important, or of critical 
operational
importance.

Please submit online at:

prog...@mynog.org

Any questions or concerns should be addressed to the Programme Committee by 
e-mail as below:

prog...@mynog.org

We look forward to receiving your presentation proposals.
MyNOG Management Committee

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

OSDC.my Discussion Group In Facebook
http://www.facebook.com/groups/osdcmalaysia/

Malaysia Open Source Conference 2012
MOSC2012 http://portal.mosc.my/


Re: [osdcmy] RM 50m to Tricubes Bhd to develop 1 Malaysia SecureEmail Server

2011-04-21 Terurut Topik Ihsan Junaidi Ibrahim
On Apr 21, 2011, at 10:11 PM, Garfield WTF wrote:

 From what I heard, the whole myemail.my email platform is actually just point 
 the MX record to the domains.live.com.
 
 And they just develop the interface and connect to the domains.live.com API, 
 and just hosting their own made web UI for us to check email. 
 
 In order word, we can just use our myemail.my account and login in live.com, 
 without the need of the GUI Tricube is hosting.
 
 By the way, you may download the SDK, as long as you have account at the 
 domains.live.com.
 
 50 million for that... haih...

Hi,

On the surface, of course it looks simple.

But designing a system that can scale to millions of users cost money, a lot of 
them. It's getting to that point where scaling/cost ratio literally plateaus 
that makes the upfront seems so undesirable.

I think that using Microsoft's cloud infrastructure cuts down the know how of 
building a scalable system. Not by much but will make sense financially.

We all can argue till the cows come home on the validity of an OSS-based 
solution but in Malaysia at least, aside from Skali, who else have the will and 
the financial wherewithal to make this sort of infrastructure possible for the 
critical mass?

Let's not kid ourselves, building a high-scale infrastructure costs money. RM 
50 million over a 10-year period (as per Tricubes CEO statement) is actually 
quite reasonable CAPEX/OPEX assuming that's what he meant.

Having stated the above, I still believe that as citizen, this project is as 
bullshit a proposal as one can get.

Remember when LHDN requires a digicert key to conduct E-Filing back in the 
days? Eventually it costs so much hassle for everyone, they scrapped it and 
just use plain SSL key exchange.

Now an e-mail system that actually requires the same thing? Makes sense if 
you're in a controlled environment such as a company. But for the masses? 

Well, goes to say that idiots never learn.

But as I said earlier, you get to make money by prolonging the problem mah!

Happy ending for some. That's all that matters when all is said and done.

ihsan

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

MOSC2011 http://fb.me/mosc2011 and http://www.mosc.my/


Re: [osdcmy] RM 50m to Tricubes Bhd to develop 1 Malaysia SecureEmail Server

2011-04-20 Terurut Topik Ihsan Junaidi Ibrahim
Hi,

Let us put aside the technical merits of such proposal because to most of us it 
raises more questions that it answers for.

To me, an SSO proposal rather than email would have made a lot of sense with 
myriads of agencies operating their own systems.

On Apr 20, 2011, at 10:22 PM, Raja Iskandar Shah wrote:

 this article includes a response from the pm and tricubes
 http://thestar.com.my/news/story.asp?file=/2011/4/20/nation/20110420155327sec=nation#13033084438331if_height=583

Our dear PM is technically correct. It doesn't cost the taxpayers a cent now.

Let us wait for the news when Tricubes start charging an obscene amount of 
money to government agencies wanting to send notices to their users.

Like my good friend at despair.com is still saying, 

If you're not part of the solution, there's a good money to be made in 
prolonging the problem.

Oh and if it gets you off Bursa's bad book, sure why not.

ihsan

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

MOSC2011 http://fb.me/mosc2011 and http://www.mosc.my/


[osdcmy] Python and C programmers wanted.

2011-03-03 Terurut Topik Ihsan Junaidi Ibrahim
Hi all,

I've a 2-month gig to develop a couple of system prototypes based on
Django/Python and C/Lua.

The first prototype is to build a web application based on Django
framework. The requirements are as follows:
1) Proficient in Python and all that Javascript things.
2) Have good understanding of SQL database i.e. table design, query
optimization.
3) Understand networks i.e. TCP/IP stacks, IP addressing, IPv6
knowledge is a plus.
4) Possess understanding of a clean and efficient user interface design.
5) Basic system admin in Linux/BSD is always welcome.

The second prototype is a POSIX-compliant Unix C network application
which requires the following:
1) Understanding of BSD select/poll mechanism and TCP/IP stacks.
2) TCP/IP fundamentals is required.
3) Lua integration within the application for dynamic user manipulation.
4) Have good understanding of SQL database i.e. table design, query
optimization.
5) Radius or diameter knowledge is almost always welcome.

All development work will be based on FreeBSD.

Work start sometimes in April. Payment is by milestone completion.

If the quality is good, we might absorb you in our team if you're interested.

Don't pollute the list with your replies, instead unicast me your
interest; CV would be recommended though.

A sample showcase of your past work would also be welcome.

If you are interested or know someone who can benefit from this kind
of work, just fire off that email.

-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

MOSC2011 http://fb.me/mosc2011

MOSC Survey 2011 Awareness Of OSS Certification
http://survey.mosc.my/mosc-survey-2011-awareness-oss-cert


Re: [osdcmy-public] Protecting From DDOS

2010-09-12 Terurut Topik Ihsan Junaidi Ibrahim
Salam,

Stopping DDOS at the perimeter is not the solution in the case of DDOS
targeting resources/bandwidth saturation. The only solution is to get
your upstream provider to drop the malicious traffic in their network
before it enters your network. This can be done by BGP blackhole
(traditional way) or the more recent, flowspec. This is probably the
only effective way against botnet-initiated DDOS attacks. If they have
the resources, running their own BGP is always recommended.

Dropping traffic within your network only works if you have an obscene
amount of upstream bandwidth that can never, ever be saturated which
is of course, is not a reality here in Malaysia.

CDN works if the CDN provider have their own DDOS mitigation mechanism
but I believe they are using either one of the 2 methods above. The
first one is nasty, they'll blackhole all access to your designated
IPs and the latter is much more refined but unsupported by many
carriers.

On 12 September 2010 17:52, Harisfazillah Jamel linuxmalay...@gmail.com wrote:
 Team,

 What happen to Malaysia Today (MT) website get my interest to know
 more about handling this kind of attacks and what can be by us system
 administrator and developers in protecting our websites. Its can
 happen to any website.

 Im against DDOS that can cripple any websites including government
 websites, business and ordinary people. DDOS also shows our computer
 users still not updating their operating system to protect from trojan
 or DDOS bot. Lack of awareness and knowledge I believe. Im looking
 into this DDOS attack of MT in big picture If they can attack MT
 they also can attack our Internet infra and cripple our country
 network. Our banking systems now in question, can they protect
 themself?

 More info for those who want to know about protecting from DDOS

 http://developer.yahoo.com/performance/rules.html

 http://www.owasp.org/index.php/Testing_for_Denial_of_Service or google
 for OWASP DDOS

 At this blog post I also discuss about ways of protecting, may be its
 could work ...

 http://uppercaise.wordpress.com/2010/09/11/access-to-malaysia-today/

 For example the use of CoralCDN network

 http://www.coralcdn.org/

 CoralCDN service can be use to access non login websites (due to its
 proxy like) example to access PMO website

 http://www.pmo.gov.my.nyud.net/

 more articles about Content Distribution Network (CDN)

 http://www.reaper-x.com/2009/10/02/how-to-use-coralcdn-to-save-your-bandwidth-problem-server-resources/

 http://devcentral.f5.com/weblogs/macvittie/archive/2010/01/25/how-to-use-coralcdn-on-demand-to-keep-your-site-available.aspx

 or using Squid and Nginx

 http://serverfault.com/questions/30705/how-to-set-up-nginx-as-a-caching-reverse-proxy

 http://wiki.squid-cache.org/SquidFaq/ReverseProxy

 Im also looking into solution like

 IPF in FreeBSD

 and Iptables drop 


 This email post to

 OSDC.my Mailing List

 http://groups.google.com.my/group/osdcmy-list

 OWASP Malaysia Mailing List

 https://lists.owasp.org/mailman/listinfo/owasp-Malaysia

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en



-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
Join Open Source Developers Club Malaysia http://www.osdc.my/

Facebook Fan page

http://www.facebook.com/group.php?gid=98685301577

http://www.facebook.com/OSDC.my

You received this message because you are subscribed to the Google

Groups OSDC.my Mailing List group.
To post to this group, send email to osdcmy-list@googlegroups.com
To unsubscribe from this group, send email to
osdcmy-list+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/osdcmy-list?hl=en


Re: [osdcmy-public] Protecting From DDOS

2010-09-12 Terurut Topik Ihsan Junaidi Ibrahim
Additionally there's a third method but this relies on your provider
to manually drop every single suspected IPs attacking your resources.
Sure this is effective for probably 10 attackers but in case of
botnets, the attack is probably over by the time their done updating
their ACLs.

On 12 September 2010 19:53, Ihsan Junaidi Ibrahim
ihsan.juna...@gmail.com wrote:
 Salam,

 Stopping DDOS at the perimeter is not the solution in the case of DDOS
 targeting resources/bandwidth saturation. The only solution is to get
 your upstream provider to drop the malicious traffic in their network
 before it enters your network. This can be done by BGP blackhole
 (traditional way) or the more recent, flowspec. This is probably the
 only effective way against botnet-initiated DDOS attacks. If they have
 the resources, running their own BGP is always recommended.

 Dropping traffic within your network only works if you have an obscene
 amount of upstream bandwidth that can never, ever be saturated which
 is of course, is not a reality here in Malaysia.

 CDN works if the CDN provider have their own DDOS mitigation mechanism
 but I believe they are using either one of the 2 methods above. The
 first one is nasty, they'll blackhole all access to your designated
 IPs and the latter is much more refined but unsupported by many
 carriers.

 On 12 September 2010 17:52, Harisfazillah Jamel linuxmalay...@gmail.com 
 wrote:
 Team,

 What happen to Malaysia Today (MT) website get my interest to know
 more about handling this kind of attacks and what can be by us system
 administrator and developers in protecting our websites. Its can
 happen to any website.

 Im against DDOS that can cripple any websites including government
 websites, business and ordinary people. DDOS also shows our computer
 users still not updating their operating system to protect from trojan
 or DDOS bot. Lack of awareness and knowledge I believe. Im looking
 into this DDOS attack of MT in big picture If they can attack MT
 they also can attack our Internet infra and cripple our country
 network. Our banking systems now in question, can they protect
 themself?

 More info for those who want to know about protecting from DDOS

 http://developer.yahoo.com/performance/rules.html

 http://www.owasp.org/index.php/Testing_for_Denial_of_Service or google
 for OWASP DDOS

 At this blog post I also discuss about ways of protecting, may be its
 could work ...

 http://uppercaise.wordpress.com/2010/09/11/access-to-malaysia-today/

 For example the use of CoralCDN network

 http://www.coralcdn.org/

 CoralCDN service can be use to access non login websites (due to its
 proxy like) example to access PMO website

 http://www.pmo.gov.my.nyud.net/

 more articles about Content Distribution Network (CDN)

 http://www.reaper-x.com/2009/10/02/how-to-use-coralcdn-to-save-your-bandwidth-problem-server-resources/

 http://devcentral.f5.com/weblogs/macvittie/archive/2010/01/25/how-to-use-coralcdn-on-demand-to-keep-your-site-available.aspx

 or using Squid and Nginx

 http://serverfault.com/questions/30705/how-to-set-up-nginx-as-a-caching-reverse-proxy

 http://wiki.squid-cache.org/SquidFaq/ReverseProxy

 Im also looking into solution like

 IPF in FreeBSD

 and Iptables drop 


 This email post to

 OSDC.my Mailing List

 http://groups.google.com.my/group/osdcmy-list

 OWASP Malaysia Mailing List

 https://lists.owasp.org/mailman/listinfo/owasp-Malaysia

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en



 --
 Thank you for your time,
 Ihsan Junaidi Ibrahim




-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
Join Open Source Developers Club Malaysia http://www.osdc.my/

Facebook Fan page

http://www.facebook.com/group.php?gid=98685301577

http://www.facebook.com/OSDC.my

You received this message because you are subscribed to the Google

Groups OSDC.my Mailing List group.
To post to this group, send email to osdcmy-list@googlegroups.com
To unsubscribe from this group, send email to
osdcmy-list+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/osdcmy-list?hl=en


Re: [osdcmy-public] Protecting From DDOS

2010-09-12 Terurut Topik Ihsan Junaidi Ibrahim
My experience has been that they're willing but they probably will not
go the extra mile i.e. identifying the sources, putting ACLs all over
their peering routers etc unless you're being persistent. I've heard
of cases that if pushes come to shoves, ISPs are no longer willing to
assume the risks of being attacked constantly so they probably can
have the option to cancel the account.

A good colo or server provider are probably those who run their own
BGP, advertise their own or delegated IP addresses and have visibility
of their own network. Those attributes are rare in Malaysia. So if one
runs a service that is bound to attract a lot of unwanted attentions,
it's probably a bit more expensive to do it here.

On 12 September 2010 22:59, Harisfazillah Jamel linuxmalay...@gmail.com wrote:
 Ihsan

 Thanks, this information keep me more want to dig in to know more

 I dont know how far our ISP willing to help website owner during MSDOS
 - multi-source denial of service. (thanks Harish) I do hear ISP cancel
 an account and ask the owner to find other ISP. I believe that to goal
 of the attack. Making sure the ISP will cancel the owner account and
 no where to host it...

 On Sun, Sep 12, 2010 at 7:55 PM, Ihsan Junaidi Ibrahim
 ihsan.juna...@gmail.com wrote:
 Additionally there's a third method but this relies on your provider
 to manually drop every single suspected IPs attacking your resources.
 Sure this is effective for probably 10 attackers but in case of
 botnets, the attack is probably over by the time their done updating
 their ACLs.

 On 12 September 2010 19:53, Ihsan Junaidi Ibrahim
 ihsan.juna...@gmail.com wrote:
 Salam,

 Stopping DDOS at the perimeter is not the solution in the case of DDOS
 targeting resources/bandwidth saturation. The only solution is to get
 your upstream provider to drop the malicious traffic in their network
 before it enters your network. This can be done by BGP blackhole
 (traditional way) or the more recent, flowspec. This is probably the
 only effective way against botnet-initiated DDOS attacks. If they have
 the resources, running their own BGP is always recommended.

 Dropping traffic within your network only works if you have an obscene
 amount of upstream bandwidth that can never, ever be saturated which
 is of course, is not a reality here in Malaysia.

 CDN works if the CDN provider have their own DDOS mitigation mechanism
 but I believe they are using either one of the 2 methods above. The
 first one is nasty, they'll blackhole all access to your designated
 IPs and the latter is much more refined but unsupported by many
 carriers.


 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en



-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
Join Open Source Developers Club Malaysia http://www.osdc.my/

Facebook Fan page

http://www.facebook.com/group.php?gid=98685301577

http://www.facebook.com/OSDC.my

You received this message because you are subscribed to the Google

Groups OSDC.my Mailing List group.
To post to this group, send email to osdcmy-list@googlegroups.com
To unsubscribe from this group, send email to
osdcmy-list+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/osdcmy-list?hl=en


Re: [osdcmy-public] vim experts, i have a question for u!

2010-09-06 Terurut Topik Ihsan Junaidi Ibrahim
if you are searching for c/c++ definitions, use cscope/ctags.

On 6 September 2010 15:56, Mohammed Firdaus firdaus.ha...@gmail.com wrote:
 Search blah in .py files recursively:
 :vimgrep blah **/*.py

 List matches:
 :cl

 Goto match 20:
 :cc 20

 Thanks,

 Mohammed Firdaus

 On Mon, Sep 6, 2010 at 2:27 PM, nuhaa cawan.nu...@gmail.com wrote:
 hola n salam all...

 ok the question is - is there a quick way inside vim, i can search for a
 string in a collection of files and then it will list down all the files and
 then i can choose which one i want to open?

 i usually do it something like this in terminal: find . -type f -print |
 xargs grep searchterm
 from the list of files displayed, i then edit the files in vim



 regards,
 nuhaa

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en



-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
Join Open Source Developers Club Malaysia http://www.osdc.my/

Facebook Fan page

http://www.facebook.com/group.php?gid=98685301577

http://www.facebook.com/OSDC.my

You received this message because you are subscribed to the Google

Groups OSDC.my Mailing List group.
To post to this group, send email to osdcmy-list@googlegroups.com
To unsubscribe from this group, send email to
osdcmy-list+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/osdcmy-list?hl=en


Re: [osdcmy-public] Fwd: Intrusion Prevention

2010-08-31 Terurut Topik Ihsan Junaidi Ibrahim
You can't drop DDOS at your gateway or the server. You'll need your
bandwidth provider to drop the traffic at their router or firewall. If
you run BGP with your provider, you can blackhole or flowspec the DDOS
traffic.

On 31 August 2010 21:45, arora anne protocoluni...@gmail.com wrote:
 modsecurity-web application firewall + ossec

 On Tue, Aug 31, 2010 at 8:26 PM, simpleLinux 2fz...@gmail.com wrote:

 -- Forwarded message --
 From: simpleLinux 2fz...@gmail.com
 Date: Tue, Aug 31, 2010 at 9:25 PM
 Subject: Intrusion Prevention
 To: owasp-malaysia-boun...@lists.owasp.org


 Is there any tools that we can use to prevent intrusion? Paid or Free is
 not the hot cake...

 Also, is there any patch we can use for Apache Web Server?

 I'm worried because there IS an attempt to deface my server, as you all
 can see here my server has been defaced:
 http://myne.tk/hacked/Indonesia.html

 An attack of such DDOS also detected on 31 August 2010 on 00:09 where it
 takes 335 Megabytes of free bandwidth out during the attack.

 --
 Fariz Luqman
 The Chairman of SimpleLinux
 Visit: http://www.simplelinux.tk

 There IS a Malaysian Linux Distro





 --
 Fariz Luqman
 The Chairman of SimpleLinux
 Visit: http://www.simplelinux.tk

 There IS a Malaysian Linux Distro


 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en



-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
Join Open Source Developers Club Malaysia http://www.osdc.my/

Facebook Fan page

http://www.facebook.com/group.php?gid=98685301577

http://www.facebook.com/OSDC.my

You received this message because you are subscribed to the Google

Groups OSDC.my Mailing List group.
To post to this group, send email to osdcmy-list@googlegroups.com
To unsubscribe from this group, send email to
osdcmy-list+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/osdcmy-list?hl=en


Re: [osdcmy-public] Recommended netbook for FreeBSD/Linux

2010-06-08 Terurut Topik Ihsan Junaidi Ibrahim
Thanks. I've bought a Thinkpad X100E. Runs OpenBSD 4.7 good. The wireless is
not supported yet but others are detected well. You can buy one without
Windows too.

On 8 June 2010 17:28, Hasan Abu Bakar ha...@kelate.com.my wrote:

 Buy Acer Aspire One or Asus EEE, you'll be fine.




 Hasanuddin Abu Bakar
 Network Security Consultant
 +6017 913 1983

 Sigma Rectrix Systems (M) Sdn Bhd
 No.15  15-1, Jalan Equine 9A,
 Equine Park, Bandar Putra Permai
 43300 Seri Kembangan Selangor
 URL : www.sigmarectrix.com

 Phone: 03-89486696
 Fax  : 03-89487796
 Helpdesk  : 03-89486596

 Darwin Bizkuts-iPhone 10.0.0d3 Darwin Kernel Version 10.0.0d3: Fri Sep 25
 23:30:45 PDT 2009; root:xnu-1357.5.30~3/RELEASE_ARM_S5L8900X iPhone1,2 arm
 N82AP Darwin



 On Tue, Jun 8, 2010 at 10:00 AM, Raja Iskandar Shah 
 rajaiskand...@gmail.com wrote:

 i run ubuntu netbook remix 10.04 on acer aspire one. no problems so far. i
 use it as my main work computer.

 get the intel atom n280 (or newer), 2gb ram, and 6-cell battery (protuding
 pot belly battery).

 once ran oracle 10g db and oracle forms 6i app on it. still boleh lagi
 even with firefox and openoffice running concurrently.

 when comparing the netbooks, check out the ports (usb / vga / sdcard / eth
 / bluetooth)

 and also the after-sales service. netbooks are mass market products, so
 there are bound to be a few that does not work as it should.




 On Mon, Jun 7, 2010 at 11:57 PM, Ihsan Junaidi Ibrahim 
 ihsan.juna...@gmail.com wrote:

 Hi,

 It's a bit over my budget as my range is RM 1.5k or around that. well if
 it's as beautiful as vaio x-series, i'll pay v13 price too.


 On 7 June 2010 21:35, Raja Iskandar Shah rajaiskand...@gmail.comwrote:

 dell vostro v13

 sold by dell out of the box pre-installed with ubuntu

 13 inch screen, 4gb ram, intel core 2 duo ulv


 http://www1.ap.dell.com/my/en/business/vostro-v13-pd/fs.aspx?refid=vostro-v13-pds=bsdcs=mybsd1




 On Mon, Jun 7, 2010 at 9:04 PM, BRIAN RITCHIE 
 esqbrianritc...@gmail.com wrote:

 I'd like to know this too. +1


 On Mon, Jun 7, 2010 at 5:54 PM, Ihsan Junaidi Ibrahim 
 ihsan.juna...@gmail.com wrote:

 Hi folks,

 In the midst of a purchasing decision for a portable netbook that runs
 either FreeBSD or Ubuntu (pref. Xubuntu). It has to be light  1.5kg,
 doesn't have a battery that protrudes out like a pot belly and has either
 Atom N- or Neo CPU. Also it has to be able to boot from USB as I plan to 
 use
 a live OS on a USB flash drive. a hi-res screen i.e. 1366x768 is alright 
 as
 well.

 Usage? Just typical web browsing and some light on-the-go C and python
 programming.

 I've taken a look at Latitude 2110 which looks good but I'm hoping to
 solicitate other ideas.

 --
 Thank you for your time,
 Ihsan Junaidi Ibrahim

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.comosdcmy-list%2bunsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en


  --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.comosdcmy-list%2bunsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en


  --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr...@googlegroups.comosdcmy-list%2bunsubscr...@googlegroups.com
 For more options, visit this group at
 http://groups.google.com/group/osdcmy-list?hl=en




 --
 Thank you for your time,
 Ihsan Junaidi Ibrahim

 --
 Join Open Source Developers Club Malaysia http://www.osdc.my/

 Facebook Fan page

 http://www.facebook.com/group.php?gid=98685301577

 http://www.facebook.com/OSDC.my

 You received this message because you are subscribed to the Google

 Groups OSDC.my Mailing List group.
 To post to this group, send email to osdcmy-list@googlegroups.com
 To unsubscribe from this group, send email to
 osdcmy-list+unsubscr

[osdcmy-public] Recommended netbook for FreeBSD/Linux

2010-06-07 Terurut Topik Ihsan Junaidi Ibrahim
Hi folks,

In the midst of a purchasing decision for a portable netbook that runs
either FreeBSD or Ubuntu (pref. Xubuntu). It has to be light  1.5kg,
doesn't have a battery that protrudes out like a pot belly and has either
Atom N- or Neo CPU. Also it has to be able to boot from USB as I plan to use
a live OS on a USB flash drive. a hi-res screen i.e. 1366x768 is alright as
well.

Usage? Just typical web browsing and some light on-the-go C and python
programming.

I've taken a look at Latitude 2110 which looks good but I'm hoping to
solicitate other ideas.

-- 
Thank you for your time,
Ihsan Junaidi Ibrahim

-- 
Join Open Source Developers Club Malaysia http://www.osdc.my/

Facebook Fan page

http://www.facebook.com/group.php?gid=98685301577

http://www.facebook.com/OSDC.my

You received this message because you are subscribed to the Google

Groups OSDC.my Mailing List group.
To post to this group, send email to osdcmy-list@googlegroups.com
To unsubscribe from this group, send email to
osdcmy-list+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/osdcmy-list?hl=en