I need to reinstall vmware back on my lappy. No thanks to Microsoft Windows Vista so called review by me, all my tools (*sob *sob) data, mp3s all gone. As my work is dealing more on packet, payloads, session data (which is rare/difficult/impossible to get) and alert data, being a lazy ass is not a wise thing to do or I might end up being the IT Dinosour.

This time maybe I shud stick to freebsd only and only i386 instead of amd64. There’s always temptation to install 64 bits Os (That’s the price u have to pay for having a dual core 64 bit processor I guess) keh keh keh. Am very keen on testing snort-inline . Perhaps I can describe the purpose, review, the result of it later aa. But 1st let me have my vmware installed.

For you guys who happen to browse http://www.hazrulnz.net, you’ll notice the “keserabutan”, chaoslike, non-user friendly page that welcome you to my site. Some 1337 455 designed front page aa? Keh keh keh. Well actually I didn’t feel quite satisfy with my work as for a start, feel kinda handicapped for lack of tools. For graphic editing, I just use Gimp(GNU Image Manipulating Program while for website, I just alternate between MS Publisher and NVU(Pronounced N-view. As a result you will see two different layout (or misplaced link in my case) when you access my website from unix-based *firefox and windows based firefox. I dun know why. Perhaps U can tell me..

p/s : I only use firefox. IE is a no no for me. Sorry for IE users.

This is from unix based firefox view

and this is from windows based firefox view

I wonder why…

I’m honoured to know that Mr Richard Bejtlich post a comment and maybe read my blog too. . Actually I bought Extrusion Detection and The real Digital Forensic. I’ve read Tao of Network security before. For Mr Richard Bejtlich, thanks for sharing your knowledge and your vast experience/ thoughts in these books. I do really appreciate the knowledge gained from reading these books.

Most of the ppl here thought that having a firewall is enuff to secure your network and only web defacement is considered as serious incident. There is no proper incident handling procedure, no proper security policy and many others. In fact if to make the defensible network characteristics as the benchmark, most of the network here are impossible to monitor. I dun want to comment about the personnel who handling/administrating their network. Just imagine :

Today we have and incident (I wonder why it has to be my shift for these things to happen) and the main problem is The Client change their IP without acknowledging us, it’s ok as the sniffing is still working, but this particular server has been defaced and there’s no exact timeframe when or from where the attack was. So for a start I just ask The Client to send us the access log of the defaced webserver. At least to get the idea of when/ and from where (I know this is not the proper way but with the limited resources and authorization that we had, whut else can I do?). So I ask The Administrator to send me the access log and called me when those log sent. A few moments later the phone ringing;

“Hello, have you sent the log to our email?”

“Actually I think I dun have to send the log la”

“Eh, Why?”

“There’s only one line in that log”

“One line? What do you mean by only one line?”

“Ya lor, there’s only one error that we’ve detected, so only one line lah”

“Aaaaaa?!! Err in that case just send the access_log that we’ve requested and the error_log (I can’t recall when I ask this log) as well to our email. Thanks”

It takes a lot of courage from me to leave for work and have to endure this view everyday.

She is sick today (a fever) and little bit weak, but still managed to stand up and send me to the door just like usual when I’m going to work. It really tears my heart to leave my sick daughter at home but sometimes, you have to do the things that u need to do.

Tonite game will determine United capability of winning the title this season. Hopefully they can win (win big better hahaha). As usual I will be glued in front of the tv for the game. C’mon laddie

update : Draw 1-1. A fair result I guess. A game of two halves. Nevermind whutever mourinho said, we are still 3 points ahead. Hehehehe

[14:27] lilmissjaja: btw
[14:27] lilmissjaja: me and roza gonna get engage tis 9th dec
[14:28] soulkipper: oih
[14:28] soulkipper: congrats
[14:28] lilmissjaja:
[14:28] soulkipper: baper lama engage?

[14:28] lilmissjaja: less than 1 yr la kot
[14:28] lilmissjaja: most probably wedding next yr
[14:28] soulkipper: wahhhhhhhhh
[14:28] lilmissjaja: july or oct
[14:28] soulkipper: FINALLY
[14:29] lilmissjaja: :p

Finally I can say congratulations to one of my best friends. I knew jaja since err 1998/1999 when she’s doing her practical at Kuantan Computer Technology (Wujud lagi ke kompeni ni aa?) She’s a very talkative person and become my tunnel to mengurat her practical friend (And the rest is history).

Anyway jaja, congratulation to you and rozza. Semoga berkekalan hingga ke anak cucu (advance wish nieh)

Ahh.. Besides sitting back and enjoying my last weeks at The Client site, I am trying to improve my knowledge and understanding on Network Security Monitoring as well. So I bought 2 books written by the NSM Guru himself, Mr Richard Bejtlich of taosecurity.

For a start currently I’m reading Extrusion Detection – Security Monitoring for Internal Intrusion. Very insightful and eye opener especially on proper security concept. If your work is more on ict security then this book is recommended. Even the father of Proxy, Mr Marcus Ranum also recommend this book

Kinda lazy today but somehow finished setting up my picture gallery. Spending most of my morning uploading the pictures especially the ones during our vacation at Genting Highlands.

Bought a Titus watch for wifey. She’s so into Titus brand for watch and Guess for her handbags. Well even tho she didn’t ask me to buy any Titus watch for her, I’ve decided to present her one. Nothing beats watching wifey excited and happy face.

I dunno about u guys but for me, sending an astronaut to outerspace just to spin gasing, playing baru seremban and making teh tarik after spending billion of ringgit is totally unacceptable. It sounds like our astronaut will become the tukang masak or the joker to other astronaut from other countries. How does spinning gasing, playing batu seremban and making teh tarik will unravel the mysteries of science, education and medicine? I wonder whut does she means by saying “The National Astronaut Programme is not only aimed at despatching an astronaut into space but it will be a continuous affair as it will benefit the people.”

So after this we plan to setup a teh tarik warung up there on the moon? No shit but pls if anybody can enlighten me whut are the benefits of playing local traditional games and making teh tarik at the outerspace?

What a crap!

Just imagine the conversation between those astonauts.

“Hi, my name is Dr Ivan chelski from Russia. I will conduct an experiment to examine cell growth and morphological tissue changes in geckos, cell proliferation and tissue regeneration of ribbed newts, gene expression and neural re-adaptation of snail vestibular cells to Earth’s gravity, and spaceflight’s effects on genetic structures in bacteria. How about you?”

“Oh, Impressive. My name is Dr Blablabla from Malaysia. I will conduct an experiment to unravel the mysteries of science by playing our local traditional games in here. Oh also I will making some teh tarik for you guys as well.”

“Huh?”

p/s: I do believe if this event do happen, we will be the laughing stock of the entire world. Heck even the alien will have a go at us.

This is my 1st posting on my new hosted server. Thought of keeping on using blogger but then as I’ve discovered that dreamhost also provide wordpress (with easy-to-install option) why not host/create/using my own blog template/engine/host whutsoever? ) . Anyway thanks to blogger for providing a good blogging service. Now? Still looking for a nice, appropriate template and need to make some minor adjustment to the pics as well.