Music
Security Alerts
- TA13-168A: Microsoft Updates for Multiple Vulnerabilities
- TA13-141A: Washington, DC Radio Station Web Site Compromises
- TA13-134A: Microsoft Updates for Multiple Vulnerabilities
- TA13-107A: Oracle Has Released Multiple Updates for Java SE
- TA13-100A: Microsoft Updates for Multiple Vulnerabilities
- TA13-088A: DNS Amplification Attacks
- TA13-071A: Microsoft Updates for Multiple Vulnerabilities
- TA13-064A: Oracle Java Contains Multiple Vulnerabilities
- TA13-051A: Oracle Java Multiple Vulnerabilities
- TA13-043B: Microsoft Updates for Multiple Vulnerabilities
Security Tips
- ST06-001: Understanding Hidden Threats: Rootkits and Botnets
- ST06-005: Dealing with Cyberbullies
- ST06-004: Avoiding the Pitfalls of Online Trading
- ST04-009: Identifying Hoaxes and Urban Legends
- ST06-006: Understanding Hidden Threats: Corrupted Software Files
- ST10-001: Recognizing Fake Antiviruses
- ST04-016: Recognizing and Avoiding Spyware
- ST04-015: Understanding Denial-of-Service Attacks
- ST05-019: Preventing and Responding to Identity Theft
- ST05-006: Recovering from Viruses, Worms, and Trojan Horses
Tool for finding out what information your apps are leaking
mitmproxy, “an SSL-capable man-in-the-middle proxy,” is a useful little free software utility that can sniff the traffic between your computer or mobile device and its servers and determine what data the apps you’re running are leaking to the mothership.
mitmproxy is an SSL-capable man-in-the-middle HTTP proxy. It provides a console interface that allows traffic flows to be inspected and edited on the fly.
mitmdump is the command-line version of mitmproxy, with the same functionality but without the frills. Think tcpdump for HTTP.
- Intercept and modify HTTP traffic on the fly
- Save HTTP conversations for later replay and analysis
- Replay both HTTP clients and servers
- Make scripted changes to HTTP traffic using Python
- SSL interception certs generated on the fly
The hidden beauty of the bottom of toy cars
Jason Torchinsky’s interest in the bottoms of toy cars borders on the Nicholson Bakeresque…
The bottoms of toy cars are fascinating because it’s a revealing insight into the mind of the toy designer. Generally, you don’t really have to do anything at all, but most toy cars have at least some attempt made to have some measure of detail or accuracy. On many models, there is a genuine attempt to get the mechanicals shown below as accurate as possible, and often the results are quite good. You can see corrugated oil pans, suspension arms, mufflers, differentials, driveshafts, and more. It’s clear the designer actually looked at the original car.
Other times, even if the body is accurate, the bottom can be this sort of collage of parts the designer knows should be there– most often prop-shaft and some kind of exhaust– but the locations and sizes are placed with a certain casual whimsy. I like these as well, as they give a nice view of what someone who may not know much about cars thinks a car underside should look like.
Drive-thru funeral parlor: “It’s a convenience thing”
Here lies the late Robert Sanders, 58, at the Robert L. Adams drive-through funeral parlor in the Los Angeles area city of Compton. The funeral parlor has been in business since 1974, and is believed to be the only drive-through funeral home in southern California, according to office manager Denise Knowles-Bragg. She says the parlor offers a convenient alternative to older people who find it hard to walk, those who want to make a quick stop during the lunch hour, and the families of well-known deceased people who expect many visitors.
The megalife of Kim Dotcom
He attributes the charges and the raid on Dotcom’s $24 million New Zealand mansion to “copyright extremism” on the part of the U.S. government…
He looked like a character Hollywood might produce: a giant, swashbuckling, black-suited jet-setter, bikinied babes on his arm, yachts, planes and exotic cars at his disposal. He displayed a villainous visage and a shotgun in his publicity photos, and his fleet boasted “GOD” and “EVIL” on license tags.
But the story of Kim Dotcom, 38, a German born as Kim Schmitz who liked to call himself King Kimble, reaches far beyond a cartoonish persona, self-promotion and a criminal record of pump-and-dump stock fraud.
The former computer hacker is the principal figure behind Megaupload, which U.S. prosecutors charge was a global empire that reaped a mega-fortune from illegal digital distribution of movies, songs and other copyright works.
I Figured Out Ice Cube’s “GOOD DAY”
CLUE 1:
“went to short dogs house, they was watching Yo MTV RAPS”
Yo MTV RAPS first aired:
Aug 6th 1988
CLUE 2:
Ice Cubes single “Today Was a Good Day” released on:
Feb 23 1993
CLUE 3:
”The Lakers beat the Super Sonics”
Dates between Yo MTV Raps air date AUGUST 6 1988 and the release of the single FEBRUARY, 23 1993 where the Lakers beat the Super Sonics:
Nov 11 1988 114-103
Nov 30 1988 110-106
Apr 4 1989 115-97
Apr 23 1989 121-117
Jan 17 1990 100-90
Feb 28 1990 112-107
Mar 25 1990 116-94
Apr 17 1990 102-101
Jan 18 1991 105-96
Mar 24 1991 113-96
Apr 21 1991 103-100
Jan 20 1992 116-110
CLUE 4:
Dates of those Laker wins over SuperSonics where it was a clear day with no smog:
Nov 30 1988
Apr 4 1989
Jan 18 1991
Jan 20 1992
CLUE 5:
“Got a beep from Kim, and she can fuck all night”
Beepers weren’t adopted by mobile phone companies until the 1990s. Dates left where mobile beepers were available to public:
Jan 18 1991
Jan 20 1992
CLUE 6:
Ice Cube starred in the film “Boyz in the hood” that released late Summer of 1991, but was being filmed mid-late 1990 early 1991 and Ice Cube was busy on set filming the movie January, 18 1991 too busy to be lounging around the streets with no plans.
Ladies and Gentlemen…
The ONLY day where:
- Yo MTV Raps was on air
- It was a clear and smogless day
- Beepers were commercially sold
- Lakers beat the SuperSonics
- and Ice Cube had no events to attend was…
Megaupload Founder Kim Schmitz Cars Seized by FBI
After the authorities terminated MegaUpload yesterday, founder Kim Schmitz’s possessions were targeted, with his car collection being the first to be seized.
We don’t know what’s more opulent: the vehicles themselves, or their number plates, which, for example, read “GOD” (Rolls-Royce Phantom Drop Head Coupe), “MAFIA” (Mercedes-Benz ML63 AMG), “STONED” (Mercedes-Benz E63 AMG), “GOOD” & “EVIL” (Mercedes-Benz ML63 AMG). We have to mention that the photos came to us via Elliott Kember.
HOWTO: Upgrade RAM
HoneyCups model Midori West, aka a hot girl in a bikini, explains how to upgrade your RAM.
The CIA Exposes the Truth About Ron Paul
Ron Paul we need you in 2012!
Wikipedia & Reddit plan blackout in SOPA protest
A handful of large websites will go dark on Wednesday to protest an anti-piracy bill that critics say will wreck the Internet as we know it.
Wikipedia, user-submitted news site Reddit, the blog Boing Boing and the Cheezburger network of comedy sites all plan to participate in the blackout. The protest is their response to the Stop Online Piracy Act (SOPA) bill, a piece of proposed legislation that is working its way through Congress.
Interactive “Starry Night” adds a touch of movement
Petros Vrellis created this interactive, animated version of Vincent Van Gogh’s Starry Night, where the viewer can send impressions swirling with a touch.
Fedora to move everything to /usr, leaving only symlinks behind
There is no way to reliably bring up a modern system with an empty /usr, there are two alternatives to fix it: copy /usr back to the rootfs or use an initramfs which can hide the split-off from the system.
Historically /bin, /sbin, /lib had the purpose to contain the utilities to mount /usr. This role can now be taken by the initramfs. Because the initramfs knows, where to find the root partition (which includes /etc), it can parse /etc/fstab and other configuration files and mount /usr before it finally switches the root partition and executes /usr/bin/init. From this point on init mounts the remaining partitions in /etc/fstab and the system starts as usual.
The long-term plan is to clean up the mess and confusion the current split of / vs. /usr has created. All tools will move back to /usr where they belong, and the rootfs will only contain compat-symlinks into /usr. Almost the entire system installed by packages will reside in /usr. This will split all non-host specific data to /usr. /usr can then be seen as the Unix System Resources partition (/System), which defines the base operating system (e.g. F18 or RHEL-7).
This new /usr could be mounted read-only by default, while the rootfs is read-write and contains only empty mount points, compat-symlinks to /usr and the host-specific data like /etc, /root, /srv. Compared to today’s setups, the rootfs will be very small. The new /usr could also easily be shared read-only across several systems, and it would contain almost the entire system. Such setups are more efficient, can optionally provide a lot more security, are more flexible, provide more sane options for custom setups, and are much simpler to setup and maintain.
This leaves us with the following well-defined directories, which compose the base of the system:
- /usr – installed system; shareable; possibly read-only
- /etc – config data; non-shareable
- /var – persistent data; non-shareable;
- /run – volatile data; non-shareable; mandatory tmpfs filesystem
/ |-- etc |-- usr | |-- bin | |-- sbin | |-- lib | `-- lib64 |-- run |-- var |-- bin -> usr/bin |-- sbin -> usr/sbin |-- lib -> usr/lib `-- lib64 -> usr/lib64
Driving the Alps: A BMW 335is European Delivery Trip
“The goal was simple: an Ultimate driving experience. 1000 miles of twisty and windy driving nirvana, the scenic Alps across Germany, Italy, Austria, and Switzerland, all spread out over 10 days of pure Bliss.
This is a compilation of a few drives and mountain passes on my 335is immediately after I picked it up via the European Delivery program.
Notable mountain passes in the video: Stelvio pass, Timmelsjoch, Pordoi pass, Bernina pass, Fluela pass, San Bernadino pass, St. Gotthard pass, Grimsel pass, just to name a few.”
SOPA Breaks The Internet
PROTECT-IP is a bill that has been introduced in the Senate and the House and is moving quickly through Congress. It gives the government and corporations the ability to censor the net, in the name of protecting “creativity”. The law would let the government or corporations censor entire sites– they just have to convince a judge that the site is “dedicated to copyright infringement.”
Microsoft Patents “Avoid Ghetto” Feature For GPS Devices
Microsoft has been granted a patent for its “avoid ghetto” feature for GPS devices.
A GPS device is used to find shortcuts and avoid traffic, but Microsoft’s patent states that a route can be plotted for pedestrians to avoid an “unsafe neighborhood or being in an open area that is subject to harsh temperatures.”
Created for mobile phones, the technology uses the latest crime statistics and weather data and includes them when calculating a route.
The patent, written in a combination of tech-speak and legalese, was awarded to Microsoft earlier this week. It also described other uses for the new GPS technology.
One section of the patent mentioned that advertisers can use the technology to navigate a user through a newly set up ad campaign.
Latest Topics
US CERT RSS Feed
- Oracle Java SE Critical Patch Update Announcement - June 2013
- Security Updates Available for Adobe Flash Player
- Microsoft Releases June 2013 Security Bulletin
- Apple Releases OS X 10.8.4 and Security Update 2013-002
- Apple Releases Security Update for Safari on OS X
- Google Releases Google Chrome 27.0.1453.110
- Apple Releases Security Updates for Apple QuickTime 7.7.4
- Google Releases Google Chrome 27.0.1453.93
- Adobe Releases Security Updates for Adobe Flash Player
- Security Updates Available for Adobe Reader and Acrobat
