Still here!

Haha, I'm not quite dead yet.

No, seriously, I'm really going to make an effort this time. And I'm going to try to keep the mount of rants down to a minimum (okay, thats probably a lie. But not intentional).

Yea, so, check back soon, I'll be updating...

peace,
--n3w7yp3

Looong time

Yea, its been a long time since I've last updated this blog. Sorry. :-/ FoodLion has kept my hours pretty full, and when I get off work, I'm too tired to do much. :-S

Anyways, school's out for the summer! :-)

Hmm, I can't think of anything to rant about really, so I'm going to end this post now. BTW, read kay's blog, nulldigital.

peace,
--n3w7yp3

Various things

Hey people. Sorry for the lack of updates, but I finally got foodLion to put me on the schedual, and they've had me working alot (granted, my first day was like 2 or 3 weeks ago, but...). They even called me in yestarday, asking me to work. Apperantly, they hadn't schedualed enough people. :-/

Also, I've been updating n3w7yp3.dajoob.com alot. The index pages may look a little bare, but there is actually a good amount of code on there. I'm going to upload a few more things, and then fix up the index pages. Until then, if there's anything that you want that you know I've been working on, just ask and I'll send you the link.

In my spare time this weekend (which wasn't much), I did learn multi-threading in Perl, as well as C. Its very cool. Suddenly, a whole lot of new coding opertunities have opened up to me. I'm thinking about doing some superfast stateless port scanners (a la scanrand, see doxpara), as well as maybe some password crackers. I've coded a VBulliten hash cracker, but it still needs some work. Maybe I'll multi-thread it. :-)

Okay, I'm off for now. Check back soon for more updates!

peace,
--n3w7yp3

DoS

So, I was browsing CNet and I found this article. I was suprised to see that the Computer Misuse Act (in the UK) doesn't say anything about DoS attacks. They are quite prevelent these days, and can be quite destructive.

Still, I find it hard to believe that a mail server was crashed by simple mail bombing. What seems more likley is that the disk space was filled up, and thats what caused the problem. But I wasn't there and will probably never see the logs, so its impossible for me to say for sure.

peace,
--n3w7yp3

Erm.... Frag Dolls?

So, I was browsing CNet news, and I stumbled across an article about the Frag Dolls, Ubisoft's all female gaming team. Kind of odd, kind of different, after all, most people don't usually think of girls as gamers. Ah well, its cool.

My original plan was to rant about this, and complain that CNet was running pointless stories about video games (looks like they're caught up in the E3 madness just like the rest of the world), while they ignored stories about a botnet attacking a hospital. But then, I realized that (believe it or not), I just didn't care. Hard to believe but true. I still do play video games occasionally, and am cursing Netflix for not having a copy of Final Fantasy VII: Advent Children avalible for me to rent.

But about the bot master attacking a hospital, how stupid can you get? Messing with the computers in the IC unit does *not* make you a hacker, no matter how leet and badass you may feel after endangering someones life. BTW, has anyone else noticed how there are a lot of articles about botnets recently? I saw one on SecutiyFocus (linked earlier), and there was one on CNet (read it). And then we have the Fantasy Soccer league virus. Looks like it infects Microsoft Excel spreadsheets. Doesn't seem like that big of a deal (IMO), all it does is upload a fake spread sheet and modify thier existing fantasy soccer ones. I can't really see it causing any damage at all.

Okay, thats quite enough for today. I'm out.

peace,
--n3w7yp3

Kuang

Hmm, so, a few months ago, I started on a project called Kuang. Kuang is a *nix log file editor (and the name of the virus in Neuromancer. I've got to stop naming my projects at 0300...) coded in Perl.

Its pretty good, it can delete a log, overwriting it with random data, truncating it down to 0 bytes and then unlinking it (like `shred'). It can also search for a string and then delete any lines that contain it, or replace them with something else (for instance, you could have it search for your IP address in the logs and then replace it with 127.0.0.1 or something).

Kuang also uses stat[8] and stat[9] and utime() to set the last access and modified times.

The code is done, after all, its not exactly a hard thing to code string relacements in Perl. ;-)

I'm gonna kick it around for a bit, and then put it up on http://n3w7yp3.dajoob.com.

Alrighty, I got to get back to HTML. *sigh*

peace,
--n3w7yp3

Code reuse

Was just skimming SecurityFocus, and read an article about how malware has 'familys' (common code trends, even some exact same bits). Suppposedly, this was a big surprise to the group that did the analysis, Sabre Security.

I don't see why this would come as a suprise, to be honest. Chances are, malware writers are not out to see if they can create the most elegant code (unless say they're developing a custom rootkit to deploy against a target, etc), but to get the most distrobution of thier malware. So, if somebody has already written a good IP generation algorithm, I can see how it would be attractive option for them to copy the code.

Hmm, sorry if that didn't make much sense. I'm in class, and the girl next to me is playing some rap really loud on the computer speakers, and it's hard to concentrate with it on. :-/

peace,
--n3w7yp3