Archive for Security

A Prime Question

Hey guys, thought I’d quickly dump an application i’m working on that graphs primes as a novelty wave (like mckennas time wave zero I ching hexagram mathematics).

It’s really a hoot. And it wil be interesting to analyse the patterns of  hexagramical novelty in primes further. (block comparison) bit comparison, nth comparison, volume graph comparison. wave comparison.. even considering graphing the grid as a wave form to try and find any resonances. Anyways, lots of odd ideas and stuff.. so on with the code. The intellectual, security, as well as social implications of predicting primes or graphing the novelty of them could very well be the most undervalued cryptography technology there ever could, would or will be. :) very early days yet, this isn’t even my first alpha, just a play in SDL DLL to see what it can do for prime calcs in C++. we’ll see.
sdl c++ code i've been working on the last 24 hours

#include <stdlib.h>
#if defined(_MSC_VER)
#include “SDL.h”
#else
#include “SDL/SDL.h”
#endif
#include<math.h>
#include<iostream.h>

int primes[] = {2,3,5,7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,

103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,

227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,

353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,

487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,

631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,

773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,

937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,

1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,

1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,

1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,

1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,

1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,

1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,

1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,

1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,

2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,

2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341};

SDL_Surface *screen;

// sprites tutorial but im using DNA sprite
/*
const unsigned char sprite[] =
{

0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0};

void drawsprite(int x, int y, unsigned int color)
{
int i, j, c, yofs;
yofs = y * (screen->pitch / 4) + x;
for (i = 0, c = 0; i < 16; i++)
{
for (j = 0; j < 16; j++, c++)
{
if (sprite[c])
{
((unsigned int*)screen->pixels)[yofs + j] = color;
}
}
yofs += (screen->pitch / 4);
}
}
*/

void putpixel(int x, int y, int color)
{
unsigned int *ptr = (unsigned int*)screen->pixels;
int lineoffset = y * (screen->pitch / 4);
ptr[lineoffset + x] = color;
}

int nextprime(int nth)
{
return primes[nth];
}

void render()
{
// Lock surface if needed
if (SDL_MUSTLOCK(screen))
if (SDL_LockSurface(screen) < 0)
return;

// Ask SDL for the time in milliseconds
int tick = SDL_GetTicks();

// Declare a couple of variables
int i, j, yofs, ofs;

// Draw to screen
/*
yofs = 0;
for (i = 0; i < 480; i++)
{
for (j = 0, ofs = yofs; j < 640; j++, ofs++)
{
((unsigned int*)screen->pixels)[ofs] = i * i + j * j + tick;
}
yofs += screen->pitch / 4;
}
*/

// grid creation

for (int z=0; z < 768 ; z=z+5)
{

for (int y = 0 ; y < 1024 ; y=y+5)
{
putpixel(y, z, 0xff0000);
}

}

/* draw lines in graph

for (int n=1; n < 480; n++)
{
putpixel(2, n, 0xffffff);
}
*/

// draw the first 10 primes
/*putpixel(1,2, 0xffffff);
putpixel(2,3, 0xffffff);
putpixel(3,5, 0xffffff);
putpixel(4,7, 0xffffff);
putpixel(5,11, 0xffffff);
putpixel(6,13, 0xffffff);
*/

// grab nth rotation and the nextprime for the first 10 primes
// x axis = n , y axis = prime
for (int n=0; n < 135; n++)
{

putpixel(n,nextprime(n),0xffffff);
}

// method 2 and an idea on ‘block correlation’
// measure the block correlation between the previous n prime 0-125 to u prime 125-200 , and comparing block starting at
// correlation axis (i.e. x,125px)(correlate correction for nextprime(correlation)
// x axis = u(aka n), y axis= prime)
int correlation;
for (int u=125; u<200; u++)
{
correlation = u - 125;
putpixel(nextprime(correlation),u,0xffffff);
}

// Unlock if needed
if (SDL_MUSTLOCK(screen))
SDL_UnlockSurface(screen);

// Tell SDL to update the whole screen
SDL_UpdateRect(screen, 0, 0, 1024, 768);
}

// Entry point
int main(int argc, char *argv[])
{
// Initialize SDL’s subsystems - in this case, only video.
if ( SDL_Init(SDL_INIT_VIDEO) < 0 )
{
fprintf(stderr, “Unable to init SDL: %sn”, SDL_GetError());
exit(1);
}

// Register SDL_Quit to be called at exit; makes sure things are
// cleaned up when we quit.
atexit(SDL_Quit);

// Attempt to create a 640×480 window with 32bit pixels.
screen = SDL_SetVideoMode(1024, 768, 32, SDL_SWSURFACE);

// If we fail, return error.
if ( screen == NULL )
{
fprintf(stderr, “Unable to set 640×480 video: %sn”, SDL_GetError());
exit(1);
}

// Main loop: loop forever.
while (1)
{
// Render stuff
render();

// Poll for events, and handle the ones we care about.
SDL_Event event;
while (SDL_PollEvent(&event))
{
switch (event.type)
{
case SDL_KEYDOWN:
break;
case SDL_KEYUP:
// If escape is pressed, return (and thus, quit)
if (event.key.keysym.sym == SDLK_ESCAPE)
return 0;
break;
case SDL_QUIT:
return(0);
}
}
}
return 0;
}

Comments

Facebook Fraud on the Rise!

In recent months, the economic downturn has been something nearby everyones ear, be it radio, TV, word of mouth, or otherwise. It seems though that the scams will continue and for quite some time during the credit crunch.

Helping criminal fraudsters since the economic downturn

We ask ourselves in wonder, and quickly state “Facebook? Fraud? No, no, no. They have safeguards and vetting for such ads”. You’d be correct, but for some reason Facebook are quite happy letting countless hundreds of fraudsters access 15.4 million people per ad.  This is clearly unnacceptable and presents yet again another dangerous trend in irresponsible business practices online.

Now, as we know the CMA (Computer Misuse Act) is a internationally widely misunderstood and misinterpreted legislation, and often revised to meet a changing need of regulations to prevent both criminal and civil crimes being committed with the use of computer and internet technology. There has always been a grey area in which fraudsters are able to hide and operate almost entirely with impunity.  Frankly though, we feel a public outcry is the only response deserved for Facebook profiteering from fraudsters. A symbiosis of association is quite illegal, with or without knowledge (criminal). I believe a strong case can and will be put forward by myself or some other party to ensure that such phenomena cannot repeat itself.

Facebook clearly state they have a filtering/vetting system. Perhaps they could state why they are allowing organised crime to be advertised on their site to their users? See how much facebook cares about their users? Only as much as the monetization, it seems, it’s not cheap to run facebook. Infact when talking about facebook user ROI they will refer to it in pence.. however the real cost to us from fraudsters can reach the hundreds of thousands. Obviously customer value and monetization are clearly mutually exclusive goals. Something of which either requires massive addressing via the CMA, or other currently existing legislations to remove organised crime by association.

A dangerous criminal-commercial symbiosis has formed where commercial entities are prepared to turn a blind eye to clearly illegal pyramid or matrix schemes. Often refered to as scams!

Often in such schemes the scammer will have a website that noticeably has no Google Index, Alexa Rank, backlinks, yahoo rank, msn rank. Infact I and others could go as far to blame the user for being soppy and not checking such blisteringly obvious things. Question though, how mainstream is facebook? How many people on facebook are technicians? It’s a good question, and quickly explains the Beeb’s recent interest in the story about rising frauds related crime since the economic downturn. Also, often the scammer will insist he had recently no options left, no job or promise of success and that *his* scheme, for instance “Gmoney” or “google money” works and generates thousands of $. Also a “free” pack will be offered, always requiring the user to give their creditcard details or a monetary payment of somekind for the “postage”. Often the user may be charged more than the postage list price quoted by said scammer. More often than not that money is lost due to the embarassment of being had, or rather simply because they were desperate and spent their last crumbs on something silly, and have better things to do than trying to get a few dollar, or a few hundred dollars back.

First of all it should be clear that people who use terms like “google will make you money” is pretty disassociative, they are clearly stepping back and saying - “hey google will make you rich” but giving you a clear impression it’s their work, and their “book/starter kit” will tell you everything you need to know to make money on google. Well here’s the wakeup call. Google will tell you everything you need how to make money on google, because they did it first! It’s everywhere: strategies, tutorials, guides, SEO, this stuff already exists, it’s free! And not everyone makes money on it AT ALL. Success ISN’T assured! Losing ones money usually is, especially in matrix schemes. Moreso in Pyramid schemes, and an outright guarantee from someone claiming you can make a personal fortune via google with their help!! Lies, and the same old stories resurface every few years in mainstream media, for instance recently with the economic downturn.

Another great prank is pictures of fancy cars, beautiful women, their children and them, pretending to be a single father/mother. Remeber, scammers are experts in human psychology , social networking, espionate and

Promises that are too good to be true are what they say on the tin.

It’s easy to become involved in one of these schemes, the specific rise and targeting of facebook since the downturn can simply be labeled as a fraudsters exploitation, but how far does the exclusivity of that exploitation go? How far do the responsibilities of the content provider go as to crime? Actually, facebook could indeed be responsible for allowing criminals to use their content for ads network. Google have faced similar suits where their responsibility to patents, trademarks or misleading/fraudulent adverts as well as their users have been instilled by international courts. Facebook is still pretty fresh so it will be interesting to see how badly they are hit with the bad news they’ve been caught red handed, with their pants down, allowing criminal fraudsters to impress upon their entire userbase… if this is not a crime then it can only be pure and simple ignorance, stupidity and/or greed.

Facebook wake up! For gods sake! For your users sake!

One such Ad on facebook today:

The scammer href/link for the facebook ad:

Comments (1)

Proxy List Update 9 February 2009

201.88.248.118:6588 high-anonymous proxy server Feb-09, 13:53 Brazil
76.98.32.144:9090 high-anonymous proxy server Feb-09, 13:56 United
201.53.79.149:6588 high-anonymous proxy server Feb-09, 14:10 Brazil
202.78.227.32:8080 high-anonymous server Feb-09, 14:13 Vietnam
222.255.29.84:8888 anonymous proxy server Feb-09, 14:15 Vietnam
68.55.225.102:9090 high-anonymous proxy server Feb-09, 14:16 United
189.111.166.103:6588 high-anonymous proxy server Feb-09, 14:39 Brazil
81.169.176.86:80 high-anonymous server Feb-09, 14:41 Germany
206.123.81.210:9090 high-anonymous server Feb-09, 15:05 United States
59.171.86.136:8080 high-anonymous server Feb-09, 15:48 Japan
203.149.32.30:8080 anonymous proxy server Feb-09, 15:48 Thailand
201.86.70.162:80 high-anonymous proxy server Feb-09, 16:03 Brazil
221.249.144.93:8088 anonymous server Feb-09, 18:36 Japan
66.110.119.167:8080 anonymous server Feb-09, 18:30 Angola
203.149.32.30:8080 anonymous server Feb-09, 15:48 Thailand
210.86.181.201:80 anonymous proxy server Feb-09, 17:45 Thailand
195.209.224.91:3128 anonymous proxy server Feb-09, 18:38 Russian
130.225.245.156:8080 anonymous proxy server Feb-09, 18:56 Denmark
213.130.105.148:8080 anonymous server Feb-09, 18:37 Qatar
194.226.118.18:3128 anonymous server Feb-09, 18:38 Russian Federation
210.86.181.202:80 anonymous server Feb-09, 17:46 Thailand
213.199.68.144:80 anonymous server Feb-09, 17:46 Sweden
222.73.95.245:80 anonymous proxy server Feb-09, 18:32 China
208.20.21.157:8080 anonymous server Feb-09, 18:25 United States
61.91.165.29:3128 anonymous proxy server Feb-09, 18:46 Thailand
200.55.208.203:80 anonymous server Feb-09, 18:32 Chile
88.216.54.84:80 anonymous proxy server Feb-09, 18:37 Lithuania
80.88.242.32:9090 anonymous proxy server Feb-09, 18:30 Bahrain
62.75.219.25:80 anonymous server Feb-09, 18:34 Germany
208.20.21.159:8080 anonymous proxy server Feb-09, 18:38 United States
220.130.81.188:8000 anonymous server Feb-09, 18:11 Taiwan
190.66.18.93:3128 anonymous server Feb-09, 18:45 Colombia
221.11.27.110:8080 anonymous proxy server Feb-09, 18:55 China
77.226.240.50:1080 anonymous server Feb-09, 18:38 Spain
87.193.181.74:80 anonymous proxy server Feb-09, 18:54 Germany
217.219.147.141:80 anonymous server Feb-09, 18:28 Iran, Islamic
66.60.191.141:8090 anonymous server Feb-09, 17:19 United States
208.81.7.18:80 anonymous proxy server Feb-09, 19:01 Canada
203.241.120.92:80 anonymous server Feb-09, 18:18 Korea, Republic of
202.39.6.27:8000 anonymous proxy server Feb-09, 18:19 Taiwan
218.4.65.118:8080 anonymous server Feb-09, 18:33 China
208.117.131.115:3127 CoDeen/PlanetLab? proxy server Feb-09, 17:58
138.246.99.249:3124 CoDeen/PlanetLab? server Feb-09, 17:58 Germany
128.232.103.203:3127 CoDeen/PlanetLab? proxy server Feb-09, 18:46
129.69.210.96:3127 CoDeen/PlanetLab? server Feb-09, 17:59 Germany
142.150.3.77:3124 CoDeen/PlanetLab? server Feb-09, 17:59 Canada
142.150.238.13:3124 CoDeen/PlanetLab? server Feb-09, 17:58 Canada
128.238.88.65:3124 CoDeen/PlanetLab? server Feb-09, 18:00 United
133.1.74.162:3124 CoDeen/PlanetLab? proxy server Feb-09, 17:59 Japan
128.208.004.199:3128 CoDeen/PlanetLab? proxy server Feb-09, 18:00
134.151.255.180:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:46
128.208.004.197:3124 CoDeen/PlanetLab? proxy server Feb-09, 17:59
128.208.004.199:3124 CoDeen/PlanetLab? server Feb-09, 18:00 United
165.91.83.22:3127 CoDeen/PlanetLab? proxy server Feb-09, 18:36 United
131.188.44.101:3124 CoDeen/PlanetLab? server Feb-09, 18:00 Germany
155.225.2.72:3124 CoDeen/PlanetLab? proxy server Feb-09, 17:59 United
138.246.99.250:3127 CoDeen/PlanetLab? proxy server Feb-09, 17:58
131.246.191.42:3127 CoDeen/PlanetLab? server Feb-09, 18:00 Germany
138.246.99.250:3128 CoDeen/PlanetLab? proxy server Feb-09, 18:56
128.112.139.75:3128 CoDeen/PlanetLab? proxy server Feb-09, 17:49
133.1.16.171:3124 CoDeen/PlanetLab? server Feb-08, 22:35 Japan
131.246.191.42:3128 CoDeen/PlanetLab? server Feb-09, 18:48 Germany
128.112.139.80:3124 CoDeen/PlanetLab? proxy server Feb-09, 16:06
192.33.90.66:3124 CoDeen/PlanetLab? server Feb-08, 15:10 Switzerland
192.42.43.22:3128 CoDeen/PlanetLab? server Feb-09, 12:14 Switzerland
131.246.191.42:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:48
203.178.133.3:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:48 Japan
137.226.138.156:3127 CoDeen/PlanetLab? server Feb-09, 13:15 Germany
194.36.10.154:3127 CoDeen/PlanetLab? proxy server Feb-09, 18:46 United
193.167.187.187:3124 CoDeen/PlanetLab? server Feb-08, 15:10 Finland
128.208.4.198:3124 CoDeen/PlanetLab? server Feb-09, 14:13 United
206.117.37.4:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:35 United
133.11.240.56:3124 CoDeen/PlanetLab? server Feb-09, 12:17 Japan
192.33.90.69:3127 CoDeen/PlanetLab? proxy server Feb-09, 12:11
216.165.109.79:3124 CoDeen/PlanetLab? proxy server Feb-09, 16:24
195.130.121.205:3127 CoDeen/PlanetLab? proxy server Feb-09, 12:15
194.42.17.123:3124 CoDeen/PlanetLab? proxy server Feb-09, 12:08 Cyprus
128.232.103.202:3124 CoDeen/PlanetLab? server Feb-09, 18:46 United
137.99.11.86:3128 CoDeen/PlanetLab? server Feb-09, 18:48 United States
192.33.210.16:3124 CoDeen/PlanetLab? proxy server Feb-09, 17:42
193.6.20.4:3127 CoDeen/PlanetLab? server Feb-09, 17:42 Hungary
169.235.24.133:3128 CoDeen/PlanetLab? proxy server Feb-09, 18:36
192.33.90.68:3127 CoDeen/PlanetLab? proxy server Feb-09, 17:42
142.150.238.13:3127 CoDeen/PlanetLab? server Feb-09, 17:26 Canada
128.208.4.99:3124 CoDeen/PlanetLab? proxy server Feb-09, 17:49 United
133.1.74.163:3127 CoDeen/PlanetLab? proxy server Feb-09, 17:43 Japan
133.1.74.163:3124 CoDeen/PlanetLab? proxy server Feb-09, 17:43 Japan
128.223.8.111:3124 CoDeen/PlanetLab? server Feb-09, 17:49 United
169.229.50.7:3128 CoDeen/PlanetLab? proxy server Feb-09, 17:41 United
204.8.155.226:3124 CoDeen/PlanetLab? proxy server Feb-09, 10:50 United
128.135.11.152:3128 CoDeen/PlanetLab? proxy server Feb-09, 10:50
128.59.20.226:3127 CoDeen/PlanetLab? proxy server Feb-09, 10:50 United
132.239.17.224:3128 CoDeen/PlanetLab? proxy server Feb-09, 18:35
35.9.27.27:3128 CoDeen/PlanetLab? server Feb-09, 16:52 United States
169.229.50.9:3124 CoDeen/PlanetLab? server Feb-09, 18:36 United States
169.229.50.16:3127 CoDeen/PlanetLab? server Feb-09, 17:40 United
169.229.50.14:3128 CoDeen/PlanetLab? proxy server Feb-09, 17:49 United
138.238.250.155:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:36
138.238.250.157:3124 CoDeen/PlanetLab? proxy server Feb-09, 13:06
142.150.238.12:3128 CoDeen/PlanetLab? proxy server Feb-09, 17:26
155.98.35.2:3128 CoDeen/PlanetLab? proxy server Feb-09, 18:48 United
152.15.98.227:3124 CoDeen/PlanetLab? proxy server Feb-09, 14:06 United
165.230.49.115:3127 CoDeen/PlanetLab? server Feb-09, 17:49 United
132.239.17.224:3127 CoDeen/PlanetLab? proxy server Feb-09, 17:49
128.233.252.11:3128 CoDeen/PlanetLab? server Feb-09, 17:26 Canada
128.208.4.199:3128 CoDeen/PlanetLab? server Feb-09, 17:40 United
134.151.255.180:3128 CoDeen/PlanetLab? server Feb-09, 18:46 United
164.107.127.12:3128 CoDeen/PlanetLab? proxy server Feb-09, 18:35
132.252.152.193:3124 CoDeen/PlanetLab? server Feb-09, 13:14 Germany
128.233.252.12:3124 CoDeen/PlanetLab? server Feb-08, 22:51 Canada
128.31.1.13:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:35 United
136.145.115.194:3128 CoDeen/PlanetLab? proxy server Feb-09, 07:08
169.229.50.14:3124 CoDeen/PlanetLab? server Feb-09, 16:06 United
129.74.74.15:3124 CoDeen/PlanetLab? server Feb-08, 22:51 United States
206.117.37.5:3124 CoDeen/PlanetLab? proxy server Feb-09, 18:35 United
130.136.254.22:3124 CoDeen/PlanetLab? server Feb-09, 18:48 Italy
132.239.17.226:3128 CoDeen/PlanetLab? proxy server Feb-09, 16:06
130.88.203.27:3128 CoDeen/PlanetLab? server Feb-09, 18:47 United
164.107.127.13:3128 CoDeen/PlanetLab? server Feb-09, 07:52 United
169.235.24.133:3124 CoDeen/PlanetLab? server Feb-09, 18:36 United
132.252.152.193:3128 CoDeen/PlanetLab? server Feb-09, 12:21 Germany
136.145.115.194:3124 CoDeen/PlanetLab? server Feb-09, 12:03 Puerto
206.117.37.4:3127 CoDeen/PlanetLab? server Feb-09, 17:41 United States
35.9.27.26:3127 CoDeen/PlanetLab? proxy server Feb-09, 18:48 United
169.229.50.5:3128 CoDeen/PlanetLab? server Feb-09, 17:40 United States
140.113.156.245:3128 CoDeen/PlanetLab? server Feb-09, 18:01 Taiwan
76.217.34.197:8000 high-anonymous proxy server Feb-09, 18:51 United
160.79.139.56:80 high-anonymous proxy server Feb-09, 18:40 United
218.194.80.230:808 high-anonymous proxy server Feb-09, 18:40 China
76.180.180.36:8090 high-anonymous server Feb-09, 18:15 United States
98.141.23.139:9090 high-anonymous server Feb-09, 18:36 United States
219.40.22.91:8080 high-anonymous server Feb-09, 18:49 Japan
24.4.239.144:9090 high-anonymous proxy server Feb-09, 18:09 United
194.199.98.11:6654 high-anonymous server Feb-09, 18:38 France
68.57.178.219:9090 high-anonymous server Feb-09, 18:51 United States
80.250.70.111:3128 high-anonymous proxy server Feb-09, 18:01 Russian
207.192.207.240:9090 high-anonymous proxy server Feb-09, 18:47 United
189.37.28.147:6588 high-anonymous proxy server Feb-09, 18:00 Brazil
24.89.16.145:7212 high-anonymous server Feb-09, 17:51 United States
24.10.187.116:9090 high-anonymous proxy server Feb-09, 17:29 United
69.246.61.14:9090 high-anonymous server Feb-09, 17:27 United States
80.191.3.6:8080 high-anonymous proxy server Feb-09, 18:01 Iran,
24.79.12.229:9090 high-anonymous proxy server Feb-09, 18:52 Canada
195.98.78.90:3128 high-anonymous proxy server Feb-09, 18:53 Russian
122.116.65.95:00080 high-anonymous server Feb-09, 15:48 Taiwan
210.196.98.51:80 high-anonymous proxy server Feb-09, 16:36 Japan
68.2.104.70:9090 high-anonymous server Feb-09, 17:49 United States
218.24.189.18:808 high-anonymous server Feb-09, 16:29 China
219.124.250.63:8080 high-anonymous proxy server Feb-09, 15:38 Japan
202.106.121.134:000080 high-anonymous server Feb-09, 17:35 China
219.201.68.111:8080 high-anonymous proxy server Feb-09, 15:56 Japan
220.15.224.200:8080 high-anonymous proxy server Feb-09, 15:56 Japan
201.88.248.118:6588 high-anonymous server Feb-09, 13:53 Brazil
200.81.160.54:6588 high-anonymous server Feb-09, 14:56 Argentina
200.171.232.140:6588 high-anonymous server Feb-09, 17:34 Brazil
61.234.254.69:8088 high-anonymous proxy server Feb-09, 17:31 China
99.199.229.95:9090 high-anonymous server Feb-09, 17:06 United States
195.248.239.142:80 high-anonymous proxy server Feb-09, 17:15
74.79.165.21:9090 high-anonymous proxy server Feb-09, 14:04 United
202.197.64.42:80 high-anonymous server Feb-09, 17:33 China
203.202.70.253:80 high-anonymous server Feb-09, 17:00 Australia
69.64.58.30:80 high-anonymous proxy server Feb-09, 17:59 United States
194.36.10.154:3128 high-anonymous server Feb-09, 18:46 United Kingdom

Comments

Howto: Securely tunnel via SSH to browse www websites over http

Hi guys, welcome to what you’ve been searching the internet frantically for. Say wa? A no-nonsense guide to anonymous, secure & encrypted port forwarding via SSH tunneling. I will tell you how in just 3 easy steps.

Step 1

Open putty, Goto the Connection-> SSH-> Tunnels and type in 7070 for source port (you can use any port but we use 7070 for this example). Do not enter a destination, but make sure `Dynamic` and `Auto` option buttons are selected like the picture below.
Securely tunnel via SSH to browse www websites

Right once you’ve done the above it should look like:
Securely tunnel via SSH to browse www websites over http
Notes: `Dynamic` option is set, after clicking add D7070 appears in `forwarded ports`. Thats perfect. Well done. Give yourself a pat on the back. Simple. Isn’t it?

Step 2

After how much of a breeze step 1 is, all that is left is you deciding which linux box you’d like to use to connect to via SSH. For my example I include a fictional machine mybox.reallyrocks.com with the default SSH port of 22. In order to feel special about yourself and save you doing this all again enter in a name to save the session. I’ve put “Spechial SSH tunnelz for webz and ting” just so it is darn clear whats going on there. Ok, see below.
Securely tunnel via SSH to browse www websites over http

What I didn’t tell you in this guide was howto click the Open button, because to setup an encrypted SSH-2 (SHA-2) connection that tunnels via a secure linux box is already so easy. I figured it’d be an insult mentioning it.

Step 3: Add your proxy settings in firefox and go crazy.

Now maybe i’ll get that job I’ve always wanted. *cough*. As if. I’m going to use firefox as an example on how to use this bloody tunnel you’ve just setup, you’re probably wondering. Not to worry, this is easier than clicking “Open”.

Script `kiddies` may say? wa wa wa whatcha type in though. Well I typed in 127.0.0.1 and the 7070 and selected the option socks v5. comon, simple things. So, Enjoy simplicity. Everybody else is so god damned cryptic about setting up tunnels and the truth of this is, anyone could do it. Yes, thats right now everything you do VIA the WWW is encrypted. The only thing that isnt is the DNS which is the thing that says where the server is. “what is google? google is 68.8.0.3 etc - thats what the DNS does”.
Securely tunnel via SSH to browse www websites in firefox

My oh My, Easy.

Peace,
A

Comments (2)

Python Script that Cracks MD5 and acts as an eggdrop in 125 lines

A friend of mine (which hopefully won’t mind me sharing this! (eek) ) shown me this the other day. It’s super. Check it out.


#!/usr/bin/env python
#Cracks md5 using wordlist, also can add words to the list from channel
#generate md5s and can check wordlist length.

#Args:
#!crack

#!insert
#!md5
#!lengthimport sys, socket, string, md5

def load_words():
try:
words = open(wordlist, “r”).readlines()
except(IOError):
print “[!] Error: Check your wordlist path\n”
sys.exit(1)
global words

def crack(pw):
output = “”
for word in words:
hash = md5.new(word.replace(”\n”,”")).hexdigest()
if pw == hash:
output = word.replace(”\n”,”")
return output

def insert(word):
add_list = open(wordlist, “a”)
if word not in words:
add_list.writelines(word.replace(”\n”,”")+”\n”)
add_list.close()
load_words()
return len(words)
else:
add_list.close()
return “[-] word already present”

words.close()

#Fill in the information below
#—————————————
HOST = “irc.y0rircd.com”
PORT = “6667″
NICK = “crackb0t”
CHAN = “#balcan”
wordlist = “/home/d3hydr8/words.txt”
#—————————————

print “\n\t d3hydr8[at]gmail[dot]com CrackB0t v1.1″
print “\t———————————————–”

print “[+] CrackB0t Loaded”

load_words()

print “[+] Words Loaded:”,len(words)

readbuffer = “”

s=socket.socket( )
s.connect((HOST, int(PORT)))
print “[+] Connected:”,HOST+”:”+PORT
s.send(”NICK %s\r\n” % NICK)
s.send(”USER %s %s bla :%s\r\n” % (NICK, NICK, NICK))
s.send(”JOIN :%s\r\n” % CHAN)
print “[+] Joined:”,CHAN,”\n”
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[++] CrackB0t Loaded”))
s.send(”PRIVMSG %s :%s%s\r\n” % (CHAN, “[+] Wordlist Length:”,len(words)))

while 1:
readbuffer=readbuffer+s.recv(1024)
temp=string.split(readbuffer, “\n”)
readbuffer=temp.pop( )

for line in temp:
line=string.rstrip(line)
line=string.split(line)
try:
line[3] = line[3].lower()

if line[3] == “:!crack”:
if len(line[4]) != 32:
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[-] improper length”))
else:
output = crack(line[4])
print “[+] Cracking:”,line[4]
print “[+] Output:”,output
if output != “”:
s.send(”PRIVMSG %s :%s%s\r\n” % (CHAN, “[+] cracked: “,output))
else:
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[-] “+line[4]+” : Not Found”))

if line[3] == “:!insert”:
if len(line[4]) <= 15:
output = insert(line[4]+”\n”)
if output != “[-] word already present”:
print “[+] Insert:”,line[4]
s.send(”PRIVMSG %s :%s%s\r\n” % (CHAN, “[+] insert: “,line[4]))
s.send(”PRIVMSG %s :%s%s\r\n” % (CHAN, “[+] new length: “,output))
else:
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, output))
else:
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[-] word length to long”))
s.send(”PRIVMSG %s :%s%s\r\n” % (CHAN, “[-] length:”, len(line[4])))

if line[3] == “:!md5″:
hash = md5.new(” “.join(line[4:])).hexdigest()
print “[+]“,” “.join(line[4:]),”==”,hash
s.send(”PRIVMSG %s :%s%s%s%s\r\n” % (CHAN, “[+] “,” “.join(line[4:]),” == “,hash))

if line[3] == “:!length”:
print “[+] Length:”,len(words)
s.send(”PRIVMSG %s :%s%s\r\n” % (CHAN, “[+] wordlist length:”,len(words)))

if line[3] == “:!help”:
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “crackB0t options:”))
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[+] !crack | crack md5’s”))
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[+] !insert | insert word into list”))
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[+] !md5 | generate md5″))
s.send(”PRIVMSG %s :%s\r\n” % (CHAN, “[+] !length | check wordlist length”))

except(IndexError):
pass

if(line[0]==”PING”):
s.send(”PONG %s\r\n” % line[1])

Comments (1)

Privacy? What Privacy! The Illusion of Justification or Idealism?

Introduction

Having lived in Britain my whole life and aspired to live as a thinker, philosophiser, technician, developer, manager, project manager, liason, scientist, spiritualist, conspiracist and contrived myself towards a more `new age` look at modern sociopolitical concepts I have found myself uncovering remarkable tidbits of concept, ideas and political flim flam.

Privacy Central and the Anonymous World
For instance, under both US and EU law a common statute of privacy is established for the individual, however contrarily the modern development of computer tagging systems, highly sophisticated imaging systems, Retina scanners, genetic profiling, detailed census profiling (e.g. compulsory personal US census programme), search engines, and most importantly service based interconnectivity leave much to be admired. Being anonymous is a practical impossibility, for the average human being and the over-average cracker genius. Why we ask? Well, the way the internet works, and the way people get it, and specifically, the interdependance of intercommunications. Some may say “what say you azio?” - “what does that even mean?” - it goes, well, something like this. You get your internet through an ISP, and they most likely get their global internet coverage (known as partial or global routes in a route table for differing allocations of the internet) via someone else (or many groups or exchanges). Of course we have all seen films that make melodrama of the idea and make it look like simplicity, it really isn’t simple. We need to consider that no one business or government owns the `internet`, owns the fibre or phonelines laid in your street; but, we all have an interdependancy on those systems, and their respective dependant systems. Security and privacy wise this says “DANGER” and nothing less. This says no privacy.

A work that is in progress

Although my research still bears the label of an `early work` having worked with basic routing, switching, and along with other commercial ISP’s it became a quick lesson that there is, at nearly all times for a extraordinarily large amount of people - more than just the lack of privacy - but a system that independantly or collectively monitors user patterns and activity. So much so that, using a HTTP proxy is no longer safe, so much so that using even a remote dns server _SELF OWNED_ by yourself still permits a security risk. “Why?” the reader asks. I answer, because that is the nature of the internet. It is a particularly erroneous claim (and idea) that seems to have been *HIGHLY* circulated in recent and older times, the internet is anonymous. Facts say something totally different, the internet is _NOT_ anonymous, whatsoever. Infact the whole system of DNS and IP/MAC translation allows the ability for specific tracking of the majority of users. All IP (Internet-Protocol) addresses ipv4 of ipv6 are binded to unique MACID’s in hardware NIC’s (Network Interface Cards), wireless cards - even telephone systems and a multitude of other devices. A specific unique identifier for communication, of course, and uniquely the best, most expert way to track anyone, anywhere in the world. So much so that MACID’s can be traced to Credit Cards, which can be traced to people, which can be traced to their bank, their business, their family, friends and their Internet Service Provider.

Expression is pointless in an anonymous society?


Freedom
, Privacy and the Data Protection Act
The whole idea of the all seeing eye of Echelon (An unacknowledged system which makes attempts at monitoring all intercommunication systems such as satellite, radiowave, microwave, optical, bnc and hardwire communications - is not a new concept. However, the idea of the internet being wholely un-anonymous and modern systems being actively in breach of peoples basic human rights and the DPA is a new idea; an idea based solely on the assumption of misuse of data, or rather, isolation and review of sensitive and private data without due cause OR the specific ignorance of laws protecting peoples right to privacy. Those who find themselves living in the US should know privacy is not something to reject, it is a right that has been granted to their society by constitutional law, it is just and it should not be unreasonable to expect a system of technology that respects it, however - as a technician it is important to establish that the way computer systems work is on a “unique identifier” basis - otherwise the system can’t do anything. All communication systems need to know their destination, and specifically where they are coming from - so the target can reply. All communication systems route through a multitude of machines. The atypical illusion of the `common user` of P2P connections (point to point) is ridiculous, as quite clearly the data to reach that target (and indeed acknowledgement from target to the initial user source) is a neccesity for data transmission, as such, any use of technology systems - at least to an insanely high majority of people (estimated 99.99% of people) is anything but anonymous.
the way computer systems work is on a "unique identifier" basis


A little bit about the fallacical system of Privacy

Often, in law enforcement, and other security vendors - specifically airports, high security locations, music and dance venue’s, clubs, even your local stores the philosophy of “refusal to submit is admission of guilt” is considered a golden neccesity of operation. I ask “Why?”. I ask “Why?” people must be guilty to value their privacy. For instance, I would feel embarassed and personal intruded if a crowd of people watched as I showered, some wouldn’t , but some would. That is human nature, we are indeed all different. Let’s get back to the topic at hand, the fallacical idea of the system of fallacical security with an example:

Security Guard: Hello sir, I have been informed by a member of staff that you have been acting suspiciously, would you mind if I went through your back and personal items briefly.
Civilian: Yes I would mind, as that is private!
Security Guard: Sir, if you would kindly consent to me searching you for weapons, stolen items, etc then you will be able to go on your way as soon as we have established that you are innocent.
Civilian: I am innocent, however invading my privacy is not your right.
Security Guard: So you refuse to consent to being searched sir?
Civlian: Yes, Yes I do.
Security Guard:
Civilian:
Security Guard: Why disallow me to search through your posessions if you have nothing to hide?
Civilian: I have nothing to hide but my personal privacy and personal items, which I have already said.
Security Guard: Yes, but everyone else has to be searched, you are not an exception to this rule, it is for the security of you and others, and your freedom.
Civilian: My freedom is my privacy.
Security Guard: Perhaps, but refusal to consent to being searched suggests guilt, wheras compliance suggets innocence.

Such situations are of course very common, and such people to challenge the system in such a way are very uncommon. Compliance is not an option in most usual circumstances. In society a “reality” of importance is established and a double standard is born people at airports may be subjected to searches in the UK, those who value their freedom (and indeed, privacy) are persecuted and accused of guilt when they excercise the same rights that security forces claim to protect.
The substitution of freedom for security to protect freedoms deserve nor attain either.
This is not an old idea, of course, but it is a new perspective of the marvels that books like 1984 by George Orwell initiated, predicted and confounded. 1984, written in 1948 and published in 1949 talk about the “BIG BROTHER IS WATCHING YOU” an idea that lives on in our hearts and minds forevermore, and will continue to do so due to the potent threat of Unique Identification systems.

The fallacical idea of injustice, or assured guilt is predefined and primal in those who value their privacy (or even those who desire privacy and agree to adhere to stringent security guidelines) - guilt is assured to all people who value freedom in this way. Refusal to consent to the removal of basic rights of privacy is considered admission of guilt and can lead to further sanctioning as much as agreeing to consent to the removal of their rights, either way freedom is lost - a soul guarantor of a system of fallacical justice.

Below is a furthering of the original idea of removal of privacy by force or otherwise. The below example is presented as an indicator to the system of justice, rather than an argument against or for removal of the nature of the justice, punishment and trialing system.

A brief hypothetical Example of Fallacical Justice:
Example 1

Judge: If you are not guilty you will submit to stringent testing, searching, etc
Civilian: No I won’t submit
Judge: then you must be guilty as if you had nothing to hide you would submit


Example 2

Judge: If you are not guilty you will submit to stringent testing, searching, etc,
Civilian: I will submit.

The Certainty of Judgement
In a modern system of commercial business tracked by software management systems and intercommunication networks there is an insideous movement towards guilt before innocence. A precident that has recently been strengthened by the concept of the “War on Terror”, and the unquenchable need to substitute freedom with security in order to protect it. As a young adult I could only compare it to the actions of a spoilt child whom when finding out he cannot keep his freedom to himself and just himself, destroys it so that others may not enjoy it.

“Let us feel no guilt from the stigma that excercising freedoms of privacy are admissions to it”

Beyond the sociopolitical ideaology, the illusion of perfect society, I find myself confounded by an illusion of the perfect system of reality management. I find myself answering the advocates of the reality system with tips and truisms from the system of idealism; idealism, I would argue is as much as an illusion as the system of reality. i.e. the system of reality uses justifications such as “you must be guilty because you refuse to be searched” - “this patient is beyond help and we cannot justify keeping him on life support”. Such bold and judgemental statements made in the interest of reality and the “life isn’t fair” philosophy are mainly ignorant of the total fallacical illusion of the concept of justification. As an advocate and admirer of the system of idealism as demonstrated in my articles, I would now be forced to argue that
the mockery and “conspiracist nonsense” spoken towards idealist concepts is a result of a society too used to inhabiting a social system based on a nonsensical & unreal system of justification; an illusion more fallacical, judgemental and unwise than the dream of idealist concepts - and most certainly, at least - as dangerous.

References:
1984 by George Orwell http://en.wikipedia.org/wiki/Nineteen_Eighty-Four

Data Protection Act UK http://www.opsi.gov.uk/acts/acts1998/ukpga_19980029_en_1

United States Consitution 3rd ammendment right to privacy:
http://en.wikipedia.org/wiki/Third_Amendment_to_the_United_States_Constitution

“Freedom is an illusion created by those with power, for those without” - M. Jacques
“Expression is meaningless in an anonymous society” - M. Jacques

Comments

Proxy List Update 21 January 2008

Hello all! Today we have the proxy update for January 21st 2008.

I’m sorry I haven’t been posting them reliably in the past few days!

200.72.204.156: 80 anonymous server Jan-21, 13:20 Chile
200.85.39.18: 80 anonymous proxy server Jan-21, 13:21 Paraguay
63.238.216.26: 80 anonymous proxy server Jan-21, 13:17 United States
201.231.238.189: 80 anonymous server Jan-21, 13:36 Argentina
128.114.160.240: 80 anonymous proxy server Jan-21, 13:37 United States
148.244.251.246: 80 anonymous proxy server Jan-21, 13:46 Mexico
63.238.216.44: 80 anonymous proxy server Jan-21, 13:07 United States
140.128.102.193: 80 anonymous proxy server Jan-21, 13:32 Taiwan
80.227.51.42: 80 anonymous server Jan-21, 14:53 United Arab Emirates
80.156.84.40: 80 anonymous proxy server Jan-21, 15:52 Germany
213.96.111.39: 8080 anonymous server Jan-21, 15:51 Spain
203.88.192.103: 8080 anonymous server Jan-21, 15:27 China
193.85.202.164: 80 anonymous proxy server Jan-21, 14:31 Czech Republic
59.120.237.233: 8000 anonymous proxy server Jan-21, 15:12 Taiwan
210.227.119.156: 8000 anonymous server Jan-21, 15:16 Japan
198.147.14.136: 80 high-anonymous server Jan-21, 15:19 United States
61.213.110.57: 8080 high-anonymous proxy server Jan-21, 15:04 Japan
201.17.163.70: 6588 high-anonymous proxy server Jan-21, 15:23 Brazil
219.0.34.156: 8080 high-anonymous proxy server Jan-21, 15:04 Japan
220.22.144.36: 8080 high-anonymous server Jan-21, 15:08 Japan
68.115.189.2: 12394 high-anonymous server Jan-21, 15:09 United States
189.47.177.69: 6588 high-anonymous proxy server Jan-21, 15:21 Brazil
219.12.84.34: 8080 high-anonymous proxy server Jan-21, 15:08 Japan
210.89.32.23: 6588 high-anonymous server Jan-21, 15:47 India
201.17.219.93: 6588 high-anonymous proxy server Jan-21, 15:22 Brazil
212.91.227.2: 29852 high-anonymous proxy server Jan-21, 15:45 Germany
202.159.221.36: 8080 high-anonymous server Jan-21, 15:30 India
220.41.232.107: 8080 high-anonymous proxy server Jan-21, 15:04 Japan
128.232.103.202: 3127 high-anonymous proxy server Jan-21, 14:34 United
150.65.32.66: 3128 high-anonymous proxy server Jan-21, 13:10 Japan
141.24.249.130: 3127 high-anonymous proxy server Jan-21, 15:42 Germany
141.24.33.192: 3127 high-anonymous server Jan-21, 13:54 Germany
128.112.139.73: 3128 high-anonymous server Jan-21, 11:12 United States
169.229.50.9: 3124 high-anonymous server Jan-21, 14:46 United States
128.220.247.28: 3124 high-anonymous proxy server Jan-21, 14:50 United
193.167.187.187: 3127 high-anonymous server Jan-21, 10:10 Finland
193.196.39.9: 3127 high-anonymous server Jan-21, 11:57 Germany
216.165.109.82: 3127 high-anonymous proxy server Jan-21, 11:55 United
128.8.126.111: 3128 high-anonymous proxy server Jan-21, 11:54 United
134.2.172.252: 3124 high-anonymous server Jan-20, 17:48 Germany
165.91.83.23: 3124 high-anonymous server Jan-21, 15:13 United States
143.205.172.11: 3124 high-anonymous server Jan-21, 11:12 Austria
192.197.121.3: 3128 high-anonymous server Jan-21, 13:32 Canada
155.98.35.6: 3127 high-anonymous server Jan-20, 21:02 United States
138.246.99.249: 3124 high-anonymous server Jan-21, 11:13 Germany
206.117.37.4: 3124 high-anonymous proxy server Jan-21, 11:09 United
35.9.27.27: 3124 high-anonymous server Jan-21, 11:12 United States
128.10.19.52: 3128 high-anonymous proxy server Jan-21, 12:04 United
193.167.182.132: 3128 high-anonymous server Jan-21, 15:45 Finland
195.116.60.2: 3127 high-anonymous server Jan-21, 11:09 Poland
128.238.88.64: 3124 high-anonymous server Jan-21, 13:10 United States
195.116.60.2: 3124 high-anonymous server Jan-21, 11:09 Poland
206.12.16.133: 3124 high-anonymous proxy server Jan-21, 11:48 Canada
129.69.210.97: 3124 high-anonymous server Jan-20, 23:50 Germany
217.91.52.155: 80 high-anonymous proxy server Jan-21, 13:07 Germany
216.165.109.79: 3124 high-anonymous server Jan-21, 11:11 United States
130.37.198.243: 3127 high-anonymous proxy server Jan-21, 11:47
66.98.250.59: 63778 high-anonymous proxy server Jan-21, 13:20 United
74.92.242.25: 80 high-anonymous proxy server Jan-21, 13:21 United
192.42.43.23: 3127 high-anonymous proxy server Jan-21, 02:02
219.25.100.28: 8080 high-anonymous proxy server Jan-21, 14:50 Japan
217.91.52.155: 8080 high-anonymous server Jan-21, 14:16 Germany
64.34.166.175: 80 high-anonymous proxy server Jan-21, 15:44 United
72.249.77.9: 80 high-anonymous proxy server Jan-21, 13:32 United
128.192.101.217: 3124 high-anonymous proxy server Jan-21, 14:08 United
58.188.250.218: 1080 high-anonymous proxy server Jan-21, 14:03 Japan
202.105.182.87: 808 high-anonymous server Jan-21, 13:31 China
200.31.42.3: 80 high-anonymous server Jan-21, 13:30 Chile
219.35.202.154: 8080 high-anonymous server Jan-21, 14:53 Japan
216.69.164.97: 80 high-anonymous server Jan-21, 13:36 United States
218.58.136.14: 808 high-anonymous server Jan-21, 13:56 China
210.236.191.79: 8080 high-anonymous server Jan-21, 13:37 Japan
128.227.56.82: 3124 high-anonymous server Jan-21, 15:27 United States
141.213.4.202: 3127 high-anonymous proxy server Jan-20, 18:05 United
216.165.109.82: 3124 high-anonymous server Jan-21, 11:10 United States
133.11.240.57: 3128 high-anonymous proxy server Jan-21, 15:28 Japan
133.11.240.57: 3127 high-anonymous server Jan-21, 15:28 Japan
169.229.50.4: 3128 high-anonymous proxy server Jan-21, 09:48 United
129.107.35.131: 3128 high-anonymous proxy server Jan-21, 09:57 United
128.232.103.201: 3124 high-anonymous server Jan-21, 11:11 United
128.114.63.15: 3124 high-anonymous proxy server Jan-21, 10:48 United
169.229.50.3: 3127 high-anonymous server Jan-20, 23:50 United States
128.114.63.15: 3128 high-anonymous server Jan-21, 11:13 United States
192.33.90.67: 3127 high-anonymous server Jan-20, 22:31 Switzerland
169.229.50.18: 3124 high-anonymous server Jan-21, 09:49 United States
128.114.63.15: 3127 high-anonymous server Jan-21, 11:13 United States
128.59.20.226: 3124 high-anonymous proxy server Jan-20, 15:58 United
128.151.65.101: 3128 high-anonymous proxy server Jan-21, 11:55 United
136.145.115.196: 3127 high-anonymous server Jan-21, 10:10 Puerto Rico
193.167.187.188: 3128 high-anonymous server Jan-21, 04:52 Finland
130.37.198.244: 3128 high-anonymous server Jan-21, 11:09 Netherlands
219.44.180.177: 8080 high-anonymous proxy server Jan-21, 13:58 Japan
79.213.251.18: 24832 high-anonymous server Jan-21, 15:45 Germany
81.189.106.138: 8080 high-anonymous server Jan-21, 15:44 Austria
193.28.153.27: 23 high-anonymous proxy server Jan-21, 09:53 Germany
192.197.121.2: 3128 high-anonymous server Jan-20, 22:57 Canada
130.136.254.21: 3127 high-anonymous proxy server Jan-21, 13:35 Italy
128.111.52.62: 3128 high-anonymous proxy server Jan-21, 11:55 United
143.205.172.11: 3128 high-anonymous server Jan-21, 13:35 Austria
143.205.172.11: 3127 high-anonymous server Jan-21, 13:35 Austria
128.208.4.99: 3124 high-anonymous proxy server Jan-20, 18:45 United
128.111.52.61: 3128 high-anonymous server Jan-21, 11:11 United States
129.82.12.187: 3124 high-anonymous server Jan-21, 11:19 United States
206.117.37.5: 3127 high-anonymous proxy server Jan-21, 11:53 United
195.130.121.204: 3127 high-anonymous proxy server Jan-21, 05:46 Greece
138.246.99.250: 3124 high-anonymous proxy server Jan-20, 17:39 Germany
200.21.174.239: 80 high-anonymous proxy server Jan-21, 14:17 Colombia
206.12.16.133: 3128 Planetlab/CoDeeN proxy server Jan-21, 13:55 Canada
128.208.4.99: 3127 Planetlab/CoDeeN server Jan-20, 18:45 United States
129.240.67.16: 3124 Planetlab/CoDeeN proxy server Jan-21, 03:03 Norway
138.246.99.249: 3128 Planetlab/CoDeeN proxy server Jan-21, 05:11
195.113.161.83: 3128 Planetlab/CoDeeN proxy server Jan-21, 04:16 Czech
195.130.121.204: 3128 Planetlab/CoDeeN server Jan-21, 00:34 Greece
132.252.152.194: 3128 Planetlab/CoDeeN server Jan-21, 15:30 Germany
141.24.33.161: 3128 Planetlab/CoDeeN proxy server Jan-21, 15:41
129.10.120.194: 3127 Planetlab/CoDeeN proxy server Jan-21, 09:25
152.15.98.226: 3128 Planetlab/CoDeeN proxy server Jan-20, 18:45 United

Comments

Notice of Evangelical Eviction , science or religion

“Whoever undertakes to set himself up as a judge of Truth and Knowledge is shipwrecked by the laughter of the gods.” — Albert Einstein

Some quotes reach us in a great wind, others in the synchronicity of science and modern sociopolitical values, others appear to masquerade as if from nothing, ever present and ever wise.

This notice serves as a warning to anyone who thinks he knows either truth or knowledge paramount; for those who say they do wield a dangerous and harrowing force to themselves and those who would surround them.

This can apply to many works and ideas. Thankyou Einstein, for a more restful day than usual!!

Comments

McAfee admits to direct copyright infringement and breaking GPL license openly - shock.

this story surprised me personally, and it will just go, and continue to, show that people really are mindless to the fact that the M$ slaves have more money, more resources and generally, could get away with murder - at least - if it was in a contract :D Original Article Source: Inquirer - check it out it’s a good read.

McAfee throws some FUD at the GPL

Comment Hits its own investors’ confidence

SATURDAY the sky was a sullen violet overcast at dawn, spitting volleys of rain onto the patio roof. Intermittant wind gusts ruffled the laurel hedge out back and swayed the limbs of the big fir tree in the neighbor’s back yard. A few of the cats ventured out but soon retreated back indoors to get out of the cold winter storm that had swept up the Pacific coast from San Francisco overnight.

In the chill morning dark, quiet except for the sounds of wind and rain outside, it seemed only fitting to happen upon the news of yet more FUD manure thrown at open source software by a vassal of the Volish empire, against its own interests.

* * *

In its annual report, Windows security software vendor McAfee told its investors that open source software licence terms it vaguely characterised as ” ambiguous” might “result in unanticipated obligations regarding our products.”

“To the extent that we use ‘open source’ software, we face risks,” McAfee stated.

McAfee explained: “Use of GPL software could subject certain portions of our proprietary software to the GPL requirements, which may have adverse effects on our sales of the products incorporating any such software.”

That statement says several things. First, it reveals that McAfee does use at least some open source software derived code in its products. Second, it betrays that McAfee has misappropriated that open source software and thus is committing copyright infringement, because it doesn’t distribute that open source software derivative source code. Third, by calling its products that include open source software code “proprietary”, McAfee shows that it really doesn’t want to shoulder its GPL licence obligations, but instead wants to both have its cake and eat it too.

The company might have more honestly admitted that, to the extent it might have been abusing open source software by ignoring its licence requirements, it might have to distribute its modified open source software source code to its customers, or at least make it easily available to any customers who might want to obtain it.

That is all that the GPL requires. It explicitly permits that products that use GPL licenced software may be sold, subject only to the requirement that the source code to components that are GPL licenced must be distributed or made available.

Merely including both proprietary and open source software in the same package or on the same distribution media doesn’t transfer GPL requirements from open source components to proprietary components. McAfee ought to consult with the Free Software Foundation if its management and attorneys are not well versed in the accepted methods for keeping proprietary and open source software separate while still allowing them to work together. The FSF will be glad to help them out.

Even if it were to publish all of the source code for, let’s say, its antivirus product, McAfee would certainly be able to keep its virus signatures database proprietary and confidential. That’s data not code, so it couldn’t be subject to GPL disclosure. McAfee’s antivirus product’s marketability wouldn’t be diminished in the least and end-users would still need update subscriptions even if they had the software free.

After all, the long term end-user value of any antivirus product is in the ongoing malware detection and research performed by the vendor, not in the executable module scanning and signature database matching software machinery by itself.

Of course, McAfee might simply be mortified at the thought of having competent customer programmers viewing its software source code. That might be poorly designed and structured, embarrassingly kludgey, or riddled with clumsy coding, and so on. It might even have glaring design loopholes that could be exploited by malware authors if they became widely known. Then again, one doesn’t really need source code to find design flaws, given some sophisticated debugging tools.

Perhaps McAfee believes in “security by obscurity” and that’s the reason it doesn’t want to reveal its modified open source code. But it, and all of the other Windows security software vendors, should know better. After all, that’s been Microsoft’s approach within Windows itself, and it’s been proven to be totally ineffective. The Windows security software vendors only have demand for their products because the Vole’s whole “security by obscurity” approach has failed and continues to fail.

Besides, properly designed security software can’t be defeated simply by knowing exactly how it works. Well designed security routines have checks that malware code can neither satisfy nor avoid, authorisation tests it can’t pass, and function, memory and file protections it can’t evade to reach sensitive resources, and so on. There’s exemplary open source software that is quite highly secure despite being entirely open for anyone to read. OpenBSD is only one example of several.

However, even if one or more of these is the case, that doesn’t excuse continuing GPL violations. The only possible GPL violation cures are to either distribute the derivative open source code or recode the functions in a clean room environment. That, or completely redesign and rewrite the application… entirely from scratch.

If McAfee didn’t like the GPL or want to abide by its licence terms, it should have written its own blasted software rather than stealing code from the open source community in violation of the GPL and the US Copyright Act. It’s far too late now.

There’s nothing at all “ambiguous” about the terms of the GPL, either. Contrary to McAfee’s snide, scurrilous suggestion, the GPL is a simple, straightforward software licence with no confusing or onerous terms. Compared to the McAfee EULA — or especially a Microsoft EULA — the GPL is a veritable model of simple software licence clarity.

McAfee also feigned to be “troubled” that the terms of the GPL have never been tested in court, supposedly. Well, that’s simply false. The GPL has been upheld in a German court of law, under the Berne Convention that conformed international copyright protection, to which the US is a signatory since 1988, and which is now under the auspices of the UN World Intellectual Property Organisation (WIPO).

The only reason that the GPL has never been “tested” in a US court of law is that every potential defendant in a copyright infringement lawsuit based upon the GPL has chosen to settle out of court rather than risk losing in court.

The US Copyright Act provides for statutory damages of up to $180,000 for each and every instance of willful copyright infringement.

Before it further disparages the GPL, McAfee should contemplate paying multiple authors of open source software licenced under the GPL $180,000 for each copy of its unlicenced and therefore copyright infringing products it ever shipped. One suspects that not even Microsoft has that much money, and certainly not McAfee.

Also, how can McAfee pretend that the redistribution obligations relating to open source software that are so clearly stated in the GPL were “unanticipated” by it?

That claim is tantamount to the admission that McAfee had previously assumed that it could get away with violating the GPL with impunity. Either that, or it’s an admission by McAfee’s executive management of their utterly gross incompetence at directing and managing a legally responsible software development enterprise.

These few statements in its annual report, taken at face value, can’t be viewed as encouraging for investor confidence in McAfee’s executive management team or future business prospects. Indeed, should McAfee’s stock decline in market value, it’s not unimaginable that these statements could come to be cited as evidence of mismanagement in stockholder lawsuits. Under Sarbanes-Oxley, executives might even be held personally liable for causing the corporation to incur legal liabilities. Having disclosed bad management after the fact might not get them off the hook.

On the other hand, open source software developers whose source code McAfee might have misappropriated aren’t likely to sue the company for damages. That’s not the point of the GPL, which merely requires that those developers who modify and redistribute open source software also return those derivative works into the open source software development community. GPL compliance is the objective, not monetary gain, and fortunately for all, compliance is almost always possible.

But McAfee probably knows all of this. So what was the point of the FUD attack?

One can only speculate, but it’s obvious that all of the Windows security software vendors like McAfee are totally dependent upon Microsoft’s dominant Windows OS marketshare for their very existence. Apple Mac and Linux systems aren’t nearly as vulnerable to malware as Windows, which by its very design practically invites infestations of all sorts, the whole menagerie — viruses, adware, spyware, trojans, worms and bots. Without the Vole’s Windows monopoly to provide their customer base, parasitic Windows security vendors like McAfee could not stay in business long. There’s a powerful motive for McAfee to denigrate open source.

Linux users don’t buy antivirus software because Linux isn’t anywhere nearly as insecure as Windows, by orders of magnitude. It just isn’t needed to run Linux.

Perhaps McAfee is afraid that Linux desktop penetration is heading up, which it is, and wants to do whatever it can to slow its takeup, especially in corporations.

That does seem possible, even plausible, but if that’s the case, McAfee is failing to appreciate the direction from which the worst threat to its future viability is most likely to come. Growing uptake of desktop Linux won’t kill off McAfee’s business.

Long before Linux makes big inroads on the desktop, Microsoft will have escaped from federal antitrust oversight. Then the Vole will bundle security functions into Windows and staff its own malware research lab, putting McAfee out of business.

Or perhaps McAfee will offer software that does something actually productive, instead of living as a mere parasite of the Vole, a remora on the Windows shark.

* * *

It’s later Saturday morning and the wind’s died down. The cats are sauntering out again to patrol the soggy grounds under a bright grey, featureless overcast sky. µ

Original Article Source: http://www.theinquirer.net/gb/inquirer/news/2008/01/05/mcafee-throws-fud-gpl

Comments (3)

The all Seeing Eye that is Echelon Is listening

As a english patriot my entire life I have enjoyed the peaceful comfort of my own house, and the provisions and the safety that are made for us (and indeed taken for granted). What a lot of my readers don’t know is that privacy is something of the past, and as discussed previously with like minded thinkers, the internet, and telecom network is NOT what we think it is. A lot of it is monitored. What a lot of you do not know is that there is a 5 government alliance that allows a “global” listening/spy network to be installed throughout the world. Unfortunately, this is for our own safety, however in as simple words as I could put it - that much power is terrorism on the greatest scale. Fighting for “liberty” - is not removing them all. And so on. And here I share the FAQ (Frequently Asked Questions that have since been removed from the American Civil Liberties Union Website (Original location: http://www.aclu.org/echelonwatch/echfaq3.htm).

People at the very least should have been made aware of a system to promote their freedom, not to have that knowledge restricted and to be unaware of the truly massive power that governments instil upon themselves. But “why care, unless you have something to hide?” you say; I reply “power corrupts. absolute power, corrupts absolutely - roughly translated to, I care not of the civil liberties removed from me or the people, I care for the absolute `liberty of power` awarded to those who claim to their self indoctrinated wish to create freedom - and that is NOT freedom. That is slavery.
Q: What is Project ECHELON?

ECHELON is a code word for an automated global interception and relay system operated by the intelligence agencies in five nations — the United States, the United Kingdom, Canada, Australia and New Zealand (it is rumored that different nations have different code words for the project). While the United States National Security Agency (NSA) takes the lead, ECHELON works in conjunction with other intelligence agencies, including the Australian Defence Signals Directorate (DSD). It is believed that ECHELON also works with Britain’s Government Communications Headquarters (GCHQ) and the agencies of other allies of the United States, pursuant to various treaties. 1

These countries coordinate their activities pursuant to the UKUSA agreement, which dates back to 1947. The original ECHELON dates back to 1971. However, its capabilities and priorities have expanded greatly since its formation. According to reports, it is capable of intercepting and processing many types of transmissions, throughout the globe. In fact, it has been suggested that ECHELON may intercept as many as 3 billion communications everyday, including phone calls, e-mail messages, Internet downloads, satellite transmissions, and so on. 2 The ECHELON system gathers all of these transmissions indiscriminately, then distills the information that is most heavily desired through artificial intelligence programs. Some sources have claimed that ECHELON sifts through an estimated 90 percent of all traffic that flows through the Internet. 3

However, the exact capabilities and goals of ECHELON remain unclear. For example, it is unknown whether ECHELON actually targets domestic communications. Also, it is apparently very difficult for ECHELON to intercept certain types of transmissions, particularly fiber communications.

Q: How does ECHELON work?

ECHELON apparently collects data in several ways. Reports suggest it has massive ground based radio antennae to intercept satellite transmissions. In addition, some sites reputedly are tasked with tapping surface traffic. These antennae reportedly are in the United States, Italy, England, Turkey, New Zealand, Canada, Australia, and several other places. 4

Similarly, it is believed that ECHELON uses numerous satellites to catch “spillover” data from transmissions between cities. These satellites then beam the information down to processing centers on the ground. The main centers are in the United States (near Denver), England (Menwith Hill), Australia, and Germany. 5

According to various sources, ECHELON also routinely intercepts Internet transmissions. The organization allegedly has installed numerous “sniffer” devices. These “sniffers” collect information from data packets as they traverse the Internet via several key junctions. It also uses search software to scan for web sites that may be of interest. 6

Furthermore, it is believed that ECHELON has even used special underwater devices which tap into cables that carry phone calls across the seas. According to published reports, American divers, were able to install surveillance devices on to the underwater cables. One of these taps was discovered in 1982, but other devices apparently continued to function undetected. 7

It is not known at this point whether ECHELON has been able to tap fiber optic phone cables.

Finally, if the aforementioned methods fail to garner the desired information, there is another alternative. Apparently, the nations that are involved with ECHELON also train special agents to install a variety of special data collection devices. One of these devices is reputed to be an information processing kit that is the size of a suitcase. Another such item is a sophisticated radio receiver that is as small as a credit card. 8

After capturing this raw data, ECHELON sifts through them using DICTIONARY. DICTIONARY is actually a special system of computers which find pertinent information by searching for key words, addresses, etc. These search programs help pare down the voluminous quantity of transmissions which pass through the ECHELON network every day. These programs also seem to enable users to focus on any specific subject upon which information is desired. 9

Q: If ECHELON is so powerful, why haven’t I heard about it before?

The United States government has gone to extreme lengths to keep ECHELON a secret. To this day, U.S. government refuses to admit that ECHELON even exists. We know it exists because the Australian government (through its Defence Signals Directorate) has admitted to this fact. 10 However, even with this revelation, U.S. officials have refused to comment.

This “wall of silence” is beginning to erode. The first report on ECHELON was published in 1988. 11 In addition, besides the revelations from Australia, the Scientific and Technical Options Assessment program office (STOA) of the European Parliament commissioned two reports which describe ECHELON’s activities. These reports unearthed a startling amount of evidence, which suggests that ECHELON’s powers may have been underestimated. The first report, entitled “An Appraisal of Technologies of Political Control”, suggested that ECHELON primarily targeted civilians.

This report found that:

“The ECHELON system forms part of the UKUSA system but unlike many of the electronic spy systems developed during the cold war, ECHELON is designed for primarily non-military targets: governments, organisations and businesses in virtually every country. The ECHELON system works by indiscriminately intercepting very large quantities of communications and then siphoning out what is valuable using artificial intelligence aids like Memex to find key words. Five nations share the results with the US as the senior partner under the UKUSA agreement of 1948, Britain, Canada, New Zealand and Australia are very much acting as subordinate information servicers.

“Each of the five centres supply “dictionarie” to the other four of keywords, phrases, people and places to “tag” and the tagged intercept is forwarded straight to the requesting country. Whilst there is much information gathered about potential terrorists, there is a lot of economic intelligence, notably intensive monitoring of all the countries participating in the GATT negotiations. But Hager found that by far the main priorities of this system continued to be military and political intelligence applicable to their wider interests. Hager quotes from a “highly placed intelligence operatives” who spoke to the Observer in London. “We feel we can no longer remain silent regarding that which we regard to be gross malpractice and negligence within the establishment in which we operate.” They gave as examples. GCHQ interception of three charities, including Amnesty International and Christian Aid. “At any time GCHQ is able to home in on their communications for a routine target request,” the GCHQ source said. In the case of phone taps the procedure is known as Mantis. With telexes its called Mayfly. By keying in a code relating to third world aid, the source was able to demonstrate telex “fixes” on the three organisations. With no system of accountability, it is difficult to discover what criteria determine who is not a target.” 12

The most recent report, known as “Interception Capabilities 2000”, describes ECHELON capabilities in even more elaborate detail. 13

In addition, an Italian government official has begun to investigate Echelon’s intelligence — gathering efforts, based on the belief that the organization may be spying on European citizens in violation of Italian or international law. 14

The Danish Parliament also has begun an inquiry.

Events in the United States have also indicated that the “wall of silence” might not last much longer. Exercising their Constitutionally created oversight authority, members of the House Select Committee on Intelligence recently started asking questions about the legal basis for NSA’s ECHELON activities. In particular, the Committee wanted to know if the communications of Americans were being intercepted and under what authority, since US law severely limits the ability of the intelligence agencies to engage in domestic surveillance. When asked about its legal authority, NSA invoked the attorney-client privilege and refused to disclose the legal standards by which ECHELON might have conducted its activities. 15

A funding bill is now making its way through the Congress which would, at a minimum, require the NSA to report on the legal basis for ECHELON and similar activities. 16

In addition, Rep. Bob Barr (R-GA), who has taken the lead in Congressional efforts to ferret out the truth about ECHELON has arranged for the House Government Reform and Oversight Committee to hold oversight hearings.17

Q: What is being done with the information that ECHELON collects?

The original purpose of ECHELON was to protect national security. That purpose continues today. For example, we know that ECHELON is gathering information on North Korea. Sources from Australia’s DSD have disclosed this much because Australian officials help operate the facilities there which scan through transmissions, looking for pertinent material. 18

However, national security is not ECHELON’s only concern. Reports have indicated that industrial espionage has become a part of ECHELON’s activities. While present information seems to suggest that only high- ranking government officials have direct control over ECHELON’s tasks, the information that is gained may be passed along at the discretion of these very same officials. As a result, much of this information has been given to American companies, in apparent attempts to give these companies an edge over their less knowledgeable counterparts. 19

In addition, there are concerns that ECHELON’s actions may be used to stifle political dissent. Many of these concerns were voiced in a report commissioned by the European Parliament. What is more, there are no known safeguards to prevent such abuses of power. 20

Q: Is there any evidence that ECHELON is doing anything improper or illegal with the spying resources at its disposal?

ECHELON is a highly classified operation, which is conducted with little or not oversight by national parliaments or court. Most of what is known comes from whistleblowers and classified documents. The simple truth is that there is no way to know precisely what ECHELON is being used for.

But there is evidence, much of which is circumstantial, that ECHELON (along with its British counterpart) has been engaged in significant invasions of privacy. These alleged violations include secret surveillance of political organizations, such as Amnesty International. 21 It has also been reported that ECHELON has engaged in industrial espionage on various private companies such as Airbus Industries and Panavia, then has passed along the information to their American competitors. 22 It is unclear just how far ECHELON’s activities have harmed private individuals.

However, the most sensational revelation was that Diana, Princess of Wales may have come under ECHELON surveillance before she died. As reported in the Washington Post, the NSA admitted that they possessed files on the Princess, partly composed of intercepted phone conversations. While one official from the NSA claimed that the Princess was never a direct target, this disclosure seems to indicates the intrusive, yet surreptitious manner by which ECHELON operates. 23

What is even more disquieting about these allegations is that if proven, may have circumvented countless laws in numerous countries. Many nations have laws in place to prevent such invasions of privacy. However, there are suspicions that ECHELON has engaged in subterfuge to avoid these legal restrictions. For example, it is rumored that nations would not use their own agents to spy on their own citizens, but assign the task to agents from other countries. 24 In addition, as mentioned earlier, it is unclear just what legal standards ECHELON follows, if any actually exist. Thus, it is difficult to say what could prevent ECHELON from abusing its remarkable capabilities.

Q: Is everyone else doing what ECHELON does?

Maybe not everyone else, but there are plenty of other countries that engage in the type of intelligence gathering that ECHELON performs. These countries apparently include Russia, France, Israel, India, Pakistan and many others. 25 Indeed, the excesses of these ECHELON-like operations are rumored to be similar in form to their American equivalents, including digging up information for private companies to give them a commercial advantage.

However, it is also known that ECHELON system is the largest of its kind. What is more, its considerable powers are enhanced through the efforts of America’s allies, including the United Kingdom, Canada, Australia, and New Zealand. Other countries don’t have the resources to engage in the massive garnering of information that the United States is carrying out.

Comments (2)

« Previous entries