The Blog




Napsters legacy: P2P will rule - ZDNet Aug 13 2001 10:31AM ET Gartner decide that P2P is the next greatest thing and "By 2004, most large corporations and enterprises will have carried out large-scale deployments of P2P technologies" So that's that trend finished. What's next?


CNN - Floating 'droids' to roam space corridors of the future - January 12, 2000 : Mmm! Little floaty self contained robots that fly around in zero G. I love it.

n/a

The news about Code Red is beginning to die down. As much as anything this is because it's no longer news worthy. But the problem remains. I'm still getting code red requests in my server logs, and I'm fairly sure that my home machines are still getting requests over the cable modem.

There are now a couple of example poison pill files out there. These are scripts named default.ida that can be placed on your apache server so that it gets executed when Code Red tries to hit you. Most people have kept away from real damage , but the approaches have ranged from displaying a warning box on the IIS machine to shutting it down.

I wonder if a better approach might be to point the 404 error handler at this file. It seems very likely that CR4, 5 and 6 will appear and they may well find another exploit beyond the default.ida attack. As long as root.exe ends up being exposed, the poison pill approach would continue to work.




The RSS FAQ is now pretty much complete. Feel free to add comments or propose changes.

Latest RSS News (RSS Info) : Latest RSS News The Blogspace RSS information site is back.

We rented Traffic yesterday. This has rightly been praised for asking a whole series of tough questions about America's (and the West's) War on some drugs But as usual my cynicism leads me to ask a couple of questions.

  • We were shown several corrupt mexican officials, but no corrupt US officials. Are we to believe that they don't exist?
  • Did we really have to have Michael Douglas playing the archetypal Hollywood Honest Politican who gives it all up on a point of principle? There have been numerous cases of politicians calling for tougher laws on this that or the other, only to have their children break them. One Dubya Bush comes to mind. In the real world, did you ever see one change their stance or resign because of this?

    Still, if it helps expose the lunacy of the War on some drugs[1] and re-opens the debate (what debate?) then it's no bad thing. And it is a good film.

    Go here and search for the words "some drugs"




  • n/a

    n/a

    n/a

    The Register : How can it be this easy to exploit a vulnerability that Microsoft patched ten months ago, and which a recent worm highlighted to admins with numerous page defacements?

    "What's going on is that there are just too damn many patches. It's simply impossible to keep up. I get weekly summaries of new vulnerabilities and patches. One alert service listed 19 new patches in a variety of products in the first week of March 2001. That was an average week. Some of the listings affected my network, and many of them did not. Microsoft Outlook had over a dozen security patches in the year 2000. I don't know how the average user can possibly install them all; he'd never get anything else done," Counterpane Internet Security CTO Bruce Schneier remarks in a recent article.

    Microsoft - Microsoft has "developed a tool that eliminates the obvious damage that is caused by the Code Red II worm." [Scripting News] Spread the news.

    Persistent viruses sound industry alarm. - InfoWorld: Persistent viruses sound industry alarm. [Hack the planet] A couple of quotes from this article.

    "Hoping to achieve this balance, Pacific Sunwear, a $600 million clothing retailer, has shied away from using Microsoft products in mission-critical capacities because of the constant security threats, said Ron Ehlers, vice president of information systems at Pacific Sunwear in Anaheim, Calif.

    Instead, Pacific Sunwear runs its business on IBM's AS/400 mid-range servers and uses Windows NT and Windows 2000 servers for file sharing, Ehlers said. The company does allow Windows PCs to access AS/400 data. "By intent we don't use Microsoft Outlook for e-mail because of the vulnerabilities to virus spreading," Ehlers said."


    "One cyberliability underwriter, Okemos, Mich.-based J.S. Wurzler Underwriting Managers, will increase premiums by 5 percent to 15 percent if a user's Microsoft Windows NT administrators are insufficiently trained, "

    Will we see the day that using MS Email readers and MS web servers will result in higher corporate liability insurance?




    MS internal network whacked by Code Red - Boneheaded employee strikes... [The Register] No. No. Please! No more of this irony, I can't stand it!




    Microsoft's Hotmail Is Red Hot From Worm : Several systems hosting the MSN Hotmail service have been infected by variants of the Code Red worm, Microsoft has confirmed. , Uh, the irony is overwhelming... Does anyone else see Steve Balmer turning into Colonel Kurtz? "The Horror, the Horror..."

    What we really need to do is get the Micro$erf who wrote the code with the hole together with the d00d who wrote Code Red II in a room with a case of beer.

    One of the best solutions I've seen is this. It's a PHP based poison pill in the form of a default.ida file. The PHP code responds by using the backdoor left open by Code Red II to leave messages all over the screen of the attacking server. I'm sure we could all think of more damaging things to do with the code, but that would be wrong, right?

    Mercury - Leisure : Blogs start hitting the average Joe! Amazing, my local newspaper runs an article about blogs!

    n/a

    RSS Feed for New WSDL and SOAP Web Services : We are publicising our new web services list, which changes daily using the RSS format news feed standard. You may use this formatted xml file which displays New WSDL and SOAP web services in any newsreader or news web site that understands RSS XML formatted documents.... I've been doing some searching for SOAP indexes as a result of the "Free UDDI" meme. eg
    http://www.salcentral.com
    http://www.xmethods.com
    http://www.webserviceswatch.com
    This one's relevant as well. Business Architecture for a Web Services Brokerage




    'Igniting Fear With Flying Metal' - The Survival Research Laboratories are a loosely assembled group of half-mad scientists who build big robots and then blow them up. Read the story. See the pictures. View the video. It's smashing good fun. Multimedia presentation by Jeremy Barna and Brad King. [Wired News] Check it out. Nearly as good as the old Archaos in the early 90s.

    1 to 20 of 3860