Tuesday, September 13. 2005
Thanks bloomberg, but spammers are using your site to uhmm, spam. See, your site have this nice XSS vulnerabilities.
Here, cos I'm in a pissy mood today so I'm nice to spammers. And here.
accelerating porn downloads:
- TCP Congestion Control with Misbehaving Receiver. This paper describes 3 types of attacks against TCP congestion control mechanism. ACK division exploits byte granularity error control protocol by sending multiple (say X number) ACKs (or fragmented ACKs if I read the paper carefully) upon receiving one data segment. Since the ACKs are all valid, the sender will increase the congestion window rate at a factor of X. DupACK spoofing exploits TCP's fast retransmit and fast recovery algorithm. These two algorithms are used to mitigate the effects of packet loss. DupACK spoofing works by spoofing multiple duplicate ACKs for the last sequence number received, hence increasing the congestion window by 3*SMSS (Sender Maximum Segment Size). Optimistic ACKing works by sending a stream of ACKs for TCP data segment that has yet to be received, by using predicted sequence number for the next data.
This is all really cool stuff considering that a misbehaved receiver can manipute TCP and tricking the sender into sending more data faster.
- freecast. Technically, freecast allows you to stream audio and video streams faster by using peer-to-peer transport technology.
don't chunk with my tcp/ip:
- fragroute. Back when I was an IDS junkie (Intrusion Detection System), fragroute was one of the coolest toys to play with. It still is now.
- scapy. Another reason why I must kick my lazy ass and master Python. The best thing about scapy is that you can easily construct packets according to your own specification. You essentially put any options on any fields easily on a TCP/IP packets. All this can be done interactively via the Python interpreter.
Listening to: Mili Sefic - Chicago Sessions Nov '04
Friday, September 9. 2005
Question: Is the term freelancer a more socially-polite term for penganggur?
Listening to: The Cure - High
Monday, September 5. 2005
blogworthy:
- MyOSS Magazine Edition 5 - The Chronicles of FaTUX released!. In this issue: *nix LiveCDs, Design Before Coding, Python Cards, and HITBSecConf2005 tickets up for grabs! Download here or here. After 5 issues, I must say that the team, especially Ow has done a really good job in promoting OSS. Rocking!
- Games hackers play. "The competition tests a security administrator's ability to secure complex systems with unknown but required functionalities," said Meling Mudin, HITB senior security consultant. "The emphasis of the CtF game is on real-world skills and not just pure bred hacking skills," he said. This includes analysing the security posture of a system, finding and exploiting vulnerabilities, writing automated scripts, and keeping a running system alive while under massive attack, he explained. . It's old news, but the article is here.
- National Day! Hurrah! I am really off the mark this time - but 31st August was Malaysia's Independence Day. I may not have read the local news much, or I must have missed it completely, but is it true that this year's National Day theme was called Lighting the Fire of Patriotism?
- Owen joins the Magpies. Uh-huh. I'm not a fan of Liverpool or Newcastle (or Kota Bharu if you're into that kind of thing), but I just pity Owen. Hidup segan mati tak mahu. But then again I admired his way of handling things - I mean to me (even if I am not a Liverpool fan but let's assume for 2 seconds that I am), he managed to go back to the EPL by joining Newcastle and not his former club without making his former club fans pissed off and dissappointed, and as a 2-second Liverpool fan (okay, let's make it 90 minutes when the KOP plays Chelsea, mmmkay?), I am not angry, or dissappointed either. At least he comes back, if not to Liverpool pun okey aper...
- My brief flirtation with Enlightenment. E17 is sweet. Too sweet. It just totally rocks! So I emerge it (e17 is available in Gentoo's portage as a CVS install), and was mesmerized. After a day I decided to ditch it and figured that I am happy and content with my extremely minimalist fluxbox desktop. I feel that E17 is like an extremely hot new girlfriend (Japanese some more!), but there's just something lacking in her and you just can't pin-point it out no matter how much you stare at that spot below her navel. Fluxbox is like Mary Jane (yanno, Spiderman), simple and elegant. Heh. I'm a nerd.Totally.
Listening to: Jedi Mind Tricks - Coming of Tan
|
