Archive for July 15th, 2008

Jul 15 2008

Calling all creative types: I need a slogan

Published by major under Uncategorized

As some of you may know, MySQLTuner is one of my favorite projects. It’s approaching the 1.0 release and I feel like celebrating. I thought about putting together some T-shirts (because as a nerd, I enjoy the occasional techy T-shirt), but I can’t come up with a good slogan.

I’ve heard of some pretty hilarious slogans for database-related activities, like “DBA’s know how to take dumps” and “don’t overflow my buffer”, but I’m trying to come up with some good ones for MySQLTuner. Whoever picks the slogan/joke that wins and goes on the shirt will get a free shirt from me. Yes, I did say free.

No responses yet

Jul 15 2008

Wordpress 2.6

Published by major under Uncategorized

Wordpress 2.6 is now available, and I’ve just upgraded today. If you haven’t upgraded yet, download it and follow the instructions.

No responses yet

Jul 15 2008

WHIR Magazine, July 08: Physical Security, SaaS Score Card

The main image on the cover of the upcoming July issue of the WHIR magazine has to do with a feature on the return of physical data center security as an issue, borne by a recent string of notable break-ins and thefts at data centers in the US and UK.

Our starting point for the issue, however, was software as a service. In designing the editorial for July, we began with an idea to assess the SaaS landscape as it stands today. Unmistakably one of the major issues in hosting, the SaaS discussion has evolved somewhat from evangelizing to strategizing - as hosting providers are no longer asking "should I?" but instead asking "how should I?"

It was that shift that we took as the starting point for our SaaS feature, since the idea of hosts talking about SaaS is, in and of itself, nothing new.

We looked at SaaS from the standpoint that hosts, software developers and their customers are largely all on board, philosophically, with the hosted model for application delivery. As a result, the platform builders have shifted their focus from singing the praises of the model itself to promoting their products as the best platform for distributing hosted applications.

With that in mind, Wayne Epperson, a regular on the pages of the WHIR mag, put together a SaaS scoreboard feature, incorporating the input of a long list of platform builders, trendsetters and decision makers, seeking the answers to questions like "what are the right ways to build a SaaS platform?" and "what applications are ready to put into production right now?"

One of the key venues for this sort of messages up to this point has been the Web hosting conferences that take place each year. And I expect them to continue to be interesting as a means of tracking the evolution of that message.

It is fortunate, then, that HostingCon, the biggest of the hosting industry events - which was acquired today by iNet Interactive, if you hadn't seen that news - is right around the corner. We've taken some special steps to tie the issue's content in with HostingCon itself, designed as a kind of primer to help you get the most out of attending the event.

The most obvious of those efforts is a feature by Esther Bauer (another WHIR regular), designed as a kind of primer for getting the most out of the event.

In addition, we've tried to tie the magazine's content throughout to the event by flagging the people and companies in attendance and making it clearer how they can be located at HostingCon.

Speaking of which, as I'm sure we've mentioned elsewhere by now, the entire WHIR news team, along with WHIR tv, will be in attendance at HostingCon this year, delivering our most comprehensive ever coverage of the event through news, features, blogs and video clips. We'll be a media partner, sponsoring the networking lounge at booth #627 in the exhibit hall. And there we'll be giving away a 50" HDTV and an iPod Touch.

Along with the news team, we'll have sales and business development representatives on hand. So those of you going to HostingCon, please stop by the networking lounge.

I promise to mention the lounge ad nauseam over the next couple of weeks.

As for the magazine, if you don't yet have a subscription, you can get a free one here. There's probably still time to sign up in time to receive the July issue. But not much time. So I'd do it about now.

No responses yet

Jul 15 2008

Is Cloud Computing Enterprise-friendly? Video Interview with Forrester Research

A couple of weeks ago while we were in Vegas covering Layered Tech's annual event LT PACT 2008, we took the opportunity to sit down with James Staten, principal analyst, IT infrastructure and Operations at Forrester Research, who delivered the opening keynote titled "Cloud/Grid Computing: A Classic Disruptive Technology."

It's no secret that cloud computing is an incredibly hot topic right now and Staten's presentation essentially outlined the idea that cloud computing is here NOW and is garnering a resounding amount of appreciation by SMBs and developers but is still being looked at apprehensively by Enterprise IT and won't be embraced by them for at least another five years.

Although Staten presented an in-depth and heavily researched presentation with lots of evidence to back up his points, some of the people I chatted to at the event felt that perhaps Staten was off in his estimation of when the cloud would be ready for the enterprise market. Some argue that it's ready now, with solutions like IBM's "Blue Cloud" initiative serving as the perfect example of a company offering a cloud computing environment catered to larger enterprises. I would be curious to talk to IBM to ask them more about this.

Either way, Staten was fascinating to speak to and he has some incredibly informative things to share. Enjoy!

No responses yet

Jul 15 2008

Enabling all tests with Nessus

Published by major under Uncategorized

Nessus is one of those applications that makes me happy and drives me crazy at the same time. It does what I need it to, but it’s often hard to get it rolling when it needs to do something for me. When I run it, I run it in batch mode, which requires me to have a .nessusrc file. However, there is almost no documentation on how to create one of these files.

Luckily, a smart fellow by the name of George Theall created update-nessusrc. It’s a handy perl script that will take a basic .nessusrc file and do things with it based on the options you pass it. As I said before, I want every test enabled, so here’s the steps I performed:

First, I ran a batch scan to make a basic .nessurc file:

# nessus -xqV -T txt localhost 1241 username password targets.txt results.txt

The x skips the SSL certificate warning, q enables batch mode, V prints verbose status messages to the screen and -T txt makes the report come out in a text format.

Once it started, I pressed CTRL-C to stop it, and then I had a .nessusrc file ready to go. I downloaded update-nessusrc and ran it to enable all plugins:

# ./update-nessusrc-2.37 -ds -c "_all_" .nessusrc

The d enables debug mode (and saves the new .nessusrc to a new file name), the s prints a summary, and -c “_all_” tells the script to enable all plugin categories. You now have a .nessurc file for use with batch scans that will utilize all of the available plugins.

If you’re lazy, you can download my pre-made .nessusrc that I made today with Nessus 3.2.1.

No responses yet