<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blogs @ Balius Inc</title>
	<atom:link href="http://blogs.balius.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.balius.com</link>
	<description>Information Security ramblings and other geek stuff</description>
	<lastBuildDate>Mon, 15 Aug 2011 20:51:33 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Automation tip &#8212; adjust a file on a lot of servers</title>
		<link>http://blogs.balius.com/2011/03/31/automation-tip-adjust-a-file-on-a-lot-of-servers/</link>
		<comments>http://blogs.balius.com/2011/03/31/automation-tip-adjust-a-file-on-a-lot-of-servers/#comments</comments>
		<pubDate>Thu, 31 Mar 2011 21:30:45 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=879</guid>
		<description><![CDATA[I have a customer that has 40 servers that perform a given function. They are comprised of physical machines and Solaris zones. I needed to adjust a file on each of those machines. I was not about to ssh into each machine and then start up vi and adjust the file by hand. Here is&#8230; <a href="http://blogs.balius.com/2011/03/31/automation-tip-adjust-a-file-on-a-lot-of-servers/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2011/03/31/automation-tip-adjust-a-file-on-a-lot-of-servers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ESXi &#8211; creating new virtual machines (servers) from the command line</title>
		<link>http://blogs.balius.com/2010/12/24/esxi-creating-new-virtual-machines-servers-from-the-command-line/</link>
		<comments>http://blogs.balius.com/2010/12/24/esxi-creating-new-virtual-machines-servers-from-the-command-line/#comments</comments>
		<pubDate>Fri, 24 Dec 2010 21:42:13 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[cli]]></category>
		<category><![CDATA[command line]]></category>
		<category><![CDATA[ESXi]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=870</guid>
		<description><![CDATA[I was able to get a server up and running at home again, and given what I want to do, using ESXi is a good solution. When it comes to servers I prefer to do: (a) from the command line and (b) using ssh. First thing I did after getting ESXi installed was to enable&#8230; <a href="http://blogs.balius.com/2010/12/24/esxi-creating-new-virtual-machines-servers-from-the-command-line/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/12/24/esxi-creating-new-virtual-machines-servers-from-the-command-line/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>To sum up in a single word&#8230;. CONSISTENCY</title>
		<link>http://blogs.balius.com/2010/12/24/to-sum-up-in-a-single-word-consistency/</link>
		<comments>http://blogs.balius.com/2010/12/24/to-sum-up-in-a-single-word-consistency/#comments</comments>
		<pubDate>Fri, 24 Dec 2010 19:36:59 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[automated]]></category>
		<category><![CDATA[automated installs]]></category>
		<category><![CDATA[consistency]]></category>
		<category><![CDATA[ESXi]]></category>
		<category><![CDATA[OpenBSD]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=868</guid>
		<description><![CDATA[There is one word that comes to my mind when I think about how to run a data center, consistency! I have worked with many people and organizations over the years. Recently I have seen a fair number of issues and to summarize them with one word I picked consistency. In my mind this means&#8230; <a href="http://blogs.balius.com/2010/12/24/to-sum-up-in-a-single-word-consistency/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/12/24/to-sum-up-in-a-single-word-consistency/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Scary tool &#8211; dnscat</title>
		<link>http://blogs.balius.com/2010/03/18/scary-tool-dnscat/</link>
		<comments>http://blogs.balius.com/2010/03/18/scary-tool-dnscat/#comments</comments>
		<pubDate>Fri, 19 Mar 2010 01:24:26 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[security]]></category>
		<category><![CDATA[covert channels]]></category>
		<category><![CDATA[dnscat]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=848</guid>
		<description><![CDATA[The idea of this tool is that you can run just about any program and/or copy files to/from the machine, say an ssh session, using DNS packets to/from the client.  In other words, a workstation sitting on a network somewhere, behind the companies firewalls, IPS/IDS, AV, etc., etc. could communicate with a system on the&#8230; <a href="http://blogs.balius.com/2010/03/18/scary-tool-dnscat/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/03/18/scary-tool-dnscat/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
		</item>
		<item>
		<title>FBI Supply chain compromised :)</title>
		<link>http://blogs.balius.com/2010/03/11/fbi-supply-chain-compromised/</link>
		<comments>http://blogs.balius.com/2010/03/11/fbi-supply-chain-compromised/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 12:55:50 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=845</guid>
		<description><![CDATA[http://blogs.csoonline.com/the_fbi_supply_chain_illustrated Funny!]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/03/11/fbi-supply-chain-compromised/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A great example of why you need&#8230;</title>
		<link>http://blogs.balius.com/2010/03/11/a-great-example-of-why-you-need/</link>
		<comments>http://blogs.balius.com/2010/03/11/a-great-example-of-why-you-need/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 12:06:18 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[security]]></category>
		<category><![CDATA[ISC]]></category>
		<category><![CDATA[NSM]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=843</guid>
		<description><![CDATA[defense in depth (which includes egress filters) and Network Security Monitoring (NSM).  This diary post on isc.sans.org is a good example of why companies need to practice defense in depth.  I have spent many years involved with messaging, back in 1995 I didn&#8217;t know what SMTP meant, but thanks to a gentleman at then Xerox&#8230; <a href="http://blogs.balius.com/2010/03/11/a-great-example-of-why-you-need/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/03/11/a-great-example-of-why-you-need/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google asking NSA for help</title>
		<link>http://blogs.balius.com/2010/02/07/google-asking-nsa-for-help/</link>
		<comments>http://blogs.balius.com/2010/02/07/google-asking-nsa-for-help/#comments</comments>
		<pubDate>Sun, 07 Feb 2010 20:29:55 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[security]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[NSA]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=837</guid>
		<description><![CDATA[In this article Google is reportedly asking for assistance from the NSA. From my limited knowledge of the NSA, this sounds like the right thing to do. I have done plenty of work under non-discolure agreements (NDAs). Given the people that work at the NSA, I don&#8217;t see a problem with Google working with them.&#8230; <a href="http://blogs.balius.com/2010/02/07/google-asking-nsa-for-help/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/02/07/google-asking-nsa-for-help/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Monitor your traffic and egress filters</title>
		<link>http://blogs.balius.com/2010/02/04/monitor-your-traffic-and-egress-filters/</link>
		<comments>http://blogs.balius.com/2010/02/04/monitor-your-traffic-and-egress-filters/#comments</comments>
		<pubDate>Thu, 04 Feb 2010 12:07:55 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[apt]]></category>
		<category><![CDATA[nms]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=813</guid>
		<description><![CDATA[I&#8217;m reading this story and I quote Last year, for example, an unidentified defense contractor discovered 100 compromised systems on its network, and found that the intruders had been inside since at least 2007. Hopefully now they&#8217;ve come to realize that monitoring your network, as in the traffic patterns, rates, etc. is very important too. &#8230; <a href="http://blogs.balius.com/2010/02/04/monitor-your-traffic-and-egress-filters/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/02/04/monitor-your-traffic-and-egress-filters/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Forcing ssh login via s/key</title>
		<link>http://blogs.balius.com/2010/02/03/forcing-ssh-login-via-skey/</link>
		<comments>http://blogs.balius.com/2010/02/03/forcing-ssh-login-via-skey/#comments</comments>
		<pubDate>Wed, 03 Feb 2010 21:16:28 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[authpf]]></category>
		<category><![CDATA[OpenBSD]]></category>
		<category><![CDATA[s/key]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=504</guid>
		<description><![CDATA[In the back of my mind are the recent attacks against Google and others by the Chinese government.  I keep asking myself how I would setup and defend against such attacks, and more importantly mitigate them. The end goal of this exercise for me, is to limit Internet access to devices that have authenticated to&#8230; <a href="http://blogs.balius.com/2010/02/03/forcing-ssh-login-via-skey/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/02/03/forcing-ssh-login-via-skey/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Quick MySQL backup script</title>
		<link>http://blogs.balius.com/2010/01/06/quick-mysql-backup-script/</link>
		<comments>http://blogs.balius.com/2010/01/06/quick-mysql-backup-script/#comments</comments>
		<pubDate>Thu, 07 Jan 2010 01:25:42 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[backups]]></category>
		<category><![CDATA[mysql]]></category>
		<category><![CDATA[quick n dirty]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=478</guid>
		<description><![CDATA[I now and again add/delete websites and their subsequent databases too my server(s).  I use the following script to backup the databases.  Using this I don&#8217;t have to worry about remembering to change the script to capture a database or to stop looking for a database.  The script (which runs as root) learns the databases&#8230; <a href="http://blogs.balius.com/2010/01/06/quick-mysql-backup-script/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2010/01/06/quick-mysql-backup-script/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

