December 2005


from searchlores.org
A nice list of all of the advanced search operators that you can pass to Google.

from InfoWorld

Users of Java-capable cell phones anywhere may find browsing the Web easier and cheaper now that Opera Software (Profile, Products, Articles) ASA is allowing anyone to download its Opera (Overview, Articles, Company) Mini application. The official worldwide launch of Opera Mini is planned for January but Opera has quietly lifted restrictions that previously allowed only residents of some Nordic countries and Germany to download the application, a spokesman has confirmed.

fromSuprNova.org
Romeo E. Cabrera writes “You might remember it was exactly a year ago when Suprnova, once the most popular BitTorrent search engine went dark. Today, Suprnova’s admin Sloncek, reveals the truth and details, about the events occurred then.”

from ffldusoe.edu

Welcome to the electronics tutorial! If you want to learn electronics, it’s a great place to start. You can also revise for your GCSE here, as it’s written to GCSE standard for the year 2000 (so if you’re taking it in 1999, forget it. but have a look anyway!). It’s suitable for all, and anyone can learn electronics using a combination of this & the other material available on my site. Whether you want to learn as a hobby, are taking a course in it, or just want to brush up on a few points, there should be something here to help you.

Here is a great site for those of you who want to learn how to work with electronics!

from CNET News.com

Guidance Software had to do a forensic investigation on its own systems after a hacker broke in and accessed records, including credit card data, of thousands of customers.

The attack occurred in November, but wasn’t discovered until Dec. 7, John Colbert, chief executive officer of Guidance, said in an interview Monday. The attack exposed data on thousands of the company’s customers, including 3,800 whose names, addresses and credit card details were exposed, he said.

“A person compromised one of our servers,” Colbert said. “This incident…highlights that intrusions can happen to anybody and nobody should be complacent about their security.”

Guidance, one of the leading sellers of software used to investigate computer crimes, sent out letters last week to inform its customers about the breach. Some customers have already reported fraudulent credit card charges. “There have been a handful of cases, but we’re only two weeks into this, so I don’t know the total size,” Colbert said.

New York City-based Kessler International received notice from Guidance on Monday, three days after it got an American Express bill for about $20,000, mostly in unauthorized charges for advertising at Google, said Michael Kessler, president of the computer-forensics investigative firm.

“We got hit pretty badly,” Kessler said. “Our credit card fraud goes back to Nov. 25. If Guidance knew about it on Dec. 7, they should have immediately sent out e-mails. Why send out letters through U.S. mail while we could have blocked our credit cards?”

from F-Secure

In August 2004 we warned people about a serious vulnerability in Widcomm Bluetooth stack used by many PC Bluetooth dongles. The Widcomm stack contains vulnerability which allows remote code execution over Bluetooth, so that an attacker or a worm can take a PC over just by being inside the Bluetooth communication range.

Last week people at Digital Munition have found another vulnerability that allows unauthorized remote access to PC Bluetooth audio profile. Basically this means that anyone with proper software can eavesdrop a PC that has Widcomm Bluetooth software and a microphone, or play audio on the target PC.

While this vulnerability is not nearly as dangerous as the remotely exploitable buffer overflow, it is a good reminder that nobody should be using the old and vulnerable Widcomm software anymore.

However, as Widcomm was bought by another company (Broadcomm), no security fixes have been made for devices that don’t use Broadcomm chipset. Fixing this problem is not easy.

The best advise we can give to people is to look for some other Bluetooth stack, for example many Bluetooth devices work without any extra drivers with Windows XP Service Pack 2.

If there is no compatible Bluetooth stack available, we recommend to set authentication for the Headset Audio Gateway profile, as described in the advisory, and set PC Bluetooth to non-discoverable mode.

Setting your PC Bluetooth to non-discoverable will not remove the problem completely, as your PC can still be found by brute force scanning. But it will significantly limit the exposure.

from THE RAW FEED

Latin crooner Marc Anthony has reported his PC stolen, and told police the thief is demanding $1 million for its return. The high ransom suggests the hard drive may contain something worth that much — such as compromising digital photographs of Anthony’s famous wife, JENNIFER LOPEZ.

Net Tools

In 2002 Project Net Tools © 2006 was born. The idea was of the project was to provide one big tool with all the main network tools included. So the work of network users could be done easier and faster. Since the first release the project had a lot of good attention. Since then it had been modified and expanded in many ways. The first version was totally written and compiled in Visual Basic. Because of the great success of the project I decided to make another improved version, the known bugs of the first version were fixed and next to that there were a lot of new tools added. This second version of the project was written with Visual Basic 6 and was mainly designed for Windows 98 and Windows Me users. After that another version came out, Net Tools 3… It was totally rewritten; Net Tools 3 didn’t have the core of the previous versions and was superior. Because of its immense flexibility, this tool had a lot of success. The latest version of the project at the moment is Net Tools 4, it is partly rewritten, but the main core of the previous version is present. Its mainly being tested on the Windows XP and Windows 2000 OS. It is actually designed for Windows XP (and NT systems), but it’s compatible with all the Microsoft Windows OS. With his 100 tools its a great variety of useful tools. The size of Net Tools 4 is 18.2 Mb {zipped}.

Contents

Net Tools 4 contains a whole variaty of network tools. Here is a list of the most important tools:

1) IP Address Scanner
2) IP Calculator
3) IP Converter
4) Port Listener
5) Port Scanner
6) Ping
7) NetStat (2 ways)
8) Trace Route (2 ways)
9) TCP/IP Configuration
10) Online - Offline Checker
11) Resolve Host & IP
12) Time Sync
13) Whois & MX Lookup
14) Connect0r
15) Connection Analysator and prtotector
16) Net Sender
17) E-mail seeker
18) Net Pager
19) Active and Passive port scanner
20) Spoofer
21) Hack Trapper
22) HTTP flooder (DoS)
23) Mass Website Visiter
24) Advanced Port Scanner
25) Trojan Hunter (Multi IP)
26) Port Connecter Tool
27) Advanced Spoofer
28) Advanced Anonymous E-mailer
29) Simple Anonymous E-mailer
30) Anonymous E-mailer with Attachment Support
31) Mass E-mailer
32) E-mail Bomber
33) E-mail Spoofer
34) Simple Port Scanner (fast)
35) Advanced Netstat Monitoring
36) X Pinger
37) Web Page Scanner
38) Fast Port Scanner
39) Deep Port Scanner
40) Fastest Host Scanner (UDP)
41) Get Header
42) Open Port Scanner
43) Multi Port Scanner
44) HTTP scanner (Open port 80 subnet scanner)
45) Multi Ping for Cisco Routers
46) TCP Packet Sniffer
47) UDP flooder
48) Resolve and Ping
49) Multi IP ping
50) File Dependency Sniffer
51) EXE-joiner (bind 2 files)
52) Encrypter
53) Advanced Encryption
54) File Difference Engine
55) File Comparasion
56) Mass File Renamer
57) Add Bytes to EXE
58) Variable Encryption
59) Simple File Encryption
60) ASCII to Binary (and Binary to ASCII)
61) Enigma
62) Password Unmasker
63) Credit Card Number Validate and generate
64) Create Local HTTP Server
65) eXtreme UDP Flooder
66) Web Server Scanner
67) Force Reboot
68) Webpage Info Seeker
69) Bouncer
70) Advanced Packet Sniffer
71) IRC server creater
72) Connection Tester
73) Fake Mail Sender
74) Bandwidth Monitor
75) Remote Desktop Protocol Scanner
76) MX Query
77) Messenger Packet Sniffer
78) API Spy
79) DHCP Restart
80) File Merger
81) E-mail Extractor (crawler / harvester bot)
82) Open FTP Scanner
83) Advanced System Locker
84) Advanced System Information
85) CPU Monitor
86) Windows Startup Manager
87) Process Checker
88) IP String Collecter
89) Mass Auto-Emailer (Database mailer; Spammer)
90) Central Server (Base Server; Echo Server; Time Server; Telnet Server; HTTP Server; FTP Server)
91) Fishing Port Scanner (with named ports)
92) Mouse Record / Play Automation (Macro Tool)
93) Internet / LAN Messenger Chat (Server Client)
94) Timer Shutdown/Restart/Log Off/Hibernate/Suspend/ Control
95) Hash MD5 Checker
96) Port Connect - Listen tool
97) Internet MAC Address Scanner (Multiple IP)
98) Connection Manager / Monitor
99) Direct Peer Connecter (Send/Receive files chat)
100) Force Application Termination (against Viruses and Spyware)
101) Easy and Fast Screenshot Maker (also Web Hex Color Picker)
102) COM Detect and Test
103) Create Virtual Drives
104) URL Encoder
105) WEP/WPA Key Generator
106) Sniffer.NET
107) File Shredder
108) Local Access Enumerater
109) Steganographer (Art of hiding secret data in pictures)
110) Subnet Calculater
111) …

from quietglow.com

Easy to use guide on how to get MythTV working on my favorite distro, Ubuntu

This guide assumes some basic things about your setup: all testing was done with a freshly installed and updated version of Ubuntu Breezy Badger. I have no clue how this all could conflict with something you might already have going on your box.

from http://www.geek2us.net

This article is going to Outline Best Buys Biggest Security Flaws. Like stated above, please use this information for entertainment only. The list is made to point out flaws not give the public something to act on.

•The Pink Stickers:
If you’ve ever had to return something you’d remember walking through the doors and having the guy at the podium put a pink sticker on your item. Most of the time the stickers will have the date that you entered the store imprinted on them. The stickers are standard pink item stickers that are scored (sliced) at angles to prevent removal without tearing. With care, and patience the sticker can be removed flawlessly.

The sticker’s main purpose is to designate an item as a return or an item brought in for service so that when the product is binned it is not confused with other products that may be left in the returns area. If an item is deemed resellable, the pink sticker is removed and the product is re-wrapped if necessary. Also, the pink sticker let’s the person at the podium know that the customer brought that product in for return or service and that it’s “their product,” not stolen merchandise.

The Problem with the Pink stickers are that you can bring a product in that you’ve recently purchased, leave the store without returning it, remove the sticker in your car and the proceed back into the store. From this point you can place that sticker on practically any item that isn’t large enough to draw too much suspicion. Even if you decided to go all out and place that sticker on a monitor and proceed out the door, Best Buy’s policy is that someone had to see you do it. Most of the time it’s not recorded.

•The Magnetic Locks
Most small high-priced items are in a bulky plastic case that can only be opened with a Strong Magnet. That’s right a Strong Magnet. The company that designed the cases (i’m not going to mention their name, you can head to Best Buy and look at the Top of the Plastic Cases for yourself) claims that only their special “key” can open the cases. The Key sells on ebay for around $100, and they sell instantly. You can only purchase the key if you purchase accompanying cases and you have an account with the company. The Key is about 1″x4″x.25″ and has some small useless guides that hang down about a quarter inch so you can hug the key along the top of the cases. Once again, the ‘’key’ is just a powerful magnet that’s thrown in useless black plastic casing to make it look important. Each key has it’s own unique serial number, isn’t that special?

Cases are opened by placing the magnet ontop of the box sliding it lengthwise in one direction, and magically the little swith on the top loosens so you can proceed to popping the lid. You’d be amazed how silent and quick this process is. The most disturbing thing is that most retailers use this same system.

•The False Sense of Security
This is a standard theft deterrant. Someone will get on the PA and announce, “Security please rotate Cameras 14 and 31.” Random numbers each time. Why, because the only person designated to monitor the cameras is the guy at the podium. He’s also the greeter, the guy who puts pink stickers on your items, the guy who brings stuff out to your car, the guy who can be easily distracted when necessary.

•The Computer Code
CTRL SHIFT while holding press Q Z twice. Voila, have fun loading those pr0n screensavers.

•Conclusion:
Once again this material is provided for entertainment purposes only. It is meant to list the flaws that the Big Box should have already fixed. It is not meant for you to act on.

« Previous PageNext Page »