Saturday, March 13, 2010

Busy Start of the year in the area of Internet freedom and security

First, Google  reported that it, along with a bunch of other major companies, had been hacked, and pointed the finger at China.

Then Secretary of State Hillary Rodham Clinton gave a few "Remarks on Internet Freedom" in which she pushed for one Internet, without barriers.
Separately, the Federal Trade Commission notified about 100 companies that some of their secrets had been exposed by employees who were running peer-to-peer software.

Finally the Internet security firm NetWitness said that it had figured out that 75,000 computers at 2,500 companies had been compromised with the ZeuS Trojan starting in 2008.

Nope - not a good start to 2010. I would like to think that things will quiet down some for the rest of the year but it does not look like that will happen.

In early January, Google announced that it had been hacked from China, that the hackers seemed to be after the gmail accounts of Chinese human rights activists and that Google was going to review "feasibility of our business operations in China." .Well, that caused quite a splash. Google's accusation fit so well with the general public perception of China's approach to the Internet that it was easy to assume that the hacking was directed by the Chinese government.

Properly, she did not hide the fact that communication over the Internet can be used for good (human rights activists) and evil (terrorists).

But she said that "this issue isn't just about information freedom; it is about what kind of world we want and what kind of world we will inhabit. It's about whether we live on a planet with one Internet, one global community, and a common body of knowledge that benefits and unites us all, or a fragmented planet in which access to information and opportunity is dependent on where you live and the whims of censors."

She, clearly, was on the side of one Internet.

Meanwhile, ex-NSA director Mike McConnell, writing in the Washington Post, had a different take. He said that "we need to reengineer the Internet to make attribution, geolocation, intelligence analysis and impact assessment -- who did it, from where, why and what was the result -- more manageable."

Maybe companies that connect to the Internet need to be more careful  and, in particular, companies that sell computers that connect to the Internet need to actually make security a primary concern and post fixes to vulnerabilities a lot faster than they do now.

I'd rather Clinton's Internet than McConnell's, but I recognize that the latter seems attractive to those who only look at the security problem and ignore the freedom one.


Read Complete News

Wednesday, March 10, 2010

How to create and use Live USB - Fedora 11 / Fedora 12

How to Make a bootable USB Drive to Install Fedora 11/ Fedora 12 instead of using a physical DVD

Why would I want to make a usbkey installer from the DVD instead of the LiveCD?

If you are installing to a netbook, or otherwise do not have an optical drive (or burner, or media), and you want the extra flexibility of using the regular DVD installer instead of the Live image, then this method will give a useful install medium. You are then free to customize package selection, choose which filesystem you prefer for your rootfs (ext3 OR ext4, btrfs, etc), and rescue mode is available.

Preparing the usbkey

The easiest setup method is to install and use unetbootin, since Fedora's own liveusb-creator and livecd-tools' livecd-iso-to-disk.sh (except for an unofficial patched version) currently do not support putting the DVD installer on USB.

The manual setup method follows:

Firstly download the iso file Fedora-11/12-i386/x86_64-DVD.iso () from a Fedora mirror. Then loop mount the iso on a local mount point such as /mnt/tmp

# mount -o loop /path-to-iso/Fedora-11/12-i386/x86_64-DVD.iso /mnt/tmp

Now plug in the usbkey and then copy the main iso file as well as the images directory from the /mnt/tmp/ directory to the root directory of the usbkey.

# cp /path-to-iso/Fedora-11/12-i386/x86_64-DVD.iso /media/usbdisk/<br /># cp -r /mnt/tmp/images /media/usbdisk/<br />

Next download the boot.iso file from a rawhide mirror from the development/i386/os/images/ directory on the mirror and store it on your computer's hard drive.

From your running F11/F12 system (including an F11/F12 livecd) make sure you have the livecd-tools package installed by doing:

yum install livecd-tools 

Use the "mount" command to find where the usbkey is (e.g. /dev/sdb1) or look at /var/log/messages to find where the key was mounted. Next umount the usbkey either from the desktop icon or using the umount command - but keep a note of where the usbkey is e.g. /dev/sdb1

Now as root run:

# livecd-iso-to-disk path-to/boot.iso /dev/sdb1 

If the key is not bootable then refer to the information below to make it bootable otherwise this command will fail.

Now you should have a bootable usbkey which will run an F11/F12 install. When you boot the key select a hard drive install and select the drive as /dev/sdb1 (or your usbkey drive) and the path should be /

The remainder of the install should be the same as for using a DVD in an optical drive, but when you select options make sure that you select your disk partitioning carefully if you are doing custom partitioning and also make sure that the bootloader is installed on the correct drive (by default it will be installed on the usbkey so you will need to change it to the master boot record on the hard drive.