Archive for September, 2011

WP-Minify, Scripts Gzip and HeadJS Loader three scripts that might have positive impact on WordPress performance

Friday, September 23rd, 2011

I’m trying to get the most of server + wordpress performance and these days I’m heavily playing with it as one can read from my past few articles 😉

Today I’ve come across three other plugins which in many cases could be beneficial and bring a good performance increase in wordpress, this are:
 

  • WP-Minify – http://wordpress.org/extend/plugins/wp-minify/
  • HeadJS Loader – http://wordpress.org/extend/plugins/headjs-loader/
  • Scripts Gzip – http://wordpress.org/extend/plugins/scripts-gzip/

WP-Minify – does combine all JS and CSS script into one consolidated compressed script or style as well removes any duplicate script resources and hence could have positive impact on performance

HeadJS Loader – does strips out all your old javascript declarations and puts them into one head.js file so that they are loaded in parallel in the head of the pages and through that prevents the blocking of load up until all JS is a loaded so commonly seen these days on the net for more info on how HeadJS works check out http://headjs.com

Script Gzip – merges and compresses the CSS and JS links on page, the plugin does not have caching functionality. The plugin doesn’t have much configuration options which I find as a good thing

To find out what works best for you its a best practice if the website speed load time is tested after loading each of the plugins and with all of them enabled and configured, finally for best results just leave only the plugins or a combination of them which gives the lowest page responce times.

W3 total Cache a nice wordpress “all in one” wordpress Caching plugin

Friday, September 23rd, 2011

w3 total cache logo wordpress speed up w3tc

In my recent question of looking for best ways to optimize my wordpress blog, as well as other wordpress based websites, I’m managing I’ve come across a great plugin called W3 Total Cache or W3TC as it’s widely known among wordpress geeks.

The full caching wordpress solution in face of W3TC is already actively deployed among many major wordpress powered websites, to name a few:
stevesouders.com, mattcutts.com, mashable.com

I gave a try W3 Total Cache and was amazed about the rich caching functionality it provides. Having the W3TC plugin installed adds a whole menu on the left wordpress admin panel reading Performance , clicking on it shows a menu with thorough choices on numerous things which deal with the running of wordpress on the server.
Here is a screenshot on the menus W3 Total Cache provides:

w3 total cache whole wordpress caching pages and sql solution

The plugin has support for html caching, sql caching, CDN, CSS and Javascript compress & minify etc.
To test the plugin adequately I disabled HyperCache and Db Cache . My observations is that with W3TC wordpress renders php and the overall user experience and download times in wordpress are better. Therefore I’ll probably use only W3 Total Cache as a cacher for wordpress installs.
Besides that I had some issues on some wordpress based websites with the Db Cache SQL caching.
On these websites after enabling Db Cache, suddenly page edditing of the created existing pages started returning empty pages. This could be due to the fact that these wordpress based websites was customly tailered and many code was wiped out, however it could also be a Db Cache bug. So to conclude W3TC is the perfect solution for wordpress caching 😉

Two wordpress plugins to accelerate wordpress opening times and decrease server load time

Thursday, September 22nd, 2011

A Comparison of wordpress webpage responce with and without wp dbcache

A combination of two wordpress caching plugins (Hyper Cache and Db Cachesignificantly improves the access times of a wordpress based blogs and websites.

Installing the two websites has drastically improved my blog opening times, so in my view having the two plugins on every wordpress install out there is a must! 🙂
The plugins installation is straight forward, here is how I installed them.

1. Installing Hyper Cache on WordPress

To install Hyper Cache all I had to do is download and enable the plugin, the plugin doesn’t require any configuration. I always love it when I don’t have to bother with reading configuration options and pondering for some 20 minutes on the plugin features, so in that perspective Hyper Cache in my view is a good alternative to WordPress Super Cache

Besides that WordPress Super Cache was having issues when enabled on few wordpress based websites I manage these days. For comparison Hyper Cache worked just great on all wordpress install I tried the plugin so far.

To install all I had to do is download the plugin unzip and enable it:

a. Download and unzip it

debian:/var/www/blog# wget http://downloads.wordpress.org/plugin/hyper-cache.zip
...
debian:/var/www/blog# cd wp-content/plugins
debian:/var/www/blog/wp-content/plugins# unzip hyper-cache.zip

b. Enable Hyper Cache plugin

To enable the plugin follow to standard plugin location;

Plugins -> Inactive -> Hyper Cache (Enable)

To enable the plugin follow to standard plugin location;

Plugins -> Inactive -> Hyper Cache (Enable)

 

A  mirror of current version of hyper-cache.zip plugin is here 

2. Installing Wodpress Db Cache

What Db Cache, does it does caching of last queries made to MySQL for specified time, so if the query has to be refetched again from wordpress’s php frontend the queries results are fetched straight for the memory. This decreases the load towards the MySQL server and increases the webpages loading time.

As the plugin page suggests it’s way faster than other html caching-plugins like WP-Cache  or WP Super Cache

However, I think its still slower than using a combination of WP Super Cache’s alternative Hyper Cache  and  Db Cache . Combining this two could rise the webpage opening times according to some statisticonline at best cases up to 830% !! 😉 Let me proceed with how I did the install of  Db Cache .

a. Download and Install Db Cache

 

debian:/var/www/blog/wp-content/plugins# wget http://downloads.wordpress.org/plugin/db-cache.0.6.zip

...

debian:/var/www/blog/wp-content/plugins# unzip db-cache.0.6.zip

 

b. Enable the plugin 

 

Plugins -> Inactive -> Db Cache (Enable)

 

c. Make sure the permissions for Db Cache are correct

On Debian to enable Db Cache, the permissions should be changed for Apache to have a read/write permissions to plugin directory, on Debian to fix the permissions I used the commands:

debian:/var/www/blog# chown www-data:www-data wp-content

debian:/var/www/blog# chown -R www-data:www-data wp-content/plugins/db-cache

On other GNU/Linux distributions the above commands (user and group) www-data:www-data, should be set to whatever user/group Apache is running with, on Slackware this would be nobody:nobody, on CentOS and RHEL it would be apache:apache.

Finally to enable Db Cache go to

Settings -> Db Cache -> (Tick Enable) -> Save

I’ve also made a mirror of Db Cache plugin here

Enjoy the speed boost 😉

A sysctl Linux variable to change randomly temporary the PC mac address for IPv6 and increase anonymity on IPv6 networks

Tuesday, September 20th, 2011

To prevent tracking and increase anonymity in IPv6 networks the Linux kernel has a variable to change randomly the MAC identifier. This feature will be very useful in terms of security in the short future, when all the IPv4 IP addresses are finished. The UIE (Extended Unified Udentifier) for an ipv6 address can be changed with command:

sysctl -w net.ipv6.conf.all.use_tempaddr=2 Microsoft Windows Vista and Windows 7 has the UIE enabled by default, enabling the random MAC changes automatically for a host cvan be done as usual by adding the net.ipv6.conf.all_use_tempaddr=2 to /etc/sysctl.conf

On an IPv6 network every ifconfig eth0 down and ifconfig eth0 up will instruct the lan card to be set a different MAC address for the ipv6 ip on the interface.

Changing the UIE randomly however also have security downsides if the host gets infected with a Virus or Worm. The security downsides of the enabled UIE affects mainly Windows hosts on IPv6 networks as UIE variable is enabled by default there.I’ve found this great tip in an article in the latest Linux Magazine October 2011. Its the first time I saw a paper Linux Magazine, the magazine contains a lot of helpful info on the latest Linux developments and latest trends in the Linux world. Subscription to receive the magazine via normal post is for the magazine costs 6.65 EUR per month (80 EUR) yearly. The 80 euro yearly includes 12 CDS (each magazine is bundled with a newly launched new version of a Linux distribution).
There is also a cheaper subscription for the magazine which costs 64.90 EUR.

Burj Al Arab, Towers of the Arabs and my bathing in Arab Sea

Saturday, September 17th, 2011

Burj Al Arab and Dubai shoe pciture

Burj Al Arab is probably the symbol of Dubai and is the 4th tallest hotel in the world as well as 5 star hotel.
The hotel is a majestic peace of modern architecture and is built on artificially made island near Jumeirah beach where the aparment where I sojourn in Dubai is situated ;).

I saw Burj Al Arab hotel building from some distance and it looks really majestic too bad I would not have the time to go closer to it as I would be going on a Safari in the desert. That’s right, they organize a Safari in the desert here with a dinner, they let you ride a camel and even have a belly dancers.
I’m very excited on going to the Safari, as I love Camels and I’ve never been in the wild desert 😉 Thanks God for letting my eyes see this things.
I’ve also tested the Beach here for a second time and the experience is way inferior if compared to any of the Black Sea Resorts we have in Bulgaria and possibly in many locations in Europe.
The Sun here is too strong, so its not a good idea to stay exposed to the sun for more than an hour, also the sea is too salty so if your eyes are directly exposede to water its a bit painful for the eyes.
Besides that the sea water is really too warm so it feels a bit like entering in soup stew. Going for a swim in Arabian sea does give you a hot bath after the excessive sun and does not cool you.
I found it interesting the Arab woman bath up in Sea here in UAE with a special long swimming suit (burkas) as they’re called in Arabic.
Here is a picture I’ve found online two Arab woman bathing in sea in Burkas.
Arab woman swimming in Burkas in Arab Sea, United Arab Emirates

Arab Woman Swimming in Burkas in Arab Sea the UAE

By the way the Arab woman look very beautiful wearing these black traditional dress (burka). Also in my view from Christian perspective it’s very righteous kind of think as covering the body and hiding the face reduces the sexual associations one does when seeing a woman and hence should be good from a spiritual perspective.<br><br>However wearing this burkas in the background of all this internationaliazation looks a bit strange. Anyways its worthy for admiration that they were able to keep this pious tradition for so many years, so instead of mocking the Arabs for asking their wifes to wear the burkas I think its we better learn from them and suggest our european woman to be a bit less sexually opened and more pious ;)<br></p>

Adding a nice advanced text editor to make wordpress wp-admin have Microsoft Word like edit functionality

Friday, September 16th, 2011

By the default wordpress does not have support for changing the exact font, therefore copying and pasting a text made in Open Office or MS Word often places in the Post or Page wp edit fonts different from the default one set for articles.
Hence some articles after being published on a wordpress blog show up with improper font and the only way to fix that is to change the font first in Open Office and then copy back to wordpress instead of simply being able to change the font from within the wordpress article.

To get around this problem, there is a nice plugin fckeditor-for-wordpress-plugin which aids wordpress with an awesome Word like edit functionalities.
, downhload location for FCKEdit for WordPress is here

Here is a screenshot of the extra nice functionality the FCKEditor for wordpress providces.

FCKEDitor for wordpress extra functionality screenshot

Installing the plugin is like installing any other wordpress plugin and comes easily to:

debian:/~# cd /var/www/blog/wp-content/plugins
debian:/plugins# wget http://downloads.wordpress.org/plugin/fckeditor-for-wordpress-plugin.3.3.1.zip
...
debian:/plugins# unzip fckeditor-for-wordpress-plugin.3.3.1.zip
...
debian:/plugins# cd fckeditor-for-wordpress-plugin/

And further enabling the plugin from:

Plugins -> Inactive -> (Dean's FCKEditor For WordPress) Enable

fckeditor for wordpress will replace the default wordpress editor TinyMCE straight after being enabled.
 I’ve done also a mirror of the current version as of time of writting of this article, one can  download the fckeditor for wordpress mirrored here 
Now really file editting inside wordpress admin panel is way easier and convenient 😉 Cheers

My 5 cents on our quickly worsening online privacy and anonymity – Facebook your account is temporary locked

Thursday, September 15th, 2011

I needed to use another computer (IPad 2)to add one guy as a future business contact. I was suprised by a message which you see in the screenshot.
Facebook privacy breach again facebook your account is temporary locked
Facebook your account is temporary locked

obviously Facebook are becoming more and more impudent, so now apart from tracking all my activity in facebook and having the copyright rights over all my pictures uploaded, they now want to bind me to use their shitty service only from a single computer.

“We don’t recognize the device you’re using.” is scary to me personally and it shows a very bad direction, we have taken.
Now its supposed that any normal member of society is using his personal personal computer equipment (notebook, desktop, mobile tablet etc.), where the direction is that unification of devices is happening with development of handheld devices, so suddenly, we might soon be forced to only use only one personal device for all kind of activities phone calls, entertainment, checking online … etc. you name it
Then imagine, we might little by little be forced by mass adoption to only use this devices for all kind of communication.
Let me explain a bit thoroughflly what I mean. With the invention of the radio, people part of modern society has little by little started adopting the TVs as a device to retrieve information from various types from a centralized sources.

A time came, where everybody in the developed countries were using the radio, then came the TV and the television as a mass media, people who previously used the radio has comparatively quickly migrated to TVs and little by little, the radios use from the masses died.
Then came the more advanced kind of technologies the computers, first they were used by only choosen “elite” people who were beneficial to live in the developed society where first mainframe computers were invented, the technology was advanced and when the personal computers went out, the decrease of computer price allowed practically almost everyone from the developing or the development world to buy and start using it.
The increased use of computers and the emerge of Internet in the end of ’80s has suddenly shifted the mass use of TV to computer use.
People were crazy about computers, now most of the young and mid aged people from developed societies has almost completely abandoned the TV as a mean to get informed as the computer is doing the same. The emerge of pagers and mobile phones little by little and the development of the mobile phones has lead many people who actively was using a PC to switch to use of mobile or handheld devices and therefore forget compeltely about old desktop computers. These days even laptops use is getting threatened by tables like IPAD or Samsung’s Android tabloid. The trend therefore is that people who actively use their computers switch to tabloids and mobile phones in the next 10 years at worst.
It’s more and more rarely now that people use a random computer device to access the internet or in there daily lives this creates a very severe possible short-coming future issue as its possible we reach the time that most services available online might only be accessible via only certain devices which has “a hardware” (hard or unchangeble way to identify us).
This might sound a bit like a scenario for a sci-fi movie but unfortunately I see it as one very possible scenario.
If the idea of online provided resources and services social networks like twitter,facebook, xing etc. is originally to provide easy access to piece of information from anywhere in the world they shouldn’t definitely try to restrict us on how we use their services (especially if this is not illegal or in contradtion in country’s law.

Facebook is watching you the big brother facebook funny caricature

I really feel my privacy violated by facebook and I’ll probably delete my account there or always access it via a proxy further, I don’t like the idea that facebook is able to detect based on my IP change from country to country, the cookie shit it stores int he browser and browser and OS version of my computer what exactly is my computer and that I’m the only one to use this computer. What would it be if I was in a poorer country where the computer is used by many people, or I have borrowed my sister to travel abroad and use my notebook to access the internet and surrounding daily services she uses.
She might for example used the desktop at home and when travelling outside with my notebook access facebook, its a perfectly possible scenario. I don’t like the idea that I’m currently associated with a single computer really this is too much.The idea of linking my credentials for a shitty website like facebook to my personality is something I really don’t think is right.
If the Cloud Computing and online services should continue, there at least should be a government law to enforce, monopolists in online services to encrypt the user data in order to prevent, some facebook sysadmin or programmer or even the facebook Management board or CEO to have immediate access to privat information one puts in.

Same goes also for google, yahoo msn etc. Having an email account at any of the services and searching online reveals a lot of sensitive personal data, i’m quite sure that google/msn’s information stored for all the mail user accounts using the search engine services contains very sensitive information about a person’s personal private life and likings.
I’m quite sure google and the most of the big elephant companies are spying on their users and do create a thorough personal records for their users.
Scroogle instead of Google, improving browser security to secure, browser leaked personal identity data, Anonymizing ICQ and MSN to route traffic via tor , anonymizing Skype to hide your IP with Tor , Install torbutton to route Firefox browser traffic via Tor or use a combination of all to try to increase the level of anonimity online.
Also with the mass production and deloment of GPS integrated with most modern mobile phones, notebooks, cars etc. its pretty easy for one to be found nomatter where he is.
Its getting almost impossible for us to keep privacy and anoimty. While looking in the future and the latest technology development it appears situation will be getting worser.
Maybe the only way in future times for a man to be free will be completely abandon technology, as every piece of technology nowdays is doing some kind of tracking and leaking information about its user.
The increase of public security on airports, bus stations e.g. in airplanes, buses stregthens general society security, however it does this on account of decrease of personal privacy and makes us humans more and more dependent on “the system”.

All this induces a serious threat especially with the increase of unification of local countries and country adhering societies as a direct cause of globalization.
The globalization also leads to unification and merging of laws in countries around the world. The result from all this is also absollute necesity of internationalion of banking and financing system which is currently happening in front of our eyes.
They say it’s security measure but is it reall, just imagine if Gail, Yahoo or any otherBut let’s be optimistic, maybe I’m over-exaggerating, maybe things will go for good in short future and the “Doom scenario” will not happen 😉

Flight to Dubai via Istanbul, my Dubai first impressions and how it feels to be in Arab country

Tuesday, September 13th, 2011

Burj Al Arab and the 360 degree club

On Sunday I had a flight to Dubai – the the United Arab Emirates. The flight's goal is to do some business meetings with potential investors willing to invest in Cadia Holding 's Ofsshore Solutions
I'm employed as IT & Security Specialist and business consultant as well as doing the system administration for the company

The company has already scheduled a business meetings to look for new investors in order to finance the current company offered products and services as well as finance its entrance in the field of biometrics technology for the people to allow people to pay in stores with no need for plastic cards only using a finger partial imprint and a code.

The flight from Sofia to Istanbul was about 1 h and 15 minutes and it went quite smoothly thanks God. It seems Sofia's Airport has changed a lot since my last flight before more than a year and half to Dotmund Germany.
Now Sofia's airport looks way more modern than before, which means Bulgaria is slowly but surely developing it's infrastructure 😉
Sofia Airport long distance view

I used an electronic ticket for the flight which was pre-purchased by Cadia so what, all I had to do on the airport is show a copy of my e-ticket and immediately, they hand me in the fly ticket necessery to check in for the airplane

I should say the flight with Turksih airlines was really enjoyable and the plane we flight with felt much more secure compared to the WizzAir's airus.

It is true the last time I flight with with Wizzair's Airbus it was in January and the weather was quite bad as there was harsh winter with a lot of snow and this might be the reason, why my flight with them felt so shaky.

Anyways before entering the plane I had to go throught the regular security procedures, where I had to remove all kind of metals in bas, pockets etc. and go through a metal scanner, they sa an (anti terourisim) measure, besides that one of the airport security personnel checked me thoroughfully if I dont' bring any kind of objects hidden in m clothes. Generally during the check up with the metal scanner and the check up person I was treated like a criminal …
The Turkish airlines, stewardesses and the service was wonderful and we were given a not too bi but decent lunch (my first time I eat in airplane ;)).

Turkish Airlines Istanbul Airport

The flight as went smoothly and we were in Istanbul about 12:00 at midday, after coming down from the bus we were transferred with a bus from the plane like 1 or 1.5 km to Terminal 2 (the terminal of arrival scheduled).
I travelled with another colleague Krasimir, so we had to check our Tickets in the ticket office and let them issue us the flight ticket based on the e-ticket.
After a quick check of our International travelling passport, so called red passpower we were let to enter the duty free zone full of stores for food, beverages, clothes, parfumes suits cafeterias and everything, tech equipment stores, book stores, turkish ice-cream, duner kebaps and mostly any kind of shops and tings one can think of.

AtaTurk airport Istanbul picture
Ataturk Airport Istanbul

Something that catched my attention was that actually the model of how things are ordered and what they sell, the elevators the materials for building in the airport was very much like how things are in westerm country.
I thought it's a bit sad that everybody, everyone is following a modern design and a specific kind of order of things literally followed after the way things are in the western world. This somehow kills partially the uniqueiness of the country's culture and gives it a taste of the west, where the original culture and traditions the country possess somehow stay in the background.

What made me a bad impression on the airport is the too high prices of food and drinks. I just took one coffee (cappucino) and it costed me the solid sum 5 EUR!!
I was even fooled by the Turkish guy as if converted the coffee price from Turkish currency (Liras), when I calculated the price of the coffee was actually about 4 euro.

I've also spotted that in Turkey they're big nationalists. I've been told by Krasi the airport of Istanbul is called Ataturk and it appears this is the biggest airport in all Turkey. I've noticed in the bookstores we went through many many books even in English talking about the greatness of Turkey's first president Ataturk. There is no doubt that Ataturk has done a lot for internationalizing Turkey, it seems in Turkey they consider Ataturk as a national hero, but in my view it is a bit too much, somehow it looked like Ataturk's great respect in Turkey is comparable to the Chineese's love for Mao Dun ….

We had to spend some 4 hours with Krasi before the time for the second fly comes, so we had 4 hours to take a general look over everything offered in stores on the airport to kill some time

I was quite amazed to see so big variety products and goods on the same place, there was basicly everything one needs except furniture offered ont he airport.
The bookstores English books was reallya lot, where I should say it was quite good that about 40% of the books to be sold, were in English (quite odd especially if I take in consideration that most of the Turkish people I know couldn't speak too good English).

The flight to Dubai was scheduled for 16:45 in the afternoon, so 40 minutes earlier I and Krasi went again through the metal scanner again and thanksfully this time we were not searched for guns and bombs by airport police.
 

Emirates Company Logo

The airplane, we flied with was Boeing 777 – really a beatiful flying machine. We were lucky to travel with two other Bulgarians Nikolay and Gergana, who were flying to Chennai India for some kind of personnel training of some company personnel for the company http://Yazaki.com (an international company producing vehicles components) .

Emirates Boeing 777 nice airplane

Emirates airlines's organization service and convenience was really incredible! Emirates has done a great, job really. I had a lot of fun in the airplane in the flight, as they had every passenger sit with a touch screen display computer with a joystick similar to the ones with playstation.
< img src="https://www.pc-freak.net/images/emirates_passenger_personal_touchscreen_computer_Boening_777.jpg" alt="Emirates Boeng 777 Passenger personal computer touch screen device" />
A Boeng 777 Passenger seat view , the passenger touch screen device mounted on seats back

The little touch screen computer had a number of capabilities the passenger could watch a movie, get information about Dubai play his favourite old fashioned games like Pong, Asteroids, Galaga like, Checss, Arkanoid and like 10 outhers of classic games I know from my childhood.
Besides that the passenger's flight personal computer was equipped was even capable to make satellite phone calls chargable directly from VISA or Mastercard Debit or Credit card. The telephone was embedded with the joystick, so on the back of the control device joystick one has the satellite phone, the phone had the capability to call passengers who are inside the plane. To call another traveller inside the airplane you just need to have the passenger seat number.
As a computer security hobbyist, I've noticed one major problem with the phone calls in between airplane travelling passengers.
By default each sit's phone was sett upped to automatically answer phone calls from other passengers, Which means that if I'm a malicious abuser I can easily just call random people in the airplane and do social engineering pretending to be the plane Commander, stewardess or any other personal from the plane crew 😉
On the other hand calling random people, by getting advantage of how the system "hole", could easily give you the opportunity to make yourself random friends or share contacts with people from around the world 😉

Another handy thing about the onboard touch screen computer, I've noticed is the possibility to listen music from a list of a huge database with music. Also a huge database like (300+) movies ready to be seen was available, as well as some serials and some popular podcasts as well as the device even supported e-mail check and some basic internet functionalities (which unfortunately had to be used only after payment with a debit or credit card :|).

Emirates Passenger personal computer touch screen incredible device
Emirates / Skywards Passenger personal computer touch screen device

In the middle of the 4 hours and 15 minutes flight, we were handed in a good portions of dinner meals, which obviously was properly selected to be suitable to be easily digestable and vitaminous food. Also alcohol arabian Coca-Cola, Coffe and tea was offered.

Before the meals was handed in by the few stewards in the airplane, each passenger was handed with a (hot) towel, to carefully clear his hand or face!

Many of the Arabs used the towels to wipe their face sweat, where europeans tended to clean up their hands (probably shows something about the each about arabian and european habits and culture?).

Dubai side view from the airplane before the landing was really amazing, I've never seen so much light concentrated on one place never ever in my life, landing went pretty smoothly thanks God, though it felt a bit more risky than the landing done by the Turkish airlines, pilots.
Maybe there is difference in the landing because it was done during night time and probably landings in night time a way difficult task for the pilot.

Just like in Istanbul, after going down from the plane, via the plane step-ladder we were transported to the Airport with Buses (I was told by Krasimir that, the bus transportation is used becuase, it's a way cheaper than using the equipment for "hot tie" to connect the plane with the terminal via "tuble".
Also maybe its difficult in terms of parking the airplane as the airplane has to drive like 1.5, 2km and park this is an astonishing amount of petrol plane fuel 😉

Anyways just to sum-up my first flight with Emirates/Skywards it was more than enjoyable and nice, everything from the plane take off through the overall airplane experience to landing felt like a veery well crafted, organized and stricktly managed process. It felt like verything happening is perfectly tuned, again really nice feeling 😉
Interestingly inside th airplaine they had a stewardesses which were either Malaysian or Indonesian. The reason for tat was probably because Arabs are crazy about chineese and the variations of yellow races as I've heard from Baky (an Egyptian) as well as from some few Egyptian colleagues I had.

After we went down from the bus transporting us to Dubai's terminal arrival terminal 3, which I think is the only terminal dedicated for visitors in Dubai, we couldn't freely anter Dubai, but we were supposed to go through a biometric security measure the airport here implemented few years ago an Eye Scan .

Dubai Airport Arrival in United Arab Emirates - Airport Terminal 3

The organization on the airport and the information that we were supposed to have the eye scan in order to enter Anyways after some questioning near few of the airport desks and offices, we found or way to the device place where the eye scans took place.

The eye scan process is quick and not that scary as it sounds, they ask you sit on a chair cover left eye, then cover right eye and open the eye widely to make a picture of the iris, then based on some algorthim for interpreting the data and through a complex IT develoepd system a check is done against a database of well known criminals and if no match is found you're given a seal which lets you in Dubai.

The only concern, I have is once they took your eyescan they have this information stored so basicly they have your biometric data and if the information is stolen or send to third parties you can never know, but that's how it goes you know it's life, if you don't do the eye scan you can't go in.
You don't have the option to just choose if you want to have the eye scan or not … My company boss tried to cheat them and walk through inside Dubai without ahe eye scan as he said he went through the eye scan so man times, but still he was obliged to go through the eye scan in order to be let in the city.

After the eye scan on the airport, we had to line up on a long line with arriving people waiting for being let in Dubai, show the copy of the visa with the eye scan seal to airport police officer. He checks the seal the visa, the international passport and then one is asked to stay in front of another camera snd they take a picture of him, once again a security measure …
This is just crazy, I understand that security is important but the measures implemented today on airports are inhuman and even abusive, not to mention they break any privacy one can have in today's world … I'm even scared to think about how a security check on an airport will look like 20 years from now.
Anyways after all the aforementioend checks we were FINALLY allowed to enter Dubai, what first striked me was the size of the buildings, its the first time in my life I've seen a buildings of this amazing size, just incredible!
Also all the buildings are all in color lights and are flashing like spaceships, probably requirement to make sure no airplane tries to land over some of the buildings at night time 😉

Roland, a part time tech consultant for Cadia Holding and a colleague, took us up from the airport and drove us to the hire apartment in Jumeirah Beach, Rimal 6 – ap. number 53, where we're currently settled.

Jumeirah Beach Residence Rimal
Jumeira Beach Rimal buildings

I'm very thankful Roland was there otherwise if we were supposed o pick up a taxi, they would have charged us at least 80, 90 EUR! for bringing us to the apartment.
The prices of transportation here and in general prices are a killing onse. I guess this is pretty normal especially if you consider the countless amount of money invested in Dubai.
Honestly Dubai looks like a paradise on earth, everything is amazingly well organized, as well the technology involved everywhere is on a perfect and a better level than almost everything, I've seen in Holland, Germany and probably almost every other of the Western Europe countries.

Something strange that took my attention here was that in every big mall or big store, they have a special prayer room, which are suited for pracicing muslims to do they're 5 times daily prayers 😉
Here in Dubai I was shocked to see many of the native arabic ladies to be completely wrapped up inside mostly black dresses, where the man were often dressed in a complete dress without a zipper called thobes as well as a sort of a hat like long veil very similar to our orthodox christian priest monks viels.

Dubai man with Thobes in order smiling ;) Dubai man with Thobes lined in order smiling

The veil like dresshing the man wears has a ring on top of the head which has some kind of muslim symbolism probably I'm not aware of. An interesting thing, I've found out here is that this veil for the hat has colors, if it's red this means it's Saudi Arabia a white one means usually the man is from Dubai and the nearby regions o something like that.

When we went out of the airport here the temperature difference was killing it was like 35 Celsium degrees at 21:00 o'clock night time!!

I'm actually lucky to come here in Autumn, temperatures on Autumn are acceptable at night it's like 20-25C and in day usually 35-40C.

The private apartment, where we're accommodated is amazing, it's big like a place, it has everything a flat TV, wireless internet, 2 bathrooms, 4 bedrooms etc.
To enter the buillding one needs to use his special ID card which is secured by a bar code, which has to be tagged on a bar code reader on the building entrance door.
Dubai itself seems more international at times, even than Western europe, you can see everything in Both English and Araabic, so you can understand basicly everything. Everyone speaks from the lowest employee to the office workers an acceptable English and thus communication is not a constraint like in Holland, where many people speak English which is too much influenced by German and german lingual structure.

I'm very thankful to God for blessing me to come to this nice place, now I'm laing over a nice coach and blogging.
By so far, I've seen two of the biggest Dubai Malls and some general architecture, all is collosal in size and reall amazingly built. I've heard from people quality of buildings is not that good as everything is being built in too short time and with cheap materials and by Indian labours who earn like 5 dollars a day. I'm not sure though how truthful is this as I think the quality of the apartment, we're accommodated is great.

Each room is equipped with a Clima, so the temperature inside is steady 22- 24C degrees. The body shock when you go out hence is really severe as usually there is like 10 or 15C degrees difference in temmperature.
Climas are, good but they create too much noise at night it's a bit noisy, but maybe with time one can get used to it.
The cars I saw here in Dubai are amazing, all the cards are really really expensive maybe the cheapeast car in Dubai worths no less than 10 000 o 20 000 EUR.
Euro, Dollars and the official UAE currency dirham are accepted everywhere in shopping malls and food stores and this is really nice.
The taxi drivers charge normal prices here, I was out with Jure and we took taxi few times and each time for like 5-7 km distance, the taxi charged approximately 30 AED per drive.
Random Taxi in Dubai

The Taxis are all luxurious cars with a (airconditioners) climas, it seems they have a metro already operating here as well as comperativfe cheap transportation with buses, but I'm not sure if something could be really cheap here 😉
Everywhere I went here I can notice something really beautiful in terms of either mostly modern design with arabic elemnts or technology. The elevators here are really quick. To go to the last stage of the 36 stages building here in Dubai it tooks the elevator no more than 1 minute 😉
The food here in Dubai seems decent, though its not that good like naturally grownned products or a chicken or cow who was rised in a private farm.
Anyways the food here in United Arab Emirates seems to be way better than the food in Holland and Germany, where it is a bit like plastic.
I don't know if its because of the Sun excessive warmth, God's grace to me or what but I should mark, here in Dubai and maybe in rest of UAE one feels warmer than in Western Europe.

People don't smile too much here especially the people who work on the lower levels of job, clear indicator that they don't earn good money.
I like that they don't smile too much as this reminds me in Bulgaria, where you can see sour faces a way more often than a smiled one.
Here people look a bit less soury than in Bulgaria.

I will be in Dubai 6 more days, so I'll have a clearer picture in my head about the place after some few days. Nevertheless from what I've seen so far, I'm really very amazed and very thankful to God to leeting me see all this new interesting things and culture.
I should take the time to find and take a look in the more traditional places here. Pitily globalization is seriously destroing the local people culture here, and you can't feel the real culture besides the arabic kind of dress, the mosques , prayer rooms and some entwisted muslim architecture with the modernistic buildings.
It will be very nice to see some real camels, elephants or some typically arabic kind of things 😉

Summing it up, the overall atmosphere here, the organzation of thingsm the business climate and infrastructure is something we europeans should learn from.

Plamenko and his project Symphology – One of the greatest composer guitarists in Bulgaria presently

Thursday, September 8th, 2011

A friend of mine Plamen Panayotov is one of the best guitarists, I’ve ever watched live.
He is self-taught musician and is one of the notable guitar composers of our times (in my view).
As every genious he is not recognized on time and his music is not well known in Bulgaria.

Plamenko , he uses unique tunings not to be find in musicians official books.
Plamenko’s music is highly charged with positivism and goodness as it also reflects his life as a Christian and his Christian views.
He tried hard to make living with music and has issued a couple of music albums which are available for purchase in Amazon (just in case if you like his works).

Plamenko’s living is very interesting and he was actually the first person, I’ve met to publicly confess his faith in Christ.
I found it nice to share some of his inspirational and highly spiritual songs here in hope they will bring some peace and spiritual joy to my readers.

Plamenko – The Wisdom from Abvove

Plamenko – Renewal / Revival

Plamenko – First is Pure

Plamenko’s music is very unusual and I believe it would not be of an interest to people, who are after pop culture. Also his music is not a music one can listen everyday, (because of its high music diversity and complexity of composings is not easy for to be comprehended by the unskillful eye), however I’m sure his music can be appreciated well by professional musicians, spiritual seekers and unique music connoisseurs.

Plamenko’s living is as unsual as his music. He spend many of his years playing his guitar and traveling throughout Bulgaria’s mountain areas, waterfall regions and the wildest places in the country.

He shared with me his stories on how he lived, almost like a hermit for few weeks in abandoned old houses, vineyeards, meadows located in the wild.
During his tiny periods of “hermitage”, he told me how much he enjoyed the birds singing, crickets voices at night, the winds etc., while wandering in the mountain goaty pathways.
The most unique story, I’ve heard from his mouth comes like this. He was travelling in the mountain as always and once loved a certain mountain area place, he liked an abandoned house nearby and stayed and lived there (in high ridges of Rodopi Mountains) for two weeks time. During the two weeks he spend there his food was wild blueberrys and other kind of fruits many of which wild foods located he can find naturally growing nearby the place.

There is no doubt Plamenko like kind of people, are hard to meet in todays crazy life, when money are considered the highest good and people forgot that the essence of life is not in eating and drinking as our saviour Jesus Christ told in the gospels.

People like Paca are probably almost impossible to find in the developed Western Countries.
If you like Plamenko’s works and you have the financial wellness to afford buying his works, support him and help him to continue making and producing his wonderful music by buying some of his albums in Amazon.

Plamenko is currently living and working in Copenhagen Denmark, as he found it’s nearly impossible to earn enough money in a legal way in Bulgaria to afford fulfilling his dream of buyig a house situated in the mountain.
In Copenhagen presently he is working as a postman, distributing newspapers at night with bike.
Last time, I saw him just about few weeks ago he went back for a Holiday in Bulgaria and said he haven’t seriously played his guitar for about a year because of being busy with his distributing newspapers works. He also told me doesn’t feel passion for playing.
This is quite normal, I guess since he couldn’t find appreciators of his music. Plamenko’s music is produced without any company label under by himself. He is manually copying his music to CDs producing CD covers etc. This kind of music producing is quite unique for today’s world, where most of the music is only done via mass production in factories.
If you’re living in Copenhagen, you can see Plamenko on the streets and tell say Hi.
Plamenko’s artistic pseudonim (Plamenko) comes after his passion to play Flamenco music and mix it with other music styles.
Plamenko’s band in which he is the only member is called Symphology and means Logic of the Somphony.
He works in city center of Copenhagen an unusual job just like his music.
His daily job there consists of standing still for hours, holding a big Advertising sign of a famous Copenhagen Tatoo Studio.

Enjoy his great music!

Secure Apache webserver against basic Denial of Service attacks with mod_evasive on Debian Linux

Wednesday, September 7th, 2011

Secure Apache against basic Denial of Service attacks with mod evasive, how webserver DDoS works

One good module that helps in mitigating, very basic Denial of Service attacks against Apache 1.3.x 2.0.x and 2.2.x webserver is mod_evasive

I’ve noticed however many Apache administrators out there does forget to install it on new Apache installations or even some of them haven’t heard about of it.
Therefore I wrote this small article to create some more awareness of the existence of the anti DoS module and hopefully thorugh it help some of my readers to strengthen their server security.

Here is a description on what exactly mod-evasive module does:

debian:~# apt-cache show libapache2-mod-evasive | grep -i description -A 7

Description: evasive module to minimize HTTP DoS or brute force attacks
mod_evasive is an evasive maneuvers module for Apache to provide some
protection in the event of an HTTP DoS or DDoS attack or brute force attack.
.
It is also designed to be a detection tool, and can be easily configured to
talk to ipchains, firewalls, routers, and etcetera.
.
This module only works on Apache 2.x servers

How does mod-evasive anti DoS module works?

Detection is performed by creating an internal dynamic hash table of IP Addresses and URIs, and denying any single IP address which matches the criterias:

  • Requesting the same page more than number of times per second
  • Making more than N (number) of concurrent requests on the same child per second
  • Making requests to Apache during the IP is temporarily blacklisted (in a blocking list – IP blacklist is removed after a time period))

These anti DDoS and DoS attack protection decreases the possibility that Apache gets DoSed by ana amateur DoS attack, however it still opens doors for attacks who has a large bot-nets of zoombie hosts (let’s say 10000) which will simultaneously request a page from the Apache server. The result in a scenario with a infected botnet running a DoS tool in most of the cases will be a quick exhaustion of system resources available (bandwidth, server memory and processor consumption).
Thus mod-evasive just grants a DoS and DDoS security only on a basic, level where someone tries to DoS a webserver with only possessing access to few hosts.
mod-evasive however in many cases mesaure to protect against DoS and does a great job if combined with Apache mod-security module discussed in one of my previous blog posts – Tightening PHP Security on Debian with Apache 2.2 with ModSecurity2
1. Install mod-evasive

Installing mod-evasive on Debian Lenny, Squeeze and even Wheezy is done in identical way straight using apt-get:

deiban:~# apt-get install libapache2-mod-evasive
...

2. Enable mod-evasive in Apache

debian:~# ln -sf /etc/apache2/mods-available/mod-evasive.load /etc/apache2/mods-enabled/mod-evasive.load

3. Configure the way mod-evasive deals with potential DoS attacks

Open /etc/apache2/apache2.conf, go down to the end of the file and paste inside, below three mod-evasive configuration directives:

<IfModule mod_evasive20.c>
DOSHashTableSize 3097DOS
PageCount 30
DOSSiteCount 40
DOSPageInterval 2
DOSSiteInterval 1
DOSBlockingPeriod 120
#DOSEmailNotify hipo@mymailserver.com
</IfModule>

In case of the above configuration criterias are matched, mod-evasive instructs Apache to return a 403 (Forbidden by default) error page which will conserve bandwidth and system resources in case of DoS attack attempt, especially if the DoS attack targets multiple requests to let’s say a large downloadable file or a PHP,Perl,Python script which does a lot of computation and thus consumes large portion of server CPU time.

The meaning of the above three mod-evasive config vars are as follows:

DOSHashTableSize 3097 – Increasing the DoSHashTableSize will increase performance of mod-evasive but will consume more server memory, on a busy webserver this value however should be increased
DOSPageCount 30 – Add IP in evasive temporary blacklist if a request for any IP that hits the same page 30 consequential times.
DOSSiteCount 40 – Add IP to be be blacklisted if 40 requests are made to a one and the same URL location in 1 second time
DOSBlockingPeriod 120 – Instructs the time in seconds for which an IP will get blacklisted (e.g. will get returned the 403 foribden page), this settings instructs mod-evasive to block every intruder which matches DOSPageCount 30 or DOSSiteCount 40 for 2 minutes time.
DOSPageInterval 2 – Interval of 2 seconds for which DOSPageCount can be reached.
DOSSiteInterval 1 – Interval of 1 second in which if DOSSiteCount of 40 is matched the matched IP will be blacklisted for configured period of time.

mod-evasive also supports IP whitelisting with its option DOSWhitelist , handy in cases if for example, you should allow access to a single webpage from office env consisting of hundred computers behind a NAT.
Another handy configuration option is the module capability to notify, if a DoS is originating from a number of IP addresses using the option DOSEmailNotify
Using the DOSSystemCommand in relation with iptables, could be configured to filter out any IP addresses which are found to be matching the configured mod-evasive rules.
The module also supports custom logging, if you want to keep track on IPs which are found to be trying a DoS attack against the server place in above shown configuration DOSLogDir “/var/log/apache2/evasive” and create the /var/log/apache2/evasive directory, with:
debian:~# mkdir /var/log/apache2/evasive

I decided not to log mod-evasive DoS IP matches as this will just add some extra load on the server, however in debugging some mistakenly blacklisted IPs logging is sure a must.

4. Restart Apache to load up mod-evasive debian:~# /etc/init.d/apache2 restart
...

Finally a very good reading which sheds more light on how exactly mod-evasive works and some extra module configuration options are located in the documentation bundled with the deb package to read it, issue:

debian:~# zless /usr/share/doc/libapache2-mod-evasive/README.gz