Bugtraq: AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

Bugtraq: AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS:

'via Blog this'

--vladget

mycld: spotscale - autoscaling solution for Amazon EC2 based on Spot Instances.


I've commited new debuged version today.
Please review: http://code.google.com/p/mycld/source/browse/

My Clouding exp.: mycld: spotscale - autoscaling solution for Amazon...

My Clouding exp.: mycld: spotscale - autoscaling solution for Amazon...: mycld: spotscale - autoscaling solution for Amazon EC2 based on Spot Instances. I've commited new debuged version today. Please review:...

New version of mycld released!


New features:
- OOP
- Logger (see the log dir: tail -f /root/mycld/logs/*.log)
- implemented: all adjustment types, works with more then one elb, something else, i dont remember all :)
- fixed: a lot of bugs

How to disable IPv6 at FreeBSD 9.x


add to /etc/rc.conf:

# IPv6 Networking
ipv6_network_interfaces="none"          # Default is auto
ipv6_activate_all_interfaces="NO"       # this is the default
ip6addrctl_enable="NO"                  # New way to disable IPv6 support
ip6addrctl_policy="ipv4_prefer"         # Use IPv4 instead of IPv6

more info here

-- vladget (Vladimir Getmanshchuk)

The Paranoiac's feeds:

The first one and the bigest one.
Feed List:
Security Mailing List Archive

Addition feeds:
National Vulnerability Database (NIST USA)
US-CERT Current Activity
Amazon Linux AMI Security Bulletins
FreeBSD ports collection

   

NoSQL from AWS called "Dynamo". LOL.



Amazon DynamoDB - Internet-Scale Data Storage the NoSQL Way
Posted: 18 Jan 2012 09:32 AM PST
We want to make it very easy for you to be able to store any amount of semistructured data and to be able to read, write, and modify it quickly, efficiently, and with predictable performance. We don't want you to have to worry about servers, disks, replication, failover, monitoring, software installation, configuration, or updating, hardware upgrades, network bandwidth, free space, sharding, rearchitecting, or a host of other things that will jump up and bite you at the worst possible time.

We want you to think big, to dream big dreams, and to envision (and then build) data-intensive applications that can scale from zero users up to tens or hundreds of millions of users before you know it. We want you to succeed, and we don't want your database to get in the way. Focus on your app and on building a user base, and leave the driving to us.

Sound good?


from aws blog

NEW VERSION 0.0.6 RELEASED!
POST UPDATED!

AWS auto-scaling for EC2 spot-instances!
How to implement.

mycld project at code.google.com

Requirements:

You must to have setup AWS auto-scaling or you have to setup it using this guide.
(btw. You need AWS Autoscaling CLI tools for setup your autoscaling.)

Make sure what your autoscalig configuration works correct on on-demand ec2 instances.
So your autoscaling configuration must have:
- lauch-config at least with options: --image-id value --instance-type value --group value[,value...] --key value, other options are optinal.
[--block-device-mapping "key1=value1,key2=value2..." ]  - still did not implemented!

- auto-scaling-group at least with options: --availability-zones value[,value...] --launch-configuration value --max-size value --min-size value --load-balancers value[, value]], other options are optinal.
[--desired-capacity value] [--grace-period value] [--health-check-type value][--placement-group value] [--vpc-zone-identifier value] -still did not implemented

- policies mandatory options: --auto-scaling-group --adjustment= --type --cooldown

- alarms: all except one: value of option: --dimension, can't be autoscaling metric like 
--dimensions "AutoScalingGroupName=MyAutoScalingGroup", because cloudwatch has no data for current scaling process.
I recommend You use loadbalancer metric, or use my common design for autoscaling: one on-demand instance at master role + scaleout  with spot-instance in slave role.



Also you need *nix like OS (FreeBSD, Linux, Mac OS X, etc) with:

 - PHP 5.3.x +
 - MySQL 5.x
 - AWSSDKforPHP (and all its dependents)
 - PEAR PHP Log

Installation:

1. Install dependencies

1.1 Make sure what PEAR has been installed and path included in include_path directive at your php.ini.
To adding directive to php.ini (where /usr/share/pear - path to you pear):

    # echo "include_path=\".:/usr/share/pear\"" >> /etc/php.ini

1.2 Discover pear channel and install AWSSDKforPHP(aka cloudfusion):

    # pear channel-discover pear.amazonwebservices.com
    # pear install aws/sdk

1.3 Config SDK:

    # cp -Rp /usr/share/pear/AWSSDKforPHP/config-sample.inc.php ~/.aws/sdk/config.inc.php
    # vim ~/.aws/sdk/config.inc.php (add your AWS security credentials to config)
    # chmod 600 ~/.aws/sdk/config.inc.php

1.4. Install Log package from PEAR:

    # pear install Log

 

2. Install mycld

2.1 Get the mycld from code.google.com

    # svn checkout http://mycld.googlecode.com/svn/trunk ~/mycld

2.2 Create MySQL database

   # mysql -u root -p < ~/mycld/db.sql

2.3 Config mycld for accessing your MySQL

    # cd ~/mycld/conf/
    # cp -Rp  db.ini.sample  db.ini
    # vim db.ini (change your mysql user and/or password)

Running:

1. Suspend you AWS autoscaling activities first:

    # as-suspend-processes MyAutoScalingGroup

2. Add cron job:

    # echo "*/5 * * * * root /root/mycld/mycld.cli.runner.php \

-s spotscale -a check -d >> /root/mycld/logs/spotscale-error.log \

2>&1" >> /etc/crontab 

Debugging:



1. Check what you are running mycld.cli.runner.php with "-d"'.

    # grep "mycld" /etc/crontab | grep "-d"

2. Watch logs:
 

    # tail -f ~/mycld/logs/*.log

How to implement AWS auto-scaling for spot-instances

I've described it at mycld blog:
http://mycld.blogspot.com/2012/01/aws-auto-scaling-for-ec2-spot-instances.html

-- vladget

Three Ways to Protect EC2 Instances from Accidental Termination and Loss of Data

http://alestic.com/2010/01/ec2-instance-locking

Searching through the AWS SDK for PHP documentation
http://blog.ryanparman.com/2011/02/27/searching-through-the-aws-sdk-for-php-documentation/

Really usefull for AWS developming for PHP!