Slashdot Mirror


User: dark-br

dark-br's activity in the archive.

Stories
0
Comments
477
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 477

  1. Something wrong on HDTV via GNU Radio · · Score: 0

    ...freedom to save, copy and even distribute copyrighted materials.

    Freedom, save, copy, distribute and copyrighted on the same sentence? You must be kidding!

    How many time to DMCA striking on that? My money is on a week.

  2. Can't wait! on U of Wyoming Fingerprinting All P2P Traffic · · Score: 1
    The students should really set up their own, internal P2P network.

    Wow, just imagine. Someday everyone will have a P2P network of their very own! Er, wait....

  3. New /. slogan on Star Bridge FPGA "HAL" More Than Just Hype · · Score: 1

    News for the curious. Stories that you cant really find.

  4. Inter-Game warfare? on Warcraft 3 Expansion Beta Signups Announced · · Score: -1

    Wanna know what I'm looking for?

    A patch that allows a WarCraft III player go up against an Age Of Mythology player. Better yet, make some sort of a patchwork quilt where you've got Sims Online to the north, Command & Conquer to the south, EverQuest to the east, and WarCraft to the west.

    THAT would be fun. :)

  5. To many backs to scratch on Buy Broadband From Your Neighbor · · Score: 0

    Who gets to warrant the privacy of data? Telecoms companies are bound by some pretty strong laws to protect the privacy of the voice and data traffic they carry - home supported APs wont

    How gets it now? Are you really sure about your privacy?

    Anyways it would be to many backs for the gov ppl scratch. Today they only have to fill a couple of big pockets to get what they want ant thats much easyer then filling lots of small pockets.

  6. The US Patent Office website violate this patent. on NCR Patents the Internet · · Score: 4, Funny

    http://www.uspto.gov/ appears to violate all those patents itself !

  7. Old, very, very old news on Unreal Security Hole · · Score: 1

    Date: November 26, 2002
    Released: January 16, 2002
    Version: All up to current.
    Bug: Server status port replies to spoofed UDP packets
    with large amount of data.

    Affected Games:

    Quake
    Quake 2
    Q3: Arena
    Half-Life
    Counter-Strike
    Sin
    Soldier of Fortune
    Daikatana
    Unreal Tourn.
    Quakeworld
    Unreal
    Rune
    Gore
    Tribes
    Tr ibes 2
    Serious Sam
    Serious Sam 2
    CC: Renegade
    Global Operations
    Jedi Knight 2
    Battlefield 1942
    America's Army
    Unreal Tournament 2003
    Return to Castle Wolfenstein
    Medal of Honour Allied Assault
    SoF2 Double Helix
    SoF2 Double Helix Demo
    Alien vs Predator 2
    NeverWinter Nights
    V8 Supercar Challenge

    UDP is a connectionless protocol of which the source ip and port can easily be spoofed. If you've read the introduction, you can probably
    see where I'm going with this.

    The BF1942 status port will reply an amazing amount of requests, and although I have only personally tested this to 50 kbytes/sec, I
    dont see any reason why you couldn't go even higher.

    When these requests are received, the reply is sent to the source host which, in this case, we have spoofed. This causes a huge packet flood
    to your victim, therefore you now have your DoS.

    When tested, a single upstream of 4 k/s to the BF1942 server yielded over 550 k/s being sent to the victim host. When the victim's host
    receives these packets on a UDP port which is open (commonly found to be 135 (MS/DCE RPC), 53 (DNS), and so on), the downstream to that connection will be flooded. If you sent to an unreachable port on the victim's host, the victim's stack will respond with "Unreachable"
    responses which will also flood their upstream.

    A personal firewall will such as ZoneAlarm will not prevent this DoS, as it is simply a flood of information being sent directly to the victim's computer. To stop this DoS from reaching the victim, the port you specify would have to be blocked before reaching their system. Ports you would find particularly useless would be ones that are commonly blocked by ISPs before reaching the customers: (139/NetBIOS, and so on). A firewall will only prevent the victim from responding with ICMP Unreachable packets.

    * Packets can be sent steadily, no wait time needed for refresh.

    This is an attack that can easily flood any system slower than the game server, and do it anonymously because the UDP packet source is spoofed to that of the victim. This is very similar to the "smurf" attack that was used in the late 20th century. =)

    The attack does not only affect the bandwidth of the host and the victim, but it also tends to eat up a nice chunk of memory and CPU power on the server.

    This low amount of required upstream would allow a simple modem user to send a hefty DoS to a T1 or higher.

    Due to the fact that Battlefield 1942 servers tend to require a lot of bandwidth to operate, you are very likely to find that nearly any server will have more than enough bandwidth to handle the task. EA has many of their servers hosted on OC3 lines.

    In many ways, this exceeds the severity of the smurf attack method.

    Example theory of risk:

    T1 (1.54 mbps) FULL DoS:
    1 server needed @ ~220 k/s or more (a 20 player server will do).
    1 - 2 k/s* upstream needed from attacker (~14.4 baud modem)
    A single user dialed up at 14,400 bps can topple a T1.
    A single dial-up at 56k (31.2kbit up) could DoS 2 T1s at a time.

    Worst of all Proof-of-concept code is at the wild =/

  8. Conflict of interest for MySQL? on Trail of Tears: MySQL, ODBC, & OpenOffice 1.0 · · Score: 2, Insightful

    I'm not sure it's fair to query MySQL ABs role in this - did you try accessing Postgres, Interbase, SAPDB, Sybase, MSSQL, Oracle... through OO with unixODBC? Did they work?

    Whilst unixODBC sort of works, I've never had much confidence in it - strikes me as being very much the last resort when every other alternative has been tried. In your favour, the MySQL ODBC driver isn't particularly robust - seems to need a number of workarounds to get reliable access from Access (pardon the pun).

    I'd also query the quality and reliability of OOs external database support - I've consistently failed to get any database access via JDBC - works fine from my own Java code but never via OO. The documentation was also non-existent last time I looked.

    > that secret being the fact that hidden away inside,
    > completely unknown to most OpenOffice users, is a
    > user-friendly front end for databases

    User-friendly? McCreesh was definitely smoking something if he wrote that

  9. Re:Neutralizing the computer's advantage on Humans Hold Off the Machines... For Now · · Score: 1

    Bah! Just use a hammer!

  10. Soon, in a theater near you... on Humans Hold Off the Machines... For Now · · Score: 1

    The year is 2003. The world is being taken over by chess playing robots. Our only hope is one man: Garry Kasparov (played by Arnold Schwarzenegger... A tough sell, I know). He has to control his childish temper as he takes on Deep Blue, Deep Junior, Deep Fritz, and (We're In) Deep Shit. Sure, they look like sissy beige boxes, but they're tough. There will be no time to pout, no leaving in disgrace; every move is on the clock (so to speak). In the final scene, Kasparov beats Deep Blue to a pulp with a Louiseville Slugger. So much for strategy! Astalavista baby!

  11. What�s wrong with spam? on Aggressive Email Filtering Blocks Political Debate · · Score: 2, Funny

    Without spam, how else would I be able to sit home every day and make $1,000 a week watching TV while playing with my 12 inch penis?

  12. There�s no DVD... on Warner Brothers Announce The Matrix: Special Edit · · Score: 2, Funny

    Neo: There is no DVD?
    Warner Bros boy: Then you'll see, that it is not the DVD that rots, it is only yourself.

  13. OMS and RCS for dummies on Updated Information On Columbia Shuttle Tragedy · · Score: 3, Informative

    The Space Shuttle OMS engines provide the thrust to enter and exit low-earth orbit, and allow adjustment of the altitude and minor inclination changes while on orbit. The two major orbital operations, orbit entry and deorbit, are made with the two OMS engines. On-orbit propulsion thrust is also available for rendezvous maneuvers and altitude changes using the OMS engines with attitude control from the RCS thrusters. While attitude control and close-proximity maneuvers are provided principally by the RCS, the OMS can augment these operations with both fuel and thrust since both the OMS and RCS use the same fuel and oxidizer.

    The primary OMS/RCS structures are the forward RCS section and the two OBS/RCS pods in the aft section which contain the two OMS engines and RCS thrusters. The two OMS/RCS pods on the aft fuselage contain the OMS engines, RCS thrusters, fuel, pressurization system and associated distribution and control systems.

  14. Hypocrisy! on Battlefield Medkits Improve · · Score: 1

    from the article:

    Obviously, the hope is that they will save a lot of lives.

    What about not fscking shooting them at first place?!

  15. Hostnames... on Asterix and Mobilix Redux · · Score: 2, Interesting
    How long til they start bitching about hostnames? I guess im not the only one to use obelix.mydomain.com or asterix.mydomain.com.

    America, home of the free (and of DMCA, RIAA etc)

  16. R u sure? on Who Owns Your Digital Media? · · Score: 1

    Public domain music must be played and recorded by not so public domain artists and recording companies. It the same for the films. Maybe the Gutenberg stuff u can have freely.

  17. UFOs, maybe, maybe not... on SOHO Strikes Back · · Score: 2, Redundant
    ...in the sense of unidentified objects. A few arguments pop into my small amateur astronomer mind:

    It might be some dynamic physical or electric behaviour in the CCD or optics. The hardware is a few years old, after all, in extreme conditions. Might be water condensating on lenses, might be reflections from ice crystals, might be obscure electric charge dynamics on the CCD.

    SOHO is located in one of the 5 Lagrange points where it stays at same relative position with both Earth and Sun. Since this is an exceptional point, some space garbage such as rocks or space suit gloves might get stuck in the vicinity of the (unstable) point for some time.

    UFOs, as flown by some extra-terrestial intelligent beings, might generally be rather small objects. Space is big. SOHO's cameras do not have extremely good resolution and any visible object would have to be either enormous, very bright, or somewhat close to SOHO (and Earth), but between SOHO and Sun. Somehow that wouldn't seem to make much sense.

    Similar bright objects have not been observed from Earth based observatories, which would mean that it's a local phenomenom to SOHO. This would hint towards the first two possibilities above.

  18. Re:SOHO on SOHO Strikes Back · · Score: 0, Flamebait

    Not really very amazing at all. UFO means unidentified. NASA probably see thousands of UFOs a day, but since they're probably just rocks or something, there's no reason to get all excited about a few objects that you found someplace where you expected you would find nothing.

    Supposing this isn't some stupid scam, there's no doubt a simple explaination for what they've seen. They just probably aren't skilled enough to explain it, so their imaginations are running wild. /me puts on a tinfoil hat on to protect themself from the programming rays put out by the government that they learned to produce from the Du'horti that they learned from the Ma'khal that they learned from the J'dar that are really in control of us all!

  19. This is inside... on MS SQL Server Worm Wreaking Havoc · · Score: 3, Informative
  20. Voyager Alpha Force, that�s it on MS SQL Server Worm Wreaking Havoc · · Score: 1

    Its human controlled through Internet Relay Chat (IRC) communications. The bots are set up on a password-protected IRC channel, where they monitor any conversations taking place. A DDoS attack is launched when an attacker logs onto the channel and types in a command, which is then recognised and acted upon by the bots. Affected servers will then scan netblocks for other vulnerable SQL servers on port 1433, and will try to log on and run the malicious code.

  21. EMacs... on JWZ Reviews Video on Linux · · Score: 5, Funny

    All that said, if you dont like it the way it is, break out your EMacs, and Write something better, otherwise, quit bitching!

    But i was sure EMacs has its own built in movie player :P

  22. md5sum anybody? on Mission: Infiltrate the P2P Network · · Score: 1

    Shall we hash now or shall we hash later?

    Groovy baby YEAH! :)

  23. Except you don�t have nmap on Sprint DSL's Security Hole Easy As 1,2,3,4 · · Score: 1

    nmap -sP xxx.yyy.*.*

    Voila! A loooot of IP address to play with...

  24. So can I or anyone else on Sprint DSL's Security Hole Easy As 1,2,3,4 · · Score: 1

    And i would not use them for maintenance...

  25. Very usefull - NYT Random Login Generator on AT&T Identifies Widespread Security Hole - In Locks · · Score: 1