Sunday, 31 May 2009

Random Musings - Day #151

I almost forgot that Daniel Craig was in Lara Croft: Tomb Raider.
Nadal is out of the French Open. I am tired.

Saturday, 30 May 2009

Random Musings - Day #150

Britain's got final
Well a turn-up as dance outfit Diversity beats Susan Boyle and sax player Julian Smith. The first two were the first and second from the first heat only reversed, which shows how unlucky the likes of Sue Son and Natalie Okri were in that heat. I was really surprised that Diversity announced the winners. Though on the night, they gave the perfect performance. Boyle performed better than her heat which I thought would be enough to win. But the negative press this week have caught with her. She was gracious in defeat. Surprised Stavros Flatley failed to finish in the top 3. They got one of the best reactions. My personal fav Aidan Davis' performance looked too much like yesterday's awesome performance and that cost him. Whether he had enough to make his set even better is another thing. Remember it was less than 24 hours between performances. While the likes of Diversity and Susan Boyle had almost a week to get ready. Maybe next time, they should have the final a week later after the semi-finals.

Friday, 29 May 2009

Random Musings - Day #149

Britain's got last semi
I just finished watching the last semi-final heat. I was looking forward to seeing the break-dance kid, Aidan Davis and wasn't disappointed. If it wasn't for Susan Boyle's popularity he would be favourite to win the final. Also the comparisons between him and last year's winner George Sampson may stop him.
Boyle is courting controversy particularly with her recent outburst which made her sound like Rab C Nesbitt.
The other qualifier was wee Hollie Steel who actually broke down during her performance. But she got to have a second crack and did well. She got through the judge's vote, which wasn't surprising and considering what happen to fellow contestant Natalie Okri...

The final, for what it's worth, this is how I think it might finish...
1. Aidan Davis
2. Susan Boyle
3. Stravos Flatley

Mascot cheeky jab
Funny video of a mascot getting a swipe in on a football player.
http://news.bbc.co.uk/1/hi/entertainment/8073437.stm

Thyroid Cancer
Shame to hear that BBC's Clare Balding has been diagnosed with thyroid cancer. Those of you who know, a family member recently had that and is still need precautionary treatment. It's no laughing matter. So I wish Clare well.

M&S Bra
They have been selling well of late due massive billboard posters of an ample woman with a green bra. The woman in question has been revealed as Natalie Suliman. This campaign has been compared to the 'hello boys' wonderbra poster from 1994.

Computer bits
Here's a list of IP Numbers which relate to the transport layer protocol which of course the popular TCP and UDP. And for those of you who might forget how to unzip and untar a compressed tarball...

Thursday, 28 May 2009

Random Musings - Day #148

I had a lot to say today but too tired now. Station has been open twice this week after yet again being closed the first work day of the week. Also I don't always agree with Lily Allen but her comments about Susan Boyle were right on the money. Her timing in her performance was slightly off and she got away with it with her hype! Ryan Giggs has been prolonging his career with yoga. Soup is apparently the best way to lose weight as it gives your body the illusion you have been fed with not a lot of soup. Found out there are 33 ways to tie a shoelace.

I have the strangest dream where I found I had a pain in my nose and then I woke and found I really had a pain in my nose (due to my sinuses flaring up)

Wednesday, 27 May 2009

Random Musings - Day #147 (Shockwave Remix)

Shocked by shockwave
I picked a bit of a virus/malware infection arguably when looking for software to decompiling shockwave flash files. I am assuming that was what caused it. Sophos did a poor job as the last line of defense. It found the malware software too late. Anyways how do you stop it? It's very easy to pickup a malware. It could be disguised by legit software. It can be picked up via drive-by downloads, i.e. when visiting a site, it tries to direct to another site (using Javascript). If you are paranoid, you should really use Noscript for firefox.

Shockwave decomposition
For now let's have a look at some articles about securing Shockwave flash files. Flash is of course made by Adobe and they have their guide to securing shockwave flash files. Passing arguments into the flash files could be liable to code injection so knowing how it works is a good start as seen in the flashmove.com and the actionscript forums. Allow networking is another parameter that ideally shouldn't be set.

Shockwave Vulnerabilities
There are some articles about vulnerabilities with shockwave flash files. Examples of vulnerabilities found in common applications using flash can be seen on xssed.com. Flash has an advisory as well.

Shockwave Decompilers
There are a number of tools to decompile flash. Some of these may or may not contain MALWARE! Be warned!
SoThink SWF Decompiler (latest version is 5) is available from softpedia. Flare v0.6from HP is another readily available decompiler. There is an open source version sitting at OWASP called SWF intruder. But there is code out there to access there. More details about SWF intruder can be found on the OWASP site and the google code. Also can use a combination of answers.
Flare 0.6 is available for use. HP has a search for swfscan machine. swfscan is a free scan with some restrictions. Decompile flash is another tool that focuses in on the deompiled flash code. Same thing for Free Flash Decompiler gold

Random Musings - Day #147

147
When I think of 147, snooker is usually what I think of. But the highest break in snooker is actually 155.

Votes
The recent events about the MPs from both major UK parties over their expenses has caused for people to look politician alternatives. As a consequence, the BNP are looking to do well at Euro-elections. But the Church of England. But also Joanna Lumley (fresh from getting the government to relax the rules for gurkha veterans) is backing the green party.

Cyber times
Shoplifters are now to be judged by cyber court. Security news can be found at dark reading.

Barcelona won the Champions League Final

Tuesday, 26 May 2009

Random Musings - Day #146

Race for life
On Sunday, there is the race for life, which a woman's 5k around the country. I know of at least 4 ladies who are doing the run, one of them is my cousin.

Canada Seal
There's something about Canada and seals that leaves a sour taste in the mouth. Maybe it's the clubbing. Anyhow a Canadian politician has caused some controversy for eating a seal heart.