Slashback: Streamend, Stego, Patches
Getcher hot streams while they last ... jmoffitt writes: "In his post to the Vorbis list, Ciaran announced that the Ogg Vorbis BBC streams of Radio 1 and Radio 4 that we've enjoyed since early November would go offline as the test is ending. Everyone is encouraged to send their encouragement for these streams to continue to webweaver@bbc.co.uk. Also, as a special treat, the Radio 4 Ogg stream has been extended a week - just enough for all to catch the first episode of Lord of the Rings on Saturday at 1430 GMT."
Please mind the people interrupting your privacy. Matt Clauson writes: "Discussion list for the Qwest privacy issue and possible protest action has been set up -- send an email qwest-action-subscribe@dotorg.org to subscribe to it."
Plug, plug, plug ... timekillerj writes "Well it looks like AOL jumped right in and fixed that pesky hole. We can all go back to speculating how insecure it is now. An article on Yahoo has more info, including a short debate on w00w00 disclosing before getting a response from AOL."
Backstepping by any other name ... dagoalieman writes "It appears the FBI has decided that MS's patch is sufficient. According to CNN, they announced this earlier today in a rather quiet fashion. While MS may see it as good news, I think the fact that the hole is coming back to public attention just blackens the eye a little more for them. It will be interesting to see future ramifications of the government getting involved in these issues, too..." It can't look good when your company's software is called into question by some of your largest customers.
Nope, still don't see any. Niels Provos writes: "I just updated http://www.citi.umich.edu/u/provos/stego/usenet.php to reflect the final results from our search of hidden messages in USENET images. We did not find a single hidden message.
I also released a new version of stegdetect.
The disconcert cluster that we used for the dictionary attack contained more than two-hundred workstations, mostly from CAEN (that is the computer aided engineering network at UMich). The peak performance is comparable to 72 1200 MHz Pentium III machines :-) ...
Below my mail to the cryptography mailing list.
------- Forwarded MessageThanks for the update, Niels!
From: Niels Provos <provos@citi.umich.edu>
To: cryptography@wasabisystems.com
Subject: Stegdetect 0.4 released and results from USENET search available
Date: Fri, 21 Dec 2001 12:16:14 -0500
Sender: provos@citi.umich.eduI just released Stegdetect 0.4. It contains the following changes:
- Improved detection accuracy for JSteg and JPhide.
- JPEG Header Analysis reduces false positives.
- JPEG Header Analysis provides rudimentary detection of F5.
- Stegbreak uses the file magic utility to improve dictionary
attack against OutGuess 0.13b.You can download the UNIX source code or windows binary from
http://www.outguess.org/download.php
- -----
The results from analyzing one million images from the Internet Archive's USENET archive are available at http://www.citi.umich.edu/u/provos/stego/usenet.php.
[...]
After scanning two million images from eBay without finding any hidden messages, we extended the scope of our analysis.
This page provides details about the analysis of one million images from the Internet Archive's USENET archive.
Processing the one million images with stegdetect results in about 20,000 suspicious images. We launched a dictionary attack on the JSteg and JPHide positive images. The dictionary has a size of 1,800,000 words and phrases. The disconcert cluster used to distribute the dictionary attack has a peak performance of roughly 87 GFLOPS. However, we have not found a single hidden message. [...]Comments and feedback are welcome. We have an FAQ at http://www.citi.umich.edu/u/provos/stego/faq.html"
Egg Troll, WIPO Troll, The Turd Report, Klerk, and anyony I've missed!
Find it at goatse.cx!
APPROVED FLAMES FOR USE BY NIGGERS
There are only 6 known nigger flames, and you will limit yourself to
any of these:-
1/ Muh dick.
2/ Us niggers only fail everywhere because of racism.
3/ You racists are a tiny minority.
4/ You racists are powerless losers.
5/ I'm going to kill you muthafucka.
These are the only flames allowed to niggers, and this selection also
describes every flame ever attempted by any nigger, anywhere. If you
think you have thought up the elusive "seventh nigger flame", you may
contact the AFN WebMassa and request its inclusion. Don't worry, he
isn't holding his breath.
Niggers are allowed some interpretative latitude in complying with the
above list. For example, "I beez fuckin white pussy, heh heheheh,
white wimminz loves a nigga" is an AFN-Approved variation on Flame
Number 1.
Posting in illiterate ebonics is encouraged. Michael Jackson noises
are permitted. For instance, Flame Number 1 with Michael Jackson
noises would read:-
hoo! hoo! Muh -- hee! hee! - Muh Dick! uh! uh! hoo! hee!
Nigger posts should ideally be no more than 2 to 3 lines in length.
CLAIMING TO OWN THE GROUP
After you have posted 2 or 3 times to the group, and been humiliated,
all niggers are required to state that they "ownz" or have "trashed"
the group. This is mandatory. All niggers are required to do this.
Claiming to own the group will make your white masters happy, and they
will smile upon you warmly. Niggers doing this are required to fail
to notice that, if they weren't here, none of us would be.
USE OF SOCKPUPPETS
Niggers may not hold a conversation with other niggers on AFN. If you
wish to do this, create multiple sockpuppet IDs and use them to
fabricate an extended conversation with yourself in which you applaud
your own posts.
If you are a socially unsuccessful nigger, you should stay in on a
Saturday night and construct a lovely pretend world full of imaginary
friends who think you're very cool and witty.
USE OF HUMOUR
Niggers are strictly banned from posting anything humorous, as niggers
have no sense of humour. If you have posted something you think is
funny, but nobody agrees with you, and if you want an "attaboy" from
other niggers, you should congratulate yourself on your own post via a
sockpuppet.
Niggers should at no time post hundreds of acute and perceptive jokes
about whites. Instead, niggers should wait until a human poster
provides such a list, and then laboriously change the word "nigger" to
"cracker" throughout the post before reposting it.
Niggers should at all times conclude their posts with "LOL", "ROTFL",
or simply "bwahahahaha" to indicate that they think they have said
something funny.
Some niggers think it funny to mailbomb the WebMassa by staying in on
a Saturday night and laboriously posting 200 emails to him. The
WebMassa thinks this is pretty funny too, given that there is such a
thing as a "Block Sender" command, so niggers should do this
frequently.
WHAT TO DO WHEN YOU ARE GETTING YOUR ASS KICKED IN A THREAD
Niggers will deal with this by claiming that they have "won". Niggers
will also change the subject, leave the thread, or wilfully
misunderstand the humans who are humiliating them. Optionally, you may
alter or edit posts you are replying to, so as to enable you to retort
more effectively. Nigger SOP is to change the post so it says
something different.
UNLIKELY AUTOBIOGRAPHICAL CLAIMS
Niggers are obliged, on pain of a whipping, to invent "achievements"
in their allegedly wonderful nigger's life. We have a way here in AFN
of exposing nigger lies. We can tell when you're lying very easily -
simply put, if you're speaking, you're lying. This provides the humans
on AFN with a good belly laugh. You are therefore required to lie
about your life and achievements.
Approved lies include:-
- Having a math degree
- Not being a bus driver
- Owning your own home
- Having a job other than in a washroom or cafeteria
- Not being a racist yourself
- Being an erotic dancer (permissible because funny, though arguably a
"muh dick" post)
- Having ever read a book
- Being about to go to college
- Having ever paid for a meal without the use of food stamps
- Never having been to jail
- Not being a thief
- Never having raped anyone (female or homosexually)
- Claimed fluency in any foreign language (other than Ebonics)
REQUIRED ASSERTIONS FROM NIGGERS
All niggers will, on pain of a whipping:-
Claim that niggers are taking over the planet because of
miscegenation. You will post this claim as often as you wish, but in
any case at least once. You will disregard the opposite examples of
the Americas, the Middle East and Malaysia as evidence that this never
happens. You will conveniently forget that the inferior race is always
exterminated, or when there is no clearly inferior race (Malaysia),
they self-segregate.
Claim that the ancient Egyptians were niggers despite the fact that
Egypt is a Mediterranean country whose inhabitants arrived from
Mesopotamia. Optionally, niggers may also claim that King Arthur was a
nigger because Africa was in Roman Empire. You may also claim that
Bill Clinton is black because there are niggers in America (and you're
on stronger ground with this one, given his behaviour).
Claim that everything was invented by niggers, including the moon and
atomic fission. AFN rules require you to deny vigorously that niggers
only invented the spear and cannibalism. AFN rules also require
niggers to attempt the theft of as much history as possible in order
to refute the otherwise embarrassing matter of their never having
achieved anything.
Overlook the pivotal role of niggers in enforcing and profiting from
slavery.
At no time admit that medical science recognises the difference
between whites, Asians, and niggers, and prescribes testing of new
drugs on all three before they can be sold. Niggers will at all times
maintain that, because it is possible to cross a Rottweiler with a
Labrador, they are in all respects the same. Niggers will assume that
all breeds of dog are indistinguishable from one another and will
behave similarly at all times. Niggers may optionally argue that,
because all three have four legs, a head, and a tail, and are
approximately the same size, a wolf, cat, and sheep are the same
animal.
encrypted data is much more random than a normal image... You can detect it because its too random...
One e-mail during the holiday's. Its's irresponsible to release the details without giving AOL some time first to fix it. I hope this hacking group gets sued for aiding people in using this hole.