Network security

expr:id='"post-" + data:post.id' >

consists of the provisions made in an underlying computer network infrastructure, policies adopted by the network administrator to protect the network and the network-accessible resources from unauthorized access and the effectiveness (or lack) of these measures combined together.

* 1 Comparison with computer security
* 2 Attributes of a secure network
* 3 Security management
o 3.1 Small homes
o 3.2 Medium businesses
o 3.3 Large businesses
o 3.4 Government
* 4 References
* 5 Further reading
* 6 See also
* 7 External links

Comparison with computer security

Securing network infrastructure is like securing possible entry points of attacks on a country by deploying appropriate defense. Computer security is more like providing means to protect a single PC against outside intrusion. The former is better and practical to protect the civilians from getting exposed to the attacks. The preventive measures attempt to secure the access to individual computers--the network itself--thereby protecting the computers and other shared resources such as printers, network-attached storage connected by the network. Attacks could be stopped at their entry points before they spread. As opposed to this, in computer security the measures taken are focused on securing individual computer hosts. A computer host whose security is compromised is likely to infect other hosts connected to a potentially unsecured network. A computer host's security is vulnerable to users with higher access privileges to those hosts.

Attributes of a secure network

Network security starts from authenticating any user, most likely an username and a password. Once authenticated, firewall enforces access policies such as what services are allowed to be accessed by the network users.[1] Though effective to prevent unauthorized access, this component fails to check potentially harmful contents such as computer worms being transmitted over the network. An intrusion prevention system (IPS)[2] helps detect and prevent such malware. IPS also monitors for suspicious network traffic for contents, volume and anomalies to protect the network from attacks such as denial of service. Communication between two hosts using the network could be encrypted to maintain privacy. Individual events occurring on the network could be tracked for audit purposes and for a later high level analysis.

Honeypots, essentially decoy network-accessible resources, could be deployed in a network as surveillance and early-warning tools. Techniques used by the attackers that attempt to compromise these decoy resources are studied during and after an attack to keep an eye on new exploitation techniques. Such analysis could be used to further tighten security of the actual network being protected by the honeypot.[3]
Security management

Security Management for networks is different for all kinds of situations. A small home or an office would only require basic security while large businesses will require high maintenance and advanced software and hardware to prevent malicious attacks from hacking and spamming.

[edit] Small homes

* A basic firewall.
* A basic Antivirus software like Norton AntiVirus, AVG Anti-Virus or Windows Defender, any others may suffice if it contains a virus scanner to scan for malicious software.
* When using a wireless connection, use a robust password.
Medium businesses

* A fairly strong firewall
* A strong Antivirus software and Internet Security Software.
* For authentication, use strong passwords and change it on a bi-weekly/monthly basis.
* When using a wireless connection, use a robust password.
* Raise awareness about physical security to employees.
* Use an optional network analyzer or network monitor.

[edit] Large businesses

* A strong strong firewall and proxy to keep unwanted people out.
* A strong Antivirus software and Internet Security Software.
* For authentication, use strong passwords and change it on a weekly/bi-weekly basis.
* When using a wireless connection, use a robust password.
* Excercise physical security precautions to employees.
* Prepare a network analyzer or network monitor and use it when needed.
* Implement physical security management like closed circuit television for entry areas and restricted zones.
* Security fencing to mark the company's perimeter.
* Fire extinguishers for fire-sensitive areas like server rooms and security rooms.
* Security guards can help to maximize security.

Government

* A strong strong firewall and proxy to keep unwanted people out.
* A strong Antivirus software and Internet Security Software.
* Strong encryption, usually with a 256 bit key.
* Whitelist authorized wireless connection, block all else.
* All network hardware is in secure zones.
* All host should be on a private network that is invisible from the outside.
* Put all servers in a DMZ, or a firewall from the outside and from the inside.
* Security fencing to mark perimeter and set wireless range to this.

Read More......

Hiding Your IP Address Using HTTP, CONNECT, CGI/PHP/WEB, SOCKS proxies

expr:id='"post-" + data:post.id' >

There are situations in which you may want to visit a site without leaving a trace of the visit. For instance you want to check what's going on at your competitor's site. Your visit will generate a record in the log file. Frequent visits will generate many records. Do you want to know what kind of records? See in YOUR REQUEST, YOUR WHOIS RECORD and GEOGRAPHIC LOCATION, Privacy Analysis of your Internet Connection, Another Privacy Investigation Report, BrowserSpy Info, ShowMyIP - will tell you some scary info about what can be told about your computer via the internet.

Note that these tests are not very sophisticated. A dedicated "snooper" can often learn much more. Once I came across a server that tried to connect to my computer's disk while I was browsing ... that was an exciting experince. You should also remember about things like cookies, hostile applets and java scripts, browser security holes and so on. So why don't we send someone instead of ourselves? Good idea.

Remember that simple owner of Web server may collect information about requests you had performed in search engines, keywords you had typed, your browser and language, date, time, your operating system, physical and geographical position, pages from which you had clicked links and so on. See below some records generated by our server users (real IPs are slightly changed).. Note that large internet companies such as doubleclick, google, government institutions have tremendous possibilities to collect much more information about you and your behaviour..

24.10.31.1 - - [17/Oct/2006:07:03:22 +0000] "GET /proxy/howto.htm HTTP/1.1" 200 33104
"http://www.google.com/search?complete=1&hl=en&q=change+ip+address+proxy&btnG=Google+Search"
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7"
217.154.66.1 - - [17/Oct/2006:07:03:25 +0000] "GET /proxy/ HTTP/1.1" 200 37361
"http://www.google.co.uk/search?q=http+proxy+for+ftp&start=0&ie=utf-8&oe=utf-8"
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6"

Step #1-Determine your IP Address:

Every computer connected to the Internet has a unique identifier called an IP Address. On many networks, the IP Address of a computer is always the same. On other networks, a random IP Address is assigned each time a computer connects to the network. This is what we are referring to when we ask if you have a static or a dynamic IP Address. If a system uses dynamic addressing, the IP can change quite often. Look into REMOTE_ADDR row in THIS LINK to determing your current IP Address.
Step #2-Get Anonymous:
Method #1: Anonymizer

One can surf anonymously and easy with the help of a nice services called CGI/Web proxies. Simply type a URL you want to visit -- the Page does the job for you, selecting random CGI/Web proxy from a hundreds of available services, securing you from many potential dangers. When you follow a link on a page viewed via CGI proxy you get there via the this proxy again, so you don't have to type a new URL.

CGI/Web proxy has two more nice features. Firstly, there are WWW sites that are inaccessible from one place, but easily accessible from another. Once I was trying to load a page located in Australia for 20 minutes, all in vain. Using CGI/Web proxies immediately solved the problem. Secondly, there are certain sites that give you information depending on where you are "calling" from. Let's take an example. I was at Encyclopedia Britannica site, trying to check the price for their products. Clicking on Order Information button gave me the list of Britannica's dealers all over the world, no price info. Going to the same place via the Anonymizer led me to a different page, where I found the price list. As it turned out the local dealer's price for Encyclopedia Britannica CD was several times higher than the one at which it's sold in USA. Good savings!

Some CGI/Web proxies are able to encrypt URLs (uniform resource locator) in a way that these can be used as reference for a server. If a request with an encrypted URL occurs, they are able to decrypt the URL and forward it to the server, without enabling the user to get knowledge about the server address. All references in the servers response are again encrypted before the response is forwarded to the client.

Some CGI/Web proxies are able to use secure HTTPS protocol for exchanging data between proxy and your computer, even if original server is not secure. This option excluding possiblility to sniff a data flow between your computer and this proxy is very useful in some cases, for example, when you are forced to work in possibly scanned/sniffed insecure public network.

To get your personal CGI/Web/FTP proxy simply download free James Marshall CGIproxy script and install on your Web server (Apache as a rule, Perl or mod_perl support is required).
Method #2: Proxy Servers
What is proxy?

* Proxy - a server setup designed to offer either firewall security or faster access to cached content normally accessible only through slower connections.
* Proxy server - is the software installed on some network server. The main purpose of this software is to relay traffic between two network hosts (client and server), sometimes this software does some data caching (usually this is performed by HTTP proxies). If your browser is configured to work through the proxy server then all your network traffic will go through that proxy server.

The main purposes of proxy servers:

* Transfer speed improvement (in case of caching proxies). You may use your ISP's proxy to access the internet - usually you have better connection to your ISP's proxy than to other hosts, if this proxy has the resource you requested from the internet you will get a copy of it from proxy (from its cache).
* Security and privacy (for HTTP). Anonymous proxies hide information about your computer in the request headers, so you can safely surf the net and your information will never be used in any way.
* LAN interconnection (or LAN to WAN connection). Sometimes you experience some problems while accessing the server located in the other network (for example in the internet).

There are 3 types of HTTP proxies:

* Fully anonymous (elite or high anonymous) proxies. Such proxies do not change request fields and look like real browser. You real IP is also hidden of course. People that administrating internet servers will think that you are not using any proxies.
* Anonymous proxies also do not show your real IP but change the request fields, so it is very easy to detect that proxy while log analyzing. Nothing really matters, but some server administrators restrict the proxy requests.
* Transparent proxies (not anonymous, simply HTTP) change the request fields, also they transfer real IP. Such proxies are not applicable for security and privacy while surfing on net. You can use them only for network speed improvement.

When Web Proxy Servers are Useful?

* Permitting and restricting client access to the Internet based on the client IP Address.
* Caching documents for internal documents. - Selectively controlling access to the Internet and subnets based on the submitted URL.
* Providing Internet access for companies using private networks.
* Converting data to HTML format so it is readable by a browser.

One can also anonymize one's web surfing by using a proxy server. Proxy servers are similar to the Anonymizer, i.e. web pages are retrieved by the proxy server rather than by the person actually browsing the Web (you). But there are several important distinctions: proxy servers don't help with cookies, hostile applets or code. In most of the cases they do just one thing: they conceal your real geograhic location.

Most of proxy servers restrict access based on the IP Address from which a user connects to them. In other words if you have an account with Bluh-Bluh-Com, you can't use La-Di-Da-Net's proxy server, access will be denied. Fortunately you can always find a "kind-hearted" proxy server on the Net the owners of which openly state that the service is publicly available, or a proxy server that doesn't restrict access that due to whatever reason, but the fact is not known to everyone.

How do you find a "kind-hearted" proxy server? Good news for lazy people: there are many lists of available proxy servers with periodic updates: http://rosinstrument.com/proxy/

For those who are not so lazy: find your own proxy server, it's real easy. Go to your favorite search engine (Google.com for example) and type something like +":8080" +":3128" +":1080" filetype:txt OR filetype:html, and you'll get the list of Web pages where ISPs give complete instructions to their users of how they should configure their browsers. Try every proxy address and after 5 or 7 failures you will surely find a proxy server that works for you. So let's say you have found a proxy, e.g.: some.proxy.com, HTTP port 8080. To make your browser use a proxy server fill out the corresponding fields in Manual Proxy Configuration tab (hope you can find it yourself).
Google

Web rosinstrument.com

Testing proxy lists you have found.

As a rule a quality of proxies from proxy lists you have found by such ways is sufficiently low because of large number of requests to these proxies by many users which have found that lists in search engine, number of professional abusers and robots using these proxies very intensive for network adverising, spamming, flooding forums, bulletin boards, blogs and so on. Number of working proxies from such lists varies from 0.00% to 10-20%. Therefore manual selection of operable proxies is not possible. Fortunately, a few of proxy testing software exists such as our ProxyCheck Java application, Proxyrama for Windows with source code available, Charon for Windows and others. See our Related Links for more examples.

Warnings!

Misconfigured Servers
Often, a PUBLIC proxy server is open because it has not been configured properly. Most of open proxy servers are not supposed to be public. The person that configured the server was not aware of the potential problems and security risks. It is very common to for a novice administrator to set up a proxy with access rights that allow anyone to connect. To close a proxy server it is necessary to force users to connect from one IP Address or a range of IP Addresses. An alternative is to require users to use a user name and password.
'Honey Pots' or 'Honey Proxies'
Everything that is done on or through the open proxy server can be logged and traced. A honey pot is an open proxy server intentionally deployed by security professionals to lure hackers and track their every move. A honey pot can also be installed by a hacker. A hacker can put a proxy server up on his, or a victim's computer and wait for a scanner to find it. Sending spam e-mail trough a honey pot proxy exposes the sender's activity. When a spammer uses the proxy to send bulk email, it is possible to collect the content of the spam and report the spammer to his ISP.
Educational, academic public proxy systems: Planetlab, CoDeeN
The CoDeeN (a suite of network services, including a CDN, that provides users with more robust access to network content) proxies are big, fast, logged and cached proxy servers cluster based on PlanetLab (a global platform for testing and deploying an emerging class of planetary-scale network services) global research network which was founded in 2002 in Princeton, Berkley and now consists of more than 700 nodes located in many educational and research institutions in the world opened for public use. These proxies are often placed in many "anonymous proxy lists" such as "high anonymous" and "elite", HOWEVER everything you do online is thoroughly tracked. As a rule these proxies are configured on 3124,3127,3128,8888 TCP ports. Some limitations for these proxies usage also exist, for example HTTP POST method is disabled.
Security Risks
When you use an open proxy server, your computer is making a direct connection to another computer. You do not know who is in control of the remote computer. If you are using proxy servers from open proxy lists, you could be trusting your email messages, passwords or other sensitive information to a person running the server. Someone can be watching the unencrypted information you are transferring over the network.

Configuring your browser to easy switch between multiple proxy configurations

There are many different software that could be used to set up a proxy for your system. For example small and free SwitchProxy Tool Extension for Mozilla, Firefox, Thunderbird. SwitchProxy lets you manage and switch between multiple proxy configurations quickly and easily. You can also use it as an anonymizer to protect your computer from prying eyes. Text proxy lists in host:port format are very flexible and can be used with most proxy software for Internet Explorer, Mozilla, Firefox, Thunderbird, Opera and other browsers.
Configuring your browser with "Proxy Auto-Config File" proxy.pac
Definition
The proxy auto-config (.pac) file defines how user agents can automatically choose the appropriate access method for fetching a given URL. See Wikipedia article for more detailed description.
Firefox
Go to Tools -> Options -> General -> Connection Settings. Select the option to enter an automatic proxy configuration URL. Enter http://rosinstrument.com/cgi-bin/proxy.pac and click OK twice.
Firefox 2
Go to Tools -> Options -> Advanced -> Network -> Settings. Select the option to enter an automatic proxy configuration URL. Enter http://rosinstrument.com/cgi-bin/proxy.pac and click OK twice.
Internet Explorer
Go to Tools -> Internet Options -> Connections. If you use a dialup connection, select it and click Settings. Otherwise, click LAN Settings. Select the option to use an automatic configuration script. Make sure no other options are selected. Enter http://rosinstrument.com/cgi-bin/proxy.pac and click OK twice.
Configuring your browser manually
FireFox
Tools - Options - General - Connection Settings - Manual proxy configuration - View, and for HTTP and FTP type name of your proxy server (example: proxy.net) and port number (example 3128).
Mozilla, Nestcape Navigator 6.x, Nestcape Navigator 4.x, Netscape Communicator
Edit - Preferences - Category - Advanced - Proxies - Manual proxy configuration - View - Set proxy for following protocols: HTTP, FTP, etc.
Konqueror
Setting - Configure Konqueror... - Proxies - Enable "Use proxy" - Set proxies for HTTP, HTTPS, FTP or other protocols.
Internet Explorer 5.x, 6.x, 7.x, 8.x
Service - Internet Options - Connections - Choose your connection and click "Settings" button for dial-up connection or click "LAN Settings" button in the "Local Area Network (LAN) Settings" group box - Enable "use a proxy server - type proxy name and proxy port - If nessesary, enable/disable "bypass proxy server for local addresses" - OK
Internet Explorer 4.x, Internet Explorer 3.x
View - Internet Options - Connection - mark "Access the Internet using a proxy server". At ADDRESS type name of the server (example: proxy.net) and at PORT type port number (example: 3128), click on advanced button and mark "Use the same proxy server for all protocols".
Opera 8.x, Opera 9.x
Tools - Preferences - Advanced tab - Network - "Proxy servers" button - set Proxy Server address and proxy configuration port - OK.
Mozilla Thunderbird proxy settings
Tools - Options - Advanced - "Offline and Connections Settings" -"Connection Settings" - "Set up Proxies for accessing the Internet" - select radio button for "Manual proxy configuration" - set Proxy Server address and proxy port - OK.
mIRC
Tools - Options - Open Connect - Firewall - in "protocols" combo box select SOCKS4, SOCKS5 or Proxy (for HTTP, HTTPS) - set Proxy Server address and proxy port - OK.
Emule
Options - Proxy tab - enable check box "Enable proxy" - choose the SOCKS4, SOCKS4a, SOCKS5 or HTTP 1.1 - enter "Proxy host" and "Proxy port" - OK.
Kazaa
Tools - Options - "Firewall" tab - select "Use SOCKS5 Proxy Server" - set proxy addres in "Hostname" field and proxy port in "Port" field - OK.
AOL Instant Messenger
"Setup" button - "Connections" button - "Connect using Proxy" box - set Host and Port - select protocol type - OK.
Yahoo Messenger proxy settings
Login menu - Preferences - "Connection" tab - 'Use proxies' - set your proxy address and port - OK.
MSN Messenger
Tools - Options - "Connection" - "Advanced Settings" - set proxy address and port - OK.
Windows Media Player 9.x, 8.x, 7.x
Tools - Options - Network tab - in the Proxy Settings area click protocol you going to configure - select 'Use browser proxy settings' or change this setting to manually configured proxy - OK.

Once you have carried out this simple operation, you can start surfing the Web leaving traces as if you are from Bulgaria, USA, North Korea (that would be fun!) or somewhere else, but ...there is one more very important privacy concern, "Is My Proxy Anonymous?".
Is My Proxy Anonymous?

Not all proxy servers are truly anonymous. Some of them let the system administrator of the site that you visit via a proxy server find out the IP Address from which the proxy server is accessed, i.e. your real IP Address. You can perform an anonymity check test: DETECT PROXY

If you get the message: Proxy server is detected! - then there is a security hole in your proxy, and information about your real IP Address will be listed. If the message is Proxy server is not detected - everything should be OK. In any case, carefully study the list of IP Addresses that is returned by this online tool. None of them should belong to you. You can also use alternative tests to check if your browser is anonymous. Such tests can give a complete list of the parametrs your browser passes to a remote server (this is called Environmental Variables).
Where are these proxies from?

Sometimes is required to determine Country, City or even geographical latitude and longitude to select from proxies list or servers list. Now it possible HERE, due to bulk interface to geoiplookup utility. Paste HERE your public proxies or simply hosts list in simple text format and press "Lookup GeoIP info" button. As a result you'll get your bulk proxies list opposite to corresponding Country, City, Longitude and Latitude and even link to Google Map of this server geographical location.
Test My Proxy Speed

Anonymity and Caching for speedup surfing are priority aims of Proxy servers. But not all proxy servers sufficiently fast for comfortable surfing due to high server load, bad/slow client-server connection and so on. To determine does proxy you have selected have sufficient speed for you CLICK HERE to measure your connection speed twice, first, without proxy configured, second, with proxy configured. If you'll have received sufficiently similar results for measured speed in both cases, so the configured proxy has speed capabilities sufficient for your connection speed. Otherwise try to select and to test another proxy.
Final Considerations

In spite of all of the the above said ... use proxies only when it's necessary. Working via proxy servers slows down data transfer rate and is an additional load on the network and the servers. Another important thing that is often forgotten by many people: use proxies for legal purposes. Hiding you identity is ok (at least in the free world) as long as you want to visit a site that offers, say, pornography. But if you use a proxy server for purchasing CDs or software with a bogus credit card number there is a good chance that you'll end up in prison, let alone the moral aspects. Remeber, all the connections are logged, and if you violate the law you can be tracked down. The site administrator can check the logs and contact the proxy's administrator, he can in turn check his own logs and find your real IP Address, then they both will contact your ISP, and your ISP keeps logs too ... Anyway, I hope you got it.
Specially for paranoiacs

Look, different tools described above can be chained! For example you set up your browser to use Proxy A, and you know the addresses and port numbers of 2 more servers Proxy B and Proxy C. The URL that you type should look something like that: http://proxyB:port/http://proxyC:port/http://www.whereyougo.com/ As the result you go to the site via 3 servers: A,B and C. One of them can be the Anonymizer. WARNING: Not all the proxy servers allow chains like that. Such capabilities exist ONLY for CGI/Web proxies (pay attention to chaining CGI proxy combobox), HTTP proxies with CONNECT capabilities (additional software is required for chaining, usually such software supports both SOCKS and CONNECT proxies, see examples for SOCKS) and SOCKS proxies (such software is required as Prtunnel, Proxyrama and others).
Anonymity and Myths

Anonymity is derived from the greek word ανωνυμία, meaning without a name or name-less. In colloquial use, the term typically refers to a person, and often means that the Ppersonal identity, or personally identifiable information of that person is not known.

The main question is of course, what are you trying to hide? Closely following that is how important is it? The precautions you take have to weigh up to the value of the data you are trying to protect, in this case, you are trying to protect your anonymity. In the recent years privacy and anonymity have become big issues with CCTV cameras everywhere, and projects like Echelon reading all your e-mails and reporting back to the Orwellian ‘Big Brother’. So just for normal surfing, or if you are planning on hacking a foreign governments personnel database (not that we recommend that of course), you need to protect yourself in different ways.

Remember Anonymity is not an absolute, there are varying degrees.

The Myths

Using a proxy I found on the web in my browser is enough.

People have been using proxies for years, normally open proxies found from scanning large IP ranges on the internet, what you have to think though, is this proxy open for a purpose? Is this purpose to listen to what you are doing? To collect your passwords? Also it’s not infallible, remember the traffic has to go from your computer to the proxy, and come back in, those records can be corelated in your country alone and need to external aid. Plus the proxy may keep records of who access what and when, it make be a honeypot and keep full packet logs of all completed TCP/IP sessions. The problem is you just don’t know.

If I chain proxies no one can find me.

Also not true, it doesn’t matter if you cross through Taiwan, Korea, Russia and Iraq, your ISP just needs to see the packets going out and coming in at the right times to your machine from the last proxy hop in your chain.

The Reality

It can be said, pretty much whole heartedly, there is no such thing as real anonymity online, if you do something bad enough, the people in power can find you. IP Spoofing is misunderstood in 9/10 cases and is no protection against anything (I’ll write an article about this later). And web proxies, as above, offer little or no protection. They are good enough if you just want to stop your school/parents/office from tracking your surfing habits, but they won’t protect you from doing time if you commit a federal crime. The next best thing from this is Onion Routing, the common peer to peer implementation known as Tor.

Onion Routing prevents the transport medium from knowing who is communicating with whom — the network knows only that communication is taking place. In addition, the content of the communication is hidden from eavesdroppers up to the point where the traffic leaves the OR network.

Source: Onion Router

Tor is a toolset for a wide range of organizations and people that want to improve their safety and security on the Internet. Using Tor can help you anonymize web browsing and publishing, instant messaging, IRC, SSH, and other applications that use the TCP protocol. Tor also provides a platform on which software developers can build new applications with built-in anonymity, safety, and privacy features.

You can read more at the Tor site, the Wikipedia articles Onion routing and Tor (anonymity network).

Getting Tored Up

For most people Tor is enough, I recommend getting the Tor Bundle, which includes Tor, TorCP and Privoxy. All you need to do is set your applications to use a proxy, host is localhost and port is 8118. Instructions with screenshots are here. Then you’re done, it works for most applications. Just remember though it’s encrypted from your machine to the end point, not from the end point to wherever it’s going, so that Tor node can see whatever traffic you are sending through Tor.. So make sure you encrypt (POPS, SMTP with TLS etc).

The h07 unix research team recognized that people paranoid enough to use tor are still dumb enough to use plaintext-authentication protocols like pop3 and telnet. They might think it’s “secure because tor encrypts it”. This isn’t the case. It’s encrypted, but …… communication from client to entry node and exit node to server will still remain as is. POP3, telnet and others will still be plain-text and thus subject to sniffing.

True Anonymity?

It may not be totally legal, but it’s pretty much bulletproof (Unless of course you get caught in a car parking jacking off to porn downloaded from an open Wireless Access Point). When you do this, you should make sure you are using an anonymous operating system, so what better than a bootable distro especially for this purpose, called Anonym-OS, You can check it out here.

kaos.theory’s Anonym.OS LiveCD is a bootable live cd based on OpenBSD that provides a hardened operating environment whereby all ingress traffic is denied and all egress traffic is automatically and transparently encrypted and/or anonymized.

Using SocksCap client and SOCKS proxy for anonymity in non HTTP applications without build in SOCKS protocol support (telnet, ftp, IRC and so on)

What is SocksCap?
SocksCap automatically enables Windows-based TCP and UDP networking client applications to traverse a SOCKS firewall. SocksCap intercepts the networking calls from WinSock applications and redirects them through the SOCKS server without any modification to the orginal applications or to the operating system software or drivers. It is a great difference in situation with built-in SOCKS support from the years of SocksCap debut. Most network applications now have SOCKS protocol built-in support. Only few of the legacy applications need SocksCap type standalone application for SOCKS servers usage.
Where do I get SocksCap? Is SocksCap free? Is the source code available?
SocksCap now as a matter of fact is out-of-date and not supported software, but there are a lot of SocksCap clones and successors, see Related List for alternate SOCKS capable servers (SS5, Dante, 3Proxy etc.) and clients (Socks5, FreeCap etc.).
What do I enter for SOCKS server and port in SocksCap Setup?
Enter the address and port of the SOCKS server you need to traverse. If you are not sure what those are, contact your ISP, network administrator, or firewall administrator for your site or consult a lists: SOCKS LIST 1, SOCKS LIST 2.

Using HTTPort software and CONNECT/SSL/HTTPS proxy for anonymity for HTTP and non HTTP applications and bypassing of your local HTTP proxy filtering

HTTPort allows you to bypass your HTTP proxy, which is blocking you from the Internet. With HTTPort you may use various Internet software from behind the proxy, ex. e-mail, instant messengers, P2P file sharing, ICQ, News, FTP, IRC, etc. The basic idea is that you set up your Internet software in such a manner, that it connects to your own local PC as if it was the remote server it needed. HTTPort then intercepts that connection and runs it through a tunnel through the proxy.

HTTPort doesn't really care for the proxy as such, it works perfectly with firewalls, transparent accelerators, NATs and basically anything that lets HTTP protocol through. HTTP is the basis for web surfing, so if you can freely surf the web from where you are, HTTPort will bring you the rest of the Internet applications.

HTTPort performs tunneling using one of two modes. The following schemes will give you the idea.

In SSL/CONNECT mode HTTPort can make a tunnel through a proxy all by itself. It requires that the proxy supports a certain HTTP feature, specifically CONNECT HTTP method. Most of the proxies have this method disabled by default, and administrators don't readily enable it, so if you find that this tunneling mode works for you, you must be lucky. SSL/CONNECT mode much faster, but encryption can't be used in this mode and as described here, your proxy tracks all your actions easily.

Remote host method is much more capable for tunneling through just about any proxy. In this mode HTTPort uses a special server software called HTTHost installed somewhere outside of your proxy-blocked network. HTTHost is basically a web server with a twist. When HTTPort is doing tunneling, it sends series of HTTP requests to the HTTHost. The proxy sees it af if you were surfing to some web site, and consciously allows you to. HTTHost in turn performs it's half of tunneling and talks to the target servers. This mode is much slower, but works in most cases, and it features strong data encryption which makes proxy logging useless.
Related

Read More......

Memanen Password Di Jaringan Lokal dengan dsniff

expr:id='"post-" + data:post.id' >

fwerd@k-elektronik.org



Baru mulai tertarik masalah keamanan? Pingin ngebuktiin ketidakamanan

jaringan lokal kepada admin? Atas permintaan umum (dan seringnya teman-teman

admin nanyain tentang sniffing), berikut adalah cara cepat (kurang lebih 15

sampai 30 menit) memanen password dengan menggunakan teknik yang sangat

awam: ethernet sniffing. Tentunya akan dibahas juga cara-cara pendeteksian

dan pemberantasannya.

Komunikasi ethernet pada dasarnya adalah komunikasi tipe "siaran"

(broadcast). Paket-paket ethernet dari mesin yang satu sebetulnya dilihat

oleh setiap komputer yang tergabung dalam suatu jaringan lokal. Paket-paket

ini dibuang jika alamat MAC-nya tidak cocok dengan alamat node tujuan. Nah,

dengan menggunakan software-software 'network sniffer', paket-paket ethernet

(beserta isinya) yang melewati kartu ethernet tertentu tidak dibuang begitu

saja, melainkan dianalisa. Banyak kegunaan sniffing, tapi di artikel ini

penulis hanya membahas sniffing password dengan menggunakan program paten

karangan Dug Song (www.monkey.org/~dugsong) dsniff.



dsniff aslinya adalah software Unix, dan teman-teman yang punya Linux/BSD

bisa langsung ngedownload dan compile dsniff dari

http://www.monkey.org/~dugsong/dsniff). Artikel ini membahas penggunaan di

jaringan lokal berbasis Windows, sebab artikel ini ditujukan untuk pemula,

dan mereka-mereka yang pingin memanen password tapi nggak punya akses ke

Unix. Program dsniff ini punya spesialisasi menggarap password dari berbagai

protokol, dan memformat hasil panenan dalam bentuk yang mudah dibaca.

Protokol yang bisa ditangani oleh dsniff antara lain adalah FTP, Telnet,

HTTP, POP, NNTP, IMAP, SNMP, LDAP, Rlogin, NFS, SOCKS, X11, IRC, AIM, CVS,

ICQ, Napster, Citrix ICA, Symantec pcAnywhere, NAI Sniffer, Microsoft SMB,

dan Oracle SQL*Net auth info.



Penggunaan dsniff tidak begitu jauh berbeda antara versi Win32 dengan versi

Unix-nya. Kelebihan yang bias dinikmati pengguna Unix saat ini adalah adanya

dua program tambahan di dsniff yang membuat dsniff versi Unix lebih perkasa,

mampu memanen password dari jaringan berbasis "ethernet switch" atau "active

hub", jadi tidak terbatas ke jaringan "hub" saja.



Bahan-bahan/Persyaratan:

-------------------------------

- LAN lokal untuk target, yang terhubung dengan menggunakan "ethernet hub"

(bukan switch)

- mesin Windows 95, 98 atau ME (untuk 2000 dan XP, kamu mesti punya hak

administrator di mesin yg akan digunakan untuk memanen) yang terhubung ke

LAN target

- WinPCap library, download dari

http://netgroup-serv.polito.it/winpcap/install/bin/WinPcap.exe

- dsniff port to Win32, download dari

http://www.datanerds.net/~mike/binaries/dsniff-1.8-win32-static.tgz (gunakan

WinZip untuk nge-extract file-file .exe-nya)



Cara Memasak

------------------



- Install WinPcap library. Doubleclick winpcap.exe dan ikuti petunjuk di

layar (tinggal pencet "Next","Next","Finish")

- Extract file dsniff...tgz nya ke suatu directory (sebaiknya di bawah

C:\Windows atau tempat lain yang nggak terlalu mencurigakan - untuk artikel

ini, anggap saja disimpan di C:\WINDOWS\DS)

- Mulai memanen password. Dari start menu, klik "Run", ketik "command".

Pindah ke direktori tempat disimpannya dsniff ("cd \windows\ds"). dari

prompt C:> tinggal ketik "dsniff".

- silakan menonton password-password milik pengguna ditampilkan di layar



Catatan:

----------



Ada kemungkinan anda harus menspesifikasikan kartu ethernet mana yang ingin

disadap. Untuk melihat daftar-daftar interface yang tersedia, ketik "dsniff

-D" dari prompt DOS. Anda akan melihat daftar interface yang tersedia. Jika

secara default dsniff mencoba menyadap interface yang salah, gunakan "dsniff

-i [ketik nama interface disini]".



Pengembangan lebih lanjut

---------------------------------



Untuk menyimpan daftar password yang terpanen ke sebuah file, tambahkan

perintah "-w [namafile]" ke program dsniff. Contoh:

"c:\WINDOWS\DS>dsniff -i ELNK3 -w password.db"

untuk membaca file yg dibuat dsniff, berikan perintah "-r [namafile]"

contoh:

"C:\WINDOWS\DS>dsniff -r password.db"

secara opsional, jika anda ingin file hasil panen ini disimpan dalam bentuk

file ASCII:

"C:\WINDOWS\DS>dsniff -r password.db > panen.txt",



panen.txt siap disajikan.



Yang lebih asyik lagi, bisa kita konfigurasikan agar usaha panen kita tetap

berjalan walaupun komputer tersebut di-reboot.

Caranya gampang. Mula-mula download dulu program "start minimized" (sm.exe)

dari

http://www.ethernal.org/List-Archives/curves-kiddies-0010/msg00029.html.

Simpan program ini di C:\WINDOWS. Kemudian kita bikin batch file yang bisa

dijalankan dari command prompt. Gunakan Notepad atau "edit" untuk membuat

file ini, dan sebagai isi:



@echo off

sm /hidden c:\windows\ds\dsniff.exe -w > password.db



(tambahkan perintah opsional seperti "-i ELNK3" jika perlu)



Nah, simpan file ini (sebagai "ds.bat", misalnya), dan pindahkan file ini ke

folder "Startup" lewat Start menu supaya tiap kali komputer di-restart,

program dsniff kita dijalankan juga, siap untuk memanen. Program "sm" diatas

berfungsi menjalankan program secara tersembunyi supaya tidak mencurigakan.

Tentu saja, biar lebih nggak mencurigakan lagi, rubah nama dsniff.exe ke

nama lain, dan jangan lupa ngeganti perintah "dsniff" dengan nama yang baru

di semua command dan batch file. Sekarang anda bisa tinggalkan komputer

tersebut, dan dikemudian waktu kembali lagi untuk memeriksa sejauh mana

hasil sadapan anda bekerja (dengan perintah "dsniff -r password.db >

panen.txt" lalu "notepad panen.txt").





Membuat sadapan lebh portabel

-----------------------------



Untuk membuat disket dsniff, file-file yang anda perlukan adalah:

dsniff.exe

wpcap.dll (cari di C:\WINDOWS\SYSTEM atau C:\WINDOWS\SYSTEM32 untuk

Win2K/XP)

wpcap.vxd

packet.dll



simpan file-file ini ke disket (A:), dan tinggal dibawa disketnya ke LAN

target. Penjalanan perintah masih tetap sama seperti diatas, kecuali lokasi

prompt nya bukan di C:\WINDOWS\DS>, melainkan di A:\>.



Jika anda butuh tantangan tambahan, gunakan perintah "at" dan program

pengirim email "blat.exe" untuk mengirimkan hasil panenan ke alamat e-mail

anonimus anda setiap jam atau bahkan setiap 5 menit. Jangan lupa bagi-bagi

hasil :).



Tambahan-tambahan

-----------------

Port dsniff-win32 juga mengandung beberapa utility ekstra, seperti mailsnarf

(untuk membaca lalu lintas e-mail di jaringan lokal), urlsnarf (untuk

membaca alamat-alamat website yang dikunjungi pengguna LAN sekitar anda),

dan webspy (untuk menguntit jejak surfing mesin tertentu). Silaka anda coba

main-main dengan utiliti-utiliti ini, penulis yakin akan ada gunanya.

Harap diingat bahwa teknik diatas hanya mempan untuk LAN yang terhubung

melalui "ethernet hub". Jika kebetulan LAN anda menggunakan "ethernet

switch", bukan berarti nggak ada harapan. Pengguna versi Unix-nya dsniff

bisa cengar-cengir, sebab paket dsniff versi Unix mengandung dua program

tambahan: arpspoof (untuk 'menipu' mesin-mesin lain agar mengirimkan paket

ke mesin anda) dan macof (untuk membanjiri "switch" lokal dengan

alamat-alamat MAC acak, biasanya berakibat "ethernet switch" yang

ditargetkan menjadi bingung dan mengubah mode menjadi default, bertingkah

laku seperti "ethernet hub").



Deteksi, Pencegahan, dan Penanggulangan

---------------------------------------



Sebagai admin, anda bisa mendeteksi kartu-kartu ethernet di LAN anda yang

menjalankan dsniff (dan progarm-program sejenis dsniff) karena secara

prinsip, untuk meng-capture paket-paket, interface ybs harus berada dalam

mode "promiscous". Jadwalkan program-program ini untuk berjalan setiap 5

menit, dan konfigurasikan agar komputer pendeteksi mengemail anda jika ada

aktifitas-aktifitas mencurigakan. Utiliti yang bisa anda gunakan termasuk

"promisc", "CPM", "ifstatus", atau yang lebih yahud lagi, utilitas buatan

grup hacking Portugal The Apostols yang bernama "NePED"

(http://metalab.unc.edu/pub/Linux/distributions/trinux/src/neped.c). Untuk

platform Windows, tersedia produk-produk komersil seperti

LANGuard/LANSniffer atau AntiSniff dari L0pht Heavy Industry

(http://www.l0pht.com/antisniff). Diantara produk-produk diatas, sebagian

besar hanyalah bisa mendeteksi adanya sniffer jika dijalankan di mesin

lokal. Untuk mendeteksi network secara remote, gunakan NePED atau

AntiSniff.



Jika anda punya budget, beli switch ethernet yang nggak nge-default ke "hub

mode" kalau di-flood alamat-alamat MAC palsu. Kalau anda nggak ngerti, harap

ngambil kursus "Pengenalan TCP/IP" atau berhenti jadi admin. Juga harap

ingat bahwa banyak perusahaan-perusahaan yang mengklaim menjual hub yang tak

bisa disadap, tapi ternyata hanya menjual hub tipe "active huub" yang

biasanya tidak bisa menghandel traffic Fast Ethernet (100 Mbps).



Cara paling handal untuk mencegah bocornya informasi sensitif lewat network

adalah dengan menggunakan enkripsi. Pakailah SSH, SCP (pengganti FTP) atau

SFTP, TLS (untuk memeriksa e-mail), SSL dan HTTPS (untuk transaksi web),

tunelling, dll. Usahakan agar jangan sampai ada program yang mengirimkan

password tanpa enkripsi melalui jaringan yang anda kelola. Juga selalu

periksa keadaan hard disk anda. Seringkali sniffer-sniffer meninggalkan

jejak berupa file hasil panenan yang berukuran besar (apalagi jika LANnya

sibuk).



Cara lain mengamankan network anda adalah dengan memindahkan topologi

jaringan anda ke sistem token ring, _dan_ menggunakan kartu-kartu ethernet

Token-Ring buatan IBM (iklan sabun colexz). Tapi tentunya metode ini

tidaklah praktis bagi anda yang ingin tetap menggunakan topologi star atau

hybrid.



Penutup

-------

Begitu dulu, deh. Semoga ada gunanya, dan semoga pembaca semua sadar bahwa

isu ini tidaklah sesukar anggapan umum. Cukup 30 menit dan program-program

yang tepat, dan terkompromisasilah jaringan lokal anda. Jelas bahwa sang

penyerang disini (dan di aspek-aspek lain secara umumnya) menikmati

kelebihan, sebab pemberantasan serangan tipe ini memerlukan waktu dan

keahlian dari sang pembela. Saran, tambahan, dan kritik silakan kirim

melalui kecoak.



Sumber-sumber dan referensi:

----------------------------

http://www.monkey.org/~dugsong/dsniff (pembahasan lebih mendalam tentang

teknik-teknik penyadapan password, termasuk makalah dan artikel membahas

sniffing di jaringan "switched")

http://www.datanerds.net/~mike/dsniff (website resminya dsniff-win32)

http://www.morehouse.org/secure/sniffaq.htm (FAQ-nya sniffing, sudah agak

kadaluwarsa).



===============================================================

posted by fwerd at k-elektronik.org

edited by logC at k-elektronik.org

Catatan Editor:

# file terkait akan segera di upload di bagian 'file' dengan nama

win32-S.zip/win32-S.tar.gz

# Dipersilahkan untuk mengkopi paste dan menyebarluaskan secara tak terbatas

artikel ini asal dengan tujuan pendidikan dan menyertakan credit atas

penulis. Penulis dan editor tidak bertanggung jawab atas penyalahgunaan

versi pendidikan artikel ini.

Read More......

Bagaimana bertahan di Web yang Liar ?

expr:id='"post-" + data:post.id' >

Jasakom - Perlu anda ketahui bahwa web site sangat rentan terhadap suatu penyakit dan perlu perjuangan utk mengobati penyakit itu.
Apakah penyakitnya itu ?
Penyakitnya itu adalah vulnerabilities yg timbul dan ditemukan dari hari ke hari.

Jadi suatu web site yg sudah aman pada saat ini dan tidak di imunisasi secara berlanjut, akan juga bisa menjadi sakit.
Dan Administrator itulah si pemeliharaanya yg bertugas utk menyehatkan. Memang perlu perjuangan terus agar dapat bertahan di World Wide Web yg liar ini.

Di article ini akan di ulas mengenai dasar cara bagaimana anda mengamankan suatu web site agar tetap sehat.
Pada zaman sekarang ini banyak hal dapat dilakukan di web, diantaranya adalah : check saldo di bank, saham, rate valuta asing, pembelian dll. Semua web site itu memiliki aplikasi, tetapi tentunya tidak semua aplikasi itu di buat dan diimplementasikan dengan aman dan sehat.
Maka dari itu internet security dari aplikasi itu langsung juga menjadi salah satu resiko yg harus ditanggung oleh perusahaan tsb.

Aplikasi yg di implement oleh setiap perusahaan itu dapat berupa shopping cart dll ( contohnya : cart32.exe). Tentunya program itu tidak di install tanpa adanya Operating System dan internet system(cthnya IIS)yg merupakan home ground.

Dari hal ini dapat anda lihat bahwa vulnerabilty (kerentan-an) suatu software atau Internet aplikasi pada suatu perusahaan bukan hanya datang
dari Operating systemnya saja, bahkan juga dapat dari aplikasi yg berjalan di atas nya yaitu shopping cart dan jenis aplikasi lainnya.

Serangan dari hacker biasanya masuk ke private area dari web server di belakang firewal melalui port 80 (atau 443 utk SSL).
Port tsb pasti dibuka karena utk memungkinkan aplikasi tsb dapat digunakan oleh internet user.
Serangan terhadap aplikasi internet dapat berupa : Denial of Service(DoS), mengubah isi dari web server(web content) termasuk mengubah
halaman web (web page), pencurian data dan informasi dari user seperti nomor credit card dll.

Contoh web attack dapat anda lihat contohnya seperti :
Microsoft yg mendapat serangan DoS sehingga web site mereka menjadi tinggi performance CPU nya.
Terjadi pencurian data credit card StepUp.com dan Egghead.com.
Deface pada site Trisakti.ac.id, mjk-ajinomoto.co.id.

Aplikasi yg penuh dengan vulnerabilities dapat anda lihat di bagian security.
Beberapa cara exploit(eksploitasi) web site dapat dilihat pada listing di bawah ini :


Vulnerabilites yg ditemukan dan missconfiguration (salah setting/konfigurasi)
Hidden Fields (field yg tersembunyi)
Backdoor dan debug options
Cross Scripting
Parameter Tampering
Cookie poisoning
Input Checking
Buffer Overflow
Direct Access Browsing

Read More......

Pentingnya Sertifikasi TI

expr:id='"post-" + data:post.id' >

Pentingnya Sertifikasi IT

Banyak alasan untuk mendapatkan sertifikasi IT (Information Technology). Hal utama adalah sertifikasi di bidang Teknologi Informasi dan Telekomunikasi memberikan kredibilitas bagi pemegangnya. Sertifikasi IT menunjukkan para Professional Teknologi Informasi memiliki pengetahuan dan kompetensi yang dapat dibuktikan. Sertifikasi IT juga memberikan keunggulan bersaing bagi perusahaan, khususnya dalam pasar global karena kemampuan dan pengetahuan Profesional Teknologi Informasi dan Telekomunikasi telah diuji dan didokumentasikan.

Nilai Sertifikasi IT untuk Peningkatan Bisnis Perusahaan

A. Selaras dengan Tujuan Bisnis Perusahaan
1. Memberikan keunggulan bersaing yang nyata.
2. Memberikan pelayanan pada tingkat yang lebih tinggi.
3. Meningkatkan produktivitas kerja.
4. Meningkatkan kemampuan sumber daya manusia yang lebih lengkap.
5. Meningkatkan kredibilitas terhadap mitra bisnis dan pelanggan.
6. Memberikan dampak terukur untuk efisensi dan keuntungan bisnis.
7. Menjadi tujuan penting bagi bisnis perusahaan.

B. Alat yang penting untuk mempertahankan dan mendapatkan SDM bidang ICT
1. SDM yang memiliki sertifikasi IT lebih loyal dan kurang suka berganti pekerjaan.
2. Sertifikasi IT adalah suatu cara untuk mempertahankan SDM berkompetensi.
3. Berfungsi sebagai pembeda tingkat kemampuan antara staff senior dan staff baru.
4. Berfungsi sebagai skala pembanding untuk kemampuan teknis.
5. Sertifikasi IT memungkinkan pemilihan yang lebih baik dalam proses rekruitmen.
6. Memberikan perusahaan sebuah standar kemampuan yang konsisten.
7. SDM yang memiliki sertifikasi mampu melakukan fungsi pekerjaan dengan baik.

** Sumber : IDC Research, Certification Magazine Salary Survey 2002,
IT Skills Research 2002

:: Siapakah yang Memerlukan Sertifikasi IT?

Beberapa bidang pekerjaan tertentu mensyaratkan kualifikasi dan kompetensi dalam menjalankan prosesnya. Permasalahannya adalah bagaimana employer dapat mengetahui bahwa SDM yang dicarinya berkualitas tanpa perlu ia membuang waktu dan tenaga untuk menguji satu-persatu calon karyawannya. Agar lebih jelas dibawah ini adalah mereka yang memerlukan sertifikasi IT :

1. Profesional ICT (operator, administrator, developer, engineer, specialist).
2. Akademisi ICT (trainer, lecturer, instructor and teacher).
3. Manager dan Supervisor ICT.
4. Semua pihak yang terlibat dalam pengembangan TI dan telekomunikasi.

Kebutuhan SDM di bidang telematika atau teknologi informasi dan komunikasi semakin meningkat, tidak hanya dari segi kuantitas tapi juga kualitasnya. Karenanya, penyiapan SDM di bidang TI dan komunikasi ini harus dilakukan sebelum menyiapkan infrastruktur, sarana, dan prasarana.

Sebagaimana dikutip dari Buku Biru Perencanaan SDM yang diterbitkan Oktober 2003 kerjasama BHTV ITB dengan Depperindag, untuk SDM penghasil produk TI dan komunikasi, peluang SDM untuk ke luar negeri, sampai tahun 2015, diperkirakan 3,3 juta lapangan kerja. Sementara SDM TI dan komunikasi domestik berdasarkan proyeksi pertumbuhan industri teknologi informasi pada tahun 2010 dengan target produksi sebesar 8,2 milyar US$, dan asumsi produktivitas US$ 25.000 per orang, maka dibutuhkan 327.813 orang.

Sementara kebutuhan SDM pendukung industri non telematika diperkirakan satu kantor memerlukan 10 pekerja yang terdiri dari 1 orang administrator dan 9 orang operator telematika. Kebutuhan lain yang terserap adalah kebutuhan layanan publik untuk mengelola e-government. Diperkirakan memerlukan minimal 5.489 orang. Selain itu juga diserap untuk layanan komersial, untuk layanan informasi,

Secara keseluruhan, perkiraan kebutuhan SDM di bidang TI dan komunikasi untuk pekerja TI dan Komunikasi berdasarkan estimasi Kementerian Komunikasi dan Informasi dan Richardus Eko Indrajit ialah di tahun 2005 mencapai 26.385.822 atau 11,17% dan pada tahun 2008 diperkirakan akan mencapai 32.580.205 atau 11,91% dari penduduk Indonesia.

Ketersediaan SDM TI dan Komunikasi bersumber dari lembaga pendidikan, kursus-kursus, dan lembaga mandiri, masih berdasarkan estimasi tersebut tercatat, di tahun 2005 jumlah penduduk SDM yang tersedia di bidang TI dan komunikasi masih 4,52% dan diperkirakan akan meningkat sampai tahun 2008 menjadi 7,23%.

Salah satu upaya yang dilakukan pemerintah dalam pengembangan SDM tersebut adalah bersama sejumlah asosiasi mempelopori terbentuknya Lembaga Sertifikasi Profesi Telematika guna mewujudkan standar kompetensi nasional di bidang TI dan komunikasi. Dengan adanya sertifikasi kompetensi akan lebih mudah menyiapkan SDM TI dan Komunikasi yang dapat bersaing secara global.

Ketua LSP Telematika, Hidayat G. Tjokrodjojo beberapa waktu yang lalu, menambahkan salah satu tujuan pembentukan lembaga sertifikasi tersebut adalah melindungi tenaga kerja lokal yang sekaligus juga dapat dimanfaatkan memenuhi kebutuhan SDM di luar negeri.

Kondisi saat ini SDM Indonesia sering kalah bersaing dengan tenaga kerja asing hanya karena mereka tidak memiliki sertifikasi. " Padahal dari sisi kemampuan bisa bersaing," tandas Hidayat. Jika kondisi ini tidak segera diatasi, lanjutnya, bisa jadi tenaga kerja lokal kehilangan lapangan kerja di negeri sendiri. Nantinya, kata Hidayat, sertifikasi yang dikeluarkan Lembaga Sertifikasi Profesi Telematika juga dapat digunakan di luar negeri karena akan mengacu pada standar sertifikasi yang berlaku secara internasional.

Pemerintah melalui Keputusan Menteri Tenaga Kerja dan Transmigrasi RI Nomor: KEP-149/MEN/V/2005 tentang Akreditasi Lembaga Sertifikasi Profesi Telematika menetapkan Lembaga Sertifikasi Profesi Telematika sebagai sebagai pelaksana pengembangan Standar Kompetensi, Sertifikasi Kompetensi dan Pelaksana akreditasi unit-unit Tempat Uji Kompetensi pada suatu bidang profesi dan memiliki tanggung jawab teknis dan administrasi atas implementasi, pembinaan dan pengembangan standar kompetensi dan sertifikasi maupun LSP terkait.

Lembaga yang baru terbentuk awal Juni 2005 yang lalu ini dipelopori berdirinya oleh 7 asosiasi yang bergelut di bidang Teknologi Informasi dan Komunikasi. Asosiasi-asosiasi itu adalah: Asosiasi Pengusaha Komputer Indonesia (Apkomindo), Asosiasi Piranti Lunak Telematika Indonesia (Aspiluki), Ikatan Pengguna Komputer Indonesia (IPKIN), Masyarakat Telematika Indonesia (Mastel), Asosiasi Perguruan Tinggi Komputer Indonesia (Aptikom), serta Asosiasi Penyelenggara Jasa Internet Indonesia (APJII), Federasi Teknologi Informasi Indonesia (FTII).

Pemerintah sebagai salah satu partner LSP Telematika berusaha memfasilitasi asosiasi dalam mewujudkan standar kompetensi nasional di bidang Teknologi Informasi dn Komunikasi. Selanjutnya, konsentrasi ini lebih ditujukan untuk meningkatkan keberadaan masyarakat dalam menggunakan Teknologi Informasi dan Komunikasi dengan meningkatkan e-literacy ( melek komputer-red).

Menyadari pentingnya mempersiapkan SDM di bidang Teknologi Informasi dan Komunikasi, serta mensosialisasikan pentingnya sertifikasi profesi telematika di kalangan lembaga pendidikan sebagai penghasil calon tenaga kerja profesional maka Pemda Jateng bekerjasama dengan STMIK Pro Visi IT College dan Kadin akan menyelenggarakan Workshop Sehari berjudul: Implementasi Sertifikasi Profesi Telematika Indonesia, pada Jumat (28/7/05) mendatang bertempat di Gedung Java Design Center, Semarang.

Keynote Speaker dalam acara tersebut adalah Gubernur Jawa Tengah H. Mardiyanto sebagai. Sementara acara lainnya diisi dengan pembicara dari BNSP, BKSP dengan topik Sistem Sertifikasi Profesi Telematika. Pembicara lainnya dari Depkominfo dengan topik Norma dan Peluang Telematika Dalam Pembangunan Nasional. Pada Sesi kedua, pihak LSP Telematika akan membawakan topik: Penyelenggaraan Sertifikasi Profesi Telematika oleh Managing Director LSP Telematika Victor Terinathe

Read More......

Jasa Pembuatan Web, CD Interaktif, dan Perpanjangan hosting + domain

expr:id='"post-" + data:post.id' >

Bagi yang menbutuhkan bantuan untuk membuat web, company profile, cd interaktif, perpanjangan hosting dan domain silahkan hubungi :
andik_hrd@yahoo.com

Read More......

Di Lelang, beberapa mata uang Kuno

expr:id='"post-" + data:post.id' >

Dilelang beberapa mata uang rupiah kuno, diantaranya :

Rp 500 Th 1952











Rp 10 Th 1933











Rp 2,5 Th 1948












Rp 0,5 Th 1948

Rp 1 Th 1956

Rp 1 Th 1948

Bagi Kolektor yang berminat silahkan hub : andik_hrd@yahoo.com

Read More......

Domain Mapping and CO.CC

expr:id='"post-" + data:post.id' >

Domain Mapping and CO.CC

Domain Mapping is the process of pointing a registered domain name to a blog or photo album. Domain mapping is more than domain forwarding, because your permalinks and URL contain the address of your domain (www.you.co.cc), and not a sub-domain (example.blogspot.com).

You can map a CO.CC domain to your blog or photo album. In order to use domain mapping, you must create and modify A, MX, and CNAME records.
CO.CC supports free DNS services. This means that CO.CC gives you
control over the DNS records that describe your domain.

Read More......

Domain Redirect

expr:id='"post-" + data:post.id' >

CO.NR Free Domain Name project was developed to provide Free Domain Names or Free Subdomain of .CO.NR domain name to those who wish to get a cool and free domain name, free subdomain or free short URL, that looks like a real paid domain name:

Do you have a long website address, that is difficult to remember?

Do you want your website to look professionally without obtaining a paid domain name?

Do you often change your web hosting providers, so that you have to change your web
site address as well?

We have a perfect solution for you:

Signup for http://www.your-name.co.nr - free domain name!

and use this free domain name to access your website, no matter where it is hosted.
Of course, this service is absolutely free and we don't place any ads on your website!
Just setup a Free URL redirection with URL cloaking (url masking) and forward it to your real website url. We provide many other features, about which you can learn more here

Read More......