Port Scanners

Port scanners and related network vulnerability scanners are not as effective as internal vulnerability scanners, but are much more fashionable tools. Neither port scanners, nor network vulnerability scanners are a silver bullet and both have a lot of limitations, especially for scanning DMZ with proxy and multiple firewalls. 

Scanning is also a favorite pasture of some category of people, who can be subdivided into two broad categories:

• Those who scan networks just because they can (in the absence of a more precise  definition we can call this category scanning kiddies). This category usually is easily detectable.
• Those who scan the network with the particular purpose (for example spammers hunting for open relays or for potential zombies). This category usually tries to hide their tracks and scans in such a way that probes they make are buried in the scan kiddies generated noise. 

With too much firewalls (and internal firewalls becoming a standard part for all Internet exposed servers) the tables are turned against scanners. Simple tricks like using DNS or SMTP ports for scanning are no longer that useful and generally against a well-configured firewall scanner cannot do much.  Also availability of honeypots create significant new difficulties: it is difficult to guess is the detected vulnerable server real or fake.

Still port scanning can be performed as  a "diff scan" based on previous scan results;  in this case the most interesting part is not "absolute" list of ports, but the differences with previous scan. For an example of this approach see localscan

Localscan is a Perl-based frontend for nmap. It allows the user to compare the results of an nmap portscan with the results of a previous nmap portscan made when the subnet or IP range being scanned was in a "known-good" configuration. Essentially, localscan allows the user to use a portscanner and ask "What new ports are open?" instead of just asking "What ports are active?"

That approach might be useful in monitoring hosts on a particular subnet.

Also all major OSes (Solaris, OpenBSD, Linux distributions like RedHat, Suse and  Mandrake ) have internal firewall modules enabled (on RedHat this in included into the installation menu so you can expect more systems that have this feature ;-) and thus do not expose externally all ports for services that are running anymore.  That additionally complicates the picture and make port scans much less useful. 

Some firewall admins go to an additional length and selectively blocks packets with low TTL filter.  Telnet and FTP are gradually became extinguished and SecureID and similar system are more and more used for DMZ authentication. That means that only HTTP, DNS and SMTP are left of really vulnerable services, but now they are limited to a few servers.  Still perimeter scanning has some value as a checking tool.

External perimeter scanning usually triggers IDSes including honeypot-based detection systems. So they should be switched off before scanning. 

Intranet scanning is much more useful especially for large corporation where nobody usually knows where internal networks ends ;-). They are also useful for finding unauthorized services, for example, web servers (common and marginally dangerous) or worse DHCP servers (uncommon but very dangerous :-) 

Also usually on corporate Intranet there are too many poorly configured systems, and many of them are located in remote places. Even on a large DMZ there can be dozens of systems with various level of patches, configuration errors/blunders, etc.

Putting internal scanner in some internal server and then performing log analyses require good understanding of internal infrastructure. That's why hired professional services usually produce such a low quality results.

For terminology for vulnerabilities please consult Common Vulnerabilities and Exposures. For the RPM download of most popular scanners see RPM resource

Nmap
A decent scanner, and used by many other programs to do the scanning. Reasonably fast and flexible scanner with many useful options.  Nmap also tries to do the OS fingerprinting and often makes a pretty good guess on the OS, and in some cases even the version (i.e. Linux kernel version).

Nessus
One of the best free UNIX based intrusion scanners. It's fast, and built around a client server architecture with encrypted communications between the client (Windows, UNIX or Java based) and the server (UNIX based). There is a language for writing plug-ins to do additional scanning and intrusion tests, so if you want to extend the product, or write custom modules you can do so. Nessus starts by scanning the target for open ports and attempts to fingerprint the OS, this is followed by a scan for vulnerabilities, with optional attempts to exploit them (optional since it may crash the machine or otherwise "damage" it). Nessus generates pretty decent output, with explanations of what the problems is, and how to fix it (generally speaking of course), you can also export the output to HTML files.

In lectures we will limit ourselves to just those two scanners.

Dr. Nikolai Bezroukov

NEWS CONTENTS

• 20090722 : SECURITY: Nmap 5.00 Released ( SECURITY: Nmap 5.00 Released, Jul 22, 2009 )

News

[Jul 22, 2009] SECURITY: Nmap 5.00 Released

Jul 22, 2009 | Insecure.org

"Insecure.Org is pleased to announce the immediate, free availability of the Nmap Security Scanner version 5.00 from http://nmap.org/ . This is the first stable release since 4.76 (last September), and the first major release since the 4.50 release in 2007. Dozens of development releases led up to this."

Continied

Recommended Links

Softpanorama Recommended

Top articles

Sites

See also Internet Control Message Protocol (ICMP)

• CS38 Home Page Network intelligence gathering. by Sergey Bratus (Dartmouth )

• [packet storm ] -- packetstorm.securify.com up-to-date list of major portscanners (and more)

• FOCUS on Linux Security Tools -- up-to-date list of scanners (and more)

• Nmap homepage -- has a good collection of links

• SecureZone! Index of SoftwareVulnerability_Finders

• ISS - Internet Security Systems -- IDS snake oil salesmen :-)

• TCP-IP Ports - nice page with a lot of links to resources about TCP/IP services port mapping.

Continued

Recommended Papers

• Improving the Security of Your Site by Breaking Into It
• SATAN- Security Administrator's Tool for Analyzing Networks
• Network Scanning Techniques -- decent
• Plugging Security Holes -- paper
• Holy Intruders! IP-Based Security Auditing Tools
• Network_magazine/System Fingerprinting System Fingerprinting With Nmap by Rick Farrow (2000).

Continued . . .

Defeating port scans

9th USENIX Security Symposium Paper Defeating TCP/IP Stack Fingerprinting Matthew Smart, G. Robert Malan, Farnam Jahanian

A practical approach for defeating Nmap OS-Fingerprinting

Camouflaging Nmap Scans July 17, 2003 - by Whistler,©HackinTheBox.

I like to hide my tracks whenever I am in the mood for a little snooping, or at least make it a little less obvious so I don't have to go through the bother of reapplying for another ISP account. Not as though it has ever happened before in this part of the world! Some of us possess that little nagging fear every time we fire up a port scanner and some of us are numb to any sensation what so ever. To those of you who suffer from bouts of emotional distress, I will show you in this article how nmap can be used to help camouflage your scans.

Reference

• Snort - The Open Source Network IDS Ports DB -- nice online database, where you can search any port

• IANA - TCP/IP Port Assignments (490K)

• TCP-IP Ports

• Trojan TCP/IP Ports companion page to TCP-IP Ports: ports used by trojan horse and backdoor programs.

Open Sourced Port Scanners

Nmap

Nmap is a one of the best generic network scanners. It supports ping scanning (determine which hosts are up), many esoteric port scanning techniques (determine what services the hosts are offering, even if they are firewalled), and TCP/IP fingerprinting (remote host operating system identification). All-in-all this pretty robust free generic port scanner.

• Homepage: http://www.insecure.org/nmap/index.html
• Changelog: http://www.insecure.org/nmap/#new
• Downloadpages: Linux.DaveCentral NMAP -- The Network Mapper
• RPM resource nmap

Scanning and Defending Networks with Nmap

Nmap addon tool -- nlog

Nlog is a set of perl scripts that allow you to search through your Nmap 2.x scan logs. Included is a conversion script and a complete CGI interface with 4 extensions and support for more. From your web browser you can search for all hosts with any given port open, operating system, sequence index, or IP address and query common services through the extension scripts.

Nessus

Brief Description: A free, open-sourced and easy-to-use security auditing tool. Nessus is probably the best open-sourced and easy-to-use security auditing tool for Linux, BSD and some other systems. It is multithreaded and plugin based, and has a nice X11 interface. It's extendable using NASL, (Nessus Attack Scripting Language) language (security checks can also be written in C). Nessus does not believe that the target hosts will respect the IANA assigned port numbers. This means that it will recognize a FTP server running on a non-standard port (31337 say), or a web server running on port 8080. The current version performs more than 200 security checks against the remote networks.

Lokks like the best bet among open source scanners. See also

• Nessus Project -- official web site
• SecuriTeam.com (Nessus the free, open-sourced and easy-to-use security auditing tool.)
• Network Computing Feature Security Vulnerability Assessment Scanners Page 2 January 8, 2001

The Nessus program consist of two parts, a server (it does the work of finding the holes, and reporting them back to the client) and a client (it does the work of displaying the results found by the server counterpart).

The server can be installed on a variety of UNIX boxes (including: Linux, BSD and Solaris) and on Windows NT.

There are a variety of clients. One is a GTK based program that can run on any UNIX machine running GIMP, the second is a Java based program (which can be runned on a Windows machine and on an UNIX machine), the third is a Win32 based program (making it possible to run off any Windows NT/95/98 machine).

• Plug-in architecture. Each security test is written as an external plugin. This way, you can easily add your own tests without having to read the code of the nessusd engine
• NASL. The Nessus Security Scanner includes NASL, (Nessus Attack Scripting Language) a language designed to write security test easily and quickly (security checks can also be written in C).
• Up-to-date security vulnerability database. We mostly focus on the development of security checks for recent security holes. Our security checks database is updated on a daily basis, and all the newest security checks are available here and on your FTP servers and mirrors.
• Client-server architecture. The Nessus Security Scanner is made up of two parts : a server, which performs the attacks, and a client which is the frontend. You can run the server and the client on different systems. That is, you can audit your whole network from your personnal computer, whereas the server performs its attacks from the main frame which is upstairs. There are several clients : one for X11, one for Win32 and one written in Java
• Can test an unlimited amount of hosts at the same time. Depending of the power of the station you run the Nessus server onto, you can test two, ten or forty hosts at the same time
• Smart service recognition. Nessus does not believe that the target hosts will respect the IANA assigned port numbers. This means that it will recognize a FTP server running on a non-standard port (31337 say), or a web server running on port 8080
• Multiples services. Imagine that you run two web servers (or more) on your host, one on port 80 and another on port 8080. When it will come to testing their security, Nessus will test both of them
• Tests cooperation. The security tests performed by Nessus cooperate so that nothing useless is made. If your FTP server does not offer anonymous logins, then anonymous-related security holes will not be performed.
• Cracker behavior. Nessus does not believe that version x.y.z of a given software is immune to a security problem. 95% of the security checks will actually perform their job - they'll try to overflow your buffers, relay some mails, and even to crash down your computer !
• Complete reports : Nessus will not only tell you what's wrong on your network, but will, most of the time, tell you how to prevent crackers from exploiting the security holes found and will give you the risk level of each problem found (from Low to Very High)
• Exportable reports : The Unix client can export Nessus reports as ASCII text, LaTeX, HTML, "spiffy" HTML (with pies and graphs) and an easy-to-parse file format.
• Multilingual support. Nessus can issue reports in English or in French. More languages are to come.
• Independent developers. The Nessus developers are independent from the rest of the world, so we will not hide a security vulnerability in the program XYZ because we have a contract with them.

Actively maintained as of Jan 2001.

Sara

SARA - Security Auditor's Research Assistant -- The Security Auditor's Research Assistant (SARA) is a third generation security analysis tool that is based on the SATAN model which is covered by the GNU GPL-like open license. It takes the advantage of nmap if present. The author of SAINT, Bob Todd, later joined Advanced Research and has been working on SARA. the important plus is that it interfaces with 3rd-party products, such as NMAP and not reinventing the wheel.

Actively maintained as of Jan 2001.

Saint

SAINT http://www.wwdsi.com/saint/(Security Administrator's Integrated Network Tool) is a security assessment tool based on SATAN. This not the same thing as outdated Satan scanner... See also freshmeat.net Project details for Saint

SAINT (Security Administrator's Integrated Network Tool) is a security assesment tool based on SATAN. Features include scanning through a firewall, updated security checks from CERT & CIAC bulletins, 4 levels of severity (red, yellow, brown, & green) and a feature rich HTML interface.

Homepage:
http://www.wwdsi.com/saint/

RPM package:
ftp://ftp.wwdsi.com/pub/saint/RPM/

saint-3.4.4-1.i386.rpm as of Feb 2002.

Perl-based

pscan Portable Perl Port Scanner

nss (Network Security Scanner) - NSS is a perl script that scans either individual remote hosts or entire subnets of hosts for various simple network security problems. nss is a perl script that scans either individual remote hosts or entire subnets of hosts for various simple network security problems. The majority of the tests can be performed by any non-privileged user on a typical Unix machine. The only test currently being performed that requires root privileges is the check for a bad hosts.equiv file. This test requires that a fake username (e.g., bin) be fed into rexec. Ethical (and possibly legal) concerns limit the tests that nss will run. nss will not create any files on remote machines nor will it run any non- trivial programs on remote machines. The only non-standard external program it invokes is ypx, a program that attempts to download the password map from a NIS server. ypx was posted in comp.sources.misc and in archived in volume 40. nss also requires the ftplib.pl package if you are running perl version 4.x. ftplib.pl is available from several perl archives such as ftp://anubis.ac.hmc.edu:/pub/perl/library/ftplib.pl.gz This program was developed on a DECstation 5000 running Ultrix 4.4. It has had superficial portability checks made under SunOS 4.1.3 and Irix 5.2 but extensive work has not been performed from those platforms. Copyright 1995 by Douglas O'Neal

The majority of the tests can be performed by any non-privileged user on a typical Unix machine. The only test currently being performed that requires root privileges is the check for a bad hosts.equiv file. This test requires that a fake username (e.g., bin) be fed into rexec. Ethical (and possibly legal) concerns limit the tests that nss will run. nss will not create any files on remote machines nor will it run any non- trivial programs on remote machines. The only non-standard external program it invokes is ypx, a program that attempts to download the password map from a NIS server. ypx was posted in comp.sources.misc and in archived in volume 40. nss also requires the ftplib.pl package if you are running perl version 4.x. ftplib.pl is available from several perl archives such as ftp://anubis.ac.hmc.edu:/pub/perl/library/ftplib.pl.gz This program was developed on a DECstation 5000 running Ultrix 4.4. It has had superficial portability checks made under SunOS 4.1.3 and Irix 5.2 but extensive work has not been performed from those platforms. Copyright 1995 by Douglas O'Neal Everyone is granted permission to use and distribute this program provided that this copyright notice is retained in all copies distributed. Inclusion of this software in any commercial product without the express permission of the author is prohibited. This software is provided "as is" and without any express or implied warranties including the implied warranties of merchantibility and fitness for any particular purpose. In no event shall the authors or contributors be liable for any direct, indirect, incidental, special, exemplary, or consequential damages arising out of the of this software. Written by: Douglas O'Neal [email protected]

Other

• exscan 0.4 http://exscan.netpedia.net/exscan.html -- exscan is a network/Internet port scanner. It uses the "strobe-scan" technique, which means exscan only scans for certain services, instead of scanning a range of ports. The key feature of exscan which makes it different from other port scanners, is that it returns information on what is running. For example, if the target computer is running a FTP server, exscan will tell you what FTP server is running. In version 0.3, the remote operating system identification will let you know what operating system the target of your scan is running.

• GtkPortScan http://www.calpoly.edu/~rbarrero/gtkportscan.html GtkPortScan is a functional Gtk+ port scanner for Linux that is very simple to use. It features dialog boxes for IP address, start port, stop port, a CList windows for returned ports along with buttons for your clicking needs. It will scan an IP address and let you know of the open/available ports through a GUI interface that is user-friendly.

• PortScanner http://www.ameth.org/~veilleux/portscan.html Simple and easy to use TCP port scanner. Very small, compact and functional. Compiles relatively cleanly on the Corel Computer NetWinder.

• IP Ultra Scan 1.5.25 (Freeware) IP Ultra Scan is a program to perform a ping on an entire class C IP address range or any portion of it, to indicate the IP addresses in use.
• Scanport 1.1 (Freeware)ScanPort is a tool which allows to scan TCP ports on an IP address range.

• IPPS http://www.lmn.pub.ro/~bruno/ipps/ IPPS is a TCP/IP Port Scanner which provides custom port scan range, subnet scan after the netmask of a host in that network, specified source port for the scan, output to file for letting it work all night without redirecting output in a huge command line.

Specialized port scanners

relaycheck

relaycheck scans a network for SMTP hosts that permit "relaying" of email. These servers are vulnerable because a 3rd party could come in and use the mail server to relay mail through the server for the purpose of spamming. relaycheck is a pretty crude tool, but it's fast and functional. It requires perl and libwww.

ftpcheck

ftpcheck scans hosts and networks for FTP and anonymous FTP archives. It was written as a security analysis tool. ftpcheck is very fast. It can effectively scan a class C network for anonymous FTP sites in less than 5 seconds. It does this by starting a new process for each connection. ftpcheck requires perl and libnet (from CPAN).

Commercial Scanners

ISS

• ISS - Internet Security Systems
• Product Literature
• Whitepapers
• Internet Scanner consists of three integrated modules for scanning intranets, scanning firewalls, and scanning web servers.
• Internet Scanner 5.8 beta for Windows NT

WebTrends Security Analyzer

SecuriTeam.com (WebTrends release Security Analyzer)

WebTrends's Security Analyzer home page can be found at: http://www.webtrends.com/products/wsa/default.htm

NetSonar

Cisco Systems' NetSonar Vulnerability Scanner and Network Mapping System 1.0 ($20K traveling license, support contract is extra)

• NetSonar

• NetSonar Security Vulnerability Scanner

Ballista

Secure Networks' Ballista Security Auditing System 2.4.

Netective (now Bindview product)

Network security hole scanning, network hacking protection

Specialized Scanners and Related Tools

CiscoAuditingTool g0ne <g0ne at shell.scrypt.net> - May 23rd 2000, 22:30 EST

Cisco Auditing Tool is a Perl script which scans cisco routers for common vulnerabilities. It checks for default passwords, easily guessable community names, and the IOS history bug. Includes support for plugins and scanning multiple hosts.

NBChk skalore <skalore at sd2600.net> - November 14th 1999, 14:35 EST

NBChk is a multi-threaded Perl banner-checking utility that is fully configurable and can scan a full/partial class-C network, hosts from a file, or a single host for configured vulnerabilities.

HTTP

R a i n F o r e s t P u p p y Whisker CGI Scanner -- Perl based. Somewhat perverted, but still usable.

Includes the following features:
1) The CGI directory can be pre-defined from the default '/cgi-bin', to your own choosing, or a set of well-known CGI paths.
2) Before checking for vulnerability Whisker will verify that the CGI directory exists, and that the CGI itself exists, reducing the number of false positives.
3) The server type and version is checked prior to any testing, reducing checks for unsupported CGIs (i.e. test for details.idc vulnerability on an Apache server is futile, since this is an IIS vulnerability).
4) Virtual Hosting is fully supported, allowing Whisker to test vulnerabilities against sub-domains within the same server (a feature not supported by all CGI scanners).
5) Whisker can be taught to see through custom made "success" pages, which are usually a result of "not found" errors (this minimizes false positives).
6) Whisker was written in Perl for easy portability and manipulation.
7) Interoperability between products/files such as command separated files, nmap result file, IP subnets and etc.
8) Written in a script language that enables people to easily add new scanning scripts.

DNS

• Doc (Domain Obscenity Control) by Steve Hotz Paul Mockapetris
  Doc is a program that diagnoses misbehaving domains by sending queries to the appropriate DNS nameservers and performing simple analysis on the responses. Doc verifies a domains proper configuration and it is functioning correctly. The only required parameter is the valid domain name of a domain. Important: Doc requires version 2.0 of the DNS query tool `dig` domain internet groper.
  
• Argus -- A powerful tool for monitoring IP networks. It provides tools for sophisticated analysis of network activity that can be used to verify the enforcement of network security policies, network performance analysis, and more.
  
• Arpwatch -- An Ethernet monitor program that keeps track of Ethernet/IP address pairings.
  
• Icmpinfo -- Displays unusual ICMP messages received by a host. This can be used to detect suspicious network activity.
  Additional Info: icmpinfo man page
• Rscan -- A extensible network scanner that checks for common network problems and SGI specific vulnerabilities.
  Additional Info: Rscan: Heterogeneous Network Interrogation
• Netlog -- Network logging and monitoring of all TCP and UDP connections on a subnet. Netlog also includes tools to analyzing the output.
• cgichk 2.40
  Fortyseven <hac at nospam.digivill.net> - July 28th 2000, 09:28 EST

  cgichk is a Web vulnerability tool that automatically searches for a series of interesting directories and files on a given site. It also includes a whois lookup.

  Changes: All directory/file strings have been moved outside of the program into config files so you can edit them without having to recompile. The config file should be now be easy to understand. The -F and -I switches have been changed to lowercase. The options -C (to specify an alternate config file) and -W (to specify an alternate whois server) have been added.

  Urgency: low

Random Findings

Study Guides for testing, reading, writing, and classroom participation -- interesting side link !!!

NTOScanner126.exe -- The fast TCP/IP port scanner for Windows NT platforms? NTO Scanner v1.26 has been clocked scanning 5,000 ports ine 8 seconds and all 65k in 3:30 mins. It scanned 1,200 ports on 50 hosts in 3 minutes. 5 star Freeware from NT OBJECTives, Inc.. 457.656 kb.

Etc

Society

Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy

Quotes

War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotes :  Somerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose Bierce :  Bernard Shaw : Mark Twain Quotes

Bulletin:

Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law

History:

Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOS :  Programming Languages History : PL/1 : Simula 67 : C : History of GCC development :  Scripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-Month :  How to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Hater’s Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D

The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: March 12, 2019