Uh. The hype over Code Red is pissing me off.
Security experts agree that if even one IIS server infected with CODE RED is actively scanning and propagating the infection on August 1st, we can expect to see a replay of last month's events. In fact, we could potentially see an even more spectacular display than last month.
Hello? Did we forget that the entire universe knows about Code Red by now, and that anyone found to have an unpatched IIS is going to get shot, burned and raped? Yes, a number of different versions of the Code Red worm exist, but they are all exploiting the same flaw.
Steve Gibson, the utter moron, said the following about Code Red: [..] I'm not sure how we're ever going to get rid of it! -- Well, shit. That is a tough one, Steve. Let me think. Trying patching your servers, take two asprins and call me in the morning.
Quote of the day (my evil coder will like this one):
"It works on my compiler" does not make a construct valid. -- Dann Corbit
I told you I was pissed off.
I now have daily builds of Dancer running. Every morning at 9am CE(S)T, a script does a cvs update -PAd, make daily, kills the running Dancer and copies the new executable into the directory which will be restarted every 5 minutes.
I also located a nasty bug in the regex code. If an invalid regex is entered, Dancer does not complain; it simply shits itself.
Currently playing: Pink Floyd, " lost for words".
£179.00 and £529.00. That is the cost of Windows ME and Windows 2000 respectively. I learned this as I had to go out and buy an install media with an OS on it that would run my games. I wish I had contacts who could get me an illegal copy of one of the above, but since I am a tight-arsed, perfect citizen I do not engage in software piracy. So today I paid £179.00 for a piece of broken software.
Having brought my purchase home, I discover that this broken piece of software will not boot from the install CD. A boot floppy is included for this purpose. The system requirements printed on the box do not mention this requirement. I do not have a floppy drive. Floppydisks belong in the 1980's.
With my purchase in hand, I return to the store and I am given a refund. I then find two of the store employees and explain that I need a Windows version for playing games, but it needs to come with a bootable CD as a way of installing the bloody thing. They agree that Win98 Special Edition is what I need, so I go to find it on the shelf. £204.99. I mutter a curse, pay for the fucking thing and bring it home. It does not boot from CD either. Fuckers.
My bed got strangely empty this morning.
Much to my dismay I must admit to having acquired experiences involving 7up and milk in the same glass. I have these new frosted glasses which consealed the 7up just as I was pouring the milk on top. Only as I took a sip of the mixed liquid did I realise what I had done.
I do not recommend it.
Those of you who are regular viewers will know that I have obtained a PC for the purpose of playing computer games. Today, this otherwise moderately useful device committed suicide. When the WinME installation boots (either in normal mode or in safe mode), it stops loading at a grey desktop. At this time the pathetic piece of software that is Windows ME only responds to mouse movement and Ctrl-alt-delete. The mouse moves the pointer around. Nothing else. C-A-D brings up the Task Manager (or whatever the hell it is called) -- that show no processes running. Explorer does not appear to be running. Pressing F5 during bootup makes Windows complain that the registry is broken and I should fix it using SCANREG. How exactly I am expected to carry out this task when the bloody thing is not working is beyond me.
One of my boys decided to go back to Cork. His last day was Friday. Now there is me and two others. And then there was three..
As for the days missing not recorded in my diary: I simply have not had the energy or inspiration. Forgive me.
It seems that on 29 may someone broke into www.ee.ucg.ie and left a message for me and my team. He spelled CIRT wrong, however.
Watched "Cast Away." -- What a tale. Anyone who thinks the movie is long and drawn out does not understand solitude or hope. Go see it.
The Ghettohackers took Capture The Flag at Defcon again. The web site is some funny shit, including links to fully armoured vehicles.
Tired. Heading home.
Dublin Zoo is depressing. Many of the habitats are clearly poorly maintained with grass growing out of control and brick walls falling apart. The sealions pool appeared 3-4 feet deep which is just silly. 3-4 meters would be right. The "restaurant" is a no-name McDonalds and, most importantly, the ice cream stand ran out of Almond Magnum before I got there. Quite upsetting.
Completely unrelated to anything that is going on in my life at the moment, here are the wise words of the day: beware the fury of a patient man.
Sonny correctly guessed the song I quoted on the 17th to be "It can't rain all the time" which was featured in my number two favorite movie of all time: The Crow. I have yet to confirm if he cheated or not.
The Spirited One felt I should mention that while I won when we played air hockey, she got lucky when we played some silly racing game. Arcade racing games are of really no consequences, but you and I know that, right? Air hockey is much more important.
She has also expressed eagerness for me to shave my head completely. Girls, what is it about bald men that you find so attractive?
Busy day, busy day. I do not remember what I did yesterday.
I spent part of the day installing games and other items onto my games-console. I talk about a few of the games in the relevant section.
I also hooked my Wacom Tablet up to the gameconsole. It may just serve a real purpose! When I get around to refreshing my drawing skills, I am sure the result will go online somewhere.
We went to a casual dinner and then decided to go see the 11.10pm showing of Shrek. It is absolutely an adventure of a movie for anyone with a sense of quality. All kids will certainly love it. Before the movie I found time to annihilate the Spirited One in air hockey. Poor thing. She did not stand a chance.
I also made it known on #linux.dk that I have become sick of Splitfire and am working on my own collection of EPIC scripts. They are called Kinky and listed on the projects page.
I think I am broken. No matter how much I sleep lately it does not seem like it is enough. My head is sometimes heavy and my body is sore in various places. I also fart on occasion, and lately the farting has become more frequent.
I can go from feeling fine to two hours later coughing violently with snot running out of my nose.
Due to a complaint, I thought I should mention I will be picking up my "games console" today - a beast of a PC running Windows. Quite suitable for playing games.
Cough, cough. (Oops, my head just fell off!)
It seems someone wrote a tool that can logon to Hotmail and send spam:
Return-Path: <checholino155@hotmail.com>
Delivered-To: a@C-Tower.Area51.DK
Received: (qmail 2623 invoked by alias); 19 Jul 2001 06:39:35 -0000
Delivered-To: alias-area51_dk-a@area51.dk
Received: (qmail 2295 invoked from network); 19 Jul 2001 06:39:06 -0000
Received: from f-control.area51.dk (213.237.108.10)
by 62.243.200.203 with SMTP; 19 Jul 2001 06:39:06 -0000
Received: (qmail 62962 invoked from network); 18 Jul 2001 21:16:44 -0000
Received: from cpimssmtpu05.email.msn.com (207.46.181.81)
by f-control.area51.dk with SMTP; 18 Jul 2001 21:16:44 -0000
Received: from hotmail.com ([63.38.28.10]) by cpimssmtpu05.email.msn.com with
+Microsoft SMTPSVC(5.0.2195.3225);
Wed, 18 Jul 2001 14:16:16 -0700
From: "Checolino" <checholino155@hotmail.com>
Cough, cough. I am sick again. Poor me.
I received my OpenBSD 2.9 CDs finally and a fucking large shirt that says: "Because Security Matters" -- I can use it for my PJ, and feel safe.
Dell sent an engineer out to fix my PowerEdge. Let us hope it stays fixed.
I intend to go home early and rest.
More muppets have joined #linux.dk. It is such an overwhelming sensation that one considers going elsewhere with whoever of the interested and intelligent few that are left in the channel.
Watched 'Saving Private Ryan' with the Spirited One. I suspected she would turn her head away during the movie, but she did not.
Unless you cheat, you will not know what this song is:
It won't rain all the time The sky won't fall forever And though the night seems long Your tears won't fall forever
Someone (the IRA it seems) did the world a favour this weekend by putting six bullets in renowned Dublin drugdealer Seamus Hogan. He dead.
Someone also broke into the offices of Paddy Powers (a bookmaker), held the guard up at gunpoint and made off with the safe. Just like a firewall does not help you if you allow traffic through to internal machines, a safe does not help you if the bad guys can just pick it up and carry it out the door.
Idiots.
I got out of bed at 2pm. Ouch. Went for a walk and a few other things. Wrote about why and how you should RTFM. The result is available along with my other stuff.
It was the 13th yesterday. SANS was defaced. My guess is a staff member used weak authentication (e.g. passwords) from a machine that was compromised.
Long live strong authentication!
Oh, I almost forgot. Some years ago I had my copy of Pearl Jam's "Ten" stolen. The Spirited One gave me a new copy today.
Friday the 13th and you can tell: my throat is fucking sore and it is fucking killing me. I also suffer from a cold. Fucking annoying.
Fuck.
A project that my team has been working on, http://www.drivingtest.ie, went live this morning. Today being Friday the 13th it is entirely possible that the building which houses the server will blow up so the security will not matter! I would be surprised if today goes by without a hitch.
Not really. I do not believe in the supernatural as it brings bad luck.
So, here I am, drinking boiling lemsip tea from my "Fuck off, I'm reading the Onion" cup. Reliable sources indicate the above is 1/5 of my "fuck" quota for today and it is not even 10am yet!
Ha. I did a search for "absolute fucking moron" and one of the hits that came up was a post of mine to an OpenBSD list about a problem report. I am considering how to be nicer to idiots. I will let you know if I come up with anything.
I sneezed again.
* holsta sneezes, if you hadn't noticed.
<jerry> Yeah, I have East point on the phone asking if they want me to send in
a clean up squad.
Bastard.
I found a load of dirt on myself, and created a page. Find it on the splash screen.
According to my friend, she has found a place to stay and a job. Which is nice.
An old friend is in need of a place to stay, so I am providing this for a day or two.
Dave made me a burger late last night which caused my tummy to revolt for most of the day. I told you I have fuckers working for me.
4am. Major trouble sleeping. Popped onto #linux.dk which had an URL in the topic: http://www.try2hack.nl/level1.html. It is a "hacker challenge." As you will see if you load the page, the first challenge requires you to guess a password. All of this is done client-side in JavaScript, so if you take a look at the HTML source, you can see the password in the JavaScript code.
Idiots.
Level 2 is at http://www.try2hack.nl/levvel2.html. It presents you with a Flash login screen. Find the username and password if you care.
Level 3 is at http://www.try2hack.nl/LLeVeLL3.html. It is another JavaScript password prompt. Puke. I stopped at this stage.
Idiots.
Gorm has another machine up and running in the area51 domain. f-control.area51.dk will remain on the sucky WOL network where it can handle web requests. In the future I will be using email, usenet, IRC and coding from c-tower.area51.dk.
It was past 3am before I got home. Clockspeed was not in the ports tree on alpha, so I tried building it on the only machine where it was availble, namely my laptop. What happens when I try to scp the 24K package from my laptop, over the ISDN to alpha? That is right! My connection died when 8192 bytes had been transferred.
I hate my TA. (Yes, yes, I know. Another non-personal entry. Give me some chocolate and I will make an effort.)
Still behind on the auld dairy entries.
I think Darren Reed has been smoking some bad shit lately. He posted to bugtraq which was then forwarded to freebsd-security. As a result, this is this week's email signature in work:
``Darren... you came up with this?'' -- Crist J. Clark to Darren Reed in
in response to Darren pointing out that small TCP packets
raises the number of hardware interrupts on PC's.
Dave thought it was funny too.
Made various changes to Dancer which you can find in the CVS repository if you care enough to go look.
As I turned off the light next to my desk and rose to retire for the night, I stepped in the bowl of popcorn I had been eating earlier. If you are reading this prior to the evening of Monday, I feel quite comfortable claiming, with reasonable assurance, that the handful of popcorn is still scattered on the floor in my office.
What the hell are you laughing at?
Showed someone how to break into his own workstation as a result of it running an old version of BIND. Showed someone how to break into his own workstation as a result of it running an old version of ftpd. He was unable to get in and wanted me to do it. I do not break into anything unless I have a piece of paper that says I can without going to jail.
I ran Dancer through lint. With any luck the next release is going to be lint clean. If you care, watch the beforementioned space for CVS updates.
Discovered ViewCVS which is a reimplementation of CVSWeb in Python. Reviewable. Less buggy. Sexy.
The Spirited One is attending a wedding over the weekend which means I have little to do except hacking.
I did a cvsup of OpenBSD-current only to find that the OS compile failed with a strange Input/Output error while compiling a 10KB .c file. Further investigation revealed that the harddrive on my laptop is slowly dying. I worked around this problem by moving files around. I wonder what files on my disk will suffer because of this. I managed to compile and now have sexy KerberosV support.
I am so behind on diary entries that it is not funny. The last couple of days have left me drained as soon as the afternoon came around. I will try to eat fruit today and see if that helps.
I have fuckers working for me. They are in the office next to mine. I sneeze, and this follows on IRC:
<jerry> Did you hear him sneezing? <dave> aye <dave> Its on the news now <dave> carlow radio
Bastards.
How long have I been sleeping, and why do I feel so old? Why do I feel so cold? My heart is saying one thing but my body won't let go.
Guess the song.
Revisited the dated discussion with my evil coder on Mandatory Access Control. He is looking forward to the release of FreeBSD 5.0 as it has these features and he is holding me responsible for OpenBSD not implementing the same. :) I once told him the only reason FreeBSD is implementing MAC is because they can not write secure code. So I was winding him up. I have to have fun sometimes.
As nice as it would be to have MAC support in OpenBSD, I would frankly rather have the smartcard and native Kerberos 5 support along with the new packet filter the team has been working on lately.
The problem with MAC is that most UNIX system administrators will not know what to do with it because it is different from the UNIX security model. Smart system admins will have no problems, of course, but like anything else it needs to be implemented correctly to function.
Watched "Heartbreak Ridge" with Mick. He approved. Talked more about women and relationships. Played some Tori Amos for him, and he agreed that she is sexy.
I have stopped using my angrygod@oceanfree.net account. The amount of spam is too much. I know I have not been updating this a lot lately, but I have not had the energy. I shall get to it soon.
Alone again, naturally. I will manage and so will she until we meet again.
I watched "Eyes Wide Shut" with her last night. It is one of those important movies that people do not get. The distraction of naked women and forceful sex seems to be too much for most humans and it results in the brain shutting down.
If you haven't seen the movie, a spoiler follows.
The two most important scenes in the movie are: where Nicole tells Tom that she was ready to give up on him and the kid if she could have just one night with the naval officer. Many women are as addicted to sex as many men are. Most men do not realise this and some women will not admit to craving sex. In any relationship you should demand that your partner is 100% open and honest about his or her view on sex.
The other important scene is at the very end of the movie where Nicole states they should fuck as soon as possible. I believe there are three levels of intimacy when it comes to intercourse: making love, having sex and fucking. You make love to someone you have deep feelings for -- someone you know very well. Having sex is something you do for the physical pleasure. This might be a one night stand or it may be a partner you have known for 20 years. Having sex is rarely interesting. Fucking takes place between two or more hungry partners where trust is absolute and things may get rough for the mutual benefit of the involved.
Couples should drift between making love and fucking, depending on mood and other factors. Those who settle for one of the above will end up at having sex.
Why are you blushing? Oh, you work in the same building as I? Oh, you run into me on a daily basis? HA! See you tomorrow then.