Slashdot Mirror

The DOCTOR, rules!

Loved this show since I was a boy in the 1970's (John Pertwee, & Tom Baker era here)... & rediscovered it when Christopher Eccleston took over in 2005! He was great, but, the "new Doctor", David Tennant IS THE ULTIMATE imo, to date (longest running sci-fi ("the literature of change") seties there is since 1962 in fact!)

In honor of this series, I did a screensaver (of fairly "advanced design" (for a screensaver that is)) of this series' "introduction sequence" (where the tardis is vectoring thru time etc. et al) PLUS, other tardis in flight clips too!

APK Dr. Who Screensaver 2008++ self-extracting WinRar (protected vs. virus infection) installer D/L link:

http://www.drwhodaily.com/community/index.php?showtopic=386&st=0

(Direct Download URL Link is below, above is the introductory description of it for other Dr. Who fans like myself (& obviously, yourself too))

http://www.filefactory.com/file/91ff9e/APKDoctorWhoScreenSaver2008.exe

(1 click EASY to install via a WinRar self-extracting installation system that is protected vs. tampering via Rar locking & 5% recovery record built in, to install this single file multithreaded screensaver that internally contains the intro. of this fine sci-fi series & plays it back from RAM, not disk, for greater speed & efficiency + the screensaver actually CHECKS ITSELF, vs. virus infestion (more below on that note (via CRC-32 & FileSize checks)))

(File Download Size = 3.3mb/3287kb)

Max memory occupancy = 18mb
AVG. - MAX CPU Usage = 14%-21%
Max ThreadCount = 2-6 (depending on stage of operations it is in)
Max hWnd Count = 149

* For support questions, email me here -> apk4776239@hotmail.com

(Above all else, enjoy!)

APK

P.S.=> Multithreaded, multitasking, & LOW CPU USAGE (for a screensaver that is) that is only "1 moving part" efficiency that internally stores its .avi it animates within itself, & PLAYS IT FROM RAM, not disk, for the utmost in speed + efficiency! apk

By 'machine optimized', do you mean:

Using INLINE ASM (inline assembly code) directives & code in say, C/C++ (Delphi can do this also, but I am fairly certain that FF is built in C++, correct?) for say, the x86 platform, & thus gaining speed MAINLY based upon that (instead of say, a "better algorithm/engine/technique")?

----

Fact is, I did that type of work for this screensaver:

APK Doctor Who ScreenSaver 2008++ version 1.0:

http://www.drwhodaily.com/community/index.php?showtopic=386

For that program, when possible? I used Inlined Assembler code (via the ASM directive which Delphi also supports) for the best in speed.

(@ times, & @ others? Well sometimes, I did have to "rethink" how I structured or coded various routines (sometimes using inline assembler, instead of higher-level object-oriented Delphi code (or, even Win32 API stuff), & then, for the SLOWEST ones, I would try to (& many times did) redo them + eventually used multiple thread design & internal storage of the .avi it animates (partially also here on this note to make it "1 moving part only simple" also), so the screensaver plays the series intro. back from RAM, not disk, for more speed/efficiency (the new series intro. of the tardis vectoring thru a wormhole/time-tunnel, etc.))))

In the end, it did net me better performance on a VERY OLD test system a pal of mine owns no less, who is also a fan of this series!

By the use of "hi-res multimedia timers"?

Well, it's kind of an "old-school" way of "profiling" your code... & by that, I mean that I 'ticked off' the time each routine took & wrote the output to a file each time via the use of high-resolution multimedia timer counts (which I registered w/ the system & ran in my code) to get those numbers to work on my slowest routines, & it tended to work out well... well enough so that the code runs on a system as "low/slow/old" as a CELERON Pentium II @ 400mhz w/ only 64mb of RAM on it no less...

----

Anyhow - on FF3 being faster @ JAVASCRIPT PROCESSING?

Well, iirc, I read about it here in fact, in regards to FF3 being faster than Opera (finally, for once) in the area of javascript processing, but... I cannot recall the exact details!

Thanks for the 'refresher/update' on this note...

APK

"In 1997, producing small, fast executables for desktop and database client applications (Delphi's raison dètre) mattered a whole lot more than it does today." - by morgan_greywolf (835522) * on Thursday May 15, @10:22AM (#23417700) Homepage In my book? It still does... efficiency, & security, especially in code, matter ( & in ANY KIND of code! )... @ least, that's how I feel + TRY to design for.

E.G.-> Even my latest freeware creation for Dr. Who fans worldwide exemplifies this ideal of mine (&, many others (based on the rest of your reply below, seems you espouse it as well)) & it too, was created in Delphi, plus proven Win32 API lib/dll function calls, & Inline Assembler code, here:

----

APK Doctor Who ScreenSaver 2008++ version 1.0:

http://www.drwhodaily.com/community/index.php?showtopic=386

----

(That's a multithreaded (2/3 threads, depending on the stage of operation it is in) designed monolithic/"1 moving part only" Win32 PE program, that uses a "blend" of proven F A S T coding tools, in addition to "hand-tuning" (more of that there, as to details))

Also - for more speed/efficiency still, that screensaver program LITERALLY "self-contains", internally (via resources storage), the animation it plays back inside of itself, & plays it from MEMORY, not disk, for more efficiency/speed still!

(Plus/lastly - it also "self-checks" itself vs. viral infestation (or, tampering via corruption OR disassembly techniques + tools to a good extent) via CRC-32 & Filesize checks - heck, even its self-extracting WinRar installer is protected vs. meddling &/or infestations, via RAR locking & a 5% recovery record built-in!)

----

"These days, it's generally far more important to use a tool that lets the programmer be very productive and to produce nice, maintainable code. Both of which Delphi does very well, mind you. - by morgan_greywolf (835522) * on Thursday May 15, @10:22AM (#23417700) Homepage Ah, I see you agree, FOR THE MOST PART, on the strengths of Delphi, 'right outta the box'...

APK

P.S.=> QUESTION:

I was wondering - & on this very post @ /. ( slashdot ), IF the task + data being computed gain an advantage, via Delphi's strength in STRING & MATH Processing ( which Delphi has over BOTH MSVB & MSVC++ ) thus, quite possibly giving said computational task better/faster/more efficiencies, via being developed in DELPHI ( especially if the compiler you use shows strengths in strings & math processing work tasks, which Delphi has )?

After all, EVERY program does strings & math, but somehow I think this type of processing ( which this post is about ) do an especially LARGE amount of that kind of work, & on THAT KIND OF DATA!

Now, I could be wrong, but just asking ... apk

What scares me, is this, in regards to what YOU stated, here:

"You're going to need an exploitable BIOS bug, or the ability to reflash the ROM" - by Anonymous Coward on Sunday May 11, @09:47PM I've thought about that for years now, + mentioned in discussions just like this one on various forums I have attended over time

HERE is how I would go about it (not that I would), thru this combination of fairly easily done techniques, which I have used before in programs, & list an example below? It's PROBABLY do that!

(In a "blended threat" type of virus/trojan/rootkit/spyware etc.? DOABLE!)

For example, tools by ASUS &/or GIGABYTE (& probably other vendors) allow BIOS FLASH thru Windows (& probably for LINUX too by now, but you LINUX folks tell us more on that note)...

So, that said & aside?

What says a Virus/Trojan/Spyware/Malware-in-general can't use that tech too?

I.E.-> It's NOT THAT HARD to store ANYKIND of file (including BIOS image data, OR another program, say in the case of malware? A driver) or data inside an application as a runtime extractable + even memory resident (instead of disk) resource, & run a program over it + use it from memory even...

E.G.-> I do it inside this app (stores an .avi internally & plays it back, from INSIDE of the .scr file no less, making it "1 moving part only" basically):

----

APK Doctor Who ScreenSaver 2008++ v. 1.0

http://www.drwhodaily.com/community/index.php?s=4c91394a4eeba63a7acde25e70dbbe64&showtopic=386

----

AND - the same basic idea & technique could be done via a virus, albeit for nefarious purposes!

Simply by using what's noted above, for flashing a PROM whose data it stores internally (BIOS IMAGE FILE + possibly a PnP loadable driver) & probably via the use of a driver stored internally as well as a runtime extractable & useable (Plug & Play dynamically loaded drivers DO exist on Windows, not sure on Linux though) as well!

& voila: FLASHED BIOSES FROM A VIRUS!

Think about it...

(The code's out there for BIOS flashing WHILE IN WINDOWS no less, in legit tools so far @ least afaik ONLY!)

BUT, I saw code for that @ ROOTKIT.COM no less, but I can see it being hardware specific (BIOS specific actually in this case, bios flashing viruses etc.) - still, doesn't make it "undoable" though. Far from it...

& the technique I extoll of storing even BIOS IMAGE DATA (or other programs, even drivers & use them) inside of any program (virus/trojan/rootkit/spyware etc. et al) is not difficult to do @ all, because of resource storage programs use...

APK

"Unfortunately too many programmers still think that way and are not willing to put in the code for security checks, clean user interfaces, etc. that are required" - by WGR (32993) on Sunday May 11, @04:03PM (#23371054) I hear/feel you, speaking as a professional coder for nearly 16 years now... & I AGREE!

(With reservations: Because of deadlines (insane ones sometimes promised) & such, we're TOLD to issue with "intermittent bugs" a bit more time could trace out @ times, & YOU KNOW IT MAN!)

HOWEVER - Not ALL programmer's are like that, today, on ALL projects... going to show 1 that's definitely not, & outline why... I wager you'd agree, based on its architecture!

I.E.-> What I quote from you is untrue, of this piece of work:

----

APK Doctor Who ScreenSaver 2008++:

http://www.drwhodaily.com/community/index.php?s=4c91394a4eeba63a7acde25e70dbbe64&showtopic=386&st=0

----

"110% bulletproof & bugfree", only the best "SUPERIOR DALEK ENGINEERING" (nerdy humor/sci fi humor, but is true) in honor of that most excellent Sci-Fi series -> Dr. Who!

(It is version 1.0, but a good solid one, built on a template I built back in 1999 & perfected nearly a decade ago in a FAST language mix, for this type of program!)

FOR SECURITY IN DESIGN?

Uses only SOLID proven & FAST objects, (w/ mostly privatized declarations of internal structures members)

+

It's fully err-trapped via try-catch/except internally in ALL functions (override is to close if it screws up, which is PERFECT for this type of program, exit -> silently)

&

Even self-checking vs. virus infestation, tampering, &/or corruption via CRC-32 self-checks & filesize API call checks on itself)!

----

Don't despair, going to hit the SPEED/EFFICIENCY PART NEXT, lol!

----

FOR SPEED/EFFICIENCY??

It is a SINGLE MONOLITHIC EXECUTABLE/1 MOVING PART DESIGN

It was created in these languages & tools:

HIGHLY OPTIMIZED Borland Delphi 7.x object pascal code (optimized by compiler & by hand using hi-res multimedia timers + custom compiler switches)

Inline Assembler(doesn't get better than this)

Win32 API proven lib/dll calls

Delphi was proven faster than VB, or MSVC++ even, especially in math & strings (which EVERY program does, mind you) in the October 1997 issue of "Visual Basic Programmer's Journal" where Delphi took away 8/10 tests iirc, from both VB & MSVC++, overall.

It's also of multithreaded design (2/3 threads)... perfect for the SMP processors of yesterday, HT/Dual-or-more Core CPU's of now,and tomorrow!

Lastly?

It even "self-contains" the animation it plays back as an internal resource & plays it from RAM, not disk, for the UTMOST in performance too.

(For the utmost in 1 moving part only multithreaded F A S T Efficiency)

APK

P.S.=> As far as "speed/efficiency"? It even runs well on XP running on a Celeron 400mhz w/ only 64mb of PC-100 SDRAM, no less... apk

Plenty of other folks are doing what the parent thread post/article notes (SETI@Home's end-user client has been for years now, iirc, since 2006, & on a GPU)!

Example/Proof? This use of multiple thread design is only 1 of 1,000's out there:

---

APK Dr. Who Screensaver 2008++:

http://www.drwhodaily.com/community/index.php?showtopic=386

----

(That single file monolithic .scr Win32 PE multithread designed screensaver that also contains data access pointers for playing its animation files, which are stored literally inside itself as a runtime accessible resource for using its data in memory, not on disk (so it is only "1 moving part" K.I.S.S. designed))

AND, not just "MIT CS guys" can handle/deal with it!

(Not that they're "that much 'smarter'" (fact is, I doubt they are) than the rest of the joes out there writing code either, especially experienced devs)

MOST "ordinary coders" can "handle it", especially IF they "think out/architect" their apps wisely...

So, as far as it being the "sole province" of "MIT type guys"? Hey, trust me... it's far from that & their "exclusive proveince of the elite/brainchildren of MIT" (they're just students too, & there is a HUGE diff. between academia level experience, & that of the "real working world" in this "art & science" - experience usually DOES create that effect in a highly technical field!)

Sure, occasionally, you DO get a "prodigy" that comes outta the academic world, but, the odds are STRONG they discovered it @ an early age too (mostly due to exposure to programming by parents I'd say).

STILL, in essence - multithreaded apps that are implicitly "SMP ready/Multicore ready" that have to sync sound & animation abound online, such as the one noted above!

Heck - multithreaded, implicitly SMP/MultiCore Ready apps + Operating Systems exist in fairly large numbers & have for years! Using taskmgr.exe in Windows can show anyone that much, easily (if you have the PROCESS Tab's THREADS column selected as visible! e.g.-> Here, I have 30 apps running, & 28 of those ARE 2-N thread bearing & thus, my system (AMD Athlon64 X2 dualcore) is being taken advantage of via the OS Process Scheduler kernel subsystem shunting off child OR parent threads of app execution to multiple cores, when & IF necessary (especially when the first of N cores gets near to saturated)).

(The screensaver above is one that's not only "coarse multithreading designed" (meaning diff. threads of execution from the parent thread processing diff. discrete tasks & data), but, also does the "fine grained" multithreading problems this thread notes also (by taking the same set of data & busting it across diff. threads (2-3 of them in this app's case, depending on what's going on @ any given moment during its operations + having to perform syncronization & blocking as needed)).

Imo & experience - today's (& even last decade's) programming tools do NOT "take a prodigy" to do this level of work, + it's almost as simple as programming using LEGOs (the building blocks toy)... you largely program CONTROLS for more than a decade now (oh, there IS more to it, but it has gotten simpler than when I first started coding Windows apps (Win16 stuff)).

MY BOTTOM-LINE/POINT, after all that is now "said & aside"?

Plus, I'd wager NVidia &/or ATI's toolkits make it elegant, & relatively "simple/easy" to do as well (today's programming IDE &/or addon tools such as .OCX/ActiveX controls/OLEServers, or .VCL make things a LOT simpler than it was prior to say, 15 yrs. ago too, using tools like Microsoft Macro Assembler OR even C/C++ dev environments))

Today & FOR YEARS NOW (more than a decade)?

With Today's dev. tools?? Put it THIS way - YOU DON'T NEED TO BE "TONY STARK BOY GENIUS INDUSTRIALIST" (ou

"We may have to fix our software!" - by i_liek_turtles (1110703) on Sunday April 27, @01:11PM (#23215170)

Which is why these antivirus companies' "HEURISTICS" engines need improvement!

("Heuristics" = 'smells like a duck, tastes like a duck, & looks like a duck = must be a duck') type type tech in antivirus products (other things too, but the point's there)).

It is important...

What AV Company leads that area, per current results?

Apparently, NOD32 does!

( & has kept such leadership in that category during formal testing @ av-comparatives.org & vb100 the past few years now over all other competition).

NOW, if you don't want scripted viruses (via java/javascript)? Don't run them in your webbrowser, you won't get any of this.

(Yes, that's a PAIN on some sites (so, you need a browser that allows "exception sites", & FireFox will do THAT, via an addon called "noscript" (Flashblock's another one that may help also, due to Adobe's products being rampantly exploited lately)... SECUNIA DATA ON BROWSER SECURITY (dated 04/28/2008):

Opera 9.27 security advisories @ SECUNIA (0% unpatched):

http://secunia.com/product/10615/?task=advisories

Netscape 9.0.0.6 (0% unpatched - but, now discontinued by Mozilla, so it WILL be vulnerable to things FF won't be now & in the future):

http://secunia.com/product/14690/

FireFox 2.0.0.14 security advisories @ SECUNIA (17% unpatched):

http://secunia.com/product/12434/

IE 7 (latest cumulative update from MS) security advisories @ SECUNIA (33% unpatched):

http://secunia.com/product/12366/

----

MOST OF WHAT YOU SEE OUT THERE NOWADAYS ONLINE? Javascript + IFrame exploits... so, getting a secure browser, & creating "exception sites" for running IFrames &/or JavaScript, & for those exception sites ONLY, is a GOOD idea (sites like online shopping &/or online banking come to mind - they OFTEN DEMAND YOU USE JavaScript/Cookies etc. so on those sites, use them, since you are forced to... all others? TURN IT OFF, & BE SAFE(r)).

----

NOW - As far as "std. 'oldschool' binary infectors"? ALL SOFTWARE MAKERS THAT DON'T DO THIS MAY HAVE TO DO AS YOU SAID & I QUOTED:

If apps were coded to say, check their filesize &/or CRC-32 @ startup? They can "self-check" themselves for infestation/infection!

E.G.-> I did a "Dr. Who" (famous science fiction series, longest running there is iirc in fact) that does such checks (& in all of my freeware apps this takes place to protect users) that does this, here:

----

APK Doctor Who ScreenSaver 2008++: review:

http://www.drwhodaily.com/community/index.php?showtopic=386&st=0

(A multithreaded 3D animated screensaver that self-checks itself vs. viral infestation via filesize & crc32 checks @ its startup & also "self-contains" internally its .avi footage to playback from MEMORY (not disk, for speed & efficiency) so it is ONLY 1 MOVING PART to distribute as well (ships)

----

&, it works!

E.G./I.E. -> The screensaver will tell you if it has had its CRC-32 altered, OR, its filesize & warn you + shut itself down, so you are aware of it & so it does not continue to "spread-the-disease"...

(IF every Win32 PE app did that, we'd probably have LESS binary infector/attaching std. viruses imo @ least, & that of others, since my idea for this was "modded up" HERE @ SLASHDOT no less, in last year's "CODING FOR DEFCON" thread, see below):

----

APK CODING FOR DEFCON POST (technique modded up as "technically interes

"Bypassing current antivirus process is almost trivial." - by Nikademus (631739) * on Sunday April 27, @01:40PM (#23215396) Homepage

Which is why their "HEURISTICS" ('smells like a duck, tastes like a duck, & looks like a duck (must be a duck)') type tech in antivirus products is important... who leads that area, per current results? Apparently, NOD32 does & has kept such leadership in that category during formal testing @ av-comparatives.org & vb100 the past few years now over all other competition.

NOW, if you don't want scripted viruses (via java/javascript)? Don't run them in your webbrowser, you won't get any of this.

(Yes, that's a PAIN on some sites (so, you need a browser that allows "exception sites", & FireFox will do THAT, via an addon called "noscript" (Flashblock's another one that may help also, due to Adobe's products being rampantly exploited lately)... , & OPERA HAS LESS KNOWN SECURITY VULNERABILITIES THAN FIREFOX DOES (or, IE too))!

If you search a site like SECUNIA.COM, you can verify the browser vulnerabilities lists, as of today's date, here in these URL's to verify my statements:

=====
SECUNIA DATA ON BROWSER SECURITY (dated 04/28/2008):
=====

Opera 9.27 security advisories @ SECUNIA (0% unpatched):

http://secunia.com/product/10615/?task=advisories

----

Netscape 9.0.0.6 (0% unpatched - but, now discontinued by Mozilla, so it WILL be vulnerable to things FF won't be now & in the future):

http://secunia.com/product/14690/

----

FireFox 2.0.0.14 security advisories @ SECUNIA (17% unpatched):

http://secunia.com/product/12434/

----

IE 7 (latest cumulative update from MS) security advisories @ SECUNIA (33% unpatched):

http://secunia.com/product/12366/

----

MOST OF WHAT YOU SEE OUT THERE NOWADAYS ONLINE? Javascript + IFrame exploits... so, getting a secure browser, & creating "exception sites" for running IFrames &/or JavaScript, & for those exception sites ONLY, is a GOOD idea (sites like online shopping &/or online banking come to mind - they OFTEN DEMAND YOU USE JavaScript/Cookies etc. so on those sites, use them, since you are forced to... all others? TURN IT OFF, & BE SAFE(r)).

----

NOW - As far as "std. 'oldschool' binary infectors"?

If apps were coded to say, check their filesize &/or CRC-32 @ startup? They can "self-check" themselves for infestation/infection!

I did a "Dr. Who" (famous science fiction series, longest running there is iirc in fact) that does such checks (& in all of my freeware apps this takes place to protect users) that does this, here:

----

APK Doctor Who ScreenSaver 2008++: review:

http://www.drwhodaily.com/community/index.php?showtopic=386&st=0

(Multithreaded 3D animated screensaver that self-checks itself vs. viral infestation via filesize & crc32 checks @ its startup)

----

&, it works!

E.G./I.E. -> The screensaver will tell you if it has had its CRC-32 altered, OR, its filesize & warn you + shut itself down, so you are aware of it & so it does not continue to "spread-the-disease"...

(IF every Win32 PE app did that, we'd probably have LESS binary infector/attaching std. viruses imo @ least, & that of others, since my idea for this was "modded up" HERE @ SLASHDOT no less, in last year's "CODING FOR DEFCON" thread, see below):

----

APK CODING FOR DEFCON POST (technique modded up as "technically interesting" etc. et al, for coding securely):