Mypapit Computer related circle of feeds

Items by ~ayoi~

#fakap community speaks

Degree holder jokes (Pun intended)

Posted: May 9th, 2007, 12:15pm MYT by ~ayoi~

Perhaps sometimes I do express my disappointment on our degree holder colleagues in the company and to be specific in my department. I guess these jokes are really nice :))

1st

There was a degree holder walking into a company's lobby for a walk-in-interview. There were few other people there as well. So after a brief interview with the HR guy there, the degree holder was given a broom to his surprise.

"But I have a degree" He protest

"Ahh... I almost forgot." Replied the HR guy and took the broom from the degree holder's hand. "Okay, this is how we use the broom."

2nd. (Okay this one is taken from Reader's Digest April 07- Laughter is the best medicine)

"What starting salary are you looking for?" The HOD of human resources asks the newly graduated engineer at the end of the job interview.

Going for it, the guy says "Well, sir, I was thinking about $125,000 a year, depending on the benefits package."

"OK," The HR Director says.
"How about five weeks vacation, 14 paid holidays, full medical and dental benefits, a big office and a Porsche for your company car?"

The degree holder gasps and says "Wow! Are you kidding?"

"Yeah," The Director replied.
"But you started it."

That sums up everything eh? Keh keh kehJ2ME Mobile Programming Pitstop
Kepada sesiapa yang berkenaan

Posted: December 23rd, 2006, 2:39am MYT by ~ayoi~

Is it so hard to..

..detect and report an incident? This is (i dun know how many times) my group detected/ has to report an incident that happened before our shift time! If you think that this job is

a) boring. (Fuck you, it’s boring because you didn’t learn a shit and just dun want to learn)

b) Relaxing (If you want this job for the sake of having a job, fuck you again! Every job has its own responsibilities and you have to perform all its task. I dun mind if you want to relax but do your job 1st. Work smart laaaa oiiiiiiiiii!!!)

If you think that you don’t need to perform all your task, aquire the necessary skills and knowledge, then please be fair to others who want your job and who perform their task properly, please resign and find any job somewhere else so that others can take your place. Damn it!

I’m not that good but hell we learn everyday to make ourselves competent in doing our job. Are you competent? For most of you the answer is FUCKING NO!

Any problem? I am more than grateful to read your emails and comments

p/s: This is the same posting in my blog. Just to make sure that those "people" to read. Damn YOU!!
Whut r u trying to prove mate?

Posted: October 5th, 2006, 6:17am MYT by ~ayoi~

This interesting conversation last for quite some time. It started when this fella said that he bought honda civic 1.8 at RM 113K ++. Then when I asked whether 1.8 using i-vtec engine, he answered that only 2.0 using i-vtec buat 1.8 just using vtec engine. The truth is both of the car using 4-cylinder, 16 valves, chain drive i-vtec engine. The diff is while 1.8 using SOHC i-vtec, 2.0s using DOHC i-vtec engine.

U must atleast know basic spec for ur car rite? Even I (the buta one when talking about car/engine/etc) know that my Hyundai Accent using SOHC 12V engine and yeah it's 1.5l car. Well I spent 65K++ for that car, of cos i need to know whut I bought. Btw I will definitely know bout my car if I bought the 2006 new civic. Hehehehehehehe

And then he said that he got 2.88% interest rates for the RM 90K (he claimed that he paid RM 20K for downpayment)he loaned from Maybank and remarkably that the duration of his loan is 9 years. Do you believe that? :D

p/s: if it's true, can anyone inform me so I can apologyize to that fella and might as well I apply for one for myself :P

And below is the excerpt from the log. hehehehe (read more abt the log HERE)

04:58 ko tau eazam
04:58 ari tu
04:58 aku dpt satu tander
04:58 pastu kompom baik nye garu jubo
04:59 woh
04:59 jd suplier ikan bilis
04:59 hahahahaha
04:59 supply mana?
04:59 Dirty side of chem eng
04:59 Hahaha
04:59 suplier kat pasaraya GIANt
*********** snip********************* 05:00 susah woo..
05:00 aku jumpe
05:00 org lame yg dpt tander tu dulu
05:00 die ckp mcm tu laa..
05:00 he he he
05:00 time musim tengkujuh..
05:00 ye ler
05:00 kalau aku la org offer tender
05:00 dia tamau ko amik tender tu
05:00 tetiba org lama bitau
05:00 stock abis..
05:00 payah woooooooo
***********snip*******************05:01 kalo jd nieh..
05:01 spender memang senang
05:01 hahahaha
05:01 Hatta tender supply toilet paper pun susah
05:01 ya
05:01 die nk bg aku direct ke HOngkong
05:01 giant kat sane..
***********snip********************05:01 a'aah
05:01 GIANt HONGKONG
05:01 giant kat sane.. *********snip**********************

05:01 dah ade ke giant kat hongkong?
05:01 aku mampus esok
05:02 hmmmmmmmm
05:02 musykil gak aku
05:02 giant syrkt luar maa..
05:02 syarikat luar?
05:02 wtf malaysian created that company?
**********snip********************

05:02 Started by the Teng family as a simple grocery store in one of the suburbs of Kuala Lumpur in 1944. Its mission was to offer a wide variety of products
at the lowest possible prices. As its reputation grew, so did its business
05:02 ko ingat giant msia punya ke.
05:02 :))
05:02 hahahaha
05:02 mesia punya la bang
05:02 yeke..

05:03 -!- Jack-jr [Civic06@=Wgqw-83-446.tm.net.my] has quit [QUIT: User exited]

OK.. if any of the facts is wrong, please notify me. I will rectify and aplogize to this fella.
Updating NetBSD

Posted: September 20th, 2006, 10:54am MYT by ~ayoi~

Ok guys, as many of us know how to update our own FreeBSD, but only few guides on how to update your netbsd. Well I've stumbled few guides from websites, forums and others. So here're the compiled, simple way how to update your beloved netbsd..

p/s: For those who feels that I've taken their guides/posting please let me know so I can give proper credit to you. :D

Initial checkout:
1). setenv CVSROOT anoncvs@anoncvs.netbsd.org:/cvsroot
2). setenv CVS_RSH ssh
3). cd /usr
4). cvs checkout -r -P src #Release = netbsd-3-0-RELEASE or netbsd-3-0-1-RELEASE
#Stable = netbsd3
#Current = Replace with -A (cvs checkout -A -P src)
5). cvs log Makefile | grep pkgsrc-`date +%Y`Q. # To know pkgsrc branches for the current year.
6). cvs checkout -r -P pkgsrc #Where x=year y=quater. For Quater 2 2006 = 2006Q2
# for current = cvs checkout -A -P pkgsrc
7). *cvs checkout -r -P xsrc # same options as src for RELEASE, stable and current.
8). mkdir /usr/obj
9). cd /usr/src
10). ./build.sh -T (for older version -t)
11). cd /usr/src/sys/arch/amd64/conf # Choose ur architecture correctly aaa..
12). config MYKERNEL
13). cd ../compile/MYKERNEL
14). make dependall install #I recommend you to back up your workable kernel 1st.
15). reboot
16). cd /usr/src
17). ./build.sh distribution
18). **cd /usr/pkgsrc/pkgtools/pkg_install
19). **make install
20). *cd /usr/xsrc
21). *make build
22). etcupdate 23). **cd /usr/pkgsrc/pgktools/pkgchk
24). **make install clean

You can read more here
NetBSD 3.0.1 amd64 Release on Compaq Presario V3010AU

Posted: August 8th, 2006, 12:10am MYT by ~ayoi~

Greetings earthlings kes kes kes. Well it seems where FreeBSD 6.1-Release failed, NetBSD succeed. Actually I do believe FreeBSD can be installed on the laptop itself and not on VMWare. So far in term of performance wise, I think NetBSD can cope with the rest. The installation method is far more friendlier than the earlier version (1.5.1 in my case) but configuration, it still the same. Heheheh.
Warisan

Posted: July 16th, 2006, 1:23am MYT by ~ayoi~

Still remember this song? Used to sing it during "common room" events when I was form 1 at MCKK. It's a "bonding excercise". Well if u r an old boy definitely you'll remember. The smell of fresh morning(round 2 or 3 am), smell of sweats, fatigue and others. Hehehehe. We were fit and healthy during that time. Just imagine that we had to do 33 times of pumping when reporting for confinement at 11.30 am, 66 times at 1.30 and 100 more during 3.30pm. I do feel that we did more as sometimes those prefect or anjings( :)) ) purposely lose track of their counting. Ahh.. Good ol' days eh? :D

Anyway this is the lyrics and man it has a deep meaning.

Warisan

-------

Anak Kecil Main Api

Terbakar Hatinya Yang Sepi

Airmata Darah Bercampur Keringat

Bumi Dipijak Milik Orang

Nenek Moyang Kaya Raya

Tergadai Seluruh Harta Benda

Akibat Sengketa Sesamalah Kita

Cinta Lenyap Di Arus Zaman

Indahnya Bumi Kita Ini

Warisan Berkurun Lamanya

Hasil Mengalir Ke Tangan Yang Lain

Pribumi Merintih Sendiri

Masa Depan Sungguh Kelam

Kan Lenyap Peristiwa Semalam

Tertutuplah Hati Terkunci Mati

Maruah Peribadi Dah Hilang

Kini Kita Cuma Tinggal Kuasa

Yang Akan Menentukan Bangsa

Bersatulah Hati Bersama Berbakti

Pulih Kembali Harga Diri

Kita Sudah Tiada Masa

Majulah Dengan Gagah Perkasa

Jangan Lalai Teruskan Usaha

Melayu Kan Gagah Di Nusantara
Paper qualifications or experience?

Posted: July 11th, 2006, 5:05pm MYT by ~ayoi~

This is a long posting so I dun want to bore most of you to death but feel free to continue reading this posting HERE

It's a tough question, isn't it? For me, we do need both of these. Paper qualification is more like an indicator that shows that you've learnt/mastered/knowledgeable on the field that you've studied. IN other words it shows that you are a person who know how in applying the knowledge that you've gained in real situation/work environment. Why? In these higher learning institutions (both private and public) you were tought in structural manner ie starting with fundamentals or basic then move on to intermediate level and later on the advance level. In between these levels you will be tested on your knowledge and understanding on the subject tought in order to ensure that you are qualified to progress to later stages.

If you noticed, the learning process is not only in the classroom or lecture hall/theater but outside as well like the way you dicipline yourselves such as meeting the assignment dateline, doing proper research in either library or nowadays internet, participate actively in group discussions, respecting others opinion and lots of things. So it means that an ideal graduate is the one who not only possess paper qualification but a good personality and able to apply his knowledge and learning skills in the real world without dismissing other opinions.
Father's Day gift

Posted: June 23rd, 2006, 9:23pm MYT by ~ayoi~

Sorry it's lil bit personal but ..

The most precious gift I ever received. It really touches my heart..
Forensic Investigation & Recovery System

Posted: June 22nd, 2006, 5:47pm MYT by ~ayoi~

It's a local product, developed by my school mate, Mr Azril Azam, currently working at MIMOS Cyberspace Crime Science Lab . To quote him

"FIRST = Forensic Investigation & Recovery System

OK, FIRST ni bukan Encase (http://www.guidancesoftware.com).
Encase is just an expert software while FIRST will be expert
software + Linux Distribution (mcm RedHat) + Distro (Helix,
Knoppix, Fire) + Open Source Solution.

Lebih tepat FIRST current version is mcm other Linux Distro for
Forensics mcm Fire and Helix.

Beza dia ialah, Fire + Helix, is just a software rebundle
running on Linux either gentoo or Knoppix distribution.

Unlike FIRST, aku built up the kernel 100%. Infact the kernel
itself aku dah modified for fast bootup + memory efficient.
Scripting pun aku tukar. Add certain libraries for direct comm
between Apps + Kernel + Hardware.

Current FIRST version, aku bundle semua security OSS software yg
ada. In addition to that, aku ade letak FIRST DiskImager. Yg ni
developed 100% by aku la. Soon, Banyak lagi akan ditambah
termasuk la FIRST Window Manager. Sekarang aku tibai guna IceWM.
Hopefully by next year, aku akan announced FIRST Mobile Phone
Forensics."

Well to learn or know more about it just proceed to my blog here.
American Chopper

Posted: June 21st, 2006, 6:21pm MYT by ~ayoi~

I have to admit, long before I owned my car, I always dreaming of owning an easy rider bikes. I'm fascinated by the sleek design of these motorbikes esp ones that have "Harley Davidson" stamped on its oil tank. Nowadays eventho the passion of owning these bikes faded with times, I'm still keen on riding them (but poor me, I didnt have any bikes license).

(This bike is build based on Discovery Channel Theme)

Anyhow thanks to the Discovery Channel, they have this show called The American Chopper. This show is more on the process of building bikes (customary bike building) from fabrication process till the end product. It's nice to see how these ppl sweat over the machine in order to meet their dateline and to fulfil their customers requirement. Sometimes they build bikes for special occasion whether for corporate or personal. And of coz this program is about the Orange County Chopper or better known as OCC. Their collection of bikes is amazing and astonishing. (for me la). Well just visit the official OCC Website and see it yourselves.
Term

Posted: June 13th, 2006, 2:06pm MYT by ~ayoi~

Ok perhaps we can use these terms properly now :D

Threat : a party with the capabilities and intentions to exploit a vulnerability in an asset

Vulnerability : a weakness in an asset that could lead to exploitation

Let me put in these context :

1). This is the situation in the view of Wayne Rooney

Risk : Getting injured again and missed the WC tournament and perhaps starting of EPL season. (Perhaps receiving the hair dryer treatment from Sir Alex Ferguson can be included as well)

Asset : Wayne Rooney footballing abilities

vulnerability : "Fully recovered" broken metatarsal

Threat : Rough Defenders

Exploit : Rough/hard tackles to that "fully recovered" foot.

2). This is the situation from the view of fenris (sorry for using ur nick :D)

Risk : Expelled from the higher learning institution

Asset : Diploma/degree

vulnerability : A case about his abusing the Institution's IT facilities.

Threat : The System Admin that's going for fenris blood

Exploit : His Mac address using illegal PIN number access logfiles.

3) This is the situation from England's view

Risk : Booted out from World Cup at early stage

Asset : A good set of players (or so called good set of players)

Vulnerability : Depending too much on 21 years old striker that thought he is fully recovered from his broken metatarsal. Played a boring football and have a lousy coach/manager.

Threat : Any other teams that can score 1st against England

Exploit : Beautiful football :D

p/s: No 3 is my personal opinion aaa..
Book Review

Posted: June 6th, 2006, 12:06am MYT by ~ayoi~

Well spent my weekend by watching X-Men : The last stand with my wife at Sunway. And then doing what I love most : reading.

1. Da Vinci Code - Dan Brown

Do I have to ellaborate more? I guess most of u have read/watch the movie, but trust me, reading the books is totally different from watching the movie. In the book, the characters are more properly described and developed. You can feel/imagine the situation that they are in (based on how imaginative you are eh?) But overall for a person who loves conspiracy theory, this book is top notch. A recommended reading. p/s: Before start reading, U have to know that this story is totally fictious.

2. Angel and Demon - Dan Brown

This book actually need to be read before Da vinci code (IMHO) even tho both of those stories are not linked to each other (besides the protagonist Mr Robert Langdon the symbologist). More about conspiracy theory on Vatican city. Well a good book. Basically about one party (actually one person) in the vatican who against the liberalisation of the vatican onto certain topics/aspects. This person is actually the Pope's trusted clergy. So this fella plot the downfall/killing of the Pope and hijack the fav cardinals during the conclave and pointing all the evidence towards the ancient movement of renaissance. The Enlightment. Well it's up to Mr Robert Langdon to solve the mystery of missing cardinals. And not only that, this fella also plant a powerful bomb based on fussion tech developed by CERN in the heart of vatican.

My verdict? Up to the level of da vinci code. If Tom Clancy and Umberto Eco got fused together, Dan Brown would be the result. :D

3. Deception Point - Dan Brown

When a new NASA satellite spots evidence of an astonishingly rare object buried deep in the Arctic ice, the floundering space agency proclaims a much-needed victory… a victory that has profound implications for U.S. space policy and the impending presidential election. With the Oval Office in the balance, the President dispatches White House Intelligence analyst Rachel Sexton to the Milne Ice Shelf to verify the authenticity of the find. Accompanied by a team of experts, including the charismatic academic Michael Tolland, Rachel uncovers the unthinkable—evidence of scientific trickery—a bold deception that threatens to plunge the world into controversy. But before Rachel can contact the President, she and Michael are attacked by a deadly task force…a private team of assassins controlled by a mysterious powerbroker who will stop at nothing to hide the truth. Fleeing for their lives in an environment as desolate as it is lethal, they possess only one hope for survival: to find out who is behind this masterful ploy. The truth, they will learn, is the most shocking deception of all…

A suspence thriller ala Tom clancy's. A good reading. :D

4. The Bear and the Dragon - Tom Clancy

President Jack Ryan faces a world crisis unlike any he has ever known, in Tom Clancy's extraordinary new novel...

A high-level assassination attempt in Russia has the newly elected Ryan sending his most trusted eyes and ears — including antiterrorism specialist John Clark — to Moscow, for he fears the worst is yet to come. And he’s right. The attempt has left the already unstable Russia vulnerable to ambitious forces in China eager to fulfill their destiny — and change the face of the world as we know it...

I have to admit, Tom Clancy is my fav author. Especially Jack Ryan series. I've been following this Ryan fella starting from him being the CIA analyst till he became the POTUS. Tom Clancy is the master of conspiracy thriller, millitary stories where every details, every accounts will be told in such manner that I just simply can't put the books down. The Red Rabbit, Hunt for Red October, Cardinal of Kremlin, Patriot Games, Without Remorse, Debt of Honor, Executive Orders, The Red Storm Rising, The Bear and the Dragon, and recently The teeth of the Tiger. It seems like nowadays Mr Clancy concentrates more on Ops-Centre and Splinter Cells series. Well now u guys know how the hell did I get the nick Jack Ryan :D
V-Day

Posted: June 2nd, 2006, 3:58pm MYT by ~ayoi~

Day of vulnerabilities.

1. Snort HTTP Inspect Pre-Processor Uricontent Bypass
"The evasion technique allows an attack to bypass detection of
"uricontent" rules by adding a carriage return to the end of a URL, directly before the HTTP protocol declaration. This affects thousands of rules in the standard Snort base rule sets.

Due to the seriousness of this vulnerability, we have developed a
working patch for public review. See below. This patch addresses the carriage return bug and should catch the known evasion attempts but further research needs to be done to determine if there are any other possible impacts of this bug. The detection for evasion is turned on
by default under all profiles but can also be used as a server configuration option:
-----HTTP Inspect Server Configuration-----
non_std_cr

This option generates an alert when a non standard carriage return character is detected in the URI.
-----end-----

More information including a pre-patched tarball, a simple proof of
concept, and a copy of this patch ..."
http://www.demarc.com/support/downloads/patch_20060531
http://www.osvdb.org/25837

feofil@gmail.com

2. Squirrelmail local file inclusion
Squirrelmail local file inclusion bug in functions/plugin.php .
Tested on the latest 1.4.x version.
No authentication needed.

#if (isset($plugins) && is_array($plugins)) {
# foreach ($plugins as $name) {
# use_plugin($name);
# }
...
#function use_plugin ($name) {
# if (file_exists(SM_PATH . "plugins/$name/setup.php")) {
# include_once(SM_PATH . "plugins/$name/setup.php");
# $function = "squirrelmail_plugin_init_$name";
# if (function_exists($function)) {
# $function();
# }
# }
#}
....

If register_globals is on we can control the $name variable.

In order to avoid errors SM_PATH needs to be defined. Exploitation
is done through src/redirect.php ( it includes functions/plugin.php
prior to authentication and it defines SM_PATH ).

magic_quotes_gpc needs to be off.

Example:
http://[host]/[squirrelmail dir]/src/redirect.php?plugins[]=../../../../etc/passwd%00

Denix Solutions
Unix/Linux Solutions for your Business
http://www.denixsolutions.com

3. VMware ESX Server Cross Site Scripting issue
Title: VMware ESX Server Cross Site Scripting issue
Date: 14.11.05
Application: VMware ESX prior to 2.5.2 upgrade patch 2
VMware ESX prior to 2.1.2 upgrade patch 6
VMware ESX prior to 2.0.1 upgrade patch 6
Environment: VMware ESX
Author: Stephen de Vries [stephen.de.vries@corsaire.com]
Audience: General distribution
Reference: c051114-002

-- Scope --

The aim of this document is to clearly define an issue that exists with the VMware ESX Server product [1] that will allow a remote attacker to inject arbitrary active scripting content, such as JavaScript, into a web session.

-- History --

Discovered: 11.11.05 (Stephen de Vries)
Vendor notified via client: 15.11.05
Vendor notified directly: 19.05.06
Document released: 01.06.06

-- Overview --

VMware ESX Server is described [1] as virtual infrastructure software for partitioning, consolidating and managing servers in mission-critical environments.
The software provides a virtualization layer that allows multiple x86 based operating systems to run on the same hardware concurrently. The ESX Server product differs from other VMware products in that it does not require a "host" operating system to be provided by the user. Instead, it uses a custom x86 kernel as the host, along with a customised Linux operating system as a "console O/S".
VMware ESX Server includes a number of network services and a web application, called the "VMware Management Interface" that can be used to perform remote administration of the system.

-- Analysis --

The VMware ESX Server product provides a web application to perform management of the system. One of the functions of this application is to allow administrative users to view log files, such as syslog, through a browser. No encoding of syslog data is performed to ensure that HTML meta-characters are not interpreted by the browser. This allows an attacker to inject HTML content, including JavaScript, into the syslog file where it would be rendered or executed when viewed through the Management Interface. Since the raw syslog data is displayed between tags, it is necessary to close the tag for a clean injection. Two injection methods were detected:
1. An attacker could simply attempt to log in to the Management Interface with a username that contains the injection script, such as:
#// alert('XSS')
2. An attacker could attempt to log in to the ftp server with a username containing a similar injection string.
It should be noted that the ftp server is not enabled by default, however, the Management Interface is.
This flaw could be used to conduct any number of Cross Site Scripting attacks [2], such as Session Hijacking, Cross Site Request Forgery or apparent falsification of the syslog data.
The risk of this vulnerability is increased due to the fact that only administrative users have permission to view the syslog files through the Management Interface. Should a Session Hijacking attack be successful, it would therefore likely yield administrative access.

-- Recommendations --

Upgrade to a version of the VMware ESX product that does not exhibit this issue:

VMware ESX 2.5.2 upgrade patch 2 and later
VMware ESX 2.1.2 upgrade patch 6 and later
VMware ESX 2.0.1 upgrade patch 6 and later

-- CVE --

The Common Vulnerabilities and Exposures (CVE) project has assigned the name CVE-2005-3619 to this issue. This is a candidate for inclusion in the CVE list (http://cve.mitre.org), which standardises names for security problems.

-- References --

[1] http://www.vmware.com/products/esx/ [2] http://www.aspectsecurity.com/topten/xss.html

-- Revision --

a. Initial release.
b. Minor edits.
c. Released.

-- Distribution --

The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Corsaire accepts no responsibility for any damage caused by the use or misuse of this information.

-- Disclaimer --

The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Corsaire accepts no responsibility for any damage caused by the use or misuse of this information.

4. Microsoft Windows "mhtml:" URI Handling Remote Buffer Overflow Vulnerability
Technical Description

A vulnerability has been identified in Microsoft Windows, which could be exploited by attackers to cause a denial of service or potentially take complete control of an affected system. This flaw is due to a buffer overflow error in the Microsoft Internet Messaging library "inetcomm.dll" that does not properly handle an overly long "mhtml:" URL, which could be exploited by attackers to crash an affected application (e.g. Internet Explorer or Windows Explorer) or potentially execute arbitrary commands by convincing a user to visit a specially crafted web page or open a malformed Internet shortcut.

Note : Arbitrary code execution has not been confirmed at the moment.

Affected Products

Microsoft Windows XP Service Pack 1
Microsoft Windows XP Service Pack 2
Microsoft Windows Server 2003
Microsoft Windows Server 2003 Service Pack 1

Solution

The FrSIRT is not aware of any official supplied patch for this issue

Vulnerability reported by Mr.Niega

5. MySQL Multi-byte Encoding Processing Remote SQL Injection Vulnerability
Technical Description

A vulnerability has been identified in MySQL, which could be exploited by remote attackers to bypass security restrictions and execute arbitrary SQL commands. This flaw is due to an error when operating in multi-byte character sets (e.g. SJIS, BIG5 and GBK) and parsing certain ASCII characters escaped with the "mysql_real_escape_string()" function, which could be exploited by malicious people to bypass standard string-escaping methods and conduct SQL injection attacks against a supposedly secure script.

Affected Products

MySQL version 4.1.19 and prior
MySQL version 5.0.21 and prior
MySQL version 5.1.10 and prior

Solution

Upgrade to MySQL version 4.1.20, 5.0.22, or 5.1.11 :
http://dev.mysql.com/downloads/

References

http://www.frsirt.com/english/advisories/2006/2105
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-20.html
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-11.html
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-22.html
http://bugs.mysql.com/bug.php?id=8378

Credits

Vulnerability reported by Josh Berkus

And plus 2 advisories regarding FreeBSD 5.X and 6.X Release. ypserv and smbfs

check ur systems.
My Anniversary

Posted: May 30th, 2006, 4:10pm MYT by ~ayoi~

Today is my anniversary. One special day for me and my wife. Well for her I just sent Ten (10) Gerberas, or African Daisies, in this lovely round Hand Bouquet. Include a big box of Ferrero Rocher Chocolates (T24 300g). Complete with statice, peacocks, other fillers , papers, & ribbons to her at her office. A small favour (with money of coz) from blooming do help a lot. A small surprises besides the XOXO and Guess handbags. Well perhaps both of us will have some nice dinner either at gazeebo or at Sri Hartamas. :D. Hopefully both of us will stay together for the rest of our life. Insya Allah :D
Myteam

Posted: May 30th, 2006, 3:51pm MYT by ~ayoi~

Sape tengok match aritu? Overall IMO, the standard of malaysian football never reached the passion of its citizen. Sometimes I think MyTeam played better football (given the duration of their training and get together). But one thing for sure, the keeper (amir) is full of crap. I dunno how the hell he became a goalkeeper. He is too slow for his reaction and damn, his positioning is damned poor. Both of Malaysian team's goals resulting from his poor positioning. I was a goalkeeper as well even tho only to the state level for my school (and played for my college as well- we never conceded a goal for 3 damn years that consists of 3 tournaments). Well it seems like he is lack of passion. What an embarrasment. This 30 years old fella can play better lah. :D. One player stands out, not that Myteams goalscorer (I think and believe that it was a fluke) but the 2nd half winger, mr Fairus. He's nimble and played his football with brain. Good byline run, good cross, good setup (during the last minute that smacked the crossbar) and good stamina as well. My hats off to him.

What u do u guys think?
Spot the differences

Posted: May 26th, 2006, 5:53pm MYT by ~ayoi~

So between this log

11:01:41.777269 IP 202.162.xx.xx.https > 10.x.x.29.48686: S 1079777274:1079777274(0) ack 2718539688 win 0
11:01:41.777323 IP 10.x.x.29.48686 > 202.162.xx.xx.https: . ack 1 win 5840
11:01:41.777885 IP 202.162.xx.xx.https > 10.x.x.29.48683: . ack 24 win 17497
11:01:41.782016 IP 202.162.26.134.https > 10.x.x.29.48683: F 1:1(0) ack 24 win 17520
11:01:41.782061 IP 10.x.x.29.48683 > 202.162.xx.xx.https: . ack 2 win 5840
11:01:44.777326 IP 10.x.x.29.48686 > 202.162.xx.xx.https: . ack 1 win 5840
11:01:50.776415 IP 10.x.x.29.48686 > 202.162.xx.xx.https: . ack 1 win 5840
11:01:50.787092 IP 202.162.xx.xx.https > 10.x.xx.29.48686: R 1079777275:1079777275(0) win 0
11:01:50.789752 IP 10.x.x.29.48689 > 202.162.xx.xx.https: S 2722147698:2722147698(0) win 5840 652889 0,nop,wscale 2>

and this

10.1.2.29 -> 10.1.2.30 TCP 48593 > https [ACK] Seq=56 Ack=154 Win=5840 Len=0 TSV=27532799 TSER=614240779 20 3.683661 10.1.2.29 -> 10.1.2.30 SSL Continuation Data
21 3.683823 10.1.2.30 -> 10.1.2.29 SSL Continuation Data
22 3.723426 10.1.2.29 -> 10.1.2.30 TCP 48593 > https [ACK] Seq=62 Ack=173 Win=5840 Len=0 TSV=27532839 TSER=614240810 23 12.545924 10.1.2.29 -> 10.1.2.30 SSL Continuation Data
24 12.546238 10.1.2.30 -> 10.1.2.29 SSL Continuation Data
25 12.546274 10.1.2.29 -> 10.1.2.30 TCP 48593 > https [ACK] Seq=70 Ack=204 Win=5840 Len=0 TSV=27541663 TSER=614249674 26 12.546368 10.1.2.29 -> 10.1.2.30 SSL Continuation Data
27 12.546612 10.1.2.30 -> 10.1.2.29 SSL Continuation Data
28 12.579455 10.1.2.29 -> 10.1.2.30 TCP 51669 > 63897 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=27541696 TSER=0 WS=2
29 12.579602 10.1.2.30 -> 10.1.2.29 TCP 63897 > 51669 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=614249708 TSER=27541696 WS=2
30 12.579632 10.1.2.29 -> 10.1.2.30 TCP 51669 > 63897 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=27541696 TSER=614249708

and this...

20 1.534676 10.1.2.29 -> 10.1.2.30 TCP 40449 > https [ACK] Seq=142 Ack=178 Win=5840 Len=0 TSV=42089389 TSER=686612920
21 1.581564 10.1.2.29 -> 10.1.2.30 SSL [Unreassembled Packet]
22 1.581856 10.1.2.30 -> 10.1.2.29 SSL [Unreassembled Packet]
23 1.581890 10.1.2.29 -> 10.1.2.30 TCP 40449 > https [ACK] Seq=143 Ack=179 Win=5840 Len=0 TSV=42089436 TSER=686612967
24 1.877598 10.1.2.29 -> 10.1.2.30 SSL [Unreassembled Packet]
25 1.877810 10.1.2.30 -> 10.1.2.29 SSL [Unreassembled Packet]
26 1.877842 10.1.2.29 -> 10.1.2.30 TCP 40449 > https [ACK] Seq=144 Ack=180 Win=5840 Len=0 TSV=42089732 TSER=686613263
27 1.941587 10.1.2.29 -> 10.1.2.30 SSL [Unreassembled Packet]
28 1.941887 10.1.2.30 -> 10.1.2.29 SSL [Unreassembled Packet]
29 1.941938 10.1.2.29 -> 10.1.2.30 TCP 40449 > https [ACK] Seq=145 Ack=181 Win=5840 Len=0 TSV=42089797 TSER=686613328

Which one is not legit? :D Ok to be fair, perhaps accessing this kind of log using ethereal will gives u a lot clearer picture. But I guess there's no harm trying. :D

Btw thanks for your tolerance on my postings. Kinda bored, perhaps this kind of excercise can help our brain lil bit.
BSD anyone?

Posted: May 23rd, 2006, 10:03am MYT by ~ayoi~

Well this is not my finding (obviously) but excerpt from one of the sec sites

Linux Kernel "snmp_trap_decode()" Remote Memory Corruption Vulnerability

Remotely Exploitable : Yes

Locally Exploitable : Yes

Release Date : 2006-05-22

A vulnerability has been identified in Linux Kernel, which could be exploited by remote attackers to cause a denial of service. This flaw is due to a memory corruption error in the "snmp_trap_decode()" [ipv4/netfilter/ip_nat_snmp_basic.c] function when allocating the ID and the address, which could be exploited by remote attackers to crash a vulnerable system where the "ip_nat_snmp_basic" module is loaded and traffic on port 161 or 162 is NATed.

Affected Products

Linux Kernel version 2.6.16.17 and prior

Solution

Upgrade to Linux Kernel version 2.6.16.18 :

http://www.kernel.org/

Here's the link :

http://www.frsirt.com/english/advisories/2006/1916

Now let see what's my lsmod output..
SCRIPT KIDDIES, read this

Posted: May 19th, 2006, 3:58am MYT by ~ayoi~

Well I just want to quote from mr fyodor detailed paper on os fingerprinting

"A worse possibility is someone scanning 500,000 hosts in advance to see what OS is running and what ports are open. Then when someone posts (say) a root hole in Sun's comsat daemon, our little cracker could grep his list for 'UDP/512' and 'Solaris 2.6' and he immediately has pages and pages of rootable boxes. It should be noted that this is SCRIPT KIDDIE behavior. You have demonstrated no skill and nobody is even remotely impressed that you were able to find some vulnerable .edu that had not patched the hole in time. Also, people will be even less impressed if you use your newfound access to deface the department's web site with a self-aggrandizing rant about how damn good you are and how stupid the sysadmins must be."

Well I believe we have lots of these i-am-the-great kiddies in our own country. Well if u can read this (and understand) please channel your creativity into good purpose. Or perhaps if someone ask you what kind of tools needed for passive fingerprinting, dun answer nmap... So next time RTFM!!! and learn more.

p/s: next time dun brag about owning a Solaris box but dunno how to change your working dir or asking where the hell is gcc?? And dun ask me who the hell is Fyodor
Gmail/Gtalk webclient DOS

Posted: May 19th, 2006, 12:44am MYT by ~ayoi~

This is from dan@pathology.washington.edu to bugtraq related to gmail/gtalk webclient DOS

Gmail/Gtalk web client DoS

Summary

It is trivial to freeze the browser of a known user who is currently using Gmail with the Gtalk feature enabled. This could lead to a denial of service attack against any user of Gmail who is using the web client.

Technical Details

Gtalk within Gmail converts some incoming emoticons into animated gifs. Sending a large quantity at once will cause the recipient's browser to lock up until the message is fully converted. With relatively few (100) emoticons, you can freeze a browser for a few minutes. Larger quantities, or multiple messages could extend this time indefinitely. If the Gmail web client is used to send the message, the sender's browser will also lock up.

The standalone Google Talk client for Windows does not suffer from this problem, and is the easiest way to send the messages to a target. In theory, any properly configured Jabber client could be used. Conceivably, modified Jabber clients could be configured to run a widespread DoS attack against active Gmail users at a low cost to the attacker, since the message size is small and requires little bandwidth.

Known Affected Browsers:

Firefox 1.5.0.3

Internet Explorer 6.0

Internet Explorer 7.0 Beta 2

Seamonkey 1.0

Known Unaffected Browsers:

Safari 1.3.2

Any browser which the Gtalk client does not run in will be unaffected.

Workaround

Disabling the Gtalk feature while using Gmail will protect a user, at the cost of the ability to chat.

Credits

Special thanks to Kevin Fleming for help research this issue.

Well guys, better watch out, after yahoo mail xss , now even gmail has its own probs. hehehe

Gregarius » Items by ~ayoi~

Feeds

Items by ~ayoi~

Posted: May 9th, 2007, 12:15pm MYT by ~ayoi~

Posted: December 23rd, 2006, 2:39am MYT by ~ayoi~

Posted: October 5th, 2006, 6:17am MYT by ~ayoi~

Posted: September 20th, 2006, 10:54am MYT by ~ayoi~

Posted: August 8th, 2006, 12:10am MYT by ~ayoi~

Posted: July 16th, 2006, 1:23am MYT by ~ayoi~

Posted: July 11th, 2006, 5:05pm MYT by ~ayoi~

Posted: June 23rd, 2006, 9:23pm MYT by ~ayoi~

Posted: June 22nd, 2006, 5:47pm MYT by ~ayoi~

Posted: June 21st, 2006, 6:21pm MYT by ~ayoi~

Posted: June 13th, 2006, 2:06pm MYT by ~ayoi~

Posted: June 6th, 2006, 12:06am MYT by ~ayoi~

Posted: June 2nd, 2006, 3:58pm MYT by ~ayoi~

Posted: May 30th, 2006, 4:10pm MYT by ~ayoi~

Posted: May 30th, 2006, 3:51pm MYT by ~ayoi~

Posted: May 26th, 2006, 5:53pm MYT by ~ayoi~

Posted: May 23rd, 2006, 10:03am MYT by ~ayoi~

Posted: May 19th, 2006, 3:58am MYT by ~ayoi~

Posted: May 19th, 2006, 12:44am MYT by ~ayoi~