Wednesday, November 15, 2017

Immense value of Microsoft Graph API

When Yahoo shut down Yahoo pipes,  I was dissapointed.  Google also tried to have a Mash-up system. Mozilla has been in this space too with a natural language derived system.  When tech giant Microsoft put forth their Graph API, I was skeptical but Microsoft has several advantages. First of all they created Visual Studio and Visual Studio code.  During the 2017 Powershell Conference presentation on the state of Powershell, Jeffrey Silver explained that Microsoft Powershell and Microsoft code is not simply a port for Linux but a powerful recreation of the editor and language that could be useful for Linux administration.  All this to say Microsoft Visual Studio is a mature professional product.  Other technologies such as Microsoft Office 365 are valuable assets as far as natural language processing is concerned.  Microsoft is considered a leader in the enterprise email space.
Microsoft created their first edition of Microsoft word in 1983.

Sharepoint is a leader in organizations communicating internally to other employees.  Because of the increasing amount of videos and voice communications and texts natural language processing is an important part of sharepoint.  Microsoft expressed desires to make determinations about how to allocate resources easier by using natural language processing. For example whom is talking to who within an organization.  Here is a picture from almost three years ago:
Today,  three years later, Microsoft connects with many Microsoft services.

Microsoft Delve is used to aggregate data across office 365. An example is and can tell a person if they are spending too much time at meetings and can aggregate data from emails about what meetings to skip if a person is double scheduled. It can be used to plan active directory federation services. 


Microsoft Flow is another utilization of Microsoft Graph. It can be used in automating workflow online such as posting files online or over a hundred social sites online including Twitter or Salesforce and can be embedded within your own applications.  It could be used to get notifications. Buttons are created and are like Macros except they require almost no coding.  Also triggers wait for an event to happen such as an email from a boss could be forwarded and others ignored. 

There are a couple different prices for Microsoft flow but there is also a free version which could be a mobile version.

The Microsoft Flow could be especially powerful when combined with Microsoft CRM or Skype for businesses.

When a part of Microsoft 365 your company can view your email address. Another caviot is at the present time is the only way to share a workflow is globally.  There might be a way in the future to only share the workflow.

For more information be sure to check out: https://docs.microsoft.com/en-us/flow/guided-learning/get-started

Containers are the next phase in IT advancement

Virtual machines were once the defacto way of running an infrastructure on a single server.  This needs to change because of patching levels on each virtual server.  Some system administrators install the entire GUI which is ring 1 on Windows server meaning when the graphics card is slowed down by doing many calculations,  the server cannot run.
When the GUI crashes this causes a blue screen of death on a windows server.  To avoid this, the system must be as simple as possible.



The part of a car which requires the most servicing is the transmission.  This is because it is the most complex.


The ignition system is closely integrated with the transmission.

To reduce complexity,  might I suggest containers so everything can use one operating system. Like the sandbox,  containers isolate pieces of the programs into segmented different pieces called microservices.  Micrroservices are like Lego's,  a single process is run in each.  

Each microservice communicates with other microservice through an API or programmable interface.  

Programmers who use object oriented programming languahe's such as C++ and Java are familiar with the concept of reusing code by stringing classes together.  Why invent the wheel if someone else has used tested code and are confident that it would help someone else?
=
The right step for you and your organization might be to use docker.  Docker is a cross platform and can work natively on Linux or Windows server 2016 and greater. It also works with the cloud service such as EC2 or Azure. It can but it does not have to run on a cloud infrastructure.

The reason they chose a whale with some shipping containers is that they want to show compare the generic shipping containers with how shipping companies saved money when they used standard sizes.  When I was a kid I had three toy dump trucks,  a large Tonka dump truck,  a medium sized one.  When there were large tasks I used the large dump truck.  


Real dump trucks have fuel economics to deal with so there is a great cost for using the large dump truck as compared to one trip with its smaller counterpart.



 In computing a slightly larger container is used than what might be the current case because of future modifications. 
Hard disks are divided into bits which are a binary yes and no. 
In arrays,  seemingly consecutive pieces of the hard drive are used.


There are two versions of Docker,  a community model and an enterprise model. 

It can be possible to use the community edition and combine it with other projects such as Terraform to begin with. When starting off with a workflow it can be intimidating.
There are wizards for provisioning new microservice nodes which are collected into pods to form a single service.

Kubernetes is an open source system for automating deployments. 
Kubernetes was created by Google engineers and can load balance for fault tolerance and load balancing.  Google is described as using not special task oriented hardware but using a lot of commodity hardware. The acronym RAID stands for redundant array of inexpensive disks.  The goal of RAID is to alow for failure.  Failure of hard disks and other hardware components is a part of every data center and should be embraced and planned for. Do not plan to avoid failure otherwise when the unexpected happens you would be surprised rather than prepared. 

I found that Hashicorp did some other products besides Terraform like Vault and many are implemented in the Mantle.io which is now a division of Cisco.  For a while Cisco has been a leader in the software defined networking space. They are a leader in the routing and switching sector of information technology. They have industry recognized exams in cloud artitcture.

Another dependable but not free solution was put forth by VMWare in a 2017 VMWorld convention which is Vsphere integrated containers. They, like the paid version of Hashicorp do reporting for legal compliance. I hope to study this more to do further blog reports. 

Sunday, October 8, 2017

New paper posted on the motivation to hack

I published an article on the motivation to hack and posted it on Academia.edu figshare and researchgate. I am working on a dirivative of this work and plan on submitting it to IGI Global.

Cancer research directions

I have been doing research on: What role does memory adaptation play in cancer?
It seems to me like the sympathetic nervous system plays a part in allergies. In a grossly simplidied model the overactive nervous system responds to olfactory stimulus that short circuits the brain and demands a bodily response. Cough suppressant such as tesslon perls contain such nerve agents as novacane and codeine which suppressant pain. When there is too much pain, the nervous system shuts down causing fatigue. According to BF Skinner squid experiment when a squid received a electric shock, learning occurs. There has long been a connection between pain and allergies often hypothesised to be caused by inflammation. Inflammation is a reaction triggered possibly by interleukin 5 increase as a result of irritation. A to IL 5 causes eosinophils which is formed in bone marrow and bone marrow is responsible for filtering blood.
1) it feasible that much like the BF Skinner squid allergies have an initial encounter and the mind because of Hebbian learning memory adaptations are made that are autonomous and subsequent encounters are perceived and cause a reaction?
2) If the answer to question 1 show correlation, is it possible to unlearn this. Calcium may play a role in learning. By injecting the body with Leucovorin Calcium or Bevacizumab plus irinotecan, fluorouracil show that there might be a chance to form a stronger association with other connections.
3) Is the rate between people with cancer without allergies relate to people with allergies and cancer?
4) Can 5 relate to IL3? Can IL5 serve as the precursor to IL3?
Works Cited
Beason, T. May. "Physician Fact Sheet Sensory Processing Disorder Signs and Symptoms." Citeseer.org. Spiral Foundation, 2006. Web.
Doty, Richard L., Paul Shaman, Charles P. Kimmelman, and Michael S. Dann. "University of Pennsylvania Smell Identification Test: A Rapid Quantitative Olfactory Function Test for the Clinic." The Laryngoscope. John Wiley & Sons, Inc., 12 May 2009. Web.
Driver, Jane A. "Inverse Association between Cancer and Neurodegenerative Disease: Review of the Epidemiologic and Biological Evidence." Researchgate. Researchgate Gmbh, 24 Aug. 2014. Web.
Harrison, Pam. "Alzheimer’s Associated With Reduced Cancer Risk; AD Risk Less in Some Cancer Patients." Medscape. Webmd, 18 Sept. 2010. Web.
Mellville, Nancy A. "Power Over Pain' Intervention Tackles Perception of Cancer Pain." Medscape. WebMD, 23 May 2017. Web.
Musicco, MD Massimo, PhD Fulvio Adorni, MSc Simona Di Santo, MSc Federica Prinelli, MD Carla Pettenati, MD Carlo Caltagirone, and Katie Palmer PhD And. "Massimo Musicco." Neurology. N.p., 23 July 2013. Web.
Rane, Sushil, E Premkumar Reddy1 Reddy, and Anita Korapati. "IL-3 Signaling and the Role of Src Kinases, JAKs and STATs: A Covert Liaison Unveiled." Nature News. Nature Publishing Group, 22 May 2000. Web.
Sears, Robert W., and William Sears. The Allergy Book: Solving Your Family's Nasal Allergies, Asthma, Food Sensitivities, and Related Health and Behavioral Problems. N.p.: Little, Brown, 2015. Print.

Vaughn, Don. "Neurohacking: Rewiring Your Brain." YouTube. TedxULCA, 09 July 2015. Web.

Sunday, September 3, 2017

While brute force hackers are a dime a dozen, the best ones do threat footprint analysis. To counter this, answer the following questions
1) analyze what the computer artitecture looks like by drawing it out on a whiteboard. If someone disagrees with what you are drawing as far as what the assets are, do not be quick to argue with them. This can be a great learning process.

2) By identifying the needs and business requirements of the network, it can be easy to simplify it and make assessments about what the Crown Jewels are and motivation to hack the network.

3) utalize tools such as Microsoft Threat Analyzer. I would include the URL but there are constantly new versions. By using a service analysis of what is running, it can pull i commonly known exploits for each service and how best to integrate them.

There is a trade off between policy and usability. By knowing the business requirements of the network, creactivity can be given as to how to mitegate these threats.


Dangerous constructors, nasty monkey patching

Many coders think of code as legos, not taking their inner workings into account until something goes wrong. This is particurally concerning for factory constructors that are not specifically coded for the business needs of the consumer and utalize fields that the developer may or may not be aware of. These can invoke deconstructors which can be harmful to the stability of the computer. This occurs through encapsulation and is known as constructor poisoning somrtimes using monkey patching. Wikipedia defines monkey patching as "a way to extend or modify the runtime code of dynamic languages (e.g. Smalltalk, JavaScript, Objective-C, Ruby, Perl, Python, Groovy, etc.) without altering the original source code". One way of monkey patching is using the corflags.

Wikipedia goes on to say there are vulnerabilities such as
  • Replace methods/attributes/functions at runtime.
  • Modify/extend behavior of a third-party product without maintaining a private copy of the source code.
  • Apply a patch at runtime to the objects in memory, instead of the source code on disk.
  • Distribute security or behavioral fixes that live alongside the original source code.

In 31 March of 2017 the Register Magazine published a story regarding the Windows 2003 server IIS server and Microsoft does not want to fix this end of life product (https://m.theregister.co.uk/2017/03/31/microsoft_wont_patch_server_2003/). This vulnerability is posted on Github here: https://github.com/edwardz246003/IIS_exploit Another exploit that uses this is MS15-034.

When manipulating the global assembly cache that synch between servers that are in large corporations such as internet service providers, One of the most prevelent web exploits is Blackhole in 2012. https://renouncedthoughts.wordpress.com/2013/01/04/exploring-and-manipulating-the-gac/
Because the 32 bit runtime is not checked as often as the 64 bit and the 32 bit version is not checked as often, there are malware distributed specifically to 32 bit computers this way. One such example is the Darkknight Trojan discovered in early September of 2017 according to Threatexpert. This code lives in appdata and displays fake error messages to the user in hopes they click "OK". http://www.threatexpert.com/report.aspx?md5=897cd0d6eed8cbf379abb957d313014e

Ways of limiting declarations in JavaScript ES 6 is to know the difference between let, var, and const. The difference can mean deadspace or the subtle linking of libraries that can be malicious.

The const is defined by Mozilla as "The const declaration creates a read-only reference to a value. It does not mean the value it holds is immutable, just that the variable identifier cannot be reassigned. For instance, in the case where the content is an object, this means the object's contents (e.g., its parameters) can be altered.
All the considerations about the "temporal dead zone" apply to both let and const. The difference is scoping. var is scoped to the nearest function block and let is scoped to the nearest enclosing block, which can be smaller than a function block. Both are global if outside any block.
A constant cannot share its name with a function or variable in the same scope.
According to https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/let
let allows you to declare variables that are limited in scope to the block, statement, or expression on which it is used. This is unlike the var keyword, which defines a variable globally, or locally to an entire function regardless of block scope.
On stack exchange exebook writes about how the let name is chosen "

down voteaccepteLet is a mathematical statement that was adopted by early programming languages like Scheme and Basic. Variables are considered low level entities not suitable for higher levels of abstraction, thus the desire of many language designers to introduce similar but more powerful concepts like in Clojure, F#, Scala, where let might mean a value, or a variable that can be assigned, but not changed, which in turn lets the compiler catch more programming errors and optimize code better. JavaScript has had var from the beginning, so they just needed another keyword, and just borrowed from dozens of other languages that use let already as a traditional keyword as close to var as possible, although in JavaScript let creates block scope local variable instea

down voteaccep
Let is a mathematical statement that was adopted by early programming languages like Scheme and Basic. Variables are considered low level entities not suitable for higher levels of abstraction, thus the desire of many language designers to introduce similar but more powerful concepts like in Clojure, F#, Scala, where let might mean a value, or a variable that can be assigned, but not changed, which in turn lets the compiler catch more programming errors and optimize code better. JavaScript has had var from the beginning, so they just needed another keyword, and just borrowed from dozens of other languages that use let already as a traditional keyword as close to var as possible, although in JavaScript let creates block scope local variable instead.
The let variable can be but not necessary recommended to be backfilled. It can also enumerate constructors without using clojure.

Mozilla defines var as Variable declarations, wherever they occur, are processed before any code is executed. The scope of a variable declared with var is its current execution context, which is either the enclosing function or, for variables declared outside any function, global. If you re-declare a JavaScript variable, it will not lose its value.
http://www.rubypigeon.com/posts/4-ways-to-avoid-monkey-patching/

https://github.com/getify/You-Dont-Know-JS/blob/master/scope%20%26%20closures/ch3.md

https://stackoverflow.com/questions/762011/whats-the-difference-between-using-let-and-var-to-declare-a-variable

http://www.reigndropsfall.net/2010/06/15/monkey-patching/

https://hacks.mozilla.org/2015/07/es6-in-depth-let-and-const/

https://blog.mozilla.org/addons/2015/10/14/breaking-changes-let-const-firefox-nightly-44/




Thursday, July 6, 2017

Comcast issues might be solved with DNS

To all who might be still struggling to get connectivity due to issues with the comcast fire near Puyallup: Try changing your DNS to 8.8.8.8 which is Google DNS or Cisco Open DNS which is 208.67.222.222 or 208.67.220.220 Google android automatically uses Google DNS so it might work and another device ie windows or linux does not. Not sure if IOs uses a DNS proxy. This might affect the comcast backbone which is refersto one of the principal data routes between large, strategically interconnected networks and core routers on the Internet. ... Internet backbones are the largest data connections on the Internet. They require high-speed bandwidth connections and high-performance servers/routers.

windows 10 cumative update KB4032695 which was a major version, although Microsoft has a distributed servers across the globe means people in Washington state are getting a substantial download.

From KOMO PUYALLUP, Wash. - Phone service to thousands of customers in Puyallup and Sumner was cut overnight after a blaze caused by fireworks melted fiber-optic cables, officials said.

Sources: https://community.spiceworks.com/tools/internet-out-heatmap/#lat=44.641768382022164&lng=-118.14055681228639&zoom=5

https://www.akamai.com/us/en/solutions/intelligent-platform/visualizing-akamai/real-time-web-monitor.jsp

http://komonews.com/news/local/10000-lose-phone-service-in-puyallup-after-fireworks-blaze-melts-fiber-optic-lines

http://q13fox.com/2017/07/05/fireworks-likely-sparked-fire-that-disrupted-comcast-service-in-puyallup/

https://patch.com/washington/puyallup/fireworks-fire-damages-puyallup-phone-internet-lines