Catatan.AgusW.com
Blog ini merupakan kumpulan artikel lama Blog saya yang beralamat di www.agusw.com sebagai arsip, sayang kalau dibuang
22 Agustus 2026
Catatan Youtube
13 April 2015
Tinggi hati
Suatu pagi, terlihat seorang wanita berpenampilan menarik berusia 40-an membawa anaknya memasuki area perkantoran sebuah perusahaan terkenal. Karena masih sepi, mereka pun duduk di taman samping gedung utk sarapan sambil menikmari hamparan hijau nan asri.
Selesai makan, dgn santai si wanita membuang sembarangan tisu bekas pakai. Tdk jauh dari situ, ada seorang kakek tua berpakaian sederhana memegang gunting utk memotong ranting. Dgn diam, kakek itu menghampiri, memungut sampah tisu & membuangnya ke tempat sampah.
Beberapa waktu kemudian, kembali wanita itu membuang bekas makanan tanpa rasa sungkan. Kakek itu pun dgn sabar memungut & membuangnya ke tempat sampah.
Sambil menunjuk ke arah sang kakek, si wanita itu lantang berkata ke anaknya,”Nak, kamu lihat kan, jika tdk sekolah dgn benar, nanti masa depan kamu cuma spt kakek itu. Kerjanya mungutin & buang sampah! Kotor, kasar & rendah spt dia. Jelas, ya?”
Si kakek meletakkan gunting &. menyapa ke wanita itu, “Permisi, ini adalah taman pribadi, bgmn Anda bisa masuk ke sini?”
Wanita itu dgn tinggi hati menjawab, “Aku adalah calon manager yg dipanggil oleh perusahaan ini.”
Di waktu yg bersamaan, seorang pria dgn sikap sopan & hormat menghampiri sambil berkata,”Pak Presdir, mau mengingatkan saja, rapat sebentar lagi akan segera dimulai.”
Sang kakek mengangguk. Lalu sambil mengarahkan matanya ke wanita di situ, dia berkata tegas, “Manager, tlg utk wanita ini, saya usulkan tdk cocok utk mengisi posisi apa pun di perusahaan ini.” Sambil melirik ke arah si wanita, si manager menjawab cepat, “Baik Pak Presdir, kami segera atur sesuai perintah Bapak.”
Setelah itu, sambil berjongkok, sang kakek mengulurkan tangan membelai kepala si anak yg dari tadi memperhatikannya. “Nak, di dunia ini, yg penting adalah belajar utk menghormati setiap orang, siapa pun dia, entah direktur atau tukang sampah. Jgn pernah tinggi hati. Sebab diatas langit msh ada langit.
12 April 2015
Destination
Di tepian sebuah sungai, tampak seorg anak kecil sdg bermain air dgn senangnya. Tdk jauh dari sana, se-org paman tua sdg asyik memancing.
Setiap kali si anak bermain di sungai, ia selalu melihat paman tsb asyik mengulurkan pancingnya. Kdg tangkapannya sedikit. Tapi, tdk jarang juga ikan yg didapat banyak jumlahnya.
Suatu sore, si anak memberanikan diri utk menghampiri paman tsb. “Hai Nak, kamu mau ikan? Ambillah beberapa ekor. Bawa pulang & minta ibumu utk memasaknya sebagai lauk makan malam nanti,” kata si paman ramah.
“Emm tdk Paman,” jawab si anak.
“Loh kenapa tdk?”
“Saya ingin bisa memancing spt Paman. Apakah Paman mau mengajari saya ilmu memancing?” tanya si anak penuh harap.
“Wah wah wah. Pintar sekali! Hasil yg paman ksh ke kamu dimakan 1 hari saja hbs tp ilmu yg kamu dptkan menciptakan hasil se-umur hidup. Ilmu > Hasil. Baiklah ini alat pancing utk kamu. Bsk kita mulai pelajarannya.”
Keesokan harinya, si bocah dgn semangat mulai belajar memancing. Mereka memasang umpan, melempar tali kail ke sungai, menunggu dgn sabar & hup… kail pun tenggelam ke sungai dgn umpan yg ditarik ikan yg memakannya. Begitu seterusnya.
Ketika menjelang pulang, si paman berkata: Ingatlah! yg membedakan se-org pemancing prof. & Amatir adalah Kesabaran & Ketekunannya, bagaimana ia fokus & konsentrasi pd apa yg sdg dikerjakan.
Belajar memancing = belajar di kehidupan ini, setiap hari kita mengulang hal yg sama. Tp tentunya yg diulang haruslah hal2 yg baik. Sabar, tekun, fokuslah & konsentrasi pd apa yg sdg kita kerjakan, maka apa yg menjadi tujuan kt bisa tercapai.
Tujuan, mimpi & Visi lah yg membawa kita ke dlm perjalanan hidup kita saat ini. Skrg mari kita fokus di perjalanan kita. Sebab fokus ke tujuan kdg dpt membuat kita frustasi dan stress.
“Focus on the journey, not the destination. Joy is found not in finishing an activity but in doing it.” Greg Anderson
30 Oktober 2014
Tekhnik mengamankan Cpanel dari gangguan yang terkutuk
Berikut ini adalah tutorial cara mengamankan cpanel yang kita installkan menggunakan VPS atau Dedicated Server.
1. Firewall Installation
Installing firewall and various other related tools such as CSF, sim. These will prevent unauthorized access to your server and from brute force attacks.
CSF (ConfigServer Firewall) http://www.configserver.com/free/csf/install.txt
LES (Linux Environment Security) R-fx Networks – Internet Security Solutions – Projects » LES
SIM (System Integrity Monitor) R-fx Networks – Internet Security Solutions – Projects » SIM
these do not prevent exploits of services which you run on your VPS server. Also you need to be aware of the installed firewall and you need to open up the additional ports as needed if you add new services/program.
2. Installing Rkhunter (RootKit Hunter)
Rkhunter is a very useful security scanning tool that is used to scan for trojans, rootkits, backdoors, local exploits and other security problems. It can be useful to detect any failures in your layers of defense. It’s a cron job that scans your server for security problems.
You can install rootkit using following steps.
====
a. Login to your server via SSH as root.
[root@support007 ~]# cd /usr/local/src/
b. Download latest RKHunter Version [1.3.2]
[root@support007 ~]# wget rkhunter.1.3.2.tar.gz
c. Extract files
[root@support007 ~]# tar -xzvf rkhunter-1.3.2.tar.gz
d. [root@support007 ~]# cd rkhunter-1.3.2
e. [root@support007 ~]# ./installer.sh
f. Now setup RKHunter to e-mail you daily scan reports.
[root@support007 ~]# pico /etc/cron.daily/rkhunter.sh
Add The Following Lines:
Quote:
#!/bin/bash
(/usr/local/bin/rkhunter –update && /usr/local/bin/rkhunter -c –cronjob 2>&1 | mail -s “RKhunter Scan Details” supp0rt@eukhost.com) Replace the e-mail above with your e-mail. It is best to send the e-mail to an e-mail off-site so that if the server is compromised then hacker can’t erase the scan reports.
Type: chmod 700 /etc/cron.daily/rkhunter.sh
Please refer the following URL for more details on Rootkit Hunter
3. Securing /tmp partition
Most of the attacks and exploits use /tmp to work out of any propagate themselves. By mounting /tmp with noexec and nosuid (meaning executables cannot be run from /tmp nor with escalated privileges), this stops many of these exploits from being able to do any harm.
You can do it by adding following entry in “/etc/fstab”
Quote:
none /tmp tmpfs nodev,nosuid,noexec 0 0
save the file and reboot the VPS, now vps get mounted with “nosuid” and “noexec”
4. Upgrade Apache/PHP, MySQL to latest version
make sure your running the latest secure versions of commons software components. This is the important step in preventing your server getting cracked by common exploits. There will be no problem in up-gradation, but if you have specific version requirements for particular applications, some upgrades should be made with caution.
5. Installing Mod_Security
ModSecurity is an open source intrusion detection and prevention engine for web applications and helps in preventing attacks on programs that would be vulnerable, it acts as a powerful shielding application from attacks. ModSecurity supports both branches of the Apache web server.
This can be fine tuned, but you may limit some “power” user customers (easily rectified). ModSecurity: Open Source Web Application Firewall
6. Enabling PHP suEXEC
When PHP runs as an Apache Module it executes as the “user/group” of the webserver which is usually “nobody” or “apache”. Suexec is a mechanism supplied with Apache that allows to execute CGI scripts as the user they belong to, rather than Apache’s user. This improves security in situations where multiple mutually distrusting users have the possibility to put CGI content on the server.
This means the scripts are executed as the user that created them. If user “supp0rt” uploaded a PHP script, you would see it was “supp0rt” running the script when looking at the running processes on your server. It also provides an additional layer of security where script permissions can’t be set to 777 (read/write/execute at user/group/world level).
Note :-
Switching to the PHP Suexec module on the servers affects the users that depended on the configuration in the .htaccess file are panicking because their site not works anymore. This is not really a reason to be panic, what can you do in this situation is simple. Try to move as much configurations from your .htaccess file to the php.ini file. The php.ini is a simple text file that can be places in every directory from your server. It will affect only that directory and not the entire site. In addition, there could be some performance loss (also known as seeing a higher server load) as a result of all php scripts being ran as a separate CGI instead of as part of the Apache module.
7. Disable dangerous PHP functions
Some PHP functions are termed to be highly dangerous and these PHP functions should be left disabled in the configuration. Using an insecure PHP script as an entry point to a web hosting server can start unleashing dangerous commands and take control over the complete server.
Following is the complete list of such PHP functions which are needed to be disabled, so that it can’t be executed from the server.
Locate the php.ini file of your server
Quote:
[root@support007 ~]# php -i | grep php.ini
Configuration File (php.ini) Path => /usr/local/lib
Loaded Configuration File => /usr/local/lib/php.ini
[root@support007 ~]#
Now edit this file,
Quote:
[root@support007 ~]# pico /usr/local/lib/php.ini
Search for “disable_functions” [without quote] within that configuration file & modify it from
disable_functions = to
Quote:
disable_functions = “system,passthru,exec,popen,proc_close,proc_ge t_st atus,proc_nice,proc_open,proc_terminate,shell_exec ,highlight_file,escapeshellcmd,define_syslog_varia bles,posix_uname,posix_getpwuid,apache_child_termi nate,posix_kill,posix_mkfifo,posix_setpgid,posix_s etsid,posix_setuid,escapeshellarg,posix_uname,ftp_ exec,ftp_connect,ftp_login,ftp_get,ftp_put,ftp_nb_ fput,ftp_raw,ftp_rawlist,ini_alter,ini_restore,inj ect_code,syslog,openlog,define_syslog_variables,ap ache_setenv,mysql_pconnect,eval,phpAds_XmlRpc,phpA ds_remoteInfo,phpAds_xmlrpcEncode,phpAds_xmlrpcDec ode,xmlrpc_entity_decode,fp,fput”
Note :- Disabling above mentioned functions may affect your web-applications, it’s recommended to recheck your code & find an alternative solution, rather than risking the complete server for a mere application
8. Securing MySQL Database
MySQL is one of the most popular databases on the Internet and it is often used in conjunction with PHP. Besides its undoubted advantages such as easy of use and relatively high performance, MySQL offers simple but very effective security mechanisms. Unfortunately, the default installation of MySQL, and in particular the empty root password and the potential vulnerability to buffer overflow attacks, makes the database an easy target for attacks.
9. Disable non-root access to unsafe binaries.
Many exploits use well known executables already on your system as part of their bag of tools. By allowing only privileges to root to these files, you can avoid many attacks to not function.
You may find some binaries like “wget, lynx, scp” too useful to limit access to root only, despite being useful to crackers too.
10. Changing SSH Port
One common security precaution that system admins use is to set ssh to listen on a non-standard port (e.g. port 9989, 9898, etc). It is common for hackers to attempt ssh daemon exploits that tend to be very specific to the version of openssh that is running. By having sshd listen to a different port, instead, then you are reducing the risk of a general port 22 scan and hack. Changing port is an additional layer of security. Although this is a kin to security by obscurity, it can let you completely avoid many script attacks.
11. Disable SSH root access
Allowing the root user to login directly is a major security issue, because a brute force attack can use the known username ‘root’ and concentrate on password variations. By using a unique username (not something like admin) you can reduce the chance of a successful brute force attack. This will force a hacker to have to guess 2 separate passwords to gain root access (you do have 2 separate passwords for unique user’s and root right)
25 September 2014
Protected our wordpress from Hacking (Cracker)
I can give you some tips
1) Update your WordPress installation to the latest available version.
2) If you have any plugins and themes installed under WordPress, please make sure that you update them to the latest version as well.
3) If you have any themes installed under WordPress, please make sure that you update them to the latest version as well. Please try to avoid FREE THEMES, as most of them contains back links to spam sites and malicious codes. If you MUST you a free theme please read the following article first.
http://www.wpstuffs.…code-wordpress-themes-plugins/
4) Install security plugins like:
http://wordpress.org/extend/plugins/limit-login-attempts/
http://wordpress.org/extend/plugins/better-wp-security/
5) Optimize your wordpress installation.
http://codex.wordpress.org/WordPress_Optimization/Caching
6) Password protect the WordPress admin directory (wp-admin) so that it will have an additional protection. You can do that through cPanel > Security > Password Protect Directories.
Hope enjoyed
Image source: http://www.cyberinvestigationservices.com/wp-content/uploads/2013/04/Hacking1.jpg
16 Maret 2011
apt-get dan perintah dpkg di Debian
Dasar-dasar
Debian GNU / Linux menggunakan singkatan apt Advanced Package Tool.
Install software menggunakan apt
apt-get install software
Memperbarui daftar paket di sources.list
apt-get update apt-get update
Update software menggunakan apt
apt-get upgrade
Untuk mengubah daftar mirror apt
apt-setup
Mencari paket
apt-cache search package
Uninstall software menggunakan apt
apt-get remove software
Cara pintas
update daftar paket
# Apt-get update
memperbarui daftar paket yang tersedia
# dselect update
upgrade semua paket yang terinstal
# Apt-get upgrade
menginstall paket
# Apt-get install pkg
uninstall paket
# Apt-get remove pkg
menampilkan semua paket diinstal atau dihapus
dpkg-l
menunjukkan status menginstal paket
dpkg-l pkg
menampilkan semua paket yang cocok dengan pola
dpkg -S pattern
daftar paket yang berisi string
dpkg
daftar file dalam paket
dpkg-L pkg
menampilkan status dari paket
dpkg-s pkg
menunjukkan rincian paket
dpkg-p pkg
daftar paket yang relevan
apt-cache search string
install paket dari file deb
# dpkg -i file.deb
purge package (and config?)
# dpkg -P pkg
jalankan kembali mengkonfigurasi untuk sebuah paket
# Dpkg-reconfigure pkg
get the source mendapatkan source
# apt-get source pkg
config build-deps untuk source dan install sesuai kebutuhan
# apt-get build-dep
menginstal paket dari rilis tertentu
# apt-get -t release install pkg
mencegah nama dari berjalan pada bootup
# update-rc.d -f name remove
upgrade distribusi
# apt-get dist-upgrade
03 Juni 2008
Inna Lillahi Wa Inna Ilaihi Rajiun telah hilang HP Treo 650 kesayanganku
Telah hilang hape kesanganku palm Treo 650 GSM. HP tersebut hilang di copet sama pelaku yang biadab. Pelaku nyopet sambil mepet di angkot Kebayoran-Ciputat semalam, sekitar pukul 21.00 WIB.
Walhasil sekarnag tinggal Dus, CD Win + MAC, Carger dan USB serta beberapa CD berisi program hasil donlotan dan dari Koperasi. Ada yang berminat sisanya? Callme soon at email agusw@blog.agusw.com