Syslog being down for seconds is not obvious, on the other hand it's very easy to say... inject into syslogd to hide your modifications in real time. I hook libc functions using trampolines to write LD_PRELOAD rootkits myself. I just don't get the point, it seems like a really shitty half-measure.
It doesn't really make logging more secure, you can easily just modify the entire log. Plus if someone's modifying your logs they have root permissions on your machine and then you cannot trust your system, they can put hooks on the log read to just hide certain entries if necessary.
The only real solution is to NOT trust your own system - send all the data to a remote syslog server with no other services running.
Why take a half-measure when you should have gone all the way?
This is exactly what to do! Anyone ever reverse engineered anything? You load the app up into your disassembler and, well, there's a nice giant pile of useless assembly. Search around for some things of interestes (strings, function calls, etc) and breakpoint on their use. Using this will allow you to grasp whatever part of the program you want (ex: the key generation function:))
Oh, ok, so, if I write an app that does a video log of the screen for 10 minutes after you type in your bank's URL, then what happens? OTPs are the only real solution here.
Disable UAC, make your account administrative. Microsoft hasn't yet came up with a decent, fast, easy way for people to be secure. Maybe they should talk to the ubuntu people, they seem to have done an excellent job:)
Indeed. In my tipical browsing session, I have so many tabs, they're hard to manage (so, I use tab mix plus. I can have it use multiple rows instead of a scrolling tab bar, I also have it so I can use my mouse wheel to switch tabs.) I usually have a few windows open too. My machine only has 256 MB of ram, but, I've never had a problem on Gentoo, Ubuntu or even XP.
but they fail. Google forced the industry forwards in this aspect, remember when hotmail accounts had 5 MB of storage and yahoo, 10? Well, gmail dropped us all with a gig, and now look, everyone else has done better then them. We'll just see where this ends up, I hope they do the same as yahoo and forget the storage meter altogether... though I do like bragging about how much of my gmail inbox I've used.:You are currently using 543 MB (18%) of your 2993 MB."
I've said it before and I'll say it again: I have no problem with google knowing absolutely everything about me... as long as they let me search it all.:)
Nah, on most cracked CDs you don't even have to enter it cause they're slipstreamed... you also don't have to do any activation cracks because they're enterprise... oops:)
heh, this is a different thing, this guy is obviously interested in making his own POS anyways... in your analogy it'd be more like torrenting the movie.
The problem with this is that for everyone with google and 30 mins or less, Adobe Photoshop can be free. People won't stop using Photoshop until they have to actually pay for it... at this rate, that should be never. (well, atleast until they create the web based version)
Slashdot Mirror
Syslog being down for seconds is not obvious, on the other hand it's very easy to say... inject into syslogd to hide your modifications in real time. I hook libc functions using trampolines to write LD_PRELOAD rootkits myself. I just don't get the point, it seems like a really shitty half-measure.
Your hashes don't have to match anything. This does not apply. You can just recreate the entire syslog database.
It doesn't really make logging more secure, you can easily just modify the entire log. Plus if someone's modifying your logs they have root permissions on your machine and then you cannot trust your system, they can put hooks on the log read to just hide certain entries if necessary. The only real solution is to NOT trust your own system - send all the data to a remote syslog server with no other services running. Why take a half-measure when you should have gone all the way?
Not to mention IntelliJ is an interolerable piece of shit compared to Eclipse.
Try a modern tiling WM, Xmonad is quite nice :)
Get a better crack. http://warez-bb.org/ should be able to help you
This is exactly what to do! Anyone ever reverse engineered anything? You load the app up into your disassembler and, well, there's a nice giant pile of useless assembly. Search around for some things of interestes (strings, function calls, etc) and breakpoint on their use. Using this will allow you to grasp whatever part of the program you want (ex: the key generation function :))
??? Maybe.
Oh, ok, so, if I write an app that does a video log of the screen for 10 minutes after you type in your bank's URL, then what happens? OTPs are the only real solution here.
yes, that's it slashdot crowd, I don't like to admit it, but, I usually use GNU nano for most of my text editing needs.
Disable UAC, make your account administrative. Microsoft hasn't yet came up with a decent, fast, easy way for people to be secure. Maybe they should talk to the ubuntu people, they seem to have done an excellent job :)
or you could just crack the MD5 check itself, since you are modifying the program anyways, seems kinda pointless.
Hah! As far as this "makes it easier to trojan" nonsense goes, take any closed source app + a "binder"... seems even easier then hacking the source.
Indeed. In my tipical browsing session, I have so many tabs, they're hard to manage (so, I use tab mix plus. I can have it use multiple rows instead of a scrolling tab bar, I also have it so I can use my mouse wheel to switch tabs.) I usually have a few windows open too. My machine only has 256 MB of ram, but, I've never had a problem on Gentoo, Ubuntu or even XP.
but they fail. Google forced the industry forwards in this aspect, remember when hotmail accounts had 5 MB of storage and yahoo, 10? Well, gmail dropped us all with a gig, and now look, everyone else has done better then them. We'll just see where this ends up, I hope they do the same as yahoo and forget the storage meter altogether... though I do like bragging about how much of my gmail inbox I've used. :You are currently using 543 MB (18%) of your 2993 MB."
Meh, http://warez-bb.org/ it's genuine enough for me. (TM)
Heh, I thought that was more characteristic of reddit, not digg.
But what about the atheists... meh, let's go assemble a team to kill 'em all!
I've said it before and I'll say it again: I have no problem with google knowing absolutely everything about me... as long as they let me search it all. :)
Nah, on most cracked CDs you don't even have to enter it cause they're slipstreamed... you also don't have to do any activation cracks because they're enterprise... oops :)
Then just run another browser dipshit.
heh, this is a different thing, this guy is obviously interested in making his own POS anyways... in your analogy it'd be more like torrenting the movie.
Nah, maybe LFS.
The problem with this is that for everyone with google and 30 mins or less, Adobe Photoshop can be free. People won't stop using Photoshop until they have to actually pay for it... at this rate, that should be never. (well, atleast until they create the web based version)
Heh, I'd warez SimCity 4 for linux too.