Slashdot Mirror


User: ColPanic

ColPanic's activity in the archive.

Stories
0
Comments
12
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 12

  1. Re:Im ready.. on First Embryonic Stem Cell Clinical Trial Imminent · · Score: 0

    Hey, aren't you that guy who drives around downtown with the nut job jesus quotes on his truck, and the aborted fetus pictures?

    Mmmm.. embryos.

  2. Re:Nobody's posting anything interesting in reply. on First Embryonic Stem Cell Clinical Trial Imminent · · Score: 0

    Wouldn't that depend on the rate of destruction? MS is an extremely long term disease, so these sort of treatments seem likely to be benificial, even if they deteriorate again over time.

    -T

  3. Yahoo Go? on Yahoo Launches Dashboard · · Score: 0

    Why would they name it after a cheap foreign car?

  4. Greeeat. on Mambo CMS Dev Team Splits · · Score: -1, Flamebait

    Well shit. I just built a pretty important site of ours on Mambo.

    This really is the problem with using open source... but, I guess the price is right.

  5. lemme get this straight. on Preparing for the Broadcast Flag? · · Score: 1, Insightful

    The guy asks you a computer question, and you suggest he moves to a different country? Bunch of fucking trolls.

  6. Re:Way nicer than they could have been. on First Mobile Phone Virus Discovered · · Score: 2, Funny

    Well Christ fuck.... I'm unemployed right now so perhaps I should just write a better one! Ever since watching Lawnmower man I've had a penchant for seeing all the phone in the world ring at once.

    Is there some group/agency I could call that would let me do this without arresting me and putting me in a box forever?

  7. Way nicer than they could have been. on First Mobile Phone Virus Discovered · · Score: 2, Interesting

    Symbian (and MSFT once they get their act together) will almost certainly bring baaaaad virii to the phone networks. I have done a lot of work with Symbian phones, and SMS but I'm not a script kiddie/virus guy, but I'm gonna tell ya how you SHOULD have done this. (give me some props if you actually do it).

    There was(is) a bug on some of the US based sms GSM handsets (may be worse, but I only know the US).... The bug was that sending a malformed binary SMS message to a specific SMSC would hang the queue for the device.... you just wouldn't get any more SMS messages to your phone (until they went in and poked it out by hand)

    You should have exploited the fact that all phones now use SMS, and most have either Symbian or Java... Written a propagation routine that read the addy book, propogated to all of those, and then sent the sender a malformed message of death!

    The user would get a message from his buddy saying "install", and after he did, he;d be fucked before he could stop it/call his friends. MUCH higher propagation levels no?

    Second better plan to the one they did:
    Trogan a java game (since you can get at the code so easy)... put up some services on various operator networks.... like Voda Live, or the 88k different ringtone providers etc... and then just have all infected phones text their premium rate servies all day long.

    Not my game plan personally, but IT IS COMING! all the things I said today can happen TODAY!

  8. Microsoft Bot Net. on Infected PCs for Rent · · Score: 1

    Bill Gates has some nerve to charge $1000/seat to organized crime :)

  9. Re:Canada, here I come!! on U.S. Considers Microsoft Passport as National ID · · Score: 1

    Didn't we buy Canada recently? Actually, if you implemented borders using passport, all Canada would have to do is register for a site id, and get a country side certificate! Ease of use!

    (A joke, of course)

  10. Re:Reverse Engineer? on My.MP3.com releases Beam-it Beta for Linux · · Score: 3

    We have been trying to do the reverse engineering here today. They seem to have a pretty good verification process. Heres what we have figured out.

    The client connects to a text command interface on cdver.mp3.com:8094.

    User authentication is done in two parts first

    HELO mail=email@ddr ver=1.00 cver=LINUX100 sern=XXXXX

    The server provides the sern number on connection.

    Then:
    AUTH meth=md5 pass=XXXXXXXX

    Presumably this is an md5'd password for the user.

    Then to lookup the ID of a CD in their database

    MDID time=cdlength tkof=list,of,track,offsets

    This information is available publicly from CDDB.
    The MDID command will return an "mdid" number, used to identify the CD.

    Now for the CD verification process

    VFCD mdid=mdidnumber

    This starts a verify for the CD
    The server will then send a list of of requested track data in the form

    331 bits=16 trk=11 chnl=stereo nsec=7 encd=pcm size=8232 rate=22050 sect=49855

    This request is repeated for a number of tracks, in apparently random order.

    The client then needs to get this information off the CD, and send it up.

    RVDT trk=11 sect=49855 nsec=7 rate=22050 chnl=stereo bits=16 size=8232 [followed by 8232 bytes of data]

    So it seems that the only way to authenticate the CD is to be able to answer any query about the data on the CD, which would mean that you aready have the CD....

    So after looking at this, I'm fairly convinced that MP3.com should not only win their lawsuit, but that they seem to be in the right, having taken due diligence to ensure that someone does in fact have the CD before handing over access to them.

  11. Misspellings on Plan for Privately-Funded Moon Base · · Score: 1

    Im fairly sure that a group talented enough to build a moon base would also be talented enough to run a spell checker on their web page. This has to be a hoax.

  12. CTI under Linux on Ask Slashdot: Linux and Telephony · · Score: 1

    Slowly it is happening. I develop IVR's and have started to see a few packages forming for linux telephony.... If you have the bucks for a decent telephony card Natural Microsystems(www.nmss.com) sells some fairly decent stuff. They also recently released their CTAccess SDK source code for linux, pretty cool! There is also a site (www.linuxtelephony.com) that you can read all about stuff, and I think the CTAccess source is on there..