Pank: January 2005 Archives

AVIcodec can detect the codecs of AVI, ASF & WMV, Real (.rm, .rmvb), Ogg (.ogg, .ogm), Mpeg-(S)VCD-DVD (.mpg, .vob) files

Test your Java Virtual Machine
Short URL http://testjvm.77bbs.com

test.iso is on NFS server
# mount -o loop test.iso /mnt
test.iso: Permission denied
Why?

Ans: because no "-o ro" assumes "-o rw",
if you don't have wirte permission on NFS, this problem occured.
try
# mount -o loop,ro test.iso /mnt

Skype for Linux 's configuration save in directory ~/.Skype/
e.g.
user pank in /home/pank/.Skype/
user root in /root/.Skype/

Running Windows Viruses Under Linux
An interesting article that test many viruses under Linux.

FreeBSD 4.11-RELEASE Release Notes

Funny Bill Gates pics from 1983
Sexy pose

Picasa is an excellent photo management program power by google.
Download

Unfortunately, Picasa doen't support Chinese now.

OpenOffice 2.0 Snapshot Builds 已經比舊版更相容於微軟的 Office, 但是仍有很大的進步空間.
若 OO 可以做到和微軟完全相容, 格式也不會亂掉,
誰還需要購買微軟的 Office?

I wrote 77 online dictionary plugin for IE and Firefox
Install page
Dictionary database from pyDict

Project Honey Pot is a distributed system of decoy email addresses website administrators can include on their sites in order to gather information about the robots and spiders spammers use.
We collate data on how addresses are harvested, distributed, and eventually spammed in order to understand the entire spam cycle.
My honey pot page

http://uranus.it.swin.edu.au/~jn/linux/explore2fs.htm
I fogot this tool name, I search "ext2explorer", but failed.
It's "Explore2fs", just make a note.

GMail messages are vulnerable to interception.
An attacker has only to transmit malformed test messages to himself,
and information left over in memory,
from previous messages destined for other people,
will appear with the test messages, in the attacker's inbox.
Sometimes, this information may include usernames and passwords...

Gmail maybe knew the problem and made some change.
I worte a malformed (From: <test@test.com) message to myself,
Click the message shows:
Oops...the system was unable to perform your operation.
Please try again in a few seconds

Microsoft Malicious Software Removal Tool
This tool scans for and cleans malicious software associated with the following security threats:
Berbew, Blaster, DoomJuice, Gaobot, Mydoom, Nachi, Sasser, Zindos

ref.
Microsoft AntiSpyware (Beta)
Dave's blog

Yahoo! released Yahoo! Desktop Search recently.
A firend reported it's not Chinese compatible now.

ref.
Google Desktop Search vs. MSN Toolbar
Copernic Desktop Search

Greylisting is a new method of blocking significant amounts of spam at the mailserver level
It's a good method but the mail will be delayed at first time with same "triplet".

ref. Whitepaper | Links to Implementations and Information

Virtual Tunnel(VTun) is similar to Softether,
even more powerful for Linux or FreeBSD.
To build VTun, needs following rpms
liblzo1
liblzo1-devel
bison or byacc (byacc build failed in my case, so I install bison rpm)
Working example:
Server config /usr/local/etc/vtund.conf

default {
  type tun;
  proto udp;
  compress lzo:1;
  keepalive yes;
}

s2 {
  passwd abcd;
  up {
   ifconfig "%% 10.10.0.1 pointopoint 10.10.0.2";
   route "add -net 10.10.1.0 netmask 255.255.255.0 gw 10.10.0.2";
   program /sbin/arp "-sD 10.10.0.2 eth0 pub";
  };
}

Client config /usr/local/etc/vtund.conf

default {
  type tun;
  proto udp;
  compress lzo:1;
  keepalive yes;
}

s2 {
  passwd abcd;
  up {
   ifconfig "%% 10.10.0.2 pointopoint 10.10.0.1";
   route "add -net 10.10.0.0 netmask 255.255.255.0 gw 10.10.0.1";
  };
}

Before run vtund, both client and server needs to load tun module (modprobe tun), then
Server run vtund -s
Client run vtund s2 140.117.53.147
(140.117.53.147 is server IP)

Result:
Server
tun0 Link encap:Point-to-Point Protocol
   inet addr:10.10.0.1 P-t-P:10.10.0.2 Mask:255.255.255.255
   UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
   RX packets:15 errors:0 dropped:0 overruns:0 frame:0
   TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
   collisions:0 txqueuelen:10
   RX bytes:1260 (1.2 Kb) TX bytes:672 (672.0 b)

Client
tun0 Link encap:Point-to-Point Protocol
   inet addr:10.10.0.2 P-t-P:10.10.0.1 Mask:255.255.255.255
   UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
   RX packets:8 errors:0 dropped:0 overruns:0 frame:0
   TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
   collisions:0 txqueuelen:10
   RX bytes:672 (672.0 b) TX bytes:1260 (1.2 Kb)

ref. Softether

A Mersenne prime is a prime number of the form 2^P-1.
There are 41 known Mersenne primes.

ref. GIMPS Home Page

Grid.org is a single destination site for large-scale research projects
powered by the United Devices grid computing solution
Current Project: Human Proteome Folding
Download the UD Agent

ref.
United Devices
Folding@home
SETI@home

Linux console shows something like "x.x.x.x sent an invalid ICMP type 11, code 0 error to a broadcast ..."
What's the problem?
Let's see kernel source net/ipv4/icmp.c

if (!sysctl_icmp_ignore_bogus_error_responses)
{
 if (inet_addr_type(iph->daddr) == RTN_BROADCAST)
 {
  if (net_ratelimit())
  printk(KERN_WARNING "%u.%u.%u.%u sent an invalid ICMP type %u, code %u error to a broadcast: %u.%u.%u.%u on %s\n
  NIPQUAD(skb->nh.iph->saddr),
  icmph->type, icmph->code,
  NIPQUAD(iph->daddr),
  skb->dev->name);
  goto out;
 }
}

It is because recieve ICMP bogus response,
to ignore this, add net.ipv4.icmp_ignore_bogus_error_responses=1 to /etc/sysctl.conf

http://www.isec.pl/vulnerabilities05.html
not exploit on my machine (Mandrake 10.1)
maybe only exploit under some conditions

ref. linux.slahdot news

ProxyPass allows remote servers to be mapped into the space of the local server

You have to enable mod_proxy during buid apache
e.g.
./configure --prefix=/usr/local/apache --sysconfdir=/usr/local/apache/conf \
--enable-module=so --enable-module=rewrite --enable-module=proxy

Example:
a FreeBSD server, WAN IP 140.117.53.147, LAN IP 192.168.0.1, with Apache 1.3.33
a Windows IIS server, LAN IP 192.168.0.6, Gateway 192.168.0.1

Example Settings 1: (all can connect iis.pank.org)

<VirtualHost 140.117.53.147>
  ServerName iis.pank.org
  ProxyPass / http://192.168.0.6/
</VirtualHost>

Example Settings 2: (restrict from, only 140.117.0.0/16 can connect)

<VirtualHost 140.117.53.147>
  ServerName iis.pank.org
   <Directory proxy:*>
   Order deny,allow
   Deny from all
   Allow from 140.117.0.0/16
  </Directory>
  ProxyPass / http://192.168.0.6/
</VirtualHost>

note: Setting ProxyRequests to off does not disable use of the ProxyPass directive.
ref.
Apache module mod_proxy
R-Proxy

Genuine Microsoft Software 是 微軟最新驗證正版 Windows 的嘗試
目前不是正版軟體仍可以下載更新軟體及加值軟體, 未來可能強制需要驗證才能進行更新與下載服務

裡面有一個加值軟體: Photo Story
我覺得很棒, 可以把照片串連成影片, 可加上音樂及配音
Download

bash trick: build-in method

A="abcd0123456789"
if [ "${A/1234/}" != "$A" ] ; then
  echo yes
fi

grep method

A="abcd0123456789"
if echo $A | grep -q 1234 ; then
  echo yes
fi

After I test, 1st method is 40 times faster then grep method

Ctrl + / Ctrl - or CTRL-Mouse wheel to zoom in / zoom out page
Press / to search
Ctrl-T to open new tab
Ctrl + Mouse Click to open URL in new tab
Ctrl-[1-9] to switch tab (Alt-[1-9] under X Window)
Type about:config in location bar for tweaking

My Firefox Extensions
All-in-One Gestures (Linux and Windows)
Auto Copy (Windows)
Context Search (Linux and Windows)
DragToTab (Linux and Windows)
Flash Got (Windows)
ieview (Windows)
Minimize to Tray (Windows)
Paste and Go (Windows)

ref. http://hemiolapei.free.fr/divers/mozilla.html

Microsoft AntiSpyware
Download
I just tried, it's very powerful.

ref. Microsoft Anitspyware First Iimpression

Gmail 又送了一些邀請函,
需要邀請函的人請留下 Email, 或 來信索取.
送完為止

Gmail released more invitations,
Post your Email or mail me for invitation.

http://gambas.sourceforge.net/
This project aims at making a graphical development environment based on a Basic interpreter,
so that we have a language like Visual Basic™ under Linux™.

Yesterday I upgrade my machines to FreeBSD 4.11-RC2

Machine 1: Celeron 633 with 256MB RAM
--------------------------------------------------------------
>>> elf make world completed on Wed Jan 5 21:58:57 CST 2005
(started Wed Jan 5 20:36:49 CST 2005)
--------------------------------------------------------------
Elapsed: 1:22:08

Machine 2: Celeron 2.6G with 512MB RAM
--------------------------------------------------------------
>>> elf make world completed on Wed Jan 5 22:51:40 CST 2005
(started Wed Jan 5 22:16:20 CST 2005)
--------------------------------------------------------------
Elapsed: 35:20

Machine 3: Pentium 4 1.90G with 512MB RAM
--------------------------------------------------------------
>>> elf make world completed on Wed Jan 5 23:23:22 CST 2005
(started Wed Jan 5 22:54:52 CST 2005)
--------------------------------------------------------------
Elapsed: 28:30

Conclustion:
Machine 2's CPU clock is faster then Machine 3's,
but Machine 3's build speed is faster, so the CPU cache is important.

http://slate.msn.com/id/2111610/

Eternal Sunshine of the Spotless Mind (王牌冤家)

Sideways (尋找新方向)

Hero and House of Flying Daggers (英雄、十面埋伏)

Bad Education (不良教育)

The Incredibles (超人特攻隊)

Tarnation

Metallica: Some Kind of Monster

Moolaade

Kill Bill: Vol. 2 (追殺比爾2)

Goodbye, Dragon Inn (不散)

Spanglish (真情快譯通).

Team America: World Police (環球特警組)

Collateral (FIRST HALF ONLY) (同行殺機)

ref. other best movies of 2004
http://www.time.com/time/bestandworst/2004/corliss.html
http://www.time.com/time/bestandworst/2004/schickel.html
http://www.appledaily.com.tw/template/twapple/art_main.cfm?loc=TP&showdate=20050103&sec_id=9&art_id=1488563
http://www.epochtimes.com/b5/4/12/27/n760505.htm
http://www6.chinesenewsnet.com/gb/MainNews/EntDigest/Showbuz/zxs_2004-12-27_521420.shtml

view statements could relpy different result depend on client origin
Example: private view and public view
query from public network ref. file db.test
query from private network ref. file db.test.private

view "public" {
    match-clients { !192.168.0.0/16; any; };
    recursion no;
    zone "." {
        type hint;
        file "named.root";
    };
    zone "test.com" {
        type master;
        file "db.qmio";
    };
};

view "private" {
    match-clients { 192.168.0.0/16; };
    zone "." {
        type hint;
        file "named.root";
    };
    zone "test.com" {
        type master;
        file "db.test.private";
    };
};

Note: to use view statements, all zones must be in views

Slate did a comparison of them and Copernic was the best (Grade A).

這真是好東西, 可遠端操控 Console
感謝 DarkKiller 提供的 Screen Shot
BIOS 畫面 | Linux 畫面 | FreeBSD 畫面
相關廠商 link
http://www.raritan.com.tw
http://www.aten.com.tw
http://www.pstek.com.tw
http://www.epanio.com.tw
http://www.accordance.com.tw

http://www.lostpassword.com/
http://www.rixler.com/

http://www.microsoft-watch.com/article2/0,1995,1747067,00.asp

舊版 Postfix-SMTP-AUTH-TLS-Howto
更新一些檔案, 步驟大至相同

Lunch atop a skyscraper
這張經典的照片攝於 1932 年, 上面那些工人真勇敢!

ref. ET Today 追追追報導

全球IPv4位址統計
全球IPv6位址統計