Fifth Grade Project Yellowstone part 3

By: Aylani and Rubi

Read More..

Crossword puzzle due learn 3 6 and 2

You need to turn in your crossword puzzle at the beginning of the hour.  Please make sure your name is on your paper.

We will review the numbers that we have learned so far, then we will learn the last 3 numbers - the 3 (L2), the 6 (R1), and the 2 (L3).

This is the end of the 3rd quarter - believe it or not we are 75% of the way through the school year!!

Read More..

Vocab quiz 3 Caps Lock key Question Mark key and Tab key

Today we will review at the beginning of the hour for vocab quiz #3.

After the quiz, if you did not finish yesterdays assignment you need to complete it and send it to me.

If you are done with both please open Microsoft Word and turn to page 17.  Youll need to type lines 1-3 on 8B using the Caps Lock key (L4) once; after you complete those lines you need to complete lines 4-6 once on 8B - here you will learn the question mark key (Left Shift + R4).

Once you have completed the above lines go to 8C and complete each of those lines once.  In this section you will learn to use the TAB key (L4) - a TAB allows you to move your cursor to a preset position on the line of writing.  For you, as you will see when you type these lines, the preset position is 1/2" from the left margin.

After completing all of these lines raise your hand and I will come and check your work.  Then you may go to any of the practice sites listed on the Website Resources page of the blog.  Make sure to work with your speed skin on your keyboard for the entire hour!

Read More..

Vocab quiz 3

You will have a short amount of time at the beginning of class to review for the vocab quiz - youll need to go to the Wikispaces page to review.  If you dont know your password I dont have it - youll have to create a new password on the website.

After completing the quiz you will need to turn to page 18 in your book and learn three new keys.  The apostrophe is keyed with your right little finger (R4) and is the key between the semicolon and the return key; the hyphen is keyed with your right little finger (R4) and is the key to the right of the zero; and the quotation marks are keyed with your left shift key and right little finger (Left Shift + R4) and is located on the apostrophe key between the semicolon and the return key.  On page 18, Lesson 8D, type lines 1-9 twice each.

Once you get done with these lines raise your hand and I will come look at what you have done.  Once I have seen that you have completed these lines you can go to any of the practice websites and play the keying games.

Read More..

Week 3 vocab learn P and V

This is another week with vocabulary, so those people who are responsible for posting definitions on the Wiki spaces website should have that done by Tuesday night.  Again, it is completely realistic to post definitions for all of your words for the rest of the semester, and if you want to get all of yours done tonight that would be perfectly ok.  You dont have to wait until the week your definitions are due to post the definitions - you can post them early.

We will have another week of technique grades this week as well - continue to concentrate on the little things as this will have a lasting impact on how well you key and how fast you improve.  I have been very pleased with Congos work on technique - an overwhelming majority of you do a fantastic job of listening and doing what is asked (in terms of technique) and it is paying off!

Today we are going to learn the P (R4) and the V (L1).  After these two letters we are left with only the Z and the Q (in terms of letters) to learn.

Read More..

Fifth Grade Blog Everglades part 3

By: Ricardo

Read More..

Finish FA1 Vocab week 3

THIS WEEK:

*Learn new keys:  Z, colon (:), Caps lock key, Question mark (?), Tab key, 
*Speed Test practice
*Technique grade
*Vocab quiz #3 (list is WINDOWS)
*Formatting Activity 2


Today we will complete FA1 and submit that to me, via email, for a grade.  Before you send anything with your email we need to cover a few things regarding submitting assignments to me using your email.

1. When you submit an assignment through your email you must include the 5 parts to a proper email (email address, subject line, greeting, body, and signature).  Weve already covered this information so this should be a simple reminder.  However, if you do not have a signature in your email account you were probably gone the day we did that and you will need to create a signature (either ask a person sitting next to you or see me outside of class).
2. When you submit an assignment to me you will need to attach a Microsoft Word file - DO NOT ATTACH A GOOGLE DOC!  Usually what happens when you attach a Google Doc is you have to give me permission to see it, and some people will forget to do that.  More importantly, some of the formatting used in Word gets lost when the document is transferred over to a Google Doc, and then when I go to grade it your document will not "look" correct.  ALWAYS ATTACH A MICROSOFT WORD FILE!!
3. Save your formatting activities in at least two places.  My suggestion is to save them to your Google drive and to a flash drive.  DO NOT SAVE TO THE DESKTOP!!
4. I will show you how to upload a file to your Google Drive - if you have a bad memory take notes.  This is important and it is something you need to know how to do, not just for this class but for your future in this school district as there are many teacher who will expect you to have the skill of saving a file to your drive.  You also need to know how to download a file from your drive to your computer, so well go over that as well.

After completing this and emailing your FA1 to me we will review by going to the websites.  What I would like for you to do first is go to the Free Typing Games website and try 3 speed tests - were not going to record these, but lets just practice.  After doing those then you can go to any of the practice websites on the Website resources page on the blog and practice.  Make sure to keep your speed skin on the keyboard!

As a reminder this is vocab week #3, so if you are responsible for defining words for this week those need to be posted by tomorrow night (Tuesday, Sept. 16).  If you missed last weeks quiz on Friday you will need to come in outside of class time and complete it.

Read More..

Week of vocab list 7 Internet 3 FA8

This is another vocab list week - this week is list #7, which is Internet #3.  As usual, if you have definitions that you are responsible for they need to be posted on the Wiki spaces page by Tuesday night.

Today we are going to start working on FA8.  This has several components to it.  First, youll be typing a summary of your favorite movie in Word.  The formatting end of it will require you to learn to use the word count feature (very easy to do) in Microsoft Word, and you also will be double spacing your text.

After completing the summary you will post your summary on your blog, and in addition to posting it on your blog you will also be inserting an image on your blog that is related to your movie.  This will also be covered today in class so that you can complete that part of the formatting activity.  This will be due at the end of class on Tuesday.


Activity 8.pdf

Read More..

Fifth Grade Project Everglades part 3

By: Gregorio

Read More..

Copy vs Cut and paste Extension Learn 5 7 3 6 and 2

COPY AND PASTE VS. CUT AND PASTE
EXTENSION

Numbers:

5 - L1 (reach from F to 5)
7 - R1 (reach from J to 7)
3 - L2 (reach from D to 3)
6 - R1 (reach from J to 6 - the longest reach on the keyboard!)
2 - L3 (reach from S to 2)

To warmup we will start with typing on page 31, 14A, lines 1-3 once.

P. 31, 14B, lines 1-4 twice
P. 32, 14C, lines 1-6 once
P. 32, 14D, lines 1-8 twice

Read More..

Java Security Interview Questions and Answers Single Sign On i e SSO with Spring 3 Security

Q. Can you provide a high level overview of the "access control security" in a recent application you had worked?
A. As shown below, SiteMinder is configured to intercept the calls to authenticate the user. Once the user is authenticated, a HTTP header "SM_USER" is added with the authenticated user name. For example "123". The user header is passed to Spring 3 security. The "Security.jar" is a custom component that knows how to retrieve user roles for a given user like 123 from a database or LDAP server. This custom component is responsible for creating a UserDetails Spring object that contains the roles as authorities. Once you have the authorities or roles for a given user, you can restrict your application URLs and functions to provide proper access control.

Q. What is SSO (i.e. Single Sign-ON)?
A. Single sign-on (SSO) is a session/user authentication process that permits a user to enter one name and password in order to access multiple applications. The process authenticates the user for all the applications they have been given rights to and eliminates further prompts when they switch applications during a particular session. For example, SiteMinder, TivoliAccessManager (i.e. TAM), etc provides SSO. As shown in the diagram above SiteMinder authenticates the user and adds the SM_USER HTTP header to the application. It removes all the "SM" headers and add them after authenticating the user. This prevents amy malicious headers being injected via the browser with plugins like "Firefox Modify headers".


Q. How will you go about implementing authentication and authorization in a web application?
A. Use SSO application like SIteminder or Tivoli Access Manager to authenticate users, and Spring security 3 for authorization as described in the following Spring 3 security tutorials. Spring security pre-authentication scenario assumes that a valid authenticated user is available via  either Single Sign On (SSO) applications like Siteminder, Tivoli, etc or a X509 certification based authentication. The Spring security in this scenario will only be used for authorization. The links to the tutorials below demonstrates this with code.

• Spring 3 security - part 1
• Spring 3 security - part 2

Q. Can you describe your understanding of SSL, key stores, and trust stores?
A.  SSL, key stores and trust stores


Q. What tools do you use to test your application for security holes?
A. These tests are known as PEN (i.e. penetration) testing or security vulnerability testing. There are tools like

• SkipFish (web application security scanner) from Google.
• Tamper data from Firefox. 

Q. What is a two factor authentication?
A. Two-factor authentication is a security process in which the user provides two means of identification. This includes

• something you have and something you know. For example, a bank card is which something you have and a PIN (i.e. Personal Identification Number) is something you know.
• two forms of identification like password and a biometric data like finger print or voice print. Some security procedures now require three-factor authentication, which involves possession of a physical token and a password, used in conjunction with biometric data. 

Q. What are the different layers of security?
A.

Application-Layer Security: For example, Spring 3 Security, JAAS (Java Authentication and Authorization) that provides a set of APIs to provide authentication and authorization (aka access control), etc. JAAS provides pluggable and extendable  framework for programmatic user authentication and authorization at the JSE level (NOT JEE level). JAAS provides security at the JVM level (e.g. classes, resources). JAAS is the the core underlying technology for JEE Security. Spring security tackles security at the JEE level (e.g. URLs, Controller methods, service methods, etc)

Transport-Layer Security: Java Secure Sockets Extension (JSSE) provides a framework and an implementation for a Java version of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols and includes functionality for data encryption, server authentication, message integrity, and optional client authentication to enable secure Internet communications. (TLS) 1.0 / (SSL) 3.0, is the mechanism to provide private, secured and reliable communication over the internet between the client and the server. It is the most widely used protocol that provides HTTPS for internet communications between the client (web browsers) and web servers.

Message-Layer Security: In message-layer security, security information is contained within the SOAP message and/or SOAP message attachment, which allows security information to travel along with the message or attachment. For example, the credit card number is signed by a sender and encrypted for a particular receiver to decrypt. Java Generic Security Services (Java GSS-API) is a token-based API used to securely exchange messages between communicating applications. The GSS-API offers application programmers uniform access to security services on top of a variety of underlying security mechanisms, including Kerberos. The advantage of this over point to point transport layer security is that the security stays with the message over all hops and after the message arrives at its destination. So, it can be used with intermidiaries over multiple hops and protocols (e.g. HTTP, JMS, etc). The major disadvantage is that it is more complex to implement and requires more processing.

Note: Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols.  SASL is an Application-Layer security that supports TLS to compliment the services offered SASL.

Note: The Java security API is complicated and Spring security as demonstrated via the above tutorials might be a better alternative.

Read More..

Desktop !! Best places get Hewlett Packard D8C28UTABA 8300e Cmt I5 3 2 4GB 500GB W7p64 w8p Sby

Restaurants to pay for Hewlett Packard D8C28UTABA 8300e Cmt I5/3.2 4GB 500GB W7p64-w8p Sby Help save At this time

Comparisons:

Hewlett Packard D8C28UTABA 8300e Cmt I5/3.2 4GB 500GB W7p64-w8p Sby Keep Presently

Color=#003366>windows 7 Professional 64 (available Through Downgrade Rights From Windows 8 Pro) 320w Active Pfc Intel Core I5-3470 Quad Core (3.20 Ghz, 6MB Cache, 4 Cores) Intel Q77 Express 4GB (1x4GB) Ddr3 1600 Mhz 500GB 7200 Rpm Integrated Intel Hd Graphics 2500 HP Supermulti Dvd Writer Drive High Definition Audio With Realtek Alc221 Codec Intel 82579lm Gbe Integrated Network Connection 3 Years Parts, Labor And Onsite Service (3/3/3) Standard Warranty. Certain Restrictions And Exclusions Apply.

Read more »

Read More..

Desktop !! Best places get Hewlett Packard Commercial PCs HP Smart Buy 8300 Elite 3 2GHz Core

Restaurants to pay for Hewlett Packard Commercial PCs HP Smart Buy 8300 Elite: 3.2GHz Core Help save At this time

Comparisons:

Hewlett Packard Commercial PCs HP Smart Buy 8300 Elite: 3.2GHz Core Keep Presently

The HP Compaq Elite 8300 Business PC, part of HP's professional line of business PCs, boasts outstanding performance and quality with no compromises. The HP Compaq Elite 8300 is eco-friendly and gives you the most choice and expandability with all the manageability features you need. The HP Compaq Elite 8300 Business PC provides premier performance and reliability designed for all of your corporate applications. IT Managers will appreciate the stability and long lifecycle assurance as well as the latest security and remote management technologies and solutions. With the broadest selection of form factors and configurability options, the HP Compaq 8300 Business PC meets your business needs. The HP Elite 8300 Business PC is a durable, reliable product. It is easy to access major components with the tool-less hood removal, tool-less drive bays and slots. Fix problems in a snap with the quick release latches, green pull tabs, and color-coordinated cables and connectors inside this elite PC.

Read more »

Read More..

HOWTO SmoothSec 3 2 beta as Intrusion Detection System IDS

I am going to tell you how to build an affortable Intrusion Detection System (IDS) at home or SOHO or small business. For building an Intrusion Prevention System (IPS), I will write another article about it later.



Hardware



Motherboard - Intel Desktop Board D510MO

RAM - 4GB DDR2 (2 x 2GB)

Hard Drive - 320GB

Network Card 0 - Onboard Gigabit

Network Card 1 - TP-Link TG-3269 Gigabit PCI Network Adapter (with low profile)

Network Card 2 - D-Link DUB-E100 USB 2.0 Fast Ethernet Adapter (up to 200MB)



Software



Operating System - SmoothSec 3.2 beta (64-bit). The beta version is no longer exist. Please go to official site for the Version 3.2. The beta and official version are same. The official site is at here.



Setup



Internet -- Router -- SmoothSec -- Switch -- Personal Computers



Network Card 0 and 1 will be bridged up while Network Card 2 will be a management interface.



Step 1 :



First of all, SmoothSec (Network Card 2) is connected to the Switch while Network Card 0 and 1 do not connect to the router. It is because you need to connect to the internet for the installation.



Step 2 :



Install SmoothSec as usual. When you prompt for install non-free network interface firmware, just ignore it. After installed, the box will be reboot.



Login as "root" with password "toor".



Step 3 (Bug Fix):



Suricata



nano /etc/suricata/suricata.yaml



Locate "- fast:" and change "enabled: no" to "enabled: yes".



Locate "- drop:" and change "enabled: no" to "enabled: yes".



Locate "HOME_NET: [192.168.1.0/24]" and change to "HOME_NET: [192.168.0.0/24]".



*or your network subnet.



Time Zone for Snorby



If your time zone is not UTC, you should run the following command :



dpkg-reconfigure tzdata



Set the time zone for "UTC" at "None of the above"; otherwise, the Snorby will reported wrong timestamp.



nano /var/www/snorby/config/snorby_config.yml



Make sure "production:" and "timezone_search: false".



Make sure "time_zone: UTC" is commented.



Set your time zone at the Snorby web interface when it is available after Step 5.



Email feature of Snorby



apt-get install postfix libxrender-dev libfontconfig1



Configure the Postfix properly according to your network at "/etc/postfix/main.cf".



nano /var/www/snorby/config/initializers/mail_config.rb



Uncomment the lines just below "# Sendmail Example:".



Step 4 :



Connect Network Card 0 to router and Network Card 1 to Switch.



Normally, Network Card 0 will be eth0, Network Card 1 will be eth1 and Network Card 2 will be eth2.



nano /etc/network/interfaces



Comment all about eth2 entries.



Append the following :



auto eth2

iface eth2 inet static

   address 192.168.0.120

   netmask 255.255.255.0

   gateway 192.168.0.1



* where the "address" is your SmoothSec IP address and "gateway" is the IP address of your router.



nano /etc/init.d/bridge



Change "net1=eth1" to "net1=eth0"

Change "net2=eth2" to "net2=eth1"

Change "brctl addif $br eth1" to "brctl addif $br eth0"

Change "brctl addif $br eth2" to "brctl addif $br eth1"



update-rc.d bridge defaults



Step 5:



Run the script "smoothsec.first.setup" in the terminal.



Type "br0" when asking for monitor network interface.



Select "Snort" or "Suricata" as IDS Engine. I choose "Suricata".



Then reboot.



Once boot up, go to one of the Personal Computers and browse "https://192.168.0.120". Then set the time zone and your report email address accordingly.



Step 6:



To update SmoothSec, you need to do the following commands (you can make a script to do so). The rules will be updated automatically in the early morning every day.



apt-get update

apt-get dist-upgrade

apt-get --purge autoclean

apt-get --purge autoremove

# update SmoothSec

cd /root/updates/

git pull origin master

# update Snorby

cd /var/www/snorby

git pull origin master

rake snorby:update

cd ~

# update pigsty

npm update -g pigsty

npm update -g pigsty-mysql

# update Suricata rules

smoothsec.suricata.rules.update



Known Issue



Nil.



You should remember that your box is in UTC time zone.



Debug the mailing feature



Do not run the following commands unless you really need to.



cd /var/www/snorby



bundle exec rails c production

Snorby::Jobs::SensorCacheJob.new(true).perform

Snorby::Jobs::DailyCacheJob.new(true).perform (This command is invalid for Snorby version 2.6.2)



Reference



Snorby GitHub

Suricata

SmoothSec

Pigsty

SmoothSec WiKi - for installation



Thats all! See you.

Read More..