Bash TCP programming hack!?

I had never heard of this until I ran into working on a recent project. In “bash” you can open sockets:

exec file-descriptor<>/dev/tcp/IP-or-hostname-here/port

so for example:

exec 3<>/dev/tcp/192.168.1.100/23

would open port 23 (telnet) to IP “192.168.1.100″ for read and write (the “<>”) on file descriptor “3″ (remember descriptors 0, 1, and . . . → Read More: Bash TCP programming hack!?

Rubber Or Glue, It Still Sticks…

This brings up a sort of interesting if not chilling thought in the world of security, particularly for large organizations:

Mozilla shuts online store after security breach

The title of this entry, which I’ve included verbatim, is important.

To me when I read it, I’m reading “Mozilla has a problem”, or “Mozilla . . . → Read More: Rubber Or Glue, It Still Sticks…

Outlook email verbosity…

I write HTML in Thunderbird because I like some rich formatting (an area I am sad to admit Thunderbird is weak on). In particular I do a lot of indented stuff, which Thunderbird translates to simple “<blockquote>” tags. However, when I moved to Outlook 2007 (which I don’t use for mail, but was just checking) . . . → Read More: Outlook email verbosity…

Eating ourselves alive…

Here is yet another example of how the “good guys” are figuring out ways to subvert security to “help” us:

http://www.h-online.com/security/Bootkit-bypasses-hard-disk-encryption–/news/113884

Basically Peter Kleissner, a young and clearly very smart university student, has figured out how to inject a bootkit in front of TrueCrypt (an excellent and free encryption product) to subvert its . . . → Read More: Eating ourselves alive…

Apple iPhone “Jailbreak” FUD

Apple may well have good and fair reasons to keep users from “jailbreaking” their iPhones, however the arguments as presented in the article are just FUD:

http://www.eweek.com/c/a/Midmarket/Apple-Claims-Jailbreaking-iPhones-Could-Crash-Cell-Towers-803734/?kc=EWKNLNAV07312009STR1

If AT&T’s cell network is this vulnerable, we have far greater worries than a little iPhone hacking. After all, Apple’s argument is essentially to keep jailbreaking . . . → Read More: Apple iPhone “Jailbreak” FUD

How to deactivate Adobe Digital Editions

As found on an Adobe Forum…

To deactivate a PC with Adobe Digital Editions 1.x:

Launch Digital Editions 1.x Enter the key-combination of <CTRL><SHIFT>D (<CMD><SHIFT>D on Mac OS) At the dialog, confirm that you wish to de-activate the machine Quit Digital Editions

To reactivate and authorize the machine using the same or a new Adobe . . . → Read More: How to deactivate Adobe Digital Editions

Useful browser check…

Apparently a lot of compromised browsers purposefully send a modified “UserAgent”, for instance:

UserAgent Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; AntivirXP08; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)

that “AnitvirXP08″ isn’t supposed to be there and best guess is it helps web sites that work . . . → Read More: Useful browser check…

Fixing that stupid Cisco IOS telnet thing…

One of the things that most drives me crazy about Ciscos is the default setting that makes when you’re at a Cisco IOS “exec” prompt that if you type something that isn’t a command, it interprets it as an attempt to “telnet” to a host. This is a real pain in the backside as all . . . → Read More: Fixing that stupid Cisco IOS telnet thing…

Unlocking a Cisco IP phone

One of those things I can never remember! It’s:

**#

Lets you change the network configs among other things.

Favorite free Windows toys…

Though I’m a Linux bigot, I work generally on a Windows laptop. Below is a list of my favorite free toys/tools that I use regularly. I’ve had good luck with all of them:

Unlocker Assistant – for unlocking pesky locked Windows files or drives. I8kFanGUI – for controlling your laptop fans TrueCrypt – for creating . . . → Read More: Favorite free Windows toys…