Monday, September 29, 2008

The Five Fundamentals to be a Good Consultant

As we know, from working with auto mechanics and plumbers, dentists, and tax advisors, that technical expertise alone doesn’t make one a good and trusted advisor. We’ve all had experiences with good and poor consultants. I’ve had doctors who walked in the room staring at a clipboard, asked a couple of questions in a mechanical tone, ticked off a checklist, and only then glanced up to see who the subject of the interview was. I often wonder whether these advisors cared whether I was a man, a woman, or a horse. I’ve also had experience with doctors who took the time to know me, my preferences and personality, and the way I feel about my medical condition, and then prescribed therapies that I might actually implement. Good and poor advisors may be equally competent in their subject matter. It’s their ability to give personalized advice that influences the client’s perception of the experience and the ultimate success of the relationship.

All professionals, whether lawyer, doctor, or architect, must use some process of interviewing, documenting, analyzing, recommending, and communicating to be an effective advisor. Many professionals have learned this process through trial and error, as it is not typically a subject covered in depth as part of their training and certification. For the skilled practitioner, advising becomes an ingrained and instinctual skill that is rarely thought of as a separate process.

For the less skilled, it is a hit-or-miss process that often leaves crucial factors undiscovered, or critical decision criteria poorly understood by the client. I see in my practice as an advisor to IT consulting firms an epidemic of unstructured, inconsistent, uncoordinated activities that are called

IT consulting. Both the IT professionals and their clients are often left wondering how a simple technical project could get so fouled up. Everyone understood the technology, but nobody managed the relationship or the delivery process.


The Five Funda,s of Consulting

Five basic concept which build the advisory process in IT field

-->Focus on the relationship: Identifying who the client is, and understanding the motivations, culture, history, fears, and goals of both the human being and the organization he or she represents, is one of the most difficult tasks in consulting. Your success in this task has much more bearing on the success or failure of your engagements than the technical discipline involved.

-->Clearly define your role: Setting the expectation with the client regarding exactly what you are there to accomplish, what tasks you are making a commitment to perform, what tasks you expect the client to perform, and where the boundaries of the relationship lie, is a key success factor for consultants.

-->Visualize success: It is the consultant’s central role to help the client draw a mental picture of the desired result of the engagement. Failure to do so results in the dreaded scope creep, in which the engagement never concludes because the expectations keep changing. Visualizing a successful result creates a common goal that all participants can agree upon and strive for together. Like the championship ring for a sports team, it is an unambiguous and motivational endpoint that clarifies the effort and helps clear away extraneous issues and barriers.

-->You advise; they decide: One of the most difficult tasks for consultants is to cast aside emotional attachment to their own advice. Many technicians fall in love with a particular solution or technology, and then lose interest in, or respect for, the client if he decides to take another approach. We must always remember that the client understands the complexities of his own environment, and that he lives with the result of his decision, while we move on to the next assignment.

-->Be oriented toward results:Consulting is more than advising, it is assisting clients to reach a goal. While some advisory relationships are strictly informational, most clients want us to not only recommend solutions, they want us to help implement them. Politics is often described as “the art of the possible,” a good definition for results-oriented consulting as well. By considering implementation issues throughout the engagement, such as corporate culture, readiness to change, training requirements, and corporate communications channels, we keep our eye on the realm of possibility, avoid getting sidetracked into the theoretical, and prepare the client for the real-world issues of implementation and system operation.


Tuesday, August 26, 2008

Linux and Swap Space

Few day back I heard that Linux does not use swap space and some of the critical services are getting crashed due to insufficient memory space and then my research started and found some interesting facts which is enclosed below.

Recently, some experimental improvement to the 2.6 Linux kernel have been made by Con Kolivas , published in his popular -ck patchset . The improvement, called "swap prefetch", employs a mechanism of prefetching previously swapped pages back to physical memory even before they are actually needed, as long as the system is relatively idle (so as not to impair performance) and there is available physical memory to use. This applies to a situation when a "heavy" application has been temporarily used, causing other processes to swap out. After it is closed, both freeing large areas of memory and reducing disk load, prefetch of other processes starts, reducing their initial user response time.


Within Linux®, you can adjust the swappiness of the system when using the 2.6 kernel by setting the vm.swappiness value in /etc/sysctl.conf.
Higher values lead to more pages being swapped and lower values lead to more applications being kept in memory, even if they are idle. The Linux
2.6 kernel added a new kernel parameter called swappiness to let administrators tweak the way Linux swaps. It is a number from 0 to 100.

In essence, higher values lead to more pages being swapped, and lower values lead to more applications being kept in memory, even if they are idle. Kernel maintainer Andrew Morton has said that he runs his desktop machines with a swappiness of 100, stating that "My point is that decreasing the tendency of the kernel to swap stuff out is wrong. You really don't want hundreds of megabytes of BloatyApp's untouched memory floating about in the machine. Get it out on the disk, use the memory for something useful."

There are two aspects to monitoring swap space and how it is used:
Current usage and active usage. You can find an array of different tools across the UNIX variants that report available free memory and VM usage with current usage.
$ swapon -s (Is very common tool to monitor the Swap use)

There are a number of different points of view and rules on how you should configure VM, and how much disk space you should allocate. Some of these approaches have been summarized below:

* Some administrators believe you should never have less swap space than physical RAM. This was a requirement with older versions of UNIX (particularly SunOS) because of the way in which VM was used. In theory, having more VM than physical RAM enables the operating system to swap out all current processes to disk when the system becomes idle, and it can speed up performance for systems because new processes can be loaded directly into RAM without having to swap applications beforehand.

* For development systems, many administrators agree that you should have as much VM as you have RAM. The reason for this approach is that swap space is also used during a system failure as the location where the active memory is dumped; the stored memory dump is then reloaded during boot and saved as a kernel core file. If the configured swap space is less than the physical RAM, such dumps are not possible.

* In high-performance deployment environments, you can configure as little VM as possible, on the basis that you want to keep the applications active in memory and don't need a lot of swap. Crash recovery is not required, and the ability to identify a potential lack of physical RAM (through running out of swap space) provides a warning that your application environment is not optimized, or that you need to upgrade your RAM.

* For desktop environments, having a very large VM allocation can
be to your advantage, as it enables you to run a large number of applications (many of which will probably be idle and easily swapped) making more RAM available for the active applications.

Choosing the right amount of swap space is highly dependent on the platform you are configuring -- it's intended use and how you want to cope with a lack of available VM.

For some conservative values:
* On a desktop system, allocate at least as much swap space as physical RAM.
* On a server, allocate at least 50 percent of your available RAM as swap space. Once you have a figure in mind, you need to configure the swap space.


OOM (Out-of-Memory) killer

If the Linux VM can't find memory to allocate when it's needed, it puts in-use user data pages on the swap-out queue, to be swapped out. If the VM can't allocate memory and can't swap out in-use memory, the Out-of-memory killer may begin killing current userspace processes. The rationale for OOM killing is described in the Linux-MM docs.


Conclusion


Managing swap space is an essential aspect of system administration. With good planning and proper use swapping can provide many benefits.Don't be afraid to experiment, and always monitor your system to ensure you are getting the results you need.

Monday, August 04, 2008

Monday, July 28, 2008

Configure IIS 6.0 operating modes

Recently one of my friend has some trouble in IIS hosted application. To identify the RCA I got to know the advance feature of IIS 6.. Enclosed the extract of that knowledge..

Windows Server 2003 introduced some significant changes from Windows 2000 Server, and Internet Information Services (IIS) 6.0 is a good example. Not only is IIS' architecture considerably different in IIS 6.0, but the management interface has also changed. For example, IIS 6.0 provides two operating modes: IIS 5.0 Isolation Mode and IIS 6.0 Worker Process Isolation Mode.
In IIS 5.0 Isolation Mode, all in-process applications run inside Inetinfo.exe. Out-of-process applications run in separate instances of DLLHost.exe. Inetinfo.exe handles HTTP request queuing, IIS services (FTP, SMTP, NNTP, etc.), and worker processes. Svchost.exe runs the WWW service.
The primary purpose for IIS 5.0 Isolation Mode is to mimic the behavior of IIS 5.0 and earlier versions, and it provides compatibility for Web applications designed specifically for IIS 5.0 or earlier.
IIS 6.0 Worker Process Isolation Mode, also called native mode, provides better performance, reliability, and fault tolerance. In native mode, the kernel-mode driver http.sys handles all HTTP request processing and queuing. Inetinfo.exe handles IIS administration and configuration as well as the IIS services, including SMTP, NNTP, and FTP. Svchost.exe handles the WWW service, and multiple instances of W3wp.exe handle worker processes.
Separating worker processes in this way isolates those worker processes from the core IIS services for better reliability overall and better recoverability for individual processes. This process isolation, combined with the fact that the core IIS services prevent the loading of third-party code, means an errant Web application will have a tough time crashing the WWW service and bringing down the server.
In a clean installation of IIS 6.0, native mode is the default mode. A system upgraded from a previous IIS 6.0 installation assumes the mode of the previous installation. Systems upgraded from IIS 5.0 or IIS 4.0 run in IIS 5.0 Isolation Mode to provide compatibility for the existing Web applications on the server.
One aspect of managing an IIS 6.0 server is setting the mode in which the server runs. For example, you might be installing a Web application that won't run in native mode and need to switch the server to IIS 5.0 Isolation Mode. Or you may have upgraded an existing server and now want to switch it from IIS 5.0 Isolation Mode to native mode. Note that the server as a whole runs in a given mode; you can't run specific sites on the server in different modes.
To configure IIS 6.0's operation mode, open the Internet Information Services Manager from the Administrative Tools folder, or run %systemroot%\system32\inetsrv\iis.msc. When the IIS console opens, right-click the Web Sites branch in the left pane, choose Properties, and select the Service tab. Selecting the Run WWW Service In IIS 5.0 Isolation Mode option configures the server to run in IIS 5.0 Isolation Mode. Deselect this option if you want to run the server in native mode.

Thursday, July 03, 2008

Listen to these original songs of most popular Hindi Tracks

Dhoom song DHoom Macchale Inspired by Jesse Cook's 'Mario takes a walk'

Original:
http://youtube.com/watch?v=e3iTfEF52kw

INSPIRED:
http://youtube.com/watch?v=CvhPvxmD3mI





Race Song Pehli Nazar Inspired by Chinese Kim Hyung Song Sarang Hae Yo

Original:
http://youtube.com/watch?v=8KoS3weBxAg

INSPIRED:
http://youtube.com/watch?v=ffp5h_FGEJY



Race Song Zara Zara Touch Me Inspired by Lee-Hom Wang's 'Zhu Lin Shen Chu'

Original:
http://youtube.com/watch?v=wdTrPI3mumU

INSPIRED:


http://youtube.com/watch?v=kLU76W2qbPs&feature=related



Jab we met's 'Yeh ishq kya' Inspired by Anggun's Être Une Femme

Original:
http://youtube.com/watch?v=T4poevqspsI

INSPIRED:


http://youtube.com/watch?v=TQyU6EqWh_o&feature=related



Jab We Met Aao milo chale Inspired Indonesian band, Peterpan's 'Di Belakangku'

Original:
http://youtube.com/watch?v=EGXniVSfSZE

INSPIRED:


http://youtube.com/watch?v=7jpUic8hWD8&feature=related



Woh Lamhe 'Kya mujhe pyaar hai'Inspired by Indonesian Band 'Tak bisakah'

Original:
http://youtube.com/watch?v=EZTqg1MgkTY

INSPIRED:


http://youtube.com/watch?v=2EoblYYvLsE&feature=related



Bhool Bulaiya Halla Hafiz Inspired by Amr Diab's Awedony

Original:
http://youtube.com/watch?v=8Xi_xOmmsRY

INSPIRED:


http://youtube.com/watch?v=UtVerSkccgo&feature=related



Dhol Dil Liya Inspired by Dania Khatib's 1999 hit, 'Leiley'

Original:
http://www.itwofs.com/audio/Leiley-DaniaElKhateeb.rm

INSPIRED:
http://youtube.com/watch?v=xBkp57nRE5A



Life in a Metro song Baatein kuch ankahee Inspired by Korean song, 'Ah Reum Dah Oon Sa Ram' by Seo Yu Seok!

Original:
http://youtube.com/watch?v=KCTGuhPcC4Y

INSPIRED:


http://youtube.com/watch?v=Ura4grIiF90&feature=related



Bhool Bhulaiyya Hare ram hare ram Inspired by Bill Hailey's Oriental Rock

Original:
http://www.itwofs.com/audio/OrientalRock-BillHaleyComets.rm

INSPIRED:
http://youtube.com/watch?v=4lu3EorpiQ4



Life in a Metro song O Meri jaan Inspired by Queensryche's Silent Lucidity and Amr Diab's Ba'ed el Layali

Original 1:
http://youtube.com/watch?v=-2ohGF0K4AI

Original 2:
http://youtube.com/watch?v=P2y_Vbev5zs

INSPIRED:
http://youtube.com/watch?v=3g2ICCQNQ-w



Pyar ke side effects song Jaane kya Inspired by 'Mahi' by Hadiqa Kiyani

Original:
http://youtube.com/watch?v=mokJJsRfP6Q

INSPIRED:
http://www.youtube.com/watch?v=V5fEHdP-5Dc



Woh Lamhe song Chal Chale Inspired by a 1965 track called 'A World of our own' by the band, The Seekers

Original:
http://www.youtube.com/watch?v=S9oaXzrsV3Q

INSPIRED:
http://www.youtube.com/watch?v=KeJ2tqPjnps



Dhoom Song DHOOM AGAIN Inspired by a song called 'Dudu' from Tarkan

Portions edited appropriately

Original:
http://www.itwofs.com/audio/Dudu_ver2-Tarkan.rm

INSPIRED:
http://www.itwofs.com/audio/DhoomAgain-Dhoom2.rm





Speed song Tikki Tikki Inspired by Turkish pop superstar Tarkan's 2003 hit, 'Dudu'

Original:
http://youtube.com/watch?v=KoJ34jPX3WM

INSPIRED:
http://www.itwofs.com/audio/TikhiTikhi-Speed.rm



Agnipankh song Janmabhoomi & Zindagi hai Inspired by Abrar-ul-haq's 'December

Original:
http://www.itwofs.com/audio/December-AbrarUlHaq.rm

INSPIRED 1:
http://www.itwofs.com/audio/Janmabhoomi-Agnipankh.rm

INSPIRED 2:
http://www.itwofs.com/audio/ZindagiHaiTo-Agnipankh.rm



Bhagam Bhag songs Signal & Afreen Inspired by Trinidadian Soca hit, 'Signal for Lara' by Superblue & Cheb Mami's 2001 track, 'Viens Habibi'

Original 1:
http://www.itwofs.com/audio/SignalForLara-SuperBlue.rm

Original 2:
http://www.itwofs.com/audio/ViensHabibi-ChebMami.rm

INSPIRED 1:
http://youtube.com/watch?v=G31riHQjvDI

INSPIRED 2:
http://youtube.com/watch?v=b-65fajmsC8



Life in a Metro In dino Inspired by Waqar Ali's 'Mera naam hai mohobbat'

Original:
http://youtube.com/watch?v=89wB3og_yXQ

INSPIRED:
http://youtube.com/watch?v=aQ52IJjbNg4



Raqueeb songs 'Jaane kaise' Inspired by Amr Diab's 2003 track, 'Allem albi' and song 'Channa ve channa' Inspired by Pashto singer Rahim Shah.

Original 1:


http://youtube.com/watch?v=NqoXaLHFTik&feature=related

Original 2:
http://youtube.com/watch?v=JplIDBi6wZE

Inspired 1:
http://youtube.com/watch?v=rjwMsYnEJ58

Inspired2:


http://youtube.com/watch?v=33EJLt-NMDQ&feature=related



Kya Love Story Hai Song 'Miss you everyday' Lift of Lebanese singer Karina's 2006 chartbuster 'Alatoul'

'Jab se tum mile ho' is a lift from Pakistani singer Hadiqa Kiyani's 1996 number (album: Raaz), 'Jab se tum milay ho'!

Original 1:
http://youtube.com/watch?v=snIA9iR0b-0

Original 2:
http://www.itwofs.com/audio/JabSeTumMilay-Hadiqa.rm

INSPIRED:
http://youtube.com/watch?v=FJ_w0HDh0N0



Kya Love Story Hain song 'Deewana teri aankhon ka' Inspired by Black Eyed Peas' 'Bebot'

Original:
http://youtube.com/watch?v=gQAGh3JViyI

INSPIRED:
http://youtube.com/watch?v=Nr0ASdmHF40



Kya Love Story Hai song Gum sum hai dil mera Inspired by Thai song, 'Oh la nor...my love' by Bird Thungchai.

Original:
http://youtube.com/watch?v=tJjrJIh8c8k

INSPIRED:
http://www.itwofs.com/audio/GumSumHaiDil-KLSH.rm



Ankahee song Aa paas aa Inspired by Ottmar Liebert's 'Starry nite (March of Kings)

Original:
http://www.itwofs.com/audio/StarryNite-OttmarLiebert.rm

INSPIRED:
http://youtube.com/watch?v=KbsUBqQxygY



Apna sapna money money song Dil mein baji guitar Inspired by song, 'Sheloha shela' by the Middle Eastern group, Miami Band

Original:
http://www.itwofs.com/audio/ShelohaShela-MiamiBand.rm

INSPIRED:
http://youtube.com/watch?v=pCPA80elJlY



Woh Lamhe song 'Tu Jo nahi' Inspired by 'Tu Jo Nahi SB John

Original:


http://youtube.com/watch?v=HWoKJMnMRSQ&feature=related

INSPIRED:
http://youtube.com/watch?v=br_RJ0-rlbY



Bas ek Pal song 'Hai ishq' Inspired by Yuri Mrakadi's 'Arabiyon Ana'

Original:
http://youtube.com/watch?v=c8gt6agxYN0

INSPIRED:
http://youtube.com/watch?v=qoHtiN4rWJo



Pyaar Ke Side Effects song 'Is this love' Inspired by Paul Anka's 1969 track 'A-mi-manera'

Original:
http://www.itwofs.com/audio/A-mi-manera_MyWay.rm

INSPIRED:
http://youtube.com/watch?v=CGzMwPzc1VY



Ankahee Title song Inspired by Boney M's 1984 track, 'Somewhere in the world'

Original:
http://youtube.com/watch?v=68hPjUoAk4E

INSPIRED:
http://www.itwofs.com/audio/Ankahee-TitleSong.rm



Gangster

Song 'Ya ali' Inspired by Arabic band Guitara's 'Ya ghaly'

Original:
http://youtube.com/watch?v=ZJi50826cu4

INSPIRED:


http://youtube.com/watch?v=dpl9o_0Dtb4&feature=related





SOng 'Lamha lamha' lifted form Waris Baig's 1998 track, 'Kal shab dekha maine'

Original:
http://youtube.com/watch?v=0wfe0u-7DpI

INSPIRED:
http://youtube.com/watch?v=dJscz7bJ080



Song 'Bheegi bheegi' lift from Mohiner Ghoraguli's Bangla jibhonmuki gaan

Original:
http://youtube.com/watch?v=xAkzopTMXHc

INSPIRED:


http://youtube.com/watch?v=_wwsyz2YBUg&feature=related



Song Tu hi meri shab hai Inspired by 'Sacral Nirvana' by Oliver Shanti & Friends

Original:
http://youtube.com/watch?v=5JXrmUD0EK0

Inspired:


http://youtube.com/watch?v=BklekKJPjlI&feature=related





Ek Hasina Thi

Song Akhiyaan Na Maar Inspired by Pakistani singer Waris Baig's 2004 track, 'Challa'

Original:
http://www.itwofs.com/audio/Challa-WarisBaig.rm

INSPIRED:
http://youtube.com/watch?v=BuFQ0aZLP8E



Song Jal Jal Ke Inspired by Yuri Mrakadi's 2001 track, 'Arabiyon Ana'

Original:
http://youtube.com/watch?v=gmmToe4TJw8

INSPIRED:
http://youtube.com/watch?v=F_MYsiA3YY0



Fight Club Song Chorein ki Batein Inspired by Pakistani singer Ali Zafar's 'Channo ki aankhen'

Original:
http://youtube.com/watch?v=lLhylAWQgo8

INSPIRED:
http://youtube.com/watch?v=NrVm2NEoatY



Ek Khiladi Ek Hasina song 'Jhoom' Lifted from Britney Spears' commercial for Pepsi, 'Joy of Pepsi'

Original:
http://youtube.com/watch?v=HSZaif6xlWc

INSPIRED:
http://youtube.com/watch?v=wKpYRUI3o4M



Garam Masala

Songs 'Dil samundar' Inspired by Turkish singer Tarkan's 'Kuzu kuzu'

Original:
http://youtube.com/watch?v=u4kncVrjaQk

INSPIRED:
http://youtube.com/watch?v=4SHSxTBT4D0



Song 'Chori Chori' Inspired by Balwinder Safri's 'Hai rabba'

Original 1:
http://www.itwofs.com/audio/ChoriChori2-GaramMasala.rm

Original 2:
http://www.itwofs.com/audio/HaiRabba-DrZeus.rm

INSPIRED:
http://youtube.com/watch?v=xT5-NxdawRI



Song'Ada' Inspired by song Amr Diab's Ana

Original:
http://www.itwofs.com/audio/AmrDiab-Ana.rm

INSPIRED:
http://www.itwofs.com/audio/HaiRabba-DrZeus.rm



Dhoom song Shikdum Inspired by Tarkan's 'Sikidim'

Original:
http://youtube.com/watch?v=g2uy7Cfl6kU

INSPIRED:
http://youtube.com/watch?v=i2xThHWuM9A



Chocolate

Song 'Zahreeli raatein' Inspired by Jal's 'Aadat'

Original:
http://youtube.com/watch?v=FdZDRZTf67Y

INSPIRED:
http://youtube.com/watch?v=XyZEth7A0aw



Song 'Bheega bheega sa' Inspired by Abrar-ul-Haq's 'December'

Original:
http://www.itwofs.com/audio/December-AbrarUlHaq.rm

INSPIRED:


http://youtube.com/watch?v=LCZhMHUFabI&feature=related



Song 'Halka halka sa' Inspired by 'Breeze from Saintes Maries'

Original:
http://www.itwofs.com/audio/BreezeFromSaintesMaries-JesseCoo k.rm

INSPIRED:
http://youtube.com/watch?v=xcaog3CT6Fs

Sunday, June 15, 2008

Kiddie Foods

Today some how trying to recall the memories of childhood food habits and found that its almost more than 15 years when I had such stuff in my food. So recalling all the dishes for end less future.
Let me know if i missed some thing.

  1. IDLI Sugar
  2. Chai Paratha
  3. Chai IDLI
  4. Chai Roti
  5. Bhujia Pyaj Roti
  6. Chai Lie
  7. Jaggery Ghee Roti (Gud, Ghee, Roti)

Friday, June 13, 2008

Search Result



Wednesday, June 11, 2008

Determine if SSL connections are truly secure

When users browse to a Web site that begins with https, they expect that connection to be secure via Secure Sockets Layer (SSL), a protocol for transmitting secure documents via the Internet. The majority of Web sites use this protocol to obtain sensitive data (e.g., shopping cart data and credit card numbers from customers).

An https Web site may make most users feel relatively secure, but this alone doesn't guarantee secure transactions. To properly protect your organization's users--as well as corporate data that nonsecure transactions could leave open to exposure--make sure your users understand how to properly evaluate a Web site's security.

Making the SSL connection

When it comes to online forms, secure servers (from an https site) do not actually serve most of them. This means that the form data may not be going where users think.

Note : Sorry because of limitation with Blog Spot I am enclosing the HTML tag < with "<".. Hope it does not impact ..

If you view the source HTML code of a Web page that you're entering credit card data into, you should see something like the following:

"<"form method="POST" action="/order.cgi"">"
or
"<"form method="POST" action="https://www.shop.com/cgi-bin/order.cgi"">"

If the form POSTs to an IP address, users should browse to another site. A Web site should send sensitive information only to a registered site.

Here are the four most common forms that users will encounter:

  • Form page http://www.shop.com/form.html with a form tag of "<"form action="/cgi-bin/login.cgi" method="get"">": This is not secure at all, and it doesn't encrypt any of the information.
  • Form page https://www.shop.com/form.html with a form tag of "<"form action="http://www.shop.com/cgi-bin/login.cgi method="get"">": This information isn't secure either. When the form sends the data, it initiates a new--not secure--HTTP session.
  • Form page http://www.shop.com/form.html with a form tag of "<"form action=https://www.shop.com/cgi-bin/login.cgi method="get"">": This securely transmits information to the form Web site.
  • Form page https://domain.com/form.html with a form tag of "<"form action=/cgi-bin/login.cgi method="get"">": This also securely transmits information to the form Web site.

Making sure data remains secure

By securely transmitting data and using SSL to collect sensitive information, a Web site implies that it will keep that information secure. But what really happens behind the Web site?

For example, most small companies don't host their own Web sites; instead, they use a Web hosting service. But Web hosting services typically turn that Web form data into an e-mail, a process that more than likely doesn't encrypt the data. This means that anyone with access to the e-mail can easily access customers' sensitive information.

Advise users to keep this in mind when surfing the Web, and make sure your organization's Web site makes an effort to reassure its customers about data security.

Handle security incidents in seven steps

The possibility of encountering a security incident grows each day. Don't wait until you're in the middle of a crisis before you begin to develop a rational plan for handling an attack. Being prepared for an incident is essential to the survival of your network and its resources. Incident handling begins with planning and establishing policies and procedures.

Developing a plan of attack for each type of security incident is crucial to the restoration of normal operation. Here are the most common incident categories:

  • Elevation of file privileges: A user or guest gains greater privileges.
  • Data alteration: Unauthorized users make changes to files.
  • Data theft: Unauthorized users remove data from the system.
  • Denial of service (DoS): Intruders launch an attack that denies legitimate access to the system.

An event can sometimes span multiple categories. For example, Web site defacement involves elevation of privileges and data alteration.

An essential action plan

Different events require different responses. However, you should follow these seven steps for every incident.

Step 1: Log everything.
Your documentation doesn't have to be fancy. It can be a Word document with screen shots or notes on a blackboard. The goal is to capture detailed information without destroying or contaminating potential evidence. Before you take further action, verify that you have an incident.

Step 2: Make appropriate calls.
Depending on the severity of the incident, the first call might be to your service provider, or it might be to an internal legal department to start a chain of custody for evidence. For each type of incident, develop of flow chart detailing whom to contact.

Step 3: Contain the incident.
Concentrate on limiting the extent of the damage to your network. Determine whether the incident is still in progress and requires monitoring or if you should take actions to stop the activity.

Step 4: Identify the point(s) of failure.
Discover how the incident occurred, and determine what you should do to ensure the same event doesn't reoccur.

Step 5: Solve the problem, and repair the damage.
Implement the solution you've determined is necessary to ensure that the security event doesn't happen again. This might be as simple as applying an operating system patch or adding a new rule to a firewall or router.

After you've plugged the security hole, repair any damage caused by the incident.

Step 6: Increase monitoring.
After restoring a compromised system to operation, continue to monitor for backdoors and repeat attempts. Make sure you've removed the cause of the incident, and ensure that the system is functioning normally.

Step 7: Learn from the incident.
Success yields a persistent hacker. Discover exactly what occurred, how it occurred, and what's necessary to ensure it doesn't happen again.

Monday, May 26, 2008

Alopecia-Areta





Alopecia areata (AA) is a condition affecting humans, in which hair is lost from areas of the body, usually from the scalp.[1] Because it causes bald spots on the scalp, especially in the first stages, it is sometimes called spot baldness. In 1%–2% of cases, the condition can spread to the entire scalp (Alopecia totalis) or to the entire epidermis (Alopecia universalis).
The condition affects 1%–2% of humans,[3] occurring in both males and females.[1]Alopecia areata occurs in people who are apparently healthy and have no skin disorder. So I can say that am gods chosen one :). Posting images to track my recovery and info to few of my friends..

Oh forgot to tell in computer professional language .. It's a False Positive alert of our body due to autoimmune system.. Consider autoimmune system as NAC controller which is detecting our own body parts as alien or parasite and rejecting it from body..

See how dangerous False Positive alert can be.. :)

To know more abt the Alopecia
http://www.alopeciaareatainfo.com/
http://www.alopeciacure.com/








Custom Search

Tuesday, May 20, 2008

Very Old Memories












Rahul Just for U !!!!!!

Sunday, March 16, 2008

Lahri Resorts, Hyderabad





Being in Information Security Field You have to wear multiple hats so I am


Sunday, March 09, 2008

Outlook Empty Subject Alert Mail

Most of the time we usually regret for writing a mail without subject line. Now not any more. A tip for outlook user like gmail now your outlook is also going to prompt..


Enclosed the steps to enable this feature

1. Open your outlook.
2. Press Alt+F11. This opens the Visual Basic editor and then Press Ctrl+R which in turn open Project-Project 1 (left side)
3. On the Left Pane, one can see "Microsoft Outlook Objects" or "Project1", expand this. Now one can see the "ThisOutLookSession".
4. Double click on "ThisOutLookSession". It will open up a code pane.
5. Copy and Paste the following code in the right pane. (Code Pane) and save it.

Private Sub Application_ItemSend(ByVal Item As Object, Cancel As Boolean)
Dim strSubject As String
strSubject = Item.Subject
If Len(Trim(strSubject)) = 0 Then
Prompt$ = "Subject is Empty. Are you sure you want to send the Mail?"
If MsgBox(Prompt$, vbYesNo + vbQuestion + vbMsgBoxSetForeground, "Check for Subject") = vbNo Then
Cancel = True
End If
End If
End Sub

6. Now whenever u try to send a mail without subject, it will raise a pop-up to remind.

Friday, February 29, 2008

Display services running in the Svchost.exe process group

Last time, we explained how to view additional information for each process via Task Manager's Processes tab. In Task Manager, you'll notice a process named Svchost.exe. This process doesn't appear as an application in the Applications tab--it only appears in the Process tab, and there can be multiple instances of it on a system.

Svchost.exe is a generic Windows 2000 process that runs services from Dynamic Link Libraries (DLLs). When the system starts, Svchost.exe loads the services listed in this registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
\Svchost

Each entry in this key specifies a service group and is a REG_MULTI_SZ value, which means it can contain multiple string values. These values define service names for services that are members of the group. The service names themselves come from the Svchost registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Service

The Processes tab doesn't display the individual services that are part of the service group, nor can you add an optional column to view the services. However, you can view the service groups' individual services using the Tlist.exe utility included with the Windows 2000 Resource Kit.

After you install Tlist.exe from the Resource Kit, open a command console and issue the command:

Tlist.exe -s or tasklist /M

Scan the resulting output and look for instances of Svchost.exe. Each Svchost line will include a list of the services running under that instance of the process.

Knowing what processes are running on a system and being able to identify those processes is an important step when troubleshooting system problems or attempting to recover a hung system without rebooting. Once you identify the hung process, you can kill the process from the Task Manager.

Friday, February 01, 2008

L2 Cache Feature in Pentium III & Xeon Processor Based Server / PC

Although below mentioned article I posted on server watch forum way back in 2003 but today again I faced similar experience with Intel Core 2 Duo processor in my laptop. This time performance boost is almost of 4 times.

02-16-2003, 04:12 AM
It was a great experience today for me when I was enquired about L2 on die cache with Windows XP by my booss. I just shocked by knowing the fact that by default Windows XP enable 256KB Cache in kernel its hardly matter that how much Cache is available in your server. I did small research on this & found some amazing fact which I enclosed here.

The L2, or second-level, cache, is an integral part of your CPU. But still NT Kernel didn’t detect it. What I mean is that all Microsoft family OS based on NT Kernel like Windows 2000 Server family, Windows NT, Windows 2000 Professional and even though Windows XP. You didn’t Observe it by any tool but it could be displayed only in one Registry Key. Use Regedt32 or regedit & navigate to this hive
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Session Manager\ Memory Management\SecondLevelDataCache

You definitely observe

Type: REG_DWORD
Value: 0x00000000

This is because when HAL (at the time of installation ) cannot retrieve this from the hardware or BIOS, it sets this parameter value to 0, indicating that a built-in default size of 256 KB of L2 cache should be used. But Most Pentium II and III systems use 512 KB or more of L2 cache memory. The Xeon chips support 1 MB and 2 MB caches. You can get significantly better performance if this is set to match the actual amount of L2 cache. Setting the value higher than the actual amount of L2 cache available may prevent the system to be unstable. Check your documentation carefully. Multiprocessor systems have processors with identical speeds and caches.

Hive: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Session Manager
Key: Memory Management
Name: SecondLevelDataCache
Type: REG_DWORD
Value: 0x00000000 256K L2 cache
Value: 0x00000200 512K L2 cache
Value: 0x00000400 1M L2 cache
Value: 0x00000800 2M L2 cache

Microsoft states that the above is erroneous and that the second level (L2) cache is recognized by the NT/W2K/XP and is fully utilized regardless of the setting of this parameter. Thus I would not twiddle with it, although if Microsoft is correct, it doesn't matter Don't know what to believe. But I found relative performance enhancement after making this change.
__________________
Mukesh Kesharwani
CISSP, CISM, CNA, MCSE, MCP+I, SCSA, CUA,

Saturday, November 10, 2007

School Days


1996-97 Graduation First Year


1995-1996 12th Standard


1990-91 (7th Standard)



1987-88 (Fourth Standard)




1984-85 (First Standard)


Saturday, September 15, 2007

Thursday, September 14, 2006

Privacy New Buzz Word In Business World.


Recently I have gone through a traning program which is said to be standard ethical practices and in that traning some question arised related to privacy. Although organization are on document defining what is ethical and what is non ethical but how many of IT manager understand it. Key buzz word which is responsible for revolution in US healthcare sector is privacy. Lets understand this and its relevance in ethical part for IT managers.

Does information’s availability justify its use?

Governments collect massive amounts of data on individuals and organizations and use it for a variety of purposes: national security, accurate tax collection, demographics, international geopolitical strategic analysis, etc. Corporations do the same for commercial reasons; to increase business, control expense, enhance profitability, gain market share, etc. Technological advances in both hardware and software have significantly changed the scope of what can be amassed and processed. Massive quantities of data, measured in petabytes and beyond, can be centrally stored and retrieved effortlessly and quickly. Seemingly disparate sources of data can be cross-referenced to glean new meanings when one set of data is viewed within the context of another. In the 1930s and 1940s the volumes of data available were miniscule by comparison and the "processing" of that data was entirely manual. Had even a small portion of today’s capabilities existed, the world as we now know it would probably be quite different. Should organizations’ ability to collect and process data on exponentially increasing scales be limited in any way? Does the fact that information can be architected for a particular purpose mean it should be, even if by so doing individual privacy rights are potentially violated? If data meant for one use is diverted to another process which is socially redeeming and would result in a greater good or could result in a financial gain, does that mitigate the ethical dilemma, no matter how innocent and pure the motivation?

How much effort and expense should managers incur in considering questions of data access and privacy?
This is an issue with both internal and external implications. All organizations collect personal data on employees, data that if not properly safeguarded can result in significant negative implications for individuals. Information such as compensation and background data and personal identification information, such as social security number and account identifiers, all have to be maintained and accessed by authorized personnel. Systems that track this data can be secured, but at some point data must leave those systems and be used. Operational policies and procedures can address the proper handling of that data but if they’re not followed or enforced, there’s hardly any point in having them. Organizations routinely share data with each other, merging databases containing all kinds of identifiers. What’s the extent of the responsibility we should expect from the stewards of this data? Since there’s no perfect solution, where’s the tipping point beyond which efforts to ensure data can be accessed only by those who are authorized to do so can be considered reasonable and appropriate?
What can employers expect from employees with regard to nondisclosure when going to work for another firm?

Many people are required to sign NDAs (nondisclosure agreements) and noncompete clauses in employment contracts, legal documents that restrict their ability to share information with other future employers even to the point of disallowing them to join certain companies or continue to participate in a particular industry. What about the rest of us, who have no such legal restrictions? In the course of our work for employer A, we are privy to trade secrets, internal documents, proprietary processes and technology, and other information creating competitive advantage. We can’t do a brain dump when we leave to go to work for employer B; we carry that information with us. Is it ethical to use our special knowledge gained at one employer to the benefit of another? How do you realistically restrict yourself from doing so?

What part of an information asset belongs to an organization and what is simply part of an employee’s general knowledge?

Information, knowledge, and skills we develop in the course of working on projects can be inextricably intertwined. You’re the project manager for an effort to reengineer your company’s marketing operations system. You have access to confidential internal memoranda on key organization strategic and procedural information. To build the new system, you and your team have to go for some advanced technical training on the new technology products you’ll be using. The new system you build is completely revolutionary in design and execution. Although there are areas of patent law that cover many such situations, there’s not much in the way of case law testing this just yet, and of course laws vary between countries. Clearly, you’ve built an asset owned by your company, but do you have a legitimate claim to any part of it? Can you take any part of this knowledge or even the design or code itself with you to another employer or for the purpose of starting your own company? Suppose you do strike out on your own and sell your system to other companies. Is the ethical dilemma mitigated by the fact that your original company isn’t in the software business? Or that you’ve sold your product only to noncompeting companies? What if we were talking about a database instead of a system?
In a bygone era, there was less data to work with, and the only quality assurance that needed to be performed was on data…operations and procedures were manual, so it was the output of those functions that was most critical. Technology has enabled vastly more complicated and interconnected processes, such that a problem far upstream in a process has a ripple effect on the rest of the process. Sarbanes Oxley requires the certification of all internal controls in large part for this reason.

Does data gathered violate employee privacy rights?
Many organizations have started adding a credit and background check to the standard reference check during the hiring process. Are those organizations obligated to tell us they’re doing this and what results they’ve received? The justification for doing the credit check typically is that a person who can’t manage his or her own finances probably can’t be trusted with any fiduciary responsibility on behalf of the organization. Does this pass the smell test or is this actually an infringement of privacy? Performing these checks is a relatively recent phenomenon, brought on in part by the desire of organizations to protect themselves in the wake of the numerous corporate scandals of the past few years but also because technology has enabled this data to be gathered, processed, and accessed quickly and inexpensively. Is technology responsible for enabling unethical behavior?

Do employees know the degree to which behavior is monitored?
Organizations have the right to monitor what employees do (management is measurement) and how technology systems are used. It’s common practice to notify employees that when they use organizational assets such as networks or Internet access, they should have no expectation of privacy. Even without that disclaimer, they really don’t need the warning to know this monitoring is, or could be, taking place. Do organizations have an obligation to notify employees as to the extent of that monitoring? Should an organization make it clear that in addition to monitoring how long employees are using the Internet, it's also watching which Web sites they visit? If employees are told there’s no expectation of privacy when using the e-mail system, is it an ethical violation when they later find out the organization was actually reading their e-mails?