Terrific Tuesday The Twenty-Third
 

Morning |waves|

My Sabres lost last night & looked horrendous, but that's ok - we only needed to win one there. Home games Wednesday & Friday & I can't wait!

Of course, I missed 24 last night, so now I have to find time today to squeeze that in.

Other than that, it's fucking cold here! |santa|

its only 75F here, but with the wind chill, its 75F.

Got an icq from a client:

hey, my website is down.

Odd, the zend encoded file you uploaded requires php5, we don't run php5 on that machine. But I'm on holiday in ______, I have been here for 7 days.

Account was FTPed into, they went directly for a zend encoded file, replaced it with their own version (which didn't work, and I'm not sure why they didn't test it) and left.

So, I figured, lets see what this thing does. I installed it on a machine running zend 3.0 + php5 and lo and behold, without any database connection, a picture perfect copy of their page (with a toolbar javascript at the bottom), but, it gets better. It still sends traffic through their click tracking system, and, skims to another unrelated site.

If you have the ability to change your FTP password, do it frequently. This person claims to have run spyware and antivirus full scans on a weekly basis and has a live update. There are two people that may have the ftp info, either of which could have been compromised as well. If you cannot guarantee that their systems are clean, change your password, let them in, change your password after they are done doing what they need to do.

The logs show that this person logged in from Poland and the UK, went in, grabbed a zend encoded file, uploaded a zend encoded file 38 seconds later. downloaded a few html files, uploaded them 4-5 seconds later each. There were no authentication errors, no mucking around the system. Total connection time was under two minutes.

Other than that, my fuel guy called and I missed his call. And I need a haircut.

You better run outside and cover the plants - sounds a bit frosty down there. Brrrr.

I'm not sure what today's weather will be, or even is. The one inch opening at the curtain tells me that the sun is shining to some degree. I guess I'll get a good taste of it when I bring the kids to school.

Oh shit, it's almost time to bring the kids to school. |waves|

Woken up by roofers going to my neighbor's place.

Besides meeting with roofers just a day of working and running errands today. Still suffering with a mild cold. I don't ever remember getting sick this much in one year.

Is it time to go back to bed yet?

Morning
Still kind of running on zombie mode but, I am here :)
In the last month, we have had 1 day without rain. Today looks like more rain and cold. There was actually snow in higher elevations :)

Good Morning All :)

Morning all,

Rainy, windy and chilly outside. The average end of May weather.
Other than that I got nothing.

Have a nice day all.

Mornin' y'all,

It's day 3 of Wordpress/Blogging 101 and it's actually starting to look like a blog. |bananna|

That chilly spell hitting Sparky is present on this side of the gulf coast as well. ;)

|coffee is on, extra strong, help yourself

Good Morning. 24 rocked!!!

The weather is looking up around here. Suppose to be warmer as the week goes on.

Morning all -
Damn, it's been a long ass weekend. Saturday was graduation - had to get to 10 of them, got home at about 2am. Sunday was go help out a friend clean up their house and yard day. Monday was a high school softball tourney (got the fields ready and umped 2 games)
Sunny and warm but windy here, rain expected tonight.

The kids last full day of school for the year, two 1/2 days left, then I get to kick them the hell out of the house everyday all summer :)

Good morning everyone |waves|

nice long weekend, freezing cold and windy but of course today is nice & sunny - not a cloud in the sky :)

lots to do so I better get started |thumb

have a great day

:)
Ponygirl

Good Morning Everyone,

Cold here as well. If it wasnt for the wind it wouldnt be so bad. 30 percent chance of rain today.. well with those dark blue clouds in the sky, id say chances of rain are more certain than that.

Have a great day!

mourning all, back feels a little better today, thank buddy it is getting better...same old thing today

Good morning everyone |waves|

Tried to go to bed at my normal time and was too wired to sleep so I got up and needed to chill out some, so I watched Sopranos and saw 2 dudes get whacked which was pretty freaky. |dizzy|

Well, freaky if you smoked as much as I did during it....|potleaf|

I go back to bed at 3am and finally fall asleep when we are woken up by my cat who gets very pissed when an outside cat walks in his yard so he try’s to attack him through a glass window which if it wasn’t at 4am it would be pretty funny watching him hiss/spit/growl and bounce off glass, but when it wakes you up your first thought is someone is inside your house attacking your cat.

So I am tired and can’t even take a nap, so I guess its shower time and then a few errands and back to work.|yawn|

Sigh....

I am sure someone will get around to sending summer my way... but it doesn't look like it will happen for a few more days at least. At least the sun is out for a change, haven't seen this for more than 4 hours since April, I think.

Yesterday was a remarkably useful sort of a day, got bunches of stuff done and more importantly it was actually useful stuff. Cleaning up traffic flows, exposing new sites to older traffic patterns, and generally cleaning up things and making sure everything is moving forward. Nice.

Today features some serious running around, and that will be followed by thumbnailing galleries and stuff for another new TGP thing... and then I get to spend the rest of the week working on something bigger to close that out and get it public.

I need more coffee.

Alex

|waves| Morning!!!

It's my run around all over Las Vegas day today.. blah i hate tuesdays.

|thumb have a good one..

This is just incredible.

Not only was the client's home machine hacked, their passwords discovered, etc, but, the hackers found the foresight to install a proxy server on his machine and named it mcafeeav.exe -- so, when the firewall alert popped up to ask whether the client wanted to allow that application remote access, he said yes.

At that point, the hackers used the proxy on his machine to access his server -- making it almost impossible to see which were valid updates to his site and which were not.

Oh how much fun... not!

All your hot weather are belong to us... I mean it is pretty hot and windy and humid here, I can hardly breathe since it is the allergy season... it's good two guys popped in to fix a nice old mirror on the wall, they could take me for some extra oxygen to a hospital nearby.
;(

Tell me it can't happen on a mac.. not even a mini mac please :)

Morning! More work in the house today, getting really tired of it but it should all be done by the end of the week. |bananna|

Have a good day all!

If you click something, and allow it, that is a socially engineered script and can happen on even the most secure machines.

So, if something looks official and you say, yes, please do this, it doesn't mater what safeguards you have in place or what operating system you are running. It all comes down to the keyboard nut. :)

Oh hallelujah, just what the dr ordered :D

Morning all. |waves| Busy with a new project again today, and I'll be in and out. Hope your day gets better cd34. :)

Good Morning everyone!!! Little man wasnt feeling too good today and either was I but I made it to the office. Other then that nothing new and it looks like a hot one here in Vegas today! |yawn|

I'm hoping it will get 50% better tomorrow.

No wait. haha.

Social engineering is the most powerful weapon for scammers and jammers. Kevin Mitnick proved this over and over again, not by exploiting the computer systems as much as exploiting people and procedures.

Still to this day, many PC viruses depend on people clicking on an email attachment to spread. They use social tools (Anna Kornakova naked pic.gif) to encourage people to do what they shouldn't do. It is an amazing thing to watch, playing to the curious nature and gullability of humans.

Sort of like selling porn.

Alex

You need to take the black tint off of your windows- I see sun out my window

when I worked for a few oil companies in their security division, we had a premise security system with slow-scan video over 9600 baud modems that we had developed. Many times I was sent out to fix the systems and often times I could walk up to a store, gain access to the manager's office, unlock the system with a key -- all without ever providing any credentials. And often times without even having a uniform or any other identifying materials with me.

I can remember one time I was doing service on a Checkers Restaurant in Baltimore that had the system, and they let my wife wait in the managers office while I made some adjustments. There was easily $15k in cash in a huge pile sitting on the managers office with the door that was open. Even though I was called by the district manager, the store manager had no idea I was coming, opened the door, let me in, let me mess with security equipment, etc without ever even asking for ID.

Needless to say, security procedures were updated within the week at a number of gas stations, fast-food restaurants and convenience stores.

I walked into the District of Columbia's Police HQ many times with nothing more than a clipboard in hand. This always astonished the police officers that thought I had to be announced to get in.

Years ago when Prince George's County Maryland opened a new high-tech maximum security prison, I was installing computers and overseeing cable runs with immense security precautions. No hole larger than an 1/8" larger than the conduit, must be secured with 9" disks of 1/4" steel throughbolted with anti-reverse heads, etc.

However, I was able to drive a truck in through the mantrap, get to the loading dock, exchanged keys with my boss, walked out through the front gate without having to sign out, drove back to the office, got my next ticket assignment at the E911 facility about 18 miles away. When he tried to leave with 3 other guys, the guard in the mantrap said -- No, this isn't right -- and held them in the mantrap, put the jail in lockdown, initiated a prisoner count and waited to get hold of me. I was assigned a pager the very next day.

If you look official, or even sound official, walk the walk, talk the talk, you would be amazed at how easy it is to get around security.

After 9/11 though, it has become much more difficult and people are more wary, but, a convincing smile, a clipboard, well kempt appearance and functional yet well maintained khakis with a shirt and an emblem, and I'd bet that I could get into manager's offices just the same.

Morning all. Went to start working on my sites and found my sites down. |angry| I have more ram on order to upgrade my box, I hope it gets installed SOON! Been having issues on and off since yesterday that I know of. They are also installing a new HD on my box too before the existing one gets filled up since I keep adding more sites every day.

I hate the waiting game for my sites to come back up. Fortunately, Phatservers is pretty quick to get things working again, so I'm sure it will be soon. :D

Other than that a beautiful day here, not supposed to be real hot, bright sunny perfect day for yardwork, which is what MadHatter is out doing, while I slave away in my dark office working on the computer, lol.

Have a great day all!

Sites are back up, they were installing my new ram and HD. |bananna|

My link lists should be faster than ever now. |thumb