Archive for August, 2005

2 years, 8 months ago

TechTV is back, sort of, well maybe

So in case you haven’t noticed the guys over at Ziff Davis have soft launched an online video show called Digital Life TV. Patrick Norton is the host of the show and it looks like he is starting to get back into his old TechTV groove. Of course as you can see Patrick is having fun when he’s not busy nuking NewTek Tricaster’s or small MP3 players:

Patrick Norton on Digital Life TV

However the best part of the show has to be the little easter eggs that Patrick sneaks into the show like this one when he was reviewing the Sony Ericsson W800 Walkman phone:

Hilarity Ensues

So far the show has a number of rough edges to it but it covers a wide variety of topics and keeps a light attitude about things so its fun to watch. New episodes are streamed live every Tuesday at 6PM PST and are then available for download later that night on their website. With some money, time, and luck we could be looking at something to fill that void left after The Screen Savers was taken away from us.

2 years, 8 months ago

You sir are no Netscape!

Well I took the plunge and decided to update the theme on WordPress here to beta one revision 60 of K2 (see link at absolute bottom of the blog page). It was relatively painless and I haven’t noticed any major issues yet. I went back to the drawing board with regards to troubleshooting this websites appearance in IE6 verses how its supposed to look in a real honest to gods standards compliant browser like Firefox. Based on some comments others left in the K2 Bug Discussion forum over on Flickr people suspected that the Adsense code from Google was most likely the culprit. Sure enough if I removed the Adsense code from the sidebar on the side everything loaded up just fine in IE6. After examining the HTML code for the Adesense content it seems that if IE6 sees a table row with a “nowrap” attribute it refuses to honor any wrapping CSS attributes. Also, IE6 seems to render the Google Adsense searchbox bigger then its supposed to, causing the Adsense element to be wider then the max width percentage specified in the CSS file for the sites theme, thus making IE6 think the sidebar content is too wide and thus shuffling it down to the bottom of the posted blog entries on the site. At this point what I’ve done is used a different layout of the Google Adsense searchbox code and this seems to make every browser happy now.

Also, if you are a Mac user I highly recommend you upgrade to Safari 2.0.1, it fixed some CSS layout issues I had noticed.

2 years, 8 months ago

Buy a Zen Neeon…possibly get a virus?

Creative Zen Neeon 5GB Way to go with QA on your final master drive image Creative! You can check out the Bableized English here In a nutshell it looks like approximately 3,700 units shipped with the W32.Wullik.B@mm Windows virus, which turns out to be a mass mailer virus.

2 years, 8 months ago

Potential politicians that might not suck

Last week I was watching Bill Maher’s show Real Time on HBO. On there he had a brief interview with Paul Hackett who recently lost a congressional race in Ohio whom I found rather impressive. Why is it that more potential politicians cant speak as frankly as this? I’ve really grown tired of the spin doctoring so prevalent with todays typical political people. Below here is a link to the video clip of the interview (33MB MPEG-4):

Paul Hackett on Real Time with Bill Maher
http://www.nonmundane.org/~dspisak/media/politics/real-time-bill-maher-08-19-05.mp4 (33MB MPEG-4)

2 years, 8 months ago

The Great Update….

Well, I might make some seriously dumb mistakes working on Java code at midnight but apparently working on PHP modifications and WordPress themes and updates is fine at the wee hours of the morning. With this post I should now have this blog fully enabled with my Adsense account and code like I have been wanting to do the past few weeks. I’ll probably play around with the ad dispersal within the posts somewhat but I promise I will try to not make the ads a pain in the ass or get in the way of reading the content on this website. I’ve also updated to the latest and greatest versions of WordPress 1.5.2, as well as myPress 0.6.6 and a whole host of new plugins and other tweaks to the site for a better overall experience. Let me know what you think of it, thanks!

2 years, 8 months ago

Off I go….

Off to Elka’s going away party in Los Al here, if anyone needs me reach me via my now working cellphone.

2 years, 8 months ago

Enter the House of Cosby’s

What could be funnier then a show about Bill Cosby? How about a show about an obsessed fan who creates a cloning machine and then starts creating mutiple Cosby clones? Here are some screen grabs from the first episode followed by a link to the MPEG-4 video of the episode itself:

House of Cosby's Ep1 Photo 1
House of Cosby's Ep1 Photo 2
House of Cosby's Ep1 Photo 3

House of Cosby’s Episode 1 (11MB MPEG-4)

2 years, 9 months ago

Soap Box anyone?

So if you happen to be a member of MySpace.com one thing that you are aware of is bulletins and just how bloody annoying and useless so many of them can be. While browsing late last night looking for something else entirely I happened upon this awesome Flash animation that sums so what I think of many of those bulletins.

To those of you not on MySpace often people will post chain letter bulletins reminescent of the early chain letters you would get in email. You know, the ones that say Bill Gates and Disney are tracking your email and they want to send you money for sending this email along to as many people as possible to “track” the email? Or other really annoying things like posting about how their God is great and trying to guilt trip you into posting similar drek. In any case this Flash is for all of you who hate those stupid chain letter bulletins, check it out:

http://www.nonmundane.org/~dspisak/media/humor/soapbox.swf

Right click below here and select Play if the flash doesnt start (you wont see this on LiveJournal)

2 years, 9 months ago

New iPod announced by Apple…

Some of you may have already seen this, but if not you should check this video out of Apple’s upcoming new iPod! Check out the video (3.2MB WMV7) here on my server:

New iPod

Note that this was a parody, more about where this came from and who made it at the end of the video as well as here at the New York Times.

2 years, 9 months ago

Fahrenheit 451: Cisco Style

While rummaging around online procrastinating from working on my ICS 23 programming project I noticed some folks over at O’Reilly posted a video of Cisco removing the pages from the Black Hat 2005 book and replacing the CDs with copies without Mike Lynn’s IOS talk on them as well. Check out the video (5MB Quicktime) here on my server:

Cisco Ripping Mike Lynn's talk out

2 years, 9 months ago

DEFCON 13 Reading List

For those of you who were either unable to make it to DEFCON 13, or too busy partaking in the abundant alcohol, mayhem, and other frivolities going on during this last weekend I have compiled a reading list of talks to check out.

Bear in mind that the talks listed here comprised about roughly 25% of the talks given at DEFCON 13 this year so there is a lot of talks I am leaving out of this. If I left your talk out its because it dealt with deeply complex subjects involving certain types of coding or because I didn’t find it interesting or applicable to myself or my friends and associates. That being said most of the talks this year were of good quality but I do wish some of the speakers would be a bit more detailed in some of their presentation slides. Everything listed below I am mirroring on the nonmundane.org server for your convience as some of the mirrors are a bit slow when I last checked them.

In no particular order
Ian Clarke and Oskar Sandberg’s
Routing in The Dark: Scalable Searches in Dark P2P Networks
In this presentation Clarke and Sandberg try to apply routing algorithms to social networks in the context of dark P2P networks and show some of the solutions that they have come up with so far as part of the Freenet Project’s ongoing progress.

Broward Horne’s
Meme Mining for Fun and Profit
Broward shows how keyword hit analysis in USENET newsgroups and job boards online can be used to track popularity of memes and possibly predict future popularity of memes and what it cxan enable you to do with your decisionmaking.

David Hulton’s
The Next Generation of Cryptanalytic Hardware
Here David shows how FPGA’s can be applied towards solving cryptographic problems faster then general purpose PCs and how the cost of FPGA hardware has come down enabling security researchers with more powerful password auditing capabilities.

Bruce Potter of the Shmoo Group’s
Windows vs FreeBSD vs Linux
In this talk Bruce goes over the relative security or information assurance that the three operating systems provide and tries to compare the different security aspects to come up with a better view of the risks involved with running any of the operating systems in a production environment.

The Shmoo Group’s
Shmoo-Fu: Hacker Goo, Goofs, and Gear with the Shmoo
In this talk the entire Shmoo group gives an overall update of what they have been working on for the past year including new kinds of wireless network attacks, wireless equipment, and how to protect against these attacks.

Dan Kaminsky’s
Black Ops of TCP/IP 2005
Dan talks about uses of the MD5 hash vulnerability discovered earlier in the year and then goes on to show what he found when he scanned all the Internet’s DNS servers.

Strom Carlson & Black Ratchet’s
Be your own telephone company with Asterisk!
Strom and Carlson here go into great detail about the open source PBX software, Asterisk, and how it can be used and what pieces of information you need to know when deciding how to set one up. Also included are WAV files showing how various speech compression codecs in Asterisk affect voice quality. This entire talk is a 15MB zip file due to the audio samples included.

Grothoff, et. al
Lost in Translation: Translation-based Steganography
Here Grothoff and his co-authors show how one can use steganographic techniques combined with machine translated cleartexts to send secret data to others in plain view. Very interesting approach but does have some limitiations.

Dave Heiland’s
The Insecure Workstation II
Here Dave shows how one can craft a small program to use API call vulnerabilities to do user rights escalataion and subsequently subvert the Windows logon process. Also goes over how one could protect against the attack as well.

John Ives’
Passive Host Auditing
Ives here shows how one can go about using free open source tools along with custom scripts to passively identify operating systems and running applications on systems based on the traffic they send out for updates, A/V signatures and OS updates.

Metlstorm’s
Post Intrusion SSH Hijacking
In this talk Metlstorm shows how it is possible for a crafty intruder to silently hijack a SSH session in progress and open a new SSH shell to a remote system instead of the normal filehandle thanks to the magic of UNIX. Very cool stuff.

Dean Pierce, Brandon Edwards, & Anthony Lineberry’s
Bypassing Authenticated Wireless Networks
In this talk are shown how one can employ some simple sniffing techniques along with correlation of key pieces of data over unencrypted wireless networks to bypass common authentication systems using the software pickupline they created.

2 years, 9 months ago

Rock Gods of Rock!

Ok, so my good friend Robert is to blame for making me aware of Rock Gods of Rock. Just what is Rock Gods of Rock you might be asking yourself?

Well, for starters here are screenshots from each episode for you to gaze upon before you start clawing your eyes and ears out from the hilarity that is the total irreverence that is this short cartoon:

Episode 1 (11.9MB MP4):
RGOR-Episode 1

Episode 2 (11.4MB MP4):
RGOR-Episode 2

Click on the images to download the videos of the cartoons if you dare to watch the crazy zany pain.

2 years, 9 months ago

Testing new linkages…

Hey folks just letting you know that if your seeing these posts on LJ now you should have two links to follow. One takes you to the page of the post on blog.nonmundane.org and the other will now take you directly to the comments page of the post on my site as well. Have fun with it!

2 years, 9 months ago

XBOX 360 price leaked

According to the guys at TotalVideoGames.com the XBOX 360 is listed at WalMart for a cool $299.99 with games looking like they will come in at $59.99. It is going to be interesting to see how PlayStation 3 pricing will look compared to the XBOX 360’s considering what Ken Kutaragi has been quoted saying with regards to PS3 pricing:

“Our goal for PlayStation 3 is for consumers to think to themselves, ‘I will work more hours to buy one’. We want people to feel that they want it, irrespective of anything else.”

Somehow I really doubt Sony can pull off a $299 price point for PS3 all things considered that have been crammed into the PS3 hardware spec.

2 years, 9 months ago

DEFCON 13 Aftermath

Day 0:
day0-defcon13

So I wake up at an early hour to finish packing my stuff for the con and head up to Fullerton. Hooked up with Arclight and Danozano and caravaned out to Las Vegas around 10AM. Things are going great and we stop at Baker where it was only 110F to top off the gas tank. Then a few miles in past state line nature decides to show off with an awesome lightning storm which then takes the ambient 110F temp down to 68F in the span of a few miles resulting in a massive monsoon thunderstorm.
defcon13_storm1defcon13_storm2defcon13_storm3

We arrive in Vegas around 2PM about an hour before the DEFCON Cannonballer’s. Rest of the day is spent wandering around the Alexis Park talking to old friends and working out sleeping arrangements for the convention since I’m in nomad mode still. Later myself, CHS, Jim, and others head out to the Bellagio for the buffet.
defcon13_bellagioglassdefcon13_chsandangie

Afterwards we hook up with other goons and go roaming the AP in search of entertainment. Oh there was also a wedding reception this night for two hackers that got married earlier that day.
defcon13_thursnight

Day 1:
day1-defcon13

Friday starts off uneventful…that is until the first talk I go to in the morning. I foolishly forgot just how many people would by going to Fydor’s Nmap hacking talk at the Apollo. So of course I get to the talk just as its starting and its completely full up. So I head over to the tent for the biometrics talk and discover that the entire tent schedule is already an hour behind due to some scheduling snafu.
defcon13_fri1sttalk

Later throughout the day was the Xprobe2 active OS fringerprinting talk and then much later in the day was Dan Kaminsky’s very excellent Black Ops of TCP/IP talk. Dan ended up drinking quite a lot near the end of his talk and quite frankly I was surprised he was standing as you can see here.
defcon13_dananddan

Of course after his talk was the first nights round of Hacker Jeapordy which ran rather long but good to see back after last years disasterous “Leetest Link” which sucked. This was also the first time at Hacker Jeapordy that I can remember where we had a double barf situation happen between two of the teams. Afterwards was yet more roaming and partying with IVU and the folks down at Pool 3. At some point during the night pool 3 had its water dyed a dark blue. By morning this was a dark violet color and the AP hotel staff decided to drain the entire pool and then fill it back up with water which took much of the next day.

Day 2:
day2-defcon13

This day was more talks, some good ones on lockpicking techniques, as well as another on Google Adsense word tips and tricks. Once again the tent talk schedule was messed up, but this time they managed to make the schedule be wrong by a different amount of time throughout the day making it a real pain in the butt to get to the right talks in time. Had some free time and finally checked out the CTF area and then the Blacklisted! 411 booths:
defcon13_ctf1defcon13_bl411defcon13_ctf2

Then later in the day was the most excellent Meet the Fed panel hosted by Jim Christy of the DoD Cyber Crime Institue and there were speakers from DoD, NSA, FTC, FBI, RCMP, US Dept of Treasury, US Post Office, and I might be missing one TLA here. The overriding message from all of the Feds is “We want to hire you if you are talented, but only if you dont cross the line by illegally breaking into systems”. It’s always worth listening to these guys talk and see where they stand on a variety of current issues.
defcon13_meetthefed

Aftrerwards that night was Hacker Jeapordy where I finally had a charged camera available to get some photos of the new Vinly Vanna, Malice who turns out to be a geek and nice.
defcon13_hj-malice

Of course the talk of HJ this night was the fact that it’s host, Winn Schwartau was owned on the Wall of Shame as he allowed his laptop to be used by an untrusted individual who then turned on Winn’s Airport networking and let his email client check via the Defcon network. Here you can see Winn accepting his sheep prize from the Digital Wolf folks.
defcon13_winnowned1defcon13_winnowned2

Afterwards was partying with folks at IVU, Ninja Hackers, and then the 303. A whole hell of a lot of fun! In fact, perhaps a bit too much fun.

Day 3:
day3-defcon13

This day was lost to the locusts that consumed Dan at 5AM. I have some rather amazing friends for them to have put up with what happened that night. I do apologize for what happened and no I’m not going to say any more about it then that. After recovering from that whirlwind I got up after 3PM and checked out some of the remaining awards and said bye to folks and then headed back to California. Only took 5 hours to drive in the evening Sunday traffic.
defcon13_cominghome




About the Author

Daniel Spisak

Daniel Spisak was born from the fiery depths of fusion and now roams the pale blue dot known as Earth. I obtained my bachelors degree in Computer Science from UC Irvine at the end of 2007.

I am also involved in technology & security consulting firms as well as being a freelance technology writer. I also contribute to Jerry Pournelle's website and Chaos Manor Reviews. Additionally I am also a freelance photographer as well and you can find my photos either on my own personal gallery or up at my Flickr account or on Zivity.

This blog is one of the main locations where I do my writing, which is then automatically sent to my LiveJournal, VOX, and MySpace accounts. I can also be found on a variety of social networking and microblogging sites like Pownce, Twitter, Brightkite, Facebook, and LinkedIn.

If your viewing this site with Internet Explorer it may not look correct because IE is horrible about following W3C web standards properly or consistently. I suggest you try browsing the Internet with Firefox. It is much better and not as vulnerable to security flaws as IE can be.

My Current Qik Video

Daniel Spisak's Flickr

DSC_6655DSC_6652DSC_6651DSC_6650DSC_6649DSC_6648DSC_6647DSC_6646DSC_6643

 

August 2005
M T W T F S S
« Jul   Sep »
1234567
891011121314
15161718192021
22232425262728
293031  

Archives