4.5 Kernel running on RPi

Update your RPi to the latest 4.5 Kernel. Simply copy and paste these on your Raspberry Pi. You might need build essentials etc....

1. sudo apt-get install bc unzip -y
2. wget https://github.com/raspberrypi/linux/archive/rpi-4.5.y.zip
3. unzip rpi-4.5.y.zip
4. cd linux-rpi-4.5.y
5. KERNEL=kernel7
6. make bcm2709_defconfig
7. make -j4 zImage modules dtbs
8. sudo make modules_install
9. sudo cp arch/arm/boot/dts/*.dtb /boot/
10. sudo cp arch/arm/boot/dts/overlays/*.dtb* /boot/overlays/
11. sudo cp arch/arm/boot/dts/overlays/README /boot/overlays/
12. sudo scripts/mkknlimg arch/arm/boot/zImage /boot/$KERNEL.img

Quickly Change CPU Gov (Raspberry Pi/Linux)

root@raspberrypi:~# apt-get install cpufrequtils
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libcpufreq0
The following NEW packages will be installed:
  cpufrequtils libcpufreq0
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 53.5 kB of archives.
After this operation, 274 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://mirrordirector.raspbian.org/raspbian/ jessie/main libcpufreq0 armhf 008-1 [12.9 kB]
Get:2 http://mirrordirector.raspbian.org/raspbian/ jessie/main cpufrequtils armhf 008-1 [40.6 kB]
Fetched 53.5 kB in 0s (72.0 kB/s)
Preconfiguring packages ...
Selecting previously unselected package libcpufreq0.
(Reading database ... 33671 files and directories currently installed.)
Preparing to unpack .../libcpufreq0_008-1_armhf.deb ...
Unpacking libcpufreq0 (008-1) ...
Selecting previously unselected package cpufrequtils.
Preparing to unpack .../cpufrequtils_008-1_armhf.deb ...
Unpacking cpufrequtils (008-1) ...
Processing triggers for man-db (2.7.0.2-5) ...
Processing triggers for systemd (215-17+deb8u3) ...
Setting up libcpufreq0 (008-1) ...
Setting up cpufrequtils (008-1) ...
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for libc-bin (2.19-18+deb8u3) ...
Processing triggers for systemd (215-17+deb8u3) ...
****************************************************************************************
root@raspberrypi:~# cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_governors
conservative ondemand userspace powersave performance
****************************************************************************************
nano /etc/default/cpufrequtils
****************************************************************************************
# valid values: userspace conservative powersave ondemand performance
# get them from cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_governors 
GOVERNOR="performance"
****************************************************************************************
**************AFTER BOOT CHECK**********************************************************
****************************************************************************************
root@raspberrypi:/mnt/USBHDD# cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
performance
****************************************************************************************
****************************************************************************************
****************************************************************************************
****************************************************************************************
root@raspberrypi:/sys/devices/system/cpu# time echo "scale=1500; 4*a(1)" | bc -l
3.141592653589793238462643383279502884197169399375105820974944592307\
81640628620899862803482534211706798214808651328230664709384460955058\
22317253594081284811174502841027019385211055596446229489549303819644\
28810975665933446128475648233786783165271201909145648566923460348610\
45432664821339360726024914127372458700660631558817488152092096282925\
40917153643678925903600113305305488204665213841469519415116094330572\
70365759591953092186117381932611793105118548074462379962749567351885\
75272489122793818301194912983367336244065664308602139494639522473719\
07021798609437027705392171762931767523846748184676694051320005681271\
45263560827785771342757789609173637178721468440901224953430146549585\
37105079227968925892354201995611212902196086403441815981362977477130\
99605187072113499999983729780499510597317328160963185950244594553469\
08302642522308253344685035261931188171010003137838752886587533208381\
42061717766914730359825349042875546873115956286388235378759375195778\
18577805321712268066130019278766111959092164201989380952572010654858\
63278865936153381827968230301952035301852968995773622599413891249721\
77528347913151557485724245415069595082953311686172785588907509838175\
46374649393192550604009277016711390098488240128583616035637076601047\
10181942955596198946767837449448255379774726847104047534646208046684\
25906949129331367702898915210475216205696602405803815019351125338243\
00355876402474964732639141992726042699227967823547816360093417216412\
19924586315030286182974555706749838505494588586926995690927210797509\
302952

real    0m6.785s
user    0m6.730s
sys     0m0.010s

****************************************************************************************

More Information: https://software.intel.com/sites/default/files/comment/1716807/how-to-change-frequency-on-linux-pub.txt

"Tinder match" is a pun.

tshark -i eth0 -Y 'http.request.method == POST and tcp contains "password"' | grep password

tshark -i eth0 -f "src port 53" -n -T fields -e frame.time -e ip.src -e ip.dst -e dns.qry.name -e dns.resp.addr
tshark -i eth0 -Y http.request -T fields -e http.host -e http.user_agent
tshark -o column.format:""Source", "%s", "Destination", "%d"" -z conv,tcp
tcpdump -nn -v -i eth0 -s 1500 -c 1 'ether[20:2] == 0x2000'

You want to look busy, Simply run this. 

cat /dev/urandom | hexdump -C | grep "ca fe"

It's weird how 'bottle of water' and 'water bottle' typically mean two different things.

Some commands and stuff for the Raspberry Pi, But also can be used on other Linux boxes too.

Securing your box a little bit more. Simply copy and paste these.

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
echo 0 > /proc/sys/net/ipv4/ip_forward

# PREVENT YOU SYSTEM FROM ANSWERING ICMP ECHO REQUESTS

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

# DROP ICMP ECHO-REQUEST MESSAGES SENT TO BROADCAST OR MULTICAST ADDRESSES

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

# DONT ACCEPT ICMP REDIRECT MESSAGES

echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects

# DONT SEND ICMP REDIRECT MESSAGES

echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects

# DROP SOURCE ROUTED PACKETS

echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route

# ENABLE TCP SYN COOKIE PROTECTION FROM SYN FLOODS

echo 1 > /proc/sys/net/ipv4/tcp_syncookies

# ENABLE SOURCE ADDRESS SPOOFING PROTECTION

echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter

# LOG PACKETS WITH IMPOSSIBLE ADDRESSES (DUE TO WRONG ROUTES) ON YOUR NETWORK

echo 1 > /proc/sys/net/ipv4/conf/all/log_martians

# DISABLE IPV4 FORWARDING

echo 0 > /proc/sys/net/ipv4/ip_forward

Block Windows 10 "Telemetry" with Cisco ACL's

Following on from the in-depth post here... https://voat.co/v/technology/comments/835741

I have created a Cisco ACL that blocks all traffic to the IP's listed. 

Simply copy and paste this and apply this to your Interfaces on a Cisco Device. 

access-list 101 deny ip any host 13.107.3.128

access-list 101 deny ip any host 23.9.123.27

access-list 101 deny ip any host 23.67.60.65

access-list 101 deny ip any host 23.67.60.73

access-list 101 deny ip any host 23.67.60.97

access-list 101 deny ip any host 23.74.8.80

access-list 101 deny ip any host 23.74.8.99

access-list 101 deny ip any host 23.74.9.198

access-list 101 deny ip any host 23.74.9.217

access-list 101 deny ip any host 23.96.212.225

access-list 101 deny ip any host 23.101.115.193

access-list 101 deny ip any host 23.101.156.198

access-list 101 deny ip any host 23.101.187.68

access-list 101 deny ip any host 23.102.17.214

access-list 101 deny ip any host 23.193.225.197

access-list 101 deny ip any host 23.193.230.88

access-list 101 deny ip any host 23.193.236.70

access-list 101 deny ip any host 23.193.238.90

access-list 101 deny ip any host 23.193.251.132

access-list 101 deny ip any host 23.210.5.16

access-list 101 deny ip any host 23.210.48.42

access-list 101 deny ip any host 23.210.63.75

access-list 101 deny ip any host 23.217.138.11

access-list 101 deny ip any host 23.217.138.18

access-list 101 deny ip any host 23.217.138.25

access-list 101 deny ip any host 23.217.138.43

access-list 101 deny ip any host 23.217.138.90

access-list 101 deny ip any host 23.217.138.97

access-list 101 deny ip any host 23.217.138.122

access-list 101 deny ip any host 40.117.145.132

access-list 101 deny ip any host 64.4.54.253

access-list 101 deny ip any host 64.4.54.254

access-list 101 deny ip any host 65.52.108.27

access-list 101 deny ip any host 65.52.108.29

access-list 101 deny ip any host 65.52.108.92

access-list 101 deny ip any host 65.52.108.94

access-list 101 deny ip any host 65.52.108.103

access-list 101 deny ip any host 65.52.108.252

access-list 101 deny ip any host 65.52.236.160

access-list 101 deny ip any host 65.55.44.108

access-list 101 deny ip any host 65.55.113.13

access-list 101 deny ip any host 65.55.138.111

access-list 101 deny ip any host 65.55.138.126

access-list 101 deny ip any host 65.55.252.43

access-list 101 deny ip any host 72.21.81.200

access-list 101 deny ip any host 72.21.91.8

access-list 101 deny ip any host 94.245.121.253

access-list 101 deny ip any host 94.245.121.254

access-list 101 deny ip any host 104.73.92.149

access-list 101 deny ip any host 104.73.138.217

access-list 101 deny ip any host 104.73.143.160

access-list 101 deny ip any host 104.73.153.9

access-list 101 deny ip any host 104.73.160.16

access-list 101 deny ip any host 104.73.160.51

access-list 101 deny ip any host 104.73.160.58

access-list 101 deny ip any host 104.91.166.82

access-list 101 deny ip any host 104.91.188.21

access-list 101 deny ip any host 104.208.28.54

access-list 101 deny ip any host 131.253.40.53

access-list 101 deny ip any host 131.253.40.59

access-list 101 deny ip any host 131.253.61.66

access-list 101 deny ip any host 131.253.61.82

access-list 101 deny ip any host 131.253.61.84

access-list 101 deny ip any host 131.253.61.96

access-list 101 deny ip any host 131.253.61.100

access-list 101 deny ip any host 134.170.51.246

access-list 101 deny ip any host 134.170.51.247

access-list 101 deny ip any host 134.170.58.118

access-list 101 deny ip any host 134.170.58.190

access-list 101 deny ip any host 134.170.115.62

access-list 101 deny ip any host 134.170.165.251

access-list 101 deny ip any host 134.170.165.253

access-list 101 deny ip any host 134.170.179.87

access-list 101 deny ip any host 137.116.74.190

access-list 101 deny ip any host 157.55.240.220

access-list 101 deny ip any host 157.56.77.138

access-list 101 deny ip any host 157.56.77.139

access-list 101 deny ip any host 157.56.96.58

access-list 101 deny ip any host 157.56.96.123

access-list 101 deny ip any host 157.56.144.215

access-list 101 deny ip any host 157.56.144.216

access-list 101 deny ip any host 191.232.80.58

access-list 101 deny ip any host 198.41.214.183

access-list 101 deny ip any host 198.41.214.184

access-list 101 deny ip any host 198.41.214.186

access-list 101 deny ip any host 198.41.214.187

access-list 101 deny ip any host 198.41.215.182

access-list 101 deny ip any host 198.41.215.185

access-list 101 deny ip any host 198.41.215.186

access-list 101 deny ip any host 204.79.197.200

access-list 101 deny ip any host 207.46.7.252

access-list 101 deny ip any host 207.46.101.29

access-list 101 deny ip any host 207.46.114.58

access-list 101 permit ip any any

Remove Secret Cisco History

show history all <------- You will be surprised what is actually there

try these commands.
Router(config)#line vty 0 4
Router(config-line)#no history
Router(config)#line console 0
Router(config-line)#no history

2016 Stock Pick List

Company name                    Symbol  Currency    P/E ratio
Tate & Lyle PLC                 TATE    GBX         147.87
Sceptre Leisure Plc.            SCEL    GBX         147.62
Easyhotel PLC                   EZH     GBX         141.48
Premier Farnell plc             PFLB    GBX         141.03
Severfield PLC                  SFR     GBX         139.98
Fresnillo Plc                   FRES    GBX         139.36
DM PLC                          DMP     GBX         131.38
Scientific Digital Imaging plc  SDI     GBX         129.41
Brunner Investment Trust Plc    44GL    GBX         127
Premier Farnell plc             PFLA    GBX         126.22
Crimson Tide plc                TIDE    GBX         123.46
Barclays PLC                    BARC    GBX         122.63
Mortice Limited                 MORT    GBX         122.3
Immedia Group PLC               IME     GBX         120.37
Lowland Investment Company plc  LWI     GBX         114.64
Vectura Group PLC               VEC     GBX         114.24
Consort Medical plc             CSRT    GBX         108.83
Value and Income Trust plc      VIN     GBX         108.41
Digital Globe Services Ltd      DGS     GBX         107.53
Tanfield Group plc              TAN     GBX         106.16
 
If you found this useful you can always donate...........15nut3xGxhkE8Urc4KXwCsNbi72dWPn1cQ

Content is intended to be used and must be used for informational purposes only. It is very important to do your own analysis before making any investment based on your own personal circumstances. You should take independent financial advice from a professional in connection with, or independently research and verify, any information that you find on any Website and wish to rely upon, whether for the purpose of making an investment decision or otherwise.

Tor is Broken

For a long time in my mind there's been no doubt that Tor is broken, at least with respect to the powers available to the United States and its allies. Think about it. There are no where near a million Tor nodes and even fewer exit nodes, and a million servers is a rounding error in the DoD black budget for a year.

Sure, non DoD Tor nodes exist, but what % of them are p0wned? (Zero Day Exploit) I'll hazard a guess; just that % required to make it statistically implausible that, combined with traffic analysis, context gleaned from exit nodes a handful of zero-days etc. etc. no one can use Tor and expect sustained anonymity from the government.

I actually think that's a good thing. Hear me out. For the general Tor user who just wants their ISP , nosy Shark Wire aware neighbor, political opponents, large corporations, website owners land various databrokers to fuck off, they have what they want For dissidents in oppressive nations, those nations probably can't muster the resources to de-anonymize Tor users. For very bad people who want to do very bad things, we can get them, with some effort.

I know this is a minority opinion, but I think that the opposing opinion is regressive. Once, it wasn't possible for a small group of non-nation-state individuals to wreak mayhem on millions of people at once.

Once, the amount badness that could be achieved by Bad Guys was a trade-off between the number of people the Bad Guys wanted to effect, the number of people the Bad Guys could enlist to help them and the degree of severity of the Badness itself. Not any more. This changes everything.

We are living more and more in a world in which a few or even one really fucked up person can reach out and kill. This is nothing but the advancement of technology, and it's not going to stop. That means the power of small groups gets larger and broader even as the size of that group spiral down to one.

How are we going to counter this general phenomena? I agree, that giving any government unchecked, unobservable, unlimited powers is always a bad idea. (Ironcially, I believe this because of the actions members of administrations who profess to want to "get government off our backs" and told us "government isn't the solution, it's the problem"- Oliver North, James Secord, Dick Cheney, Alberto Gonzales etc etc. )

But in the face of this hypothetical and not-always hypothetical threat we still have the facts on the ground with respect to advancing technologies and the leverage it gives just anyone.

I don't think the answer is to limit the power of government. We need that power to exist. I think the answer lies in the people being able to hold the government accountable and their actions rendered transparent to a degree that would shock most people today, both in and out of government. We need to radically re-think the national security 3rd-rail issues like national security classifications, clearances, Presidential directives, etc. etc.

It will tear this country apart if the government continues to do what it knows it needs to do in order to avert terrorism and societal chaos and the people continue to feel like they have no faith in the integrity of the processes and powers of the government- that it could at any moment turn the death ray on them, and probably will. That whole dynamic, the whole world view needs to be addressed and not just addressed but actually resolved by some radical out of the box thinking no one had done yet.

We can have both security and freedom, but it's not going to just arise naturally by continuing on with the status quo conceptual categories we are using now.

"Love is a snowmobile racing across the tundra and then suddenly it flips over, pinning you underneath. At night, the ice weasels come."

IMPORTANT ONE IS GROUP POLICY (gpedit.msc):

Go to Computer Configuration, Administrative Templates, System
Internet Communication Management, Internet Communication Settings

ENABLE (to turn it on, it is a disabler)

"Turn off Windows Customer Experience Improvement Program"

---

TO REMOVE THE BOGUS OPTIONAL TELEMETRY HOTFIXES MANUALLY:

Open command prompt
Type powershell
issue these commands

---

TO SEE WHAT ONES ARE INSTALLED:

get-hotfix -id KB3035583, KB2952664,KB2976978,KB3021917,KB3044374,KB2990214

---

TO UNINSTALL THEM (these for sure, per url next below):

wusa /uninstall /kb:3035583
wusa /uninstall /kb:2952664
wusa /uninstall /kb:2976978
wusa /uninstall /kb:3021917
wusa /uninstall /kb:3044374
wusa /uninstall /kb:2990214

per http://www.ghacks.net/2015/04/... [ghacks.net]

---

DESCRIPTIONS OF EACH (these uninstalled properly):

KB3068708 (Telemetry)
KB3075249 (Telemetry)
KB3080149 (Telemetry)

KB3022345 (Telemetry)
KB2977759 (Windows 10 Upgrade preparation)
KB3021917 (Windows 10 Upgrade preparatioon + Telemetry)
KB3035583 (Windows 10 upgrade preparation)

---

I GOT "NOT INSTALLED ON THIS COMPUTER" ON THESE INITIALLY SINCE I HAD IE11 installed (PROBABLY ONES FOR IE9/10/11):

KB3075249
KB3080149
KB2505438
* KB2670838 (See IE 9/10/11 notes below)
KB3044374
KB2990214 (Windows 10 Upgrade preparation)
KB2505438 (Although it claims to fix performance issues, it often breaks fonts)
KB2976978 (Windows 10 Upgrade preparation)

---

I GOT "NOT INSTALLED ON THIS COMPUTER" ON THESE (*PRIOR* TO PULLING KB2670838 which is IE 11):

* KB2670838 (This update often breaks AERO on Windows 7 and makes some fonts on websites fuzzy. A Windows 7 specific update only
                        (do not install IE10 or 11 otherwise it will be bundled with them, IE9 is the max version you should install to avoid this).

THESE RE-APPEAR AFTER UNINSTALLING IE11 RIGHT ON RESTARTING & CHECKING WINDOWS UPDATE:

* KB2952664 (Windows 10 Upgrade preparation prior to IE9/10/11 install)
* KB3021917 (Windows 10 Upgrade preparation prior to IE9/10/11 install)
* KB3068708 (Windows 10 Upgrade preparation prior to IE9/10/11 install)
* KB3092627 (Windows 10 Upgrade preparation prior to IE9/10/11 install)

---

run cmd as administrator

sc stop Diagtrack
sc delete Diagtrack

---

*Task Scheduler Library:

Everything under "Application Experience"
Everything under "Autochk"
Everything under "Customer Experience Improvement Program"
Under "Disk Diagnostic" only the "Microsoft-Windows-DiskDiagnosticDataCollector"
Under "Maintenance" "WinSAT"
"Media Center" and click the "status" column, then select all non-disabled entries and disable them.

*services.msc:

"Remote Registry" to "Disabled" instead of "Manual".

How secure is your bank?

The more traditional banks, do all offer internet banking (when they can keep their IT working - Yes I’m looking at you RBS Group) and all offer “helpful” tips about how you can be secure online… from installing software like Trusteer Rapport or Trust Defender, to keeping your system and security software up-to-date.

However, your connection with your banks online banking service, can only be as secure as they make it. The question is… with more and more of us using online banking, is your bank doing everything it can to make those transactions secure?

To test this, I have been using a tool provided by SSL Labs, called the SSL Server Test.  It inspects the configuration of any public SSL web server (such as those used by banks for their online banking services) and grades them from A+ - F.

From the results below you will see that security implementation is hit and miss with only one bank scoring higher than B (mainly because they maintain backward compatibility).

Most UK banks do not seem to support TLS 1.1 or 1.2 despite those standards being ratified in 2006 and 2008 respectively and being supported in all modern browsers.  Some banks still support the very antiquated and insecure SSL3.0 protocol.

The problem is that everyone stuck on Windows XP and still using IE6 (IE: Mum & Dad) do not have support for TLS1.0+.  It is the desire to support of these antiquated OS’s and browsers which has resulted in most banks also supporting RC4 which SSL Labs have described as a “lesser evil” for those antiquated browsers which only support SSL3.0 or TLS1.0.

My view is that they should just be left without support… after all, they could install firefox… Or upgrade their machine… But as there are no publicly-known feasible attacks against RC4 I suppose it is not unreasonable to keep that cipher alive for a little longer, although Mozilla and Microsoft recommend disabling it and TLS1.3 will ban it from use in the standard.

There will shortly be a new “challenger” bank called Atom which, will not have any physical branches or ATM’s, customers interaction with their bank will be entirely through a mobile phone app.

If there are any banks which I have missed, let me know and I’ll add them in (All scores correct as of 26 June)

The Winner!

Virgin Money - A
https://www.ssllabs.com/ssltest/analyze.html?d=uk.virginmoney.com
Everyone else seemly need to copy what Virgin Money have done here and the world of internet banking would be a much better and safer place.  The only bank to Score an A rating.

The Rest

Barclays - B
https://www.ssllabs.com/ssltest/analyze.html?d=bank.barclays.co.uk&s=157.83.96.200
This is going to be a common theme… Barclays use the RC4 protocol, which SSL Labs do not like one bit and are advising that sites drop RC4 or see their score capped at B.
https://community.qualys.com/blogs/securitylabs/2015/04/23/ssl-labs-rc4-deprecation-plan

Barclays have dropped support for the insecure SSL3 protocol and support both TLS 1.2 & 1.0.  They don’t currently support forward secrecy (more about that is available here: https://community.qualys.com/blogs/securitylabs/2013/06/25/ssl-labs-deploying-forward-secrecy) simply dropping RC4 would see them achieve an A-.

Nationwide - B
https://www.ssllabs.com/ssltest/analyze.html?d=onlinebanking.nationwide.co.uk
Again, the grade is capped to a B for RC4 support.

Smile - B
https://www.ssllabs.com/ssltest/analyze.html?d=banking.smile.co.uk
A current internet only bank (although part of the Co-op). It has the same RC4 support as Barclays & Nationwide though and for the same reasons is only a B.

Co-operative Bank - B
https://www.ssllabs.com/ssltest/analyze.html?d=personal.co-operativebank.co.uk
Much the same as smile - not surprising as they are part of the same organisation.

Metro Bank - B
https://www.ssllabs.com/ssltest/analyze.html?d=personal.metrobankonline.co.uk
Metro bank also supports RC4 but only at the bottom of a long list of other Cipher Suites. 

Natwest - C
https://www.ssllabs.com/ssltest/analyze.html?d=nwolb.com
Lacking support for TLS1.1 & 1.2 and but does not support RC4!! Proof that you can drop RC4 support and your customers can still access your service.

HSBC - C
https://www.ssllabs.com/ssltest/analyze.html?d=hsbc.co.uk&s=193.108.75.106&latest
Lacking support for TLS1.1 & 1.2 and supporting both SSL3 and RC4.

Royal Bank of Scotland - C
https://www.ssllabs.com/ssltest/analyze.html?d=rbsdigital.com
Lacking support for TLS1.1 & 1.2 and but does not support RC4.

Halifax - C (I personally think that Halifax should have been rated lower that C.)
https://www.ssllabs.com/ssltest/analyze.html?d=halifax-online.co.uk
Vulnerable to the SSL3 POOLE attack, also lacking support for TLS1.1 & 1.2 and supporting both SSL3 and RC4.


Lloyds Bank - C
https://www.ssllabs.com/ssltest/analyze.html?d=online.lloydsbank.co.uk
Another which is vulnerable to the SSL3 POOLE attack, also lacking support for TLS1.1 & 1.2 and supporting both SSL3 and RC4.

First Direct - C
https://www.ssllabs....firstdirect.com
Lacking support for TLS1.1 & 1.2 and supporting RC4

Clydesdale Bank - C
https://www.ssllabs.com/ssltest/analyze.html?d=home2.cbonline.co.uk
Lacking support for TLS1.1 & 1.2 and supporting both SSL3 and RC4.

Marks & Spencer Bank - C
https://www.ssllabs.com/ssltest/analyze.html?d=www7.marksandspencer.com
Lacking support for TLS1.1 & 1.2 and supporting RC4

TSB - C
https://www.ssllabs.com/ssltest/analyze.html?d=https%3A%2F%2Fonline.tsb.co.uk
Lacking support for TLS1.1 & 1.2 and supporting both SSL3 and RC4.

Handlesbanken - C
https://www.ssllabs.com/ssltest/analyze.html?d=https%3A%2F%2Fonline.tsb.co.uk
Lacking support for TLS1.1 & 1.2 and supporting RC4

Santander - C
https://www.ssllabs.com/ssltest/analyze.html?d=retail.santander.co.uk
Supports RC4 but also orders the Cipher suites badly, resulting in RC4 being used in modern browsers instead of a more secure alternative, this downgrades Santander from B to C (NOTE: From September onwards this may result in a downgrade to an F).

Sainsburys Bank - C
https://www.ssllabs.com/ssltest/analyze.html?d=online.sainsburysbank.co.uk&s=195.171.195.119&latest
Lacking support for TLS1.1 & 1.2 and supporting both SSL3 and RC4.

Failures

Tesco Bank - F
https://www.ssllabs.com/ssltest/analyze.html?d=tescobank.com
Oh dear, oh dear that pesky POODLE.  This is an SSL/TLS problem which came to light in October 2014 (and December 2014 for TLS) and had all decent sysadmins patching their servers as soon as humanly possible.  The patching is simple and doesn’t require protracted down time… there is no excuse not to apply it and because of the severity of the consequences (particularly the TLS version), SSL Labs cap any site with this problem to a FAIL.

If Tesco Bank fixed that, they would still be capped at C as for reasons only known to them, they only support TLS 1.0.

John Lewis: Partnership Card - F
https://www.ssllabs.com/ssltest/analyze.html?d=secure.partnershipcard.co.uk
Another big red F - This time for insecure client side renegotiation, but again there is only support for TLS1.0 and SSL3.

The Post Office - F
https://www.ssllabs.com/ssltest/analyze.html?d=pofssavecredit.co.uk
Vulnerable to both POODLE attacks, this site also only supports SSL3 and TLS1.0, it also supports RC4, abjectly bad implementation. 

Thoughts on Oil price for 2015 and beyond

1. The Saudi’s are pumping from strategic oil wells

2. A bigger income equality and rise to middle class in the developing world creates much bigger demand, it’s where China’s growth numbers keep coming from even as the west is declining.

3. Fracking is not economical viable in a few more years when all the easy stuff is gone and the first environmental problems pop up.

4. Inflation in general.

Deflation is only a local problem in certain communities that where lousy a decade ago. There’s more places where inflation is a bitch. 

Oil will be at 70 plus at year end, 90 by the end of next year and it will keep rising. 

All this CEO is talking the markets down so Exxon can do a few takeovers.

And there’s a even way bigger story that’s been under reported all over, and that’s the Saudi’s buying up huge oil field all over the world right now. 

They’re running low on oil and they’re pumping what they've got to lower prices to secure future income.

And why is nobody wonder why oil storage is rising in the US while it still needs to import oil?.....

Investing in Gold

1. Daily gold gains are capped at 1 percent (limit up) or 2 percent (expanded limit up).

2. Gold isn't allowed to have any follow-through rallies.

3. Gold is attacked at specific times -- 3 a.m. ET, pre-Comex and Comex open, NYSE open, London close, Comex close, 6 p.m. access trade open, and any opportune, thinly traded access markets.

4. Gold is attacked on all significant government data releases, especially the monthly nonfarm payrolls Friday report.

5. Gold is attacked on any ordinarily bullish news -- war, turmoil, economic crises, and Wall Street jitters.

6. Gold is attacked on all significant Comex option expiration and first-notice days, assuring that the maximum number of calls expire worthless, mitigating deliveries.

7. An attack on gold is frequently signaled by attacking either silver, HUI stocks, or both.

8. Flash crashes with no corresponding explanation always keep speculative longs stopped out or in losing positions.

9. New York and London are the centers of gold price suppression, so the London PM fix will be lower or no higher than $5 from the AM fix.

10. Comex margin changes, both higher and lower, are always to the detriment of gold longs.

11. Gold is never allowed to anticipate any bullish developments, nor is it allowed to be a barometer for currency largesse.

Finding the right spot for position opening positions

Solution for such a common problem as finding the right spot for position opening is fairly simple – a confirmation candle. The first candle always triggers the strategy or indicator’s signal that informs you how you should open position according to the strategy rules. You have to wait for this candle to end in order to know what you deal with.

This is where most of inexperienced traders make a mistake. They think how signal is activated; they open position just to see the candlestick to go in the opposite direction. So, the first step is to wait for candle to close. It is so-called alert candle which alerts you that strategy conditions are fulfilled. Then it’s necessary to wait for confirmation candle to confirm everything’s fine. This is when you open position.

Use candlesticks in all the strategies and always wait for the second one to confirm the good signal you are receiving. If the signal is fake don’t open position. You should always wait for the second confirmation candle regardless of whether you use support and resistance lines, channels, pivot points or applying rules of any other strategy.

When I say confirmation, what I mean is waiting for the second day, following the signal day, to prove the move.

In other words, if a sell signal is given, traders who wait for confirmation, would take the trade on the third day, after the signal was created (day one), only if the day following the signal (day two), the instrument in question, closed below the signal day’s low.

There are ‘Four Corners of Confirmation’ that must be addressed at this
point.

1. Waiting for confirmation takes patience…and can sometimes lead to missing a trade.

2. Missed money is always better than lost money. Even if waiting for confirmation means letting an opportunity slip by, it’s a whole lot better than jumping the gun into a losing trade.

3. Confirmation does not mean a trade is a sure thing. Pre-determined stops are vital to profitable trading and effective money management.

4. Even with confirmation, more work is required. Traders must take the time to research underlying fundamentals and news with every signal generated. Trading blindly on technicals is just plain stupid.

Here’s what it all really comes down to, waiting for confirmation can save you money and potentially increase your profitability. Why?

When a signal is ‘confirmed’, the market is saying Wall Street believes in the signal and a trend is likely to ensue.And that’s what it all really comes down to…knowing that a signal is more than volatility, something that happens all too often in today’s market.

I want to now take a moment to show you a chart where the ‘signal’ lied, and traders who jumped the gun, probably may be losing.

Signal called a Hammer. The signal is widely accepted as alluding to a pending reversal (the opposite of a Hammer bottom would be a Hangman top.)

Confirmation traders, however, would have never taken a position at all, and would most likely be very happy that they didn't, as of now. At the end of the day, waiting for confirmation is just good housekeeping, at least when trading from candlestick chart-derived signals.

Moving the blog onward....

I am going to move this blog along, Rather than Tech which is my main interest I am very interested in the Financial markets. 

I am going to attempt to make some YouTube videos about trading. 

If you are interested this is the first attempt. This tries to explain how to read the Candlestick Charts, Using Alert Candles and Confirmation Candles to spot an ongoing trend and how to find an entry point for a trade. 

https://www.youtube.com/watch?v=CHPK12_Qk0M

Two Quick Nmap Commands

This is a reminder for me more than anything else.

nmap -v -sV -iR 10000 -sU -p 23 | grep '^23.*open' -B3 | grep '^Nmap scan' | cut -d\( -f2 | cut -d\) -f1 > output.txt

nmap -v -sV -iR 10000 -sU -p 23|awk  '/(open)/{print $2}' RS="Nmap" FS="[)(]"

Try work our what they are doing....

Some Quick Cisco Stuff - Greylog2

So I plan on updating this with ALOT of Cisco stuff....Eventually. If this helps ANYONE out there I will be a happy man. 

For now this is a quick update.

I am configuring Greylog2, Here is the Cisco Config Commands to set it up to send to Greylog2 using syslog. Obviously I dont need to tell you to change the Server IP of your Greylog Server and the logging level. 

https://www.graylog2.org/resources/documentation/sending/syslog

conf t
service timestamps log datetime msec localtime
no logging message-counter syslog
logging origin-id hostname
logging facility syslog
logging <<<SERVER IP>>>
no service sequence-numbers
logging trap (emergencies/critical/errors/warnings/notifications/informational/debugging)
 

0
   

System unstable
   

LOG_EMERG

alerts
   

1
   

Immediate action needed
   

LOG_ALERT


   

2
   

Critical conditions
   

LOG_CRIT


   

3
   

Error conditions
   

LOG_ERR


   

4
   

Warning conditions
   

LOG_WARNING


   

5
   

Normal but significant condition
   

LOG_NOTICE


   

6
   

Informational messages only
   

LOG_INFO


   

7
   

Debugging messages
   

LOG_DEBUG

Ups and Downs

I cannot stress enough how important it is that we all recognize this pattern of ups and downs.

This is why:

During the 'downs' our negative thoughts grow larger and outweigh our positive thoughts. Once in this state our judgement becomes cloudy and we start to doubt ourselves.

It happens to all of us, including me. What is important is to spot this 'down' for what it is; a temporary depression and something we will soon be out of.

The problem I see, is a lot of guys don't spot it and make rash decisions in desperation, which can lead to bigger problems.

One solution to a 'down' period is to look back at your earlier posts and see how far you've come. Once you see the bigger picture, you also see the pattern and you see the 'down' for what it is.

It could be said that even a bad relationship is simply one of the knock-backs we all experience and that it is just as vital to experience these and learn from them as it is to experience other issues such as opening or isolating for example. It's just a shame they take so long and can cause so much pain when they end. I guess the bigger the mistake, the bigger the lesson.

The key is to learn from all of these mistakes to ensure that "each time you get a bit better".

Nevertheless, there is an equilibrium point, when you get an 85% result and throwing the dice again means you are much more likely to get a result lower than that.

The higher you aim, the harder you have to work to get there- it is exponential, not linear, because of the normal distribution.

Okay.

In layman's terms.

Say you are dating a 9 who is a doctor, driving a fast car, younger than you and knows how to ride a stripper pole.

What are your chances of dating another girl, more attractive (say 10) with > job, >car, > intellect and knows how to ride a stripper pole?

In this case, if your 9 isn't giving you lip or making problems, you should probably stick with a good thing while it's going. That is, if you are into monogamous relationships and looking to settle down,.

There comes a point where you burn time rolling the dice again looking for a "better deal" when you already have a fantastic deal in front of you. I think staying with a fantastic deal (even if there is better out there) is a good way to show gratitude to the universe and humility to yourself. You can get yourself killed by being too greedy, by forgetting to be grateful.

A word on "Value"

Value' as a concept is relative to each person. The 'value' of a woman (or a relationship with any person) is different for each person observing her. You look at a woman and you place some value on her. That value, if it could be quantified, would be different for every person.

A guy who is already in a happy relationship might not value her very highly because he isn't looking for a girlfriend. A guy who's been single for a long time and is actively looking for a relationship might value her more highly.

This is where the mindset of abundance comes in. If you have 10 girls who want to date you, are you going to be very bothered if one of them finds a different boyfriend and stops showing interest in you? Probably not.

However, if only one girl is interested in you and she finds someone else, it will have a greater negative effect on you.

Supply and demand.

So to answer your question succinctly, no there's nothing else you can do. Have more women in your life.

But to add in a bit more practical advice - my own experience is that if you're trying to meet all your women through cold approaches, it's tough to cultivate enough of them at any one time. I recommend that you build a 'home base' social group which has women in it. That way you'll always have a source of female company even if you haven't met too many girls at bars or whatever. Hunting and farming.

A Library For Survival Knowledge

The current world will not end in a bang like some 2014 maya pipe dream, killing computers overnight. What we have at hands right now is the ongoing process of choosing by inaction not to create enough ways to harvest renewable energy. As the fossils run out, we will see a gradual shift away from our current global industrial world.
Cheap mass shipping to the other side of the world will be among the first luxuries to go, meaning we will need to start to produce most of our goods locally again, starting from the basics and working up to more complicated ones. Which is where the library kicks in. If we reasonably manage our inheritance from the industrial era, we will have quite a stretch of time available while which we can rig up a some power to a computer to read and transcribe the library. I mean, many a slashdotter will be able to rip apart that electric car into some wind generators, batteries included.
Now we can plot a simple graph with two lines - one of us exhausting and repurposing our current goods and infrastructure until we run out, the other line being us rebuilding our civilization on renewable and sustainable production and goods. What is still undecided is how low the valley will go, and whether we hit such a critical low of development that we will never come back up again.
How well this will go depends on a few factors. First, practicing any technology needs a society able to feed specialists. This ability will decline sharply everywhere, because our current agriculture is 100% about converting oil into food - there is a real possibility that billions will die of hunger. Second, some countries like the USA and GB will have to start pretty much from the beginning, having destroyed their industrial base through corporate looting and offshoring. Contrast that with China or Germany with their massive industrial base which only needs to get the power back on. Third is of course the availability of raw materials, on which point do also note the lack of plastics in a post-oil world.
And if this was too easy, expect mass migrations caused by sea level rises, thirst and hunger and wars of every size and reason to complicate matters further. Only a state with can comfortably secure it's territory, food and resources with a reasonable surplus will have a chance to actually think about a rebound. At this point we can only hope there will be one.
Or we could get off our collective arses and actually do something about the future. I seriously doubt we will see an actual global push into renewable and sustainable, though. This would require effort, resilience and actual change, all of which are in a very short supply on this scale; furthermore, it would mean replacing our power structures, ideologies and economical systems, all of which are and will fight tooth and nail to survive. So it remains that the next best thing is for us to compile some kind of a library of survival knowledge...