spoonfork

Listening to: Essential Mix - Plump DJs & Danny Howells

There seems to be no end to referrer spam. Can anyone suggest an effective way to block them? Currently I'm doing it manually, by checking my site stats and adding them to .htaccess.

Listening to: P.O.D - The Payback

SecurityForest has a huge collection of exploits called ExploitTree. I've decided to try it out today, to see what they have. The first thing that you need to do is to have a cvs client on your Linux box, and run their 'installer' which is just basically a front-end to cvs. One of the best thing about ExploitTree is that you can sync your local tree with the server, thus you can keep your exploits up-to-date. Some examples of stuff:

mel@chimera ~/securityforest/ExploitTree $ ls
CVS              _Ver         bids.txt        network  xsearch.pl
_SecurityForest  application  exploit_db.txt  system   xsearch2-beta.pl

mel@chimera ~/securityforest/ExploitTree $ cd system/; ls
CVS              aix     bsd   linux      novell  solaris
_SecurityForest  atheos  hpux  mac_osx    qnx     tru64
_uncategorized   beos    irix  microsoft  sco

mel@chimera ~/securityforest/ExploitTree/system $ cd linux/remote/;ls
CVS                 cf_exp.c                         nestea.c
SDIamd.c            cnex.c                           overdrop.c
_SecurityForest     iplenght.c                       sesquipedalian.c
amd-exploit.c       iptableslogintegeroverflowpoc.c  setsockopt_poc.c
blindSpoof.cc       kshux.c                          un-lkernel.2.6.10.c
cURL-remote-LNX.pl  lameident3-exp.c                 xinetd0x69.c

As a side note, those who are participating in the upcoming HITBSecConf2005 Capture the Flag game has no need for ExploitTree, nmap, Nessus, Metasploit and nikto. There won't be any public vulnerabilities available.

Listening to: Korn (feat. Xzibit) - Fight the Power

One word: Terrific!. More words: I was expecting something Guy Ritchiesque, something along the line of Lock, Stock and Snatch, from Mr. Claudia Schiffer, and yes, there's no escaping Mr. Madonna from Matthew Vaughn in Layer Cake, but in a more restrained, controlled, and I-can-do-this-myself kinda way. It tries to showoff of course, with nifty camera tricks, well-timed violence, shadowy gangster characters, and an extremely superb soundtrack. It is quite a good movie for a debut directing debut for Mr. Schiffer.

The problem with this movie is that, if you've just got back from a long tiring day of slogging in the boilerroom, don't watch it. There's one too many plots and subplots, and characters and subcharacters, and way too much Englishspeak. You gotta to hold on to your seat and watch.

The movie is based on a the ultra-complex crime novel by JJ Connelly. It's about the main character, whose is only known as Mr X (referred to as Iah in some parts of the movie), whose opening narrative really sets you in, a charlie dealer that wants to retire with a nice round million. But then there's this Mr. Big Mafia who wants him to look for a Mr Even Bigger Mafia missing daughter and do a business with Mr. Loudmouth-Mr Big Mafia-Wannabe. And then there's Mr Eastern Yuroop Mafia who wants Mr. Loudmouth-Mr Big Mafia-Wannabe and his one million stolen ecstasy pills. And the plot thickens from there.

In terms of acting however, the characters are all one dimensional, except for the main character (played by Daniel Craig, who chillingly resembles a slimmer, and colder version of Fox Maulder). Michael Gambon (he was the Prime Minister in Ali G Indahouse) plays a convincing, smart, clever and powerful construction business player and gossip paper socialite (Mr Even Bigger Mafia). The rest of the characters are just, I dunno, boring.

Anyways, which such a movie, and the success of Lock, Stock and Snatch, one can wonder why Matthew Vaughn (he's gonna direct Xmen 3 yo!) can secure a bird like Claudia Schiffer (she's still hot yo!).

Listening to: Starsailor - Four or the Floor (Soulsavers Mix)

I went through Herworld today. The word chic was used so many times in the magazine. It's like on every other page. What is chic? Who defines chicness? Is blogging considered chic?

Listening to: FC Kahuna - Hayling