Butter + Margarine != Cheese

"Yes 4G on Linux is not a dream .. Final Part"

2011-12-02T17:46:00.001+08:00

Yeap it` s working since gctwimax code have been pushed to 0.3!!!

@yoonkit mention to me that Fikri have create the YES Installer which include customization for the Wimax Connection specificly bind to Yes 4g Network.. You can visit his website for further details

http://fikri.my/blog/yes-installer

19 Nov 2010 and today is 02 Dec 201..

Well it`s just a year and we get ourself a fine working driver.. Kudoz to alll

Twit2Bot via SMS

2011-10-15T11:13:00.002+08:00

Say for example in an unforeseen event, You are in a DMZ one , and have an external IP but only allowed inbound traffic from a certain tcp port :). No outbound traffic is allowed.

And you only stuck with an old phone that can only call and sms? What would u do in order to get an Internet?

The presentation here display how twitter can be useful to bypass certain internet restriction .

TwiT2Bot

Link to download tools:
http://www.mediafire.com/?g7fuhmewszwf8bd

lazy jumping techniques

2011-05-17T06:50:00.004+08:00

Just woke up few minutes ago and came up with some lazy shellcode skeleton idea. Using inline asm instead of casting shellcode as a function and execute it .

#include
#include
char shellcode[] = "malsmalasmalmalsa";
int main(int argc, char **argv)
{
__asm__(
"mov %ebp, %eax;
"jmp %eax;
);
}

Evading Antivirus Emulator using stealth meterpreter

2011-05-14T05:20:00.009+08:00

Synopsis

I'm a metasploit dog . Yup for the past 3 years of my life as a pen-tester junkie . there's not been a project that i test without using the whole bunch of metasploit framework junkie. The juiciest thing bout metasploit is the meterpreter . A fine payload act as a badass backdoor for any platform be it windows/java/php/linux. A fine backdoor .

However antivirus is also getting much mature for the pass years . With the improvement of certain technology such as Antivirus Emulator, generating a meterpreter payload while evading the antivirus detection may be quite hard.

Known technique to evade antivirus

1. Use metasploit's msfencode to 'pack' the backdoor:
http://www.offensive-security.com/metasploit-unleashed/Antivirus_Bypass

2. Use custom loader:

http://www.coresec.org/2011/04/22/execute-metasploit-payloads-using-shellcodeexec/

In this slides i`m presenting a new alternative way to evade antivirus emulator simply by passing an input or an argument . Our objective here is to create a backdoor that evades an antivirus detection .

Special thanks to sk, pokleyzz and the rest of the crew.

Download slides here. http://www.mediafire.com/?d95c35ax90k7u6g

Yes 4G on Linux is not a dream .. Part2

2011-04-29T10:54:00.022+08:00

[Updates]
I was planning to write this post earlier but my workload piles up like a bad case (trainer/pentest/business proposal blax3) . But strange enough i have time to update myfacebook/twitter/kpop -addiciton instead of dwelling in codes. For that dear reader, i apologize. Disclaimer what i wrote is something I understand from base on my own observation it may be wrong or it may be right.

Remember previously I told that if we have the NSPID correctly the driver would work well? It turns out i`m wrong 720 degree . A fail is a fail but no doubt it helps me understand how wimax really work well. In brief if you really want to understand the whole procedure of a[ wimax network architecture read the tech spec from wimaxforum T31 , T32 , T33 .

In Brief

A Wimax Network Model Reference model courtesy of juniper

Let's move on to the technicality part of our Yes4g Dongle Specs:

now the driver for gctwimax 7205 is available on google codes. but the major problem is in the Wimax world every driver information is unique to it's NSP ... Any Wimax provider may use the same chipset but the logical information inside it for authentication may vary/diff from others.

Since the information that we have is just only the tech specs from wimaxforum and the current driver which is available at google code. So we dig inside our own Yes directory.

which actually contains a lot of useful information such as our NSPID , NAI, and everything else .

After we found our initial information , we try to understand how Yes4G Network Connectivity works by sniffing it. For this activity we were using Usblyzer to sniff it. A generic shortcut to usb sniffing ..

In: Data that the Device receive from buf
Out: Data that the Device send to buf

So we going to divide our sniffing from a working drivers into two segments . Initatializing Device, Network Authenthication.

Initialization Part1

So what actually happens when u lunch the Yes4G Connect Apps?
Attach here is the link a USB Sniffshot : http://www.mediafire.com/?vu2eae78lu4gaxy

In the buffer what happen initially .
The device will write to the buffer the code 03 12 00 06 01 01 00 00 . This is actually a code to call the device to start extracting the cert information into the device. Now the garbage data that u see that i have highlighted in red is actually the cert information to connect to the yes4G APN . the function call is define in protocol.c

But the actual extracting is being handle by wimax.c starting from line 773

After the certs have been extracted , now the buffer will be fill with 00 06 00 00 telling the device to turn on the RF Signal ON or in other words starts scanning this is define by protocol.c line 696..

After radio mode is turn on , config file will be read by nwsettings inside the Yes Application ( I think so) and the device will send a code into the buffer to search for the Yes Network.

Now that's number one issue overhere. If u refer to my previous post our Linux driver didn`t detected the Yes Network coverage. Now let's analyze why it cannot found in the first place.

What happens actually? http://www.mediafire.com/?qgduh3zmcwyco6a the gagal file..

Check at URB75 on both files we found out the buffer is slightly different

Notice the Sub1 string and the size of the buf is way too different between linux and win drivers.

to cut short the story What happen during the NAP Scanning is can be found in wimax.c line 815 the scan loop function

If u look at the code it try to fill the buffer with a function call fill_find_network_req which actually located at protocol.c line 755

SO u see the linux driver will fill the buffer wit this code

03 12 00 06 01 06 00 00 00 00

where the 4th byte is actually the size of the parameter which is 6

If we look ath windows driver the size of the parameter is slightly larger which is 0C (12 in Dec)

01 0D 00 0C 02 D2 03 00 00 40 D4 04 53 75 62 31

To proceed from here u have to options two hacks. Either wimax.c directly or fix the protocol.c . A quick non chalant hack is to fill the buffer value hardcodely inside wimax.c insitead of relying on protocol.c something like this.

We will continue with part 3 later on .. But for now the code will detect the network properly.

Yes 4G on Linux is not a dream .. Part1 [Updates]

2011-04-29T00:19:00.012+08:00

Yes 4G have great speed and awesome performance . Ignoring the confusing pro/cons prices/coverage plan (According to my master semuanya sama aje) we would like to see this particualr Yes 4G works on Linux for various reason

If it's work on Nix that means we can flash our DD-WRT with USB port to support the Yes 4G wimax dongle and have better speed.
Because i haven't play and blog bout Linux and hacks for such a long time.

Yes 4G Spec ..

It's using 802.16e Wimax technology
Using the GCT Semiconductor GDM7205 Chip [Links]
Pretty much the same as P1 tapi P1

Now the cool thing is someone already wrote a driver for GDM7205 for Linux. You can actually download the source code here and just follow the RTFM.. There's a little bit adjustment and patch u need to do (depends on what error u receive during make ) . But basic requirement is.

* Linux kernel with TUN/TAP support (simple check with /dev/net/tun)
* libusb-1.0-dev
* libssl-dev
* libglib2.0-dev
* dbus
* libdbus-glib-1-dev
* zlib
* libeap.so

I tested it under Ubuntu 10.04 LTE edition ..

So far everythings work until when it tries to find Network Connection

So it cannot find the correct Network so we run gctwimax with verbose log mode .

I put my bad the error is becoz the dialer doesn't know the correct NSPID for YEs 4G Network...

According to the gctwimax instruction we may need to set the nspid correctly and also the OuterNAI (most probably username@yes.com.my). But our objective here is to obtain the nspid.

To all .my hackers out there what can be done to solve this problem

We can proceed with bruteforcing the nspid until it hits a network. (Hell slow but might work)
Sniffing the odd traffic might work. using Microsft Network Monitor instead of winpcap . (No offense bizzare/propietery traffic are best viewed under MNM).Usbsnoop might work (if u run it under Windows VM)
Reverse the Yes4G dialer App Windows. (Probably the coolest/fastest way to do.)
Setup a Wimax Sniffer . Basicly built a 802.16e injector

In short i believe running Yes 4G in Linux won`t be dat long from now !! Lama

Credits:

Pokleyzz and kawanx2 .

[Updates]

Seems i make the wrong assumption. Those information can be obtain inside the Windows Connect.Exe software.

Going to continue after a few winks. Perhaps the wimax.h need a bit of twist yes/no ?

Finite but borderless

2010-11-21T20:32:00.006+08:00

Used to

I used to hate writing with pens and pencils.. It's ugly and painful...

These days

Stupid printer always got jammed and the need to setup a proper routing.

Used to

I used to think people who came from the Land near the Holy Site (The route of prophets) is the nicest people u ever met.

These days

It turn out to be a chaotic place to live in..

Used to

Think the unfairness treatment towards the opposition,minority, losers are sad..

These days

Just shoot em all.

Quote Push testing n900

2010-09-26T20:54:00.001+08:00

Quote push testing

Yang paling menyedihkan dalam hidup adalah menemukan seseorang dan jatuh cinta, hanya untuk menemukan bahwa dia bukan untuk kamu dan kamu sudah menghabiskan banyak waktu untuk orang yang tidak pernah menghargainya. Kalau dia tidak “worth it” sekarang, dia tidak akan pernah “worth it” setahun lagi ataupun 10 tahun lagi. Biarkan dia pergi

On Dillema on Thinking and Understanding. Post Ihack2010.

2010-08-12T12:31:00.013+08:00

I'm on holiday that means i have plenty of times improving the arts of "doing nothing".
The fact that I'm on holiday means that i can open the "Unread Section in all my clouds mail".
Some of the emails makes me felt annoyed/bugs me off and if I if possible i would like to crush these senders ball.
2 noteable email

Q: Do you have CISSP ? we are interested in the game that you designed earlier.....

A: No I only have this one tiny thin low-quality paper printed certificates called ESSSSPPEEEEM.It' a mindblowing Cert that puts your CISSP silent. Your SANS stuttered and of course CEH need i say more?

Q: Bro? Nape solution org ni http://mysabily.blogspot.com/2010/08/i-hack-2010-gerakkerja-hnd-puzzle.html camni?

The reason I think why the so call security/hacker scene in .my kinda fuzz up these days. It's because people stop thinking and exploring anything that is explorarable.
A hacker challenged,questioned,modified assumption atment rather then waiting for answer. (Called em crazy scientist if u like)
The problem lies in the solution. Since solution makes people stop thinking (Referring to awesome tools that exist these days).
So why does the solution for that puzzle is like dat? For once i hope u students use your unnecessary brains to think "why " rather then "how" on approaching a problem.

Steps on understanding wtf happen to DTMF

First accoridng to wiki DTMF is actually the sum of High-Low Frequency in a sinosodial signal.
How does a sinosoidal signal look like based on finite time? Since sinosodial is actually a sin wave then the generic equation would be:
But since each tone is generated in a specific time frame then then to sample each signal then...
That is the generic equation on every sampling signal. But noted that for every signal DTMF is a sum of HIGH and LOW Freq ... From here obviously we should start to thinking "How to discretely analyze each respected frequency in the sinusoidal form" .
How do we do it? Think about Rainbow. ou couldn't see rainbow unless you manipulated the refraction index of a glass or water. The concept over here is the same to descretely analyze each sampling signal we can use such technique as DFT (Discrete Fourier Transform ) . To put it simply given a generic DFT Form .where w = normalize radiant freq
Now put in Sampling Signal ....
We found out that for every computable amplitude in the . frequency can be represented by where A^2 is the signal power.
Now if you brain can digest it you simply compute it using octave or matlab for every sampling..
Low Freq :
High Freq :
Base on DTMF Chart: {880,13333} ~= 8 .
Calculate for every sampling then u get the answer .
Now this is solution....

Ihack 2010..

2010-08-08T21:36:00.005+08:00

Well it's been a while I blog so let's do Chedet Style of blogging

Difference between previous IHack and this year IHack.

Previously i was a participant. This year i am their nightmare. (While suffering mood disorder)
Gameplay changed from attacking organizer servers to each other.
Unimaginable Forensic Challenge
Lot's of All-Girl team and girl participating in this game this year!!!!

Participants Level ?

Just like previous I-Hack, Those who knows, 0wn3d. Those who doesn't, suffer.Don't feel bad about it. That's just how our world works. It's either 1 or 0

Are you going to give the answers?

Yes and No for some Question. But I was asked by a friend of mine Muslim bout Flag6 (Forensic) . So since I'm still on the mood of writing So I 'm going to write it in simple way

Solution Flag6 (Forensic)

Download dat damn flag. http://www.mediafire.com/?gnzcg06naz5c1cd
base64 decode to a file yield a jpeg
Check exif to of the picture and u get this long meaningless number 1142241512153124434423152334444415434421153211311535114211142433.
Now refer to the Picture. Hint is PoKLEY. Now althught it sounds garbage but PKLEY sounds like POLY ... so the secret here is it's a type of POLY Alphabet cipher . But which one? The anasthetic word in BM is bius. So it's PolyBius . (Noted . when u analyze the Pcap file u defnitely see that this packet contains lot of BM garbage dat itself is a hint!!).
So wiki PolyBius and u this table as reference .
Python your way around or watever speedcoding that u like..
U get ariebelisthehottestfemaleparadin !!!!

Memorible Comments during the whole event.

"Handsomenye budak-budak yang menang hacking tu " - someone behind my sit saying that. What can i say? Long Hair, Weird hats , boots and Rubik cubes are not sexy. Congrats UniKL!!!

A Debugger's Life Part 1.

2010-07-02T14:16:00.006+08:00

Hurm no new post so here's one. Lately after being shown the way of code by big boss. I'm starting to get hook lil bit on bug/debugs..

One thing I learn along the way is how to suspend a process. This is vital especially in playing Flash Game :)

How to suspend a process?

In Linux:

kill -STOP pid #suspend the process

kill -CONT pid #resume the process\\

In Windows:

You need to download the PsTools.. And use pssuspend.exe

pssuspend.exe pid #suspend the process

pssuspend.exe pid -r #resume the process

One thing I like about the latest Firefox is the plugins is running on a seperate Process. which is pretty good.

Copy + Paste != Backup

2010-02-03T05:18:00.004+08:00

Recently , my peeps keep asking me why copy and paste sometimes corrupt their files?

"I've already right click and copy that folder and paste it on another drive, but after a while i noticed some of the files are missing etcx3"

Anonymous...

When doing a backup on a really really large folders (let say for a DSLR freaks, most probably around 40-50 GB). It's a good idea to use rsync rather then cp. Why? u can issue the rsync command twice , to ensure that all files have been copied properly and there is no difference between both folders ( in our case).

Left side (initial rsync). Right side (2nd rsync to ensure both folders are same).

Let's not forget our Windows friend, althought there's no native rsync but there's a tool for Windows called SyncToy well that works just like rsync with a bit fancy ...

Evilness of Maxism?

2009-12-06T22:17:00.002+08:00

I never believe in Web Filtering will help eradicates abnormal behavior of a web surfer.

(08:38:52 PM) friend: Me
(08:38:54 PM) friend: tolong sket
(08:39:07 PM) Me/Home57C92962: awat
(08:39:15 PM) friend: aku pakai maxis broadband ni
(08:39:18 PM) friend: ada certain site
(08:39:21 PM) friend: namely facebook
(08:39:29 PM) friend: ngan imageupload apa tah
(08:39:30 PM) friend: takleh bukak
(08:39:35 PM) friend: other sites seems fine
(08:39:37 PM) Me/Home57C92962: try tukor dns
(08:39:38 PM) Me/Home57C92962: google
(08:39:40 PM) friend: any idea?
(08:39:57 PM) friend: DNS kalo kaput bukan smue takleh nak load ke?
(08:40:03 PM) Me/Home57C92962: tak jugak
(08:40:05 PM) Me/Home57C92962: die leh buat
(08:40:06 PM) Me/Home57C92962: dns sink hole
(08:40:18 PM) friend: maksud ko aku carik dns lain kat gugel?
(08:40:21 PM) Me/Home57C92962: tak
(08:40:25 PM) Me/Home57C92962: gune google nye dns
(08:40:33 PM) Me/Home57C92962: 8.8.4.4
(08:40:35 PM) friend: 8.8.8.8
(08:40:38 PM) friend: owh 4
(08:41:28 PM) friend: alternative blank?
(08:43:24 PM) friend: hurm
(08:43:25 PM) friend: tq
(08:43:28 PM) friend: will try
(08:43:31 PM) friend: have to restart
(08:43:33 PM) friend: haha
(08:45:59 PM) friend: owh ok dee
(08:46:01 PM) friend: tqvm
(08:46:12 PM) friend: was puzzled satu hari tatau nak wat apa
(08:46:13 PM) friend: wahhaha
(08:46:25 PM) Me/Home57C92962: wahaha
(08:46:26 PM) Me/Home57C92962: jadi ke?
(08:46:30 PM) Me/Home57C92962: tak yah restartp un
(08:46:31 PM) friend: jadik2
(08:46:42 PM) friend: die tulis will effect after dialup balik
(08:46:46 PM) Me/Home57C92962: ic
(08:46:51 PM) friend: try tadi access tanpa dialup
(08:46:52 PM) friend: takpat
(08:47:02 PM) Me/Home57C92962: teknik tu panggil dns sink hole
(08:47:11 PM) friend: teknik ker flaw?
(08:47:24 PM) Me/Home57C92962: teknik
(08:47:25 PM) friend: maksudnyer auto dns tu yang ada sink hole?
(08:47:29 PM) friend: atau tuka gugel
(08:47:29 PM) Me/Home57C92962: dns server maxis
(08:47:30 PM) Me/Home57C92962: cibai
(08:47:34 PM) Me/Home57C92962: taknak kasik org gi facebook
(08:47:35 PM) Me/Home57C92962: tu je
(08:47:37 PM) friend: tu namanye sinkhole
(08:47:44 PM) friend: owh
(08:47:44 PM) friend: haha
(08:47:45 PM) friend: deym
(08:47:47 PM) Me/Home57C92962: die reject request tu
(08:47:49 PM) Me/Home57C92962: pe lagi komplain
(08:47:52 PM) Me/Home57C92962: boh dlm blog
(08:47:55 PM) friend: hahaha
(08:47:57 PM) friend: tu aku pelik
(08:47:59 PM) friend: tapi
(08:48:04 PM) friend: youtube diorang tak rijek lak
(08:48:09 PM) Me/Home57C92962: utube google
(08:48:11 PM) friend: aku raser utube lagik makan banyak kot
(08:48:17 PM) Me/Home57C92962: eh tak jugak
(08:49:09 PM) friend: huhu
(08:49:11 PM) friend: nub siut aku
(08:49:16 PM) Me/Home57C92962: takper
(08:49:19 PM) Me/Home57C92962: kalo ramai pros
(08:49:22 PM) Me/Home57C92962: aku nak makan ape
(08:49:22 PM) Me/Home57C92962: pasir
(08:49:42 PM) friend: haha
(08:49:52 PM) friend: leh jer makan
(08:49:56 PM) friend: gula pasir ada lagi lulz
(08:51:48 PM) friend: aku try google tadi kot2 ada orang sama problem ngan aku
(08:51:55 PM) friend: gabungkan facebook ngan maxis lam gugel
(08:52:06 PM) friend: dapatnyer group maxis fanboi kat fesbuk jer
(08:52:09 PM) friend: hampa
(08:52:23 PM) Me/Home57C92962: hampa

I don`t particularly like the idea of using public DNS server like google but certain things are tolerable.

Currently reading:

http://www.breakingpointsystems.com/community/blog/tcp-portals-the-three-way-handshake-is-a-lie

Security Pen-testers

2009-10-22T00:31:00.003+08:00

Okay, so it's been almost then one year since I've been working as a security pen-tester consultant for one of the biggest IT.Sec company in Malaysia. Well it didn't take a genius to see how/why the level of security awareness maturity among the local is still well you can say "not that aware as we expected"

Even when engaging the party to do the pen-test , there's several rubbish question that must be knock off ..

Q: What qualifies you as a pen-tester?

Answer:

There is no definite answer for this. Trust me nobody in the industries actually dare to setup a "qualification" that 100% qualified you as a good pentester. True they can have certificates from Training X,Y,Z. but one should realize that the truth is good pen-tester do pen-test for the love of it !!!

Q: What tools do you use during pentest? Is it safe?

Answer

These kind of stuff make people think security pen testing is easy. Sure just run all the tools and bam bam you have results :) .. The most important thing one should realize is not the tools that helps most pen-tester find the vulnerabilities but the skills/mindset/technique of the pen-tester that reveal the flaw of an application or system itself.

Tools are just what we called some sort of aid to help pen-tester do their job faster. it can be opensource software or close source (and why should we go close sourced anyway?) ....

Q: Why don`t you create your own tools then?

Answer

There's no point in reinventing the wheel. Our focus is on finding bugs and vulns and fix it as soon as possible. If let say there's a cool proxy software from Company A, Company B also making a proxy Software and so does Company D and Company E. So the point is why waste our time inventing something that is already available ? Besides a bloody good pen-tester just create their tools on the fly so don`t worry much bout it.

Q: Figures are important less is better myth!!!

Answer

Suppose a web application have one vulnerabilities, that is a "SQL injection". the way upper people see it,

"Owh only one , dat 's okay"

No it's not okay

The way we should see it

"Since there is an SQL injection, it's possible drop/update elements inside the database, perform malicious query , if xp_cmdshell is enable , attacker can execute system command, perform a reverse connection backdoor which results in total server compromisation which can be used as an entry point to penetrate the internal network of a system ".

Q: I don't understand what you are doing?

Answer

You don`t , and I also don`t understand why you are here.

Packin the K

2009-10-18T09:15:00.002+08:00

So the big guy from Kaspersky decides to make himself warm here in Lowyat. Thought i'm not a big fan of Antivirus software i figure out we must have some sort of simple celebration for em. I should ask those Deejay at lowyat to play this song earlier.

I have nothing against them , just i don`t feel like trusting any product(except Fedora but maybe not again due to a case in the past).

I love terminator

2009-10-10T13:24:00.001+08:00

Thanks to Kagesenshi for this lovely awesome gnome tool. It really helps a lot when u need to do serious multitasking job / or being plain lazy. Split V or H , nested tab , custom profile , blax3. It`s the greatest thing for me right now.

All your Infos belong to us

2009-06-25T22:10:00.002+08:00

Privacy doesn`t exist anymore. If you google for something, then "something" also can google for you. That's the simple trade-off. The problem is how can we define what information we categorized as private or not.

Leaving that aside. The real deal here is how to profile your information gathering in a simple organzed manner. So let's pick up my favourite experiment friend. Izhar Firdaus. Now how much does the world know about this guy?

The tool I`m going to introduce is called Maltego. A superb CIA (Confidential , Intelligence Agent) tool to mining as much as information about this guy.

Too bad it's not open source. But it has 2 catags, the community Edition and also the commercial one.

So please explore on how to use it yourself.. So how much does the world knows bout KageSenshi? Probably a lot.

Trouble connecting to yahoo using Pidgin?

2009-06-20T01:20:00.001+08:00

Replace it with one of these servers.

Happy Birthday Mum,

2009-06-14T13:50:00.003+08:00

Dear mum,

I cannot remember how many times i lied to you. And maybe in the future i would be probably do the same sin over and over again. I hope God will forgive me and perhaps you too will forgive me . Hahaha. Thank you for taking care of since I`m inside your womb. As a first son , i maybe be subjected to some experimental technique or foods. But i guess it works out well . See i`m all grown up and healthy. Thank you for cleaning my room, cooking awesome breakfast/lunch /dinner/supper/late-night-supper/emergency cooking. Thank you for everything. There is no bank that will give me a loan that can repay your kindness and goodness. Heck not even my past scholarship would be sufficent enough. However I hope you are happy with this present i give you ..

Loves ,

Mama`s boy.

Beg Guess baru

P/S: Kalo nak hadiah menantu lambat lagi buahahahaha

flpsed:- Fill into your PDF Form

2009-06-08T11:41:00.002+08:00

So in order to gain an entry access to a certain company. I was required to fill some form and email them back later. The trouble is, they give it in a PDF format which means "it`s a readonly file ".

It pissed me off a little bit since filling in PDF Forms is only available with the commercial Adobe Acrobat Reader.

But yeah to solve it there's a piece of software which is a yum away called flpsed. You can use it to fill up the pdf form nicely :)

More Infos : http://www.ecademix.com/JohannesHofmann/flpsed.html

XBMC + Wiimote Hack + 40 inch TV is nice

2009-06-02T09:20:00.003+08:00

So if you read my previous post . I assembled myself the box. However using it for general purpose computing is not fun. So i get my wii controller and smack it up with the cwid driver so that i could now control PC just by using the Wii . (Mouse are emulated using the wii accelerometer sensor).

It clicks to me, I`ve got a large TV gone wasted . (Astro is not that fun anymore..). So I decidec to make Chi Chan into a media center. Which one should i choose? MythTV ? XBMC? After making some pros and cons i decided to go with XBMC.

So i test it out at my lab first. Will it work?

Seems like everything is okay.. So now I`m connecting that rig to the TV and stream the videos from my own rig.

It`s just nice.

My new rig. Chi chan

2009-05-26T20:02:00.004+08:00

I haven`t updated anything for such a long time. Not feeling really well. Life is bit stressful back few weeks and I need a new rig. So went for shopping and thus here is my new Rig, Chi Chan. (since it`s small)

the Specs:

Intel D945GCLF2 (integrated with 1.6Ghz Dual-Core Intel Atom)
2 Gig Ram
60gb hardisk (salvage from the last remaining of Nosferatu )
Intel 954 GPU.

So it`s not exactly what you called the fastest machine on earth nor it`s the slowest. But as the world gets closer to "One degree increment". We cannot depend on Captain Planet anymore to save us .

And yeah oh it`s running on Fedora 10.. rest assure.

Another Cimb Pishing/..

2009-05-20T08:10:00.006+08:00

Just woke up and yet another pishing...

From: CIMB Bank <alert@alert-firstx11.com>
Date: Wed, May 20, 2009 at 4:27 AM
Subject: Important Notification (Account)
To:

Alert Message - #2605

Dear Valued Customer,

We placed an hold on your account for security reasons as we detected several invalid logon attempts from a blacklisted location. Your immediate attention is required to activate and restore access to your account.

Activate Now
http://www.cimbclicks.com.my/start.html

Note: Your account will be closed if not resolved within 10 minutes of notice.

Sincerely,

CIMB Bank

------------------

What is unique about this email is the hyperlink points to the page is not actually www. cimbclicks.com.my/start.html . It might tricks a lot of people.
Let's have a look

1:Clearly login is using http

2. Login using abc:abc, and prompt a dumb TAC screen

3. Enter any key will bring to Finish page..

Dossier it bring us to:

Domain Name.......... startclicks-net.com
 Creation Date........ 2009-05-20
 Registration Date.... 2009-05-20
 Expiry Date.......... 2010-05-20
 Organisation Name.... Jennifer Bhatt
 Organisation Address. PO Box 61359
 Organisation Address.
 Organisation Address. Sunnyvale
 Organisation Address. 94088
 Organisation Address. CA
 Organisation Address. US

So it`s a new phishing site for the day.

Google Native Client.

2009-05-18T19:56:00.001+08:00

Link: http://code.google.com/p/nativeclient/

>From the website:

Native Client is an open-source research technology for running x86 native code in web applications, with the goal of maintaining the browser neutrality, OS portability, and safety that people expect from web apps. We've released this project at an early, research stage to get feedback from the security and broader open-source communities. We believe that Native Client technology will someday help web developers to create richer and more dynamic browser-based applications.


My comments:

The ability to execute native codes aren't exactly new idea . Microsoft have attempt it with ActiveX Controller, Sun with Java and of course Macromedia with Shockwave.  However most attempt are bit futile in term of scalability , OS compatibility and also Web Browser compatibility.
(Java works well since it doesnt' talk to the machine directly but have it's own VM (so things like Memory Management , etcx3 are taken care well off).


So what exactly is exciting on running a native x86 codes on top of Web Browser?

we can play our favourite game in our web browser (no need to install anymore, we can babo or dota or  simply by having a web browser that support it).

The technology is still new by the way

Consequences?

Matasano Security had write up an excellent review from security perspective:

http://www.matasano.com/log/1674/the-security-implications-of-google-native-client

Moving in a freeze.

2009-02-28T12:28:00.002+08:00

My Downthemall act a little bit weird today.
It "appeared to be freeze" but it still running good .

Tanjobi Omedato gozaimasu otosan.. (\./)

2009-02-26T20:56:00.006+08:00

So today is my dad birthday. He's 52, the same age as Malaysia. I bought him cake and some Bonia Shirts (he rarely bought new shirts which i suspect due to geek attitude).

Anyway since i doubt my dad know I have a blog so here is my dedication to him.

Dear papa,

Thank you for raising me from cradle till i'm big like elephant (dari kecik sampai besar gajah).
Thank you for giving me a piece of lesson using the Sinclair ZX Spectrum when i was a toddler .
Thank you for giving me a full blown DOS when i was in lower prime school.
Thank you for buying me a bunch of programming software books during my upper prime school.
Thank you for upgrading all our pc peripherals for each major exam i score during my secondary school. (PMR and SPM).
Thank you for buying me a brutal non-friendly-FOSS overheated Acer laptop. I appreciated the needs to hack everything on that box!
Thought i give you nothing but nighmares , but still....
I want to say thank you , papa.

Buwahhahaha.

P/S: Crappy cameraman, (right is me, left is my dad).

Koichowa Maid sama. from One Manga

2009-02-26T10:02:00.002+08:00

I like reading manga online from Onemanga.com . However sometimes it's tiring to click nextx2.
So what to do? we wget all of it in a quick manner.
noly-chan recommended me to read Kaichouwa - Maidsama. (The president is the maid something like that. )
So how to recrusively get all the file quickly?

For eg; chapter 1: http://www.onemanga.com/Kaichou_wa_Maid-sama/1/00/
There`s bout 44 pages range from number 0 to 33. Copy the exact image location and there's an infinite number to do it. One of the simplest way is

shell]$ for i in `seq -f %02g 0 33` ; do wget -b http://img61.onemanga.com/mangas/00000346/00000001/%i.jpg ; done

that's it folks. They are many ways to do it (depend on your creativity ), you can enchance it more up to your needs.

Good old days

2009-02-19T12:00:00.003+08:00

Yesterday , i went back to my old campus in UTP to deliver a talk on the usage of "Open Source inside the industries". It brings back the good memory of Tronoh . The internet connection over there have gone from bad to worse , no doubt about it. It's quite hot over there (how i managed to survive the climate over there in the past i have no idea).

I would like to thank the committee for inviting me ^-^

My latest toy: Rubik Magic

2009-02-13T20:39:00.002+08:00

Yet another variation of the Rubik's Mania stuff. Last week i received emails from Toys R Us saying that now they are selling Rubik Magic . So i head downtown to Midvalley and bought this awesome time.

Snippet from Wiki.

The puzzle consists of 8 black square tiles (Changed to red squares with goldish rings in 1997) arranged in a 2 × 4 rectangle; diagonal grooves on the tiles hold wires that connect them, allowing them to be folded onto each other and unfolded again in two perpendicular directions (assuming that no other connections restrict the movement) in a manner similar to a Jacob's Ladder toy. The front side of the puzzle shows, in the initial state, three separate, rainbow-coloured rings; the back side consists of a scrambled picture of three interconnected rings. The goal of the game is to fold the puzzle into a heart-like shape or vice verse and unscramble the picture on the back side, thus interconnecting the rings.

Well it took me bout 2-3 days to master this puzzle .

Link to Howto:

Picture finished:

Using flasm for fun and not really profit.

2009-01-30T19:24:00.004+08:00

It seems ages since i last jotted something into my blog. So here it goes,

A colleague of mine asked me to download this flash video from this particular website

http://www.virtualforge.de/vmovie/xss_lesson_1/xss_selling_platform_v1.0.html

So page info yield this particular swf files:

http://www.virtualforge.de/vmovie/xss_lesson_1/xss_selling_platform_v1.0.swf

Unfortunately it's just partial part of the movie and it's not completed.

There are two ways to retrive the incomplete part first by using a proxy the second which i found out pretty cool called flasm. which is a yum away.

Using flasm we can dissamble the swf file to see how the swf retrive the incomplete part of the movies.

So we get the list of the missing movie part (swf file). Do whatever regex filterization u familliar with and dump it onto a textfile or whatever method u like at this point. (The important part is just grab the list of the available swf files).
For me i dump it all in a text file called hugo.txt

[yondie@Reinstein hugo]$ cat hugo.txt
control.swf
enter_bob.swf
enter_alice.swf
enter_mel.swf
alice_is_attacked.swf
mel_impersonates_alice.swf

One way to download it all

[yondie@Reinstein hugo]$ for i in `cat hugo.txt`
> do
> curl http://www.virtualforge.de/vmovie/xss_lesson_1/$i > $i
> done

And yeah it`s complete

Happy New year

2008-12-31T21:21:00.002+08:00

Time sure flies fast just like it takes to boot a Fedora 10. A lot of things happen this year especially in my bizarre life. Sometimes it's good sometimes it's bad. This year had been one of my darkest yet brightess time in my life. Those who really know bout me sure get what I mean rightx2?

So what actually happen to me this year?

> I "finished" my studies at somewhat college in the Northern Alps.
> Won again the I-Hack 2008 in Uitm.
> Got an addictive job as a pentester junkie in SCAN (Credits to my saviour)
> I'm still alive? With all those fats I'm lucky didn't catch any of those critical dreadful disease yet.

All my past experience seems to be just another long long dream. Ah well , to all readers and friends. Happy New Year

My New Year Resolution?

I hope i can still eat a lot.

My first press interview

2008-12-25T15:46:00.005+08:00

Well i guess playing weird games and puzzles is a good thing to do. As the title stated here's the link

New Cimb Phising?

2008-12-10T14:02:00.005+08:00

---------- Forwarded message ----------
From: "CIMB Bank"
To:
Date: Tue, 9 Dec 2008 19:34:47 -0500
Subject: [URGENT NOTICE] Your account has been temporarily limited!

Dear valued customer,

We are hereby notifying you that, after a recent review of your account activity, it has been determined that you are in violation of CIMB Bank's Acceptable Use Policy. Therefore, your account has been temporarily limited for: video chat. We must properly verify your account again.

Here's how to get started:

1. Log in to CIMBClicks online account (click here).

2. You must request for TAC online via CIMBClicks - your TAC will be sent via SMS to the mobile phone number you registered at the ATM.
( you can find the "request TAC" button in the left menu of your account )

3. Logout from your account and close the browser.

4. When you have received the TAC (Transaction Authorization Code) on your mobile phone, Log in to our secured verification server and submit the requested information(Account user ID, password and TAC).CLICK HERE to go on our secured server.

5. Please allow 48 hours for processing.

Please comply and thanks for understanding.
2008 CIMB Bank

Note: Please do not reply to this email.
This mailbox is not monitored and you will not receive a response.

/*********************************************************************/

Firefox block it:

Unblock it:

Traversing it reveals this fellow:

Ah well happy fishing.!!1

Anime Festival Asia 2008 !!

2008-11-24T11:38:00.004+08:00

It's been 8 years since I've set my foot in the Lion City. 2 months earlier i read the news there's goin to be AFA08 held in Singapore and I was like owh man I should go , I should go!!!

Well the beginning of my trip wasn't exactly as nice as I was expected. I have a little "CSD check" at Woodland Checkpoint because my passport stated that I'm from Terengganu. (Negerist?)

It's nice to see hikokimori and otaku cultures cultivate nicely in South East Asia.

I would love to eloborate more but it's just totally awesome. How i wish such event could be held here with a blast in Malaysia Meh don`t think it's possible even in 10 years.

Photo Link (Facebook)
Photo Link (Facebook).

So to sum up everything:

The event is nice
The merchandise is nice !!
The cosplayers are cool!!!
The concerts are damn nice. Next time i should buy the VIP Pass.

Looking forward for this weekend Cosplay Competition !!

Rotten Treasurer and Stupid Money Monkey!!

2008-11-13T17:51:00.006+08:00

If you are wondering what it's all about : Read this first

Since this week i started my work from midnight till dawn so I've got some free times during daytime and head down to the most famous "University in Shah Alam". The issue is still not settle yet until today , but here's some of the dialogue that i recalled on that day.

Me: Sir, I would like to ask about our winning prizes from a competition which being held like 3 months ago.

Mr.X: We already give each respective winners their prizes.

Me: We still didn't get it and that's why I'm here.

Mr.X: Owh, yes there was a problem before (he goes inside the room where the treasurer rules her treasure). It's already being settled this week. We already taking care of it.

Me: Really, can you confirm it to me when exactly we can get the prizes? How do you actually do the transaction? Cheque deposit? Giro bank transfer? When is it? etcx3. ( I shoot up all to this guy).

Mr.X: Urm,. (he goes back in to the room reporting to the treasurer). It's already being settled, by the end of this week you guys should received your prizes.

Me: Can't you guys get more serious into this matter? We are talking bout transferring money more then 10k . Couldn't you just let me know when exactly is the date you guys going to do the transaction.

Mr.X: Don't worry we are going to take care of it. By the end of this week, you can withdraw your money from your respective accounts.

Me: (I don`t believe an inch of it!!) Sure here's my namecard and please call me asap as soon as the transaction is done. You could at least fax me some receipt/invoice/logs etcx3.

Mr.X: We will do that, don't worry.

And today this morning....

(09:08:54 AM) friend: wei, de dak team ko name adam?
(09:09:02 AM) me: yg panjangx2 tu
(09:09:03 AM) me: hah
(09:09:10 AM) me: apsal?
(09:09:21 AM) friend: smlm ***** call mmbr ak
(09:09:27 AM) friend: psk duit hadiah diorg
(09:09:29 AM) me: huhu
(09:09:31 AM) me: yg team die dah dapat
(09:09:33 AM) me: 2 team lagi tak pat
(09:09:43 AM) friend: ***** kate tmask lbh kt c adam tu

This must be on of the stupidest treasurer ever exist on this country. How could you accidently cash in "terlebey suda" into another person account withour realising it. Yet we still didn't have a news about our winning prizes.

So if you are looking for carrier in Treasurer/Accountant this particular Uni in Shah Alam is a good place Why?

You don't need to deal with peoples directly. Just send your lackey at the counter and let him/her be the middle man.
You don't need to verify if an account number is exist or not. If you need to do some transaction. Just do it!! Tak payah check check.
You only need to work out when the money comes in. Ignore any withdrawal request.
They have 6 treasurer!! So you can rotate the blame with each other.

Ah well the only thing i like to say right now is: Fakap !!!!

Foss.my : I love

2008-11-09T22:43:00.002+08:00

I love all the volunteers!!! See how they arrange the foods and drinks!!

Foss-my 2008 ends!! \(^-^)/. See you again!!!!

2008-11-09T21:12:00.006+08:00

So it's finally ends!!!

Alhamdulilah, we managed to run this awesome conference for the past two days. Yeah there are several issues goin on but I'm glad things just work out well.

As a part of the crew for #foss-my I would to express my gratitude towards the sponsors,(Thanks for the cool gifts),speakers (Pia we should make an S&S Popcorn),the volunteers (Gurdip and the gang, also all the girls who help me to prepare lunch and tea breaks), and last but not least the eleven warriors!!(Especially Kagesenshi for being a multitasking worker)

I guess life returns to normal for most of us tomorrow :(

Again I would like to apologize if there's something wrong going on during the event (especially the food part). Cheers !!!

Again thank you everyone for supporting this awesome event.

I love reading..

2008-10-27T09:50:00.005+08:00

There's a book sales at the MPH's warehouse in Seksyen 13,PJ from 22-27 Oct. As an avid reader i don't miss the chance to go and see what's sort of books that can caught my interest.

Reading is sometimes is similliar to drug. It provides escapism from our long boring ordinary life. It's also very addictive ,once you read you can't stop!!

(Picture of books that i intend to finish by the end of this year)!!

Owh in the open source world alot of infos can be gain simply by RFTM.

Oh I love reading.

So where's our winning prizes?

2008-10-24T20:24:00.003+08:00

Okay so 2 months have gone.. The Ihack08 fever had cool down. Life returns to normal or so we think.. The problem is where the heck is our winning prizes?

Simple stupid chronology:

1. After we win.. they tell us to wait for a month or two.
2. After a month we call they said wait.
3. After two months, we called they said the Ihack committee had dissolved. Contact lecturer.
4. Lecturer said that the Bendahari (Finance) Department handle the prizes.
5. Bendahari said earlier in this week they already bank in.
6. Wait for a few days in case of money floating issues.
7. No news contact back the Bendahari.
8. The most fcking annoying statement from em "Awak kasik nombor akaun salah" ..
9. So they say they will bank in the money next week .. huh

Owh for God sake!!! you are organizing so call an Internationa event. What if in some alternate world there's participant from other region? Do you want to tell them you need to wait for two months to prepare the prizes? Next time.. it must be cash raw plain cash!!!

I'm absolutely pissed off !!!!

I love OpenSSH

2008-10-12T17:05:00.003+08:00

OpenSSH is the software that i use daily in my campus life for ehem remote administrative and fun purpose . (in a secure manner)

scp/sftp/l.p forwarding/r.p forwording/X11 tunneling blax3.. I love OpenSSH

The World is just awesome!!!

2008-10-12T16:27:00.008+08:00

People we all have less then a month to register for FOSS.MY event . If you haven't register go for it now at http://foss.my/register/ .

But on some rare cases. you may encounter difficulty on attending the events .(wedding/dating/warzone/too far/ under house arrest/etc3). That's okay you can help promoting by doing this this simple step.

If you are going then this is for you

Or don`t worry if you are not able to come you can still give us support by putting this button on your blog/IM

See the world is just awesome!!

Selamat Hari Raya Aidilfitri

2008-09-28T12:34:00.003+08:00

Before I enter the realms of "kampung mood". Selamat Hari Raya Aidilfitri Maaf Zahir Batin to all the peeps in Malaysia.

IBM DB2 XML Superstar competition

2008-09-22T13:59:00.009+08:00

My good friend [Re-arrange] from IBM ask me to forward this advertistment, come on UTPIANS let`s bolot this one too:

Earlier this month, IBM has launched the "Search for the XML Superstar" in Malaysia, a brand new ASEAN-wide initiative open to all students, faculty members as well as professional developers.

Besides the opportunity to be an ASEAN XML Superstar, the series of contests allows you to acquire new skills such as XML and database management that can help increase your marketability in the global marketplace. You can participate in three categories:

Let your creativity fly with Video Mania,

Show your talent in Query Challenge, and.....

Take the ultimate challenge in Programming Contest!

In addition to learning and honing new skills, you will stand a chance to win Nintendo Wii systems, iPod Nanos and other attractive prizes. Early bird prizes will also be given to those who participate early. So sign up now and get a head start to becoming an XML Superstar!
Please encourage your students to participate in all category --- depending on their interest and expertise. They can join more than one category.

I urge all students taking Dabase Systems related courses to try out the individual Query Challenge, while the Multimedia students can tryout Video Mania. If you do have programming or adv programming class or campus please do consider the Programming Contest.

Website: http://asean.xmlsuperstar.com

Rebuilding kmod for latest kernel.

2008-09-18T13:26:00.006+08:00

Blob is bad but life is a bitch . After pushing my system from 2.6.25 to 2.6.26 the kmod-madwifi module borked out thus no wifi for me using internal system.

So i decided to pullof the madwifi src from livna-testing . Before that reason why i admire yet hate my wireles device is here.

We cannot use the source from livna repo (since it's using an unpatched madwifi) instead we need to download it from livna-testing .

Prelim:

$ yum install rpmdevtools kmodtool kernel-devel
$ rpmdev-setuptree /* as normal user not root. */

Steps:

$ cd ~/rpmbuild/SRPMS/
$ yumdownloader --disablerepo=* --enablerepo=livna-testing --source kmod-madwifi
$ rpmbuild --rebuild madwifi-kmod-0.9.4-49.r3698.lvn9.src.rpm --define "kernels $(uname -r)" --target "$(uname -m)"

Simple explanation

--define refering to which kernel
--target refering to which architecture/platform (i386,ppc,i686,x86-64)

Now go to ~/rpmbuild/RPMS/i686 thus the package is there.. u can use rpm -Uvh or since i love yum so much.

$ yum -C --nogpgcheck localinstall kmod-madwifi-2.6.26.3-29.fc9.i686-0.9.4-49.r3698.fc9.i686.rpm

Or if all of this sounds giberish and you are on kernel 2.6.26.3-29 here`s the precompiled RPM

Making HP Scanner works in Fedora 9

2008-09-15T22:39:00.002+08:00

Just got back my HP F300 3 in 1 scanner/printer/copier . Printing no problem , scanning hurm now that's weird it cannot find my scanner. Solution ?
$ yum search -C scanner |grep HP
libsane-hpaio.i386 : SANE driver for scanners in HP's multi-function devices

install the given package and puff it works in no time.

Domain revert back to Blogspot

2008-09-11T22:39:00.005+08:00

Dear avid readers,
due to miscommunication with my crappy reseller i have some troubles renewing my domain (yondie.org) . So i revert back to http://y0nd13.blogspot.com

Not much updates from me since i have several matters i need to take care out. It driving me nuts lately. Meh perhaps this is what we call dugaan puasa?

Meh till then let's start counting the days to Raya!

Selamat Menyambut Kemerdekaan Malaysia ke 51

2008-08-30T20:20:00.005+08:00

Oleh kerana ini merupakan rencana bersifat kenegaraan. Kalam ini akan kutulis dalam bahasa ibunda Tanah ini iaitu Bahasa Melayu.

Sudah 51 Tahun takdir negara ini diserahkan kepada penduduknya sendiri. Tidak kepada negara lain, tidak kita serahkan haluan negara di atas angin maupun di bawah angin.

Titik penjajahan bermula dari Tahun 1511 yang kemudiannya berakhir secara rasmi pada tahun 1957 sewajarnya perlu dingati. Kemerdekaan yang disebabkan kemuafakatan antara masyarakat majmuk di Tanah Melayu perlu disemai untuk setiap warisan anak negara.

Ya, negara kita kini tidak lagi dijajah, tiada lagi Bendera Union Jack terpacak di sana sini dan nyanyian lagu "God Save The Queen" tidak lagi berkumandang di corok-corok Radio..

Akan tetapi benarkah kita merdeka?

Ada banyak pandangan, ada yang mengatakan kita belum bebas dari budaya Barat. Di era ini, mana yang bermanfaat sewajarnya kita contohi mana yang tidak seharusnya kita perangi habis-habisan.

Penjajahan secara imperial mungkin dilihat tidak releven lagi dalam dunia masa kini. Maka corak penjajahan telah berubah daripada penawanan negara kepada perang psikologi dan juga ekonomi.

Bagaimana kaedah psikologi yang ditanam ke atas negara-negara bekas jajahan mereka ini? Mereka mengugut, mereka menyindir, mereka menyelar bahawa kebebasan yang diberi akan memudaratkan kita. Kaedah psikologi yang
ditanak oleh penjahanam penjajah ini sangat berkesan. Kesannya seolah-olah jika dinding penjara dirobohkan, banduan-banduan didalamnya tidak akan sama sekali bergerak kerana di dalam otak mereka membayangkan tidak ada kehidupan di dalam nikmat kebebasan.

Itulah hakikat yang cuba diterapkan oleh penjajah-penjajah ini terhadap pembangunan dan penggunaan perisian komputer di negara kita Malaysia yang tercinta ini. Kata mereka, "Kamu salah kami betul ,biar kami tunjukkan kamu jalan yang benar". "Jangan berkongsi banyak sangat nanti kamu rugi, simpan apa yang kamu tahu diam-diam. Rahsia itu cantik ".Diberi kita latihan percuma, bantuan pembelian komputer , diberi lambakan sijil, pujian, amal jariah dan sebagainya yang akhirnya memerangkap kita di dalam arus perniagaan mereka yang rakus.

Ramai yang lemas dan terus tenggelam tanpa timbul , ada yang terumbang-ambing , tetapi sebahagian kecil mula berani menongkah arus melawan penjajah-penjajah ini . Ibarat cili padi, walaupun kecil kesannya cukup kuat. Semoga usaha mereka yang mulia ini akan terus berjalan walaupun tekad menghadapi dugaan dan cabaran yang pelik-pelik.

Perjuangan menentang penjajahan tidak berhenti pada tahun 1957. Ia akan sentiasa diwarisi dari generasi ke generasi lain samada dalam bentuk peperangan minda, fizikal mahupun kalam.

MERDEKA!! MERDEKA!! MERDEKA!!

Enabling Compiz Fusion on my Reinsten

2008-08-27T22:58:00.005+08:00

I got myself new shiny rig. A few eye candy effects wouldn't hurt much right? So after a full yum install ccsm, compiz-fusion\* .. i try enabling it for the first time using compiz-manager. Then suddenly the white screen of death appeared . It didn`t actually crash my system but i was taken back for awhile since i had this assumption "Intel 3d drivers works well without any qualms".

Kagesenshi points out compiz-manager --indirect rendering . But it annoys me since compiz manager told me that my card is on the blacklist and it fall back to metacity.

Upon googling , i found out we can actually manipulate an env variable call SKIP_CHECKS . put it yes and all it will skip all the blacklist checking system

so i create a simple bash script and load it on session

#!/bin/bash
SKIP_CHECKS = yes
compiz-manager --indirect-rendering.

So it works

Running xchat with few prism base apps.

P/S: I'm looking for ways so that each prism apps is connected to different proxy servers. I think it's possible , any ideas?

Good Movie for Puasa/Hari Raya mood

2008-08-27T07:58:00.004+08:00

While people all over Malaysia are focussing on what's happening in PP, i start salvaging all my ancient data from my Desktop hardisk (which haven't been used for bout 2- 3 years?) for some good classic movie and i found this particular Korean movie.

I seldom watch Korean movie much. Reason? I think it's crap (either some sick boy meets girl love film or extremely dystopia dilemma).

But a good friend of mine, Intan recommended me to watch this k-movie called "The Way Home". And there's only two main character an old deaf/sick grandma. A rude grandson who is extremly rude.

Synopsis:

It's a story about a child who need to live with his old/sick grandma in a rural area. Of course like any of us the child is extremly rude towards his grandma. But the grandma loves her grandson very much even thought she knew little about her grandson desire(KFC,battery,toys and she's also illeterate and mute).

It's really a heart throbbing story and give more impact then the Japanese One Litre of Tears.

review from seoulstyle.

My new lappy. : Reinsten

2008-08-25T20:22:00.007+08:00

Here is my old Laptop (Nosferatu) current state:

So what's wrong besides some simple cracks?

USB Ports are hazards towards USB devices
Just don't work internal wifi card
Extreme overheating Proc (Always 89-90 C)
Its' Old

So i brought a new one :) from Wadieq during the Convofair

The Specs:

1.86Ghz C2D
2G DDR2
160 Gb Hardisk
Atheros base Wifi
Intel X3100 GPU
A card reader. Yeah we all do cams these days.
A webcam !!

Since it's new and pure. So I call it Reinstem (purest in german). This machine comes with Free Dos pre install which is free? Anyway not more then 20 minutes it's already running on Fedora 9 with all services and evil setting load up.

So did i ditch up my old laptop? No way since it's a give from my one and only father whom i love so much .. So it still have it's own value right?

where should i study?

P/S : Dad i return the car next week okay haha.

Updates: I change the name to Reinsten. Thank you all for the good comments :)

Ihack fever is down . Along came the HITB CTF

2008-08-22T00:55:00.006+08:00

Okay so yet we won again the UITM I-hack. So am I happy? Yeah for a while it's a moment of utopia. You got some few gratitudes from your friends, family and even Mr. Rector feels happy with what you did. Even so, for me all of this are illusion of some fake victory.

So why so serious?

I'm seriously worried since winning I-hack means free ticket to HITB Capture the Flag. And for the past 4 years we couldn't do much hardcore hacking inside the challenge due to our lack understanding itself how to debug or how to use tools like IDA and understanding ASM Codes fluently. I openly admit we sucks at these kind of stuff.

Unlike web hacking (which is easier due to the fact that some sysadmin are very lazy or bad website coders). Reversing codes and crafting exploits require skills and total understanding in asm, C and yeah most important parts the compiler. (maybe not)

You can go for training can't you?

Where,When,Who,How? Excluding the HITB SecConf Training, do i really need to wait once a year to go and then i will learn all this stuff in hands by training? Do i need to go inside the working world and only then i will know how things work? Is there any institution/individuals which provides quick crash course on reversing binary that make sense (not just theory but in hand practice. It took us a lot of time to understand the last 2-3 years CTF daemon , which are not easy since we have to read lot of book on disassembling and we still haven't figure out how to write the exploits properly due to poor understanding or maybe grasping the basic concept.

Our wish

So dear lazy web is there any place/people (exclude the HITB crews since they are untouchable for now) for us to go and learn something so that even if we lose again in the HITB CTF , we like to lose it in a more glamorous/flamboyant manner not by default or tapau hidup.x2

//me currently on the process of learning ret2ret pop n ret ... ala malaysian style

From ,

Sincerly,
Script kiddies group who wish to level up .

Driver Backup

2008-08-20T14:14:00.002+08:00

What's the most annoying oxymoron thing about Windows..

That`s right drivers!!!

Just receive few request from several clients asking me to format their notebooks/Pcs since it's infected with all the latest trojan/spyware/worms .I felt annoyed with these people becausse they don't have their Rescue Cds or Drivers Cds provided by their vendors. When ask where those CDs driver gone? The vendor didn't provide any of those driver. Stupid vendor.

So luckily thanks to the SourceForge i found this cool project call DriverBackup.
It's a perfect tools for Windows user who format their PC occasinoally . How to use it?

Backup your driver using this software first
Format your Windows (pirate or ori)
Dump back the drivers.

Easy isn`t it?

http://sourceforge.net/projects/drvback/

03wning the I-Hack 08

2008-08-18T08:12:00.007+08:00

After spending 4 days blasting I-Hack Competition . and the results?

Computer Forensic and Defense .. End results:

1. UTP (Project Tango)
2. UMS
3. UTP(K3. krew)

Capture The Flag Challenge:

1.UTP (F.nord team)
2.UTP (Project Tango)
3.UTP (K3. Krew)

Conclusion? OWNING OWNING OWNING

Credits: to Scan Association, especially Brother Hazim, Ayoi, Rinaki, Pokley for creating some creative and exciting question. Those 3 days were fun. Thanks to to the Uitm committee for conducting an excellent event. Thought they were some minor issues but that's okay. I will wrap all of this in one long report or post after this.

P/S: earlier geek00l said we are c*h *i if we lose this game while bearing the mark of HITB. Too bad we sapu abes.. buhahaha

Red Alert In VHJvbm9oCg==

2008-08-13T07:12:00.004+08:00

(This is just an illustration nothing to do with the real situation)

Yeah they did it again, but this time without warning, without any satisfying explanation. So what to do at this dark moment eh?. Here's a guide that should be followed with caution.

Non-geeky stuff:

1. Let's go jogging or play Ping Pong
2. Go on a tour guide, or if someone ask you out to go on mapley hit it on.
3. Learn how to cook.
4. Go to any adjunct lecture, regardless it's related to your course or not.
5. Express your love to the person you like. Well if you get rejected, try try again.
6. Fishing seems nice thought a lil bit pricy.

Technical Stuff:

Like the guru mention change your MAC ADDR.. Obivously daily or hourly!
Learn about mounting encrypted loopback device . This is a nice thing to read.
Set your runlevel to 3 or lower? Reason those monkey don't know what to do if they can't click
It's good idea to create backups and backups of data.
If you on tingkap, maybe it's good time to get infected with the latest worm/trojan ? We can always clean it later using

And to those who enjoy hunting poor guys who wish nothing more for a safe graduation. Here's a an extremely simple instruction what to do if and only IF your system got comprimized by an unknown ultra wiz kids (definitely not in VHJvbm9oCg==) . Pul the plug first.

glabel : The Gnu way of labeling

2008-08-08T09:56:00.003+08:00

While HITB is getting closer day by day. There still lot of stuff to be done for example sending snail mail to all government . Me and Kagesenshi spend two nights sorting out all the mess.

What really interest me is there's cool software call Glabel . What so cool about this software is that it can import data from spreadsheets(mainly csv format) So that you don't have to type each person address one by one (That is way not cool).

Wel as usual, it's a yum/apt away

UTP Web Hacking Challenge!!!

2008-07-31T20:13:00.003+08:00

When I first came to my Uni. It was a heaven nest for hackers!! Yeah truly it was fun, people exchange ideas/files using the IRC network, super cool project like ultra low bandwith video streaming (it`s not flv) etc3.

But those were the days, where most student loves to dump logs (sql etcx3.) Nowdays our junior only know how to dump babies!

But hey HITB is kind enough to bring the hacking scene inside the campus back!!

Below are the details:

-UTP Open WebHack Challenge
-Mission answer at least 4 out of 10 question in 20 minutes.
-Prizes: You have a chance to win a ticket to HITB SecConf 2008 in October
-Fees: It's damn free
-Time: 10am -3pm
-Location: Building 2 , Level 1 Multimedia Lab 3 (Opensource lab)
-Who can join: Anyone!!!

Note for Utpians:

Mr Ropie had kindly dedicated some of his space to setup a small Web Hacking challenge server for training purpose. It's accesable (internally of course) on this link:

http://165.0.4.15/

Happy hacking!!

Fedora 9 Repo Mirror @ V5

2008-07-30T08:15:00.003+08:00

With the current state of our network connection in UTP. It took us quite some time , to host back the Repo. Currently we only manage to hosted it on all villages (except V3 i guess).

Link:
Instruction for V5 users.

*Only works inside UTP

Fedora Electronic Labs

2008-07-29T02:49:00.003+08:00

I think i mention about this awesome spinoff during the Barcamp. If you are interested on either digital/analogue mnano to pico scale hardware design. This is the best distro that covers up all those aspect.

If you already have install Fedora in your system don't worry, all those softwares that availables on the spin is already in the upstream . Hence you can have all those softwares with just yum away. More info coming up soon.

Must read:

FedoraElectronicLab
Interview FEL Owner
Icarus Verilog Tutorial
GHDL Manual

We don`t need crossover cable anymore**

2008-07-29T02:38:00.003+08:00

Starting from Kernel 2.6.2x series or WinXp SP 2 or 3. Crossover cable is irrelevent. Don't believe me? Hook up two rig together using straight cable with manual IP settings. Now you can either ping/rsync/ssh/ftp each other normally.

** On a typical x86 or x86-64 machine . Crossovercable are still needed on SBC/ARM/ . Do take note these features are OS Dependent. (If your OS doesn`t support it won`t work.

Barcamp Day2

2008-07-28T21:02:00.003+08:00

I woke up early in the morning. It damn cold. First thing I did was hail a taxi and go to Jalan Ipoh. Bring a mechanic and starts fixing my car. It's totally borked out. The battery died, the lights goes out and the alarm is goodbye.

Owh well that's the story of the day. So here's some good points on what i had on Day 2:

Wireless Hacking

Well somebody told me this guy is CEH certified. Interesting talk. From my experience. It's not really hacking, it's rather more like tapping. If you are phone line, you tapped the line, If you are using wireless phone line, you tapped the signal and it goes the same to wireless network, You tapped into the network. Tapping doesn`t cost u a dime nor you need proper authenthication.

If you converse using secret language using phone, you can also send encrypted data using wireless network connetion. How the heck u decrypted it depends .

P/S: CEH sucks.

Open Malaysia Part 2

Ditesh presented the story of local involvment in the Open Source devel/RND . The current state of FOSS development inside our country .He also expose "RMS true nature". Some stories how goverment react on OSS . I`m quite sad to see there still a need for "special race" on getting approval on what they are trying to fight for. Yeah a great talk from Ditesh

Lightning Talk and fast

This is the most interesting sessoin of all session.

1. How to hide certain sensitve information
2. Why yum rocks!
3. Jailbreak Ipod
4. Gossip 2.0
5. Cheap way to travel
6. Social Networking stuff.
7. Exploiting Geek
8. Open Hardware and hardwarex2 stuff.
9. Life experience

Overview:

Barcamp rocks!!

Barcamp Malaysia . My experience.

2008-07-28T10:39:00.002+08:00

Although by the time i wrote this entry, there`s gonna be ton of similliar posting everywhere on the Net. But i decided to write it on anyway. It's gonna be a very long post.

Day 1.

Woke up damn early in the morning since i need to go from PJ to Puchong fetch the master Kagesenshi . Don't wanna brag but my road instinct in KL doesn`t work properly so we got lost a lil bit and arririved maybe around 9:15 / 9:20 am something .

Arriving on the floor, my first thought this group of people must be a bunch of hackers and geeks . Yeah well it's partially "true" since I always restricted myself with only software/hardware hackers. Not business hackers, math hackers, freelance hackers, social worker hackers . So it's pretty interesting to meet all those kind of people over there sharing their knowledge.

Anyway here's the summary on what I learn on Day 1.

Google Androids:

Nothing to do with actual androids anyway. It`s some sort of platform on building mobile apps. The presenter, Gavin Bonk share his his knowledge on Google Androids development, the limitations , the controversy etcx3.

The OpenMalaysiaBlog

Here is the story of the unsong heroes of Malaysia who fights to protect our country from some sort of ruthless foreing business invasion!! Yoonkit presents an excellent mindmap (or was it roadmap?) how OpenMalaysia Blog got started ,how the reaction from .MY Goverment in Opensource. Yeah how the big company starts lobbying around . Or Kisah seorang tetamu yang tidak tahu malu lagi adab. Yeah I must admit everyone in the crowd agreed that software pattern is bad. There's a mix reaction from the crowd too, some says why bother since you won't get Datukship from doing this or profits anyway. IMHO, this is to ensure the future of country is control by our own wills not other.

Monetizing Youtube

Althought it says youtube actually it was refering to any online video streaming content management on the web. Roni from UerekaLab show us the potential of advertisment directly inside a Video. For example a babes holding an empty can in Video can be "edited" realtime to show that from Malaysia it will shows Yos Soya Bean , in the States maybe Kickapoo. This idea is superb since maybe in the future there won`t be any commercial break to spoilt your day!!.

Entreprenuer and Developer Gangb***g.

Arzumy ,Kris, Khailee and Joel starts talking bout the power of freelancing. How to become a good freelance etcx3. It's an interesting talk, but at the current moment, sadly I haven't got any interest on starting up a business ship yet!.

Well that was the talk that I went during Day 1. Urmph. there's an Internet connection but the speed is as bad as a typical day in UTP. So Kagesenshi (again) setup an IRC server and we start bitchin and critizing around any talks that we found bored. It's damn fun since somone accidently slip out his password i have no idea why. Met Soonyik from UTM who travels very far from south.

Owh yeah at first i dint't really one to camp out in the building. But when i went to the parking lot and found out that my car was fscked up.!! The car batts died in the middle of the city. It so horrible. I got no choice but to stay there .. Damn it stupid car. and maybe silly me.

So yeah i spend the night in the building talking discussing with Doni, Fadhil, Alex and several other peoples. During the night suppose we should wathing Red Line, Somehow even the sexyness of the babes in the movie make us more sleepier. So Doni i think switch up the movie with The Big Bang theory series and we laugh all night until I don`t know .

Suddenly it`s Day 2.. To be continue.

Emptiness strike!

2008-07-17T10:18:00.003+08:00

I'm feeling very empty inside. To create an empty file.

Fedora Malaysia Mailing list

2008-07-03T23:20:00.002+08:00

That's right . Starting this month, Fedora users/contributers (generally in Malaysia) can forward any question/ideas to our mailing list . Further instruction on how to subscribe etcx3 is on the mailing list website.

https://www.redhat.com/mailman/listinfo/fedora-my-list

Hopefully we are going to get some nice feedbacks from Fedora users in Malaysia!

Veoh is no longer in Malaysia!!

2008-06-18T20:53:00.003+08:00

I'm not sure since when they started to block IP from .MY ? Owh well it creates some unpleasent aura among us. Therefore oh dear what to do?
According to google hack it's possible to use google lang translator as our proxy? The basic format should be:

http://www.google.com/translate?langpair=fr|en&u=www.forbiddensite.com

Since English to English are not supported anymore we change it to fr|en of watever other language available.

http://www.google.com/translate?langpair=fr|en&u=www.forbiddensite.com

Let's find a veoh url using google eg; veoh shipuden and it give

www.veoh.com/videos/v1587236emrKRgp7so the link should be

http://www.google.com/translate?langpair=fr|en&u=www.veoh.com/videos/v1587236emrKRgp7

The frame is annoying removing it will reveal

http://209.85.171.104/translate_c?hl=en&langpair=fr%7Cen&u=http://www.veoh.com/videos/v1587236emrKRgp7

Does it work..?

Well it did load the site.. and I`m stuck at there can someone enlighten me what to do next?

Project Aon: Lonewolf Game

2008-06-16T00:02:00.003+08:00

Recently, I`m addicted to Text based RPG game like Torncity It's possible due to stress of life and finding a way to escape from the brick of reality we are facing today.(In simple word stress). D&D sets are way too expensive nowdays,

Playing game like this brings back the memory of my early childhoods days. When an uncle of mine finish his studies in UK, he gives me these adventure/game book called Lone Wolf which is pretty cool. I love the way the game is constructed. The degree of creativity and imagination of the author should be given some credits.

And I'm so happy when i stumble upon Project Aon which aims to publish the books in html formats for free under Project Aon license. Since it's in HTML using pen and paper might not work out anymore . Therefore LoneWolf Action Chart Program keeps all your track in the game which is pretty cool.

The action chart is released under GPL which is good!

Firefox : The next Guinness World Record ?

2008-05-29T20:07:00.003+08:00

I just check out my mail and got this mail from Firefox Missionary squads. Attempting on creating records for "most downloaded software in 24 hours" . Well we all love it, use it, hack it. So why not give them some supports?

http://www.spreadfirefox.com/en-US/worldrecord/

Fedora 9 Sulphur: Rocks but..

2008-05-14T10:03:00.004+08:00

I`ve been running sulphur for quite sometimes (since my shoes are made from rawhide). But it didn't stop me from downloading the Official ISO from Fedora Project site. Have tried it on my old clanky Ati Mobile Radeon x200 laptops. As Kagesenshi mentioned,it looks quite haphazard and ugly, hopefully ATI and NVidia will catch up fast !! Since the X looks quite terrible that i don't even have the guts to paste a screenshot!!

Until the xorg drivers issue resolves, i won't update my xorg yet.

P/S: Tawel Sensei? Fedora 9 comes only in KDE? I think you must have downloaded the Fedora KDE Live media instead of Fedora Desktop Live Media.

Fedora 9 Sneak peak

2008-05-06T09:26:00.002+08:00

Jesse Keating talks about Fedora 9 sneak peak and Fedora distribution Toolbox box at LFNW (Linux Fes NorthWest) . It's pretty much interesting if you like to have a view first on how Fedora 9 differs from previous and all the mighty tools that Fedora have used (example, MirrorManage, Koji, Bodhi,)

Fedora 9 Sneak Peak
http://tinyurl.com/5chgty (Slides, ODP)
http://tinyurl.com/3hh75v (Video)

Fedora Distribution Toolbox

http://tinyurl.com/6prnn8 (Slides, ODP)
http://tinyurl.com/45kruq (Video)

Fresh from upstream. That's Fedora!

Fun with Pidgin

2008-04-30T12:35:00.005+08:00

Pidgin (formerly known as Gaim) is an Instant Messenger software that comes bundle by default on most binary based Linux Distrubtion these days. The interface is clean and simple. It supports many IM protocols (MSN, Yahoo, Gtalk, Jabber, and also sametime( I think the IBM guys use this protocol).

However most of us doesn't utilize it to the max so here I am sharing some infos what so cool about pidgin.

1. One name for all

Let say Joe have gmail,aim,msn,and yahoo accounts. It`s quite hasssle to view in which account Joe is online. We can group all Joes account under One Joe's nickname. How to do it Right click at one of Joe's and select Expend. Now drag all Joes account and put underneath the one you have expended. This is nice.

2. OTR (Off the Record) Plugin.

Say you like to have some private conversation with someone regarding serious issues. Warfare, politics conspiracy , drug dealing (just a few example), you might wan to have an authentication chatting to ensure the conversation is really just between you and the dealer. It's just a tick away inside the Pidgin Plugin.

3. A Reminder

So you are the boss and you would like to remind your workers to do their job each time they log into their IM. Right click at their name and add Buddy Pounce.

4. Text Replacement

This is a cool plugins for those who prefer fast and quick typing. You can define your own short form and it will automatically replace it with the words that you wish to.

5. Last but not least Psychic Mode

What does this nice plugin do? This plugin will informs you that somebody is typing something g to you even before the sentence are constructed properly. If you are fast enough , you can say "What are you trying to say doc?" And yeah , the reaction never fails to entertain me.

viva la pidgin. There are others plugins but i don't think it's useful in a working enviroment.

Masuk Friendster? meh masuk

2008-04-19T18:56:00.004+08:00

I`m not into these friendster/myspace/facebook junky much. I have em but rarely edit em. Live is more interesting with online chatting and meetings. Not sure if my friend try to scam me or something. I haven't bothered much bout computer security nowdays but it surprise me to see this.

For heaven sake. If you are really interested in phishing. Please do it properly , hide the famous blue blogger bar first. change domain etcx3. Now i have the obligation to flag the blog down.

Monkey see Monkey do

2008-04-11T16:01:00.003+08:00

I don`t believe in Darwin's Teory on Evolution. But I say.. monkey see monkey do. For crying out bloggers are monkeys in space. The monkeys on earth decides to join us too.

http://tinyurl.com/5osrjp

I forsee business opportunity!!

Simple Bash infinite loop

2008-03-31T16:51:00.003+08:00

Sometimes , when I'm in despair and desparate mode , I like to hear the songs from various online radio streaming from Shoucast or Icecast , VLC video stream .

I'm not really a great music listener but it helps to reduce the tension i felt for the past few weeks.

I usually use the cli mplayer as my choice of client but due to some reasons sometimes your connection to the server will go down or in other words timed out. What annoys me most that the cli mplayer won't reconnect back. (Yeah i know we there are other clients like xmms,exaile,blax3 but so far only mplayer is the only client where i can use it on screen).

I found this to be very annoying and note down a simple infinite loop bash script.

while [ 1 ]
do
mplayer http://some.streamsite.com:8080/
done

And now i don't need to reconnect manually anymore. The infinite loop is also useful to maintain a non reliable ssh connection etcx3.

A piece of me

2008-03-28T14:58:00.002+08:00

I'm quite sad to see many of my favourites anime have come to an end. (Kimikiss Pure Rouge, Rental Magika, Kekkaishi, Clannad etc). But well life goes on and here we are in the spring season. My updates?

1. Last week we held our first UTP OSS meetup for this semester. Despite all the pressure on using the Open Source software in our campus . The community have grown strong. I give my usual talks on open source and yeah KageSenshi tell us a tale on his internship experience in the FOSS world.

2. IanWeller just finish editing all the nesscary artwork for Fedora 9. You can check the artwork wiki at http://fedoraproject.org/wiki/Artwork/F9Themes/Waves/Round3Final

3. On the rubiks competition. There will be a Asian Rubik Championship which will be held in Hong Kong. I'll provide the sufficent details later on.

Makehuman.. aids towards quick human modelling.

2008-03-19T16:34:00.007+08:00

After watching Apple Sead Ex Machina , I'm totally captured by the greatness of the CGI and 3d effects in the film. However 3d is not my thing and I doubt I have time to spare on learning one.

But if you are interesting oon creating a human model, there's a quick tool call makehuman. ( you can just yum install makehuman)

From what i experienced, you can say makehuman is a simplified blender aim for creating human models with extensive details! It's a must for artistic creatures and possibly forensic experts.

The panel may look a little difficult in the first place but you get hang out of it. Requirement? a graphic card that support 3d rendering i guess .

Delay is bad!!

2008-03-12T16:42:00.008+08:00

Well here is my first post after the Malaysian 12 GE. I've met lot of people talking bout the stuff (chatters,bloggers,homeless,taxi drivers, kedai mamak, rockstar , bus driver, tok imam, ). Some are happy, some are sad, some are worried.
Either way it shows that the Malaysian had finally treats political issue seriously and no longer "ibarat lalang ditiup angin".

First of all I would like to apologise about the Fedora Shirts , ( I told you guys I will settle bout the matter on the weekends , truth is i did settle it on the weekends) but there are lot of stuff that hinders me from uploading the latest infos. I will start out all the infos on the Fedora shirts at http://fedora.foss.org.my. I 'm not sure if the thread on the shirt is updated yet I'm gonna check on it later on tonight .

And yeah if any of you guys are interested in the arts of solving rubiks cube. You can join us at http://www.malaysiancube.com/forum/ . It's relatively new , thanks to our m-yo for sponsering the site and domain. There are lots of cube players in Malaysia and if you are one of them please join us. We just had our road show last week on Saturday afternoon and yeah it was fun. ( I nearly lost my PSP and we got kicked out by the Mak Gad).

See that 7 years old kid over there ? His name is Oliver and he's from Finland. As expected from a Finnish , quite a fast learner.
(I asked him about Linus and he doesn't have a clue who the is that guy oh well.)

And news on Fedora? Well mo have created a new theme for the grub image loader. I think the water ripple effects looks nice.

That's all for now, to the new formed government, honour your words.

Bringing out the chain together.

2008-03-05T17:13:00.006+08:00

Yep the fate of my beloved University Network have been sealed.

http://rafb.net/p/hOPKls59.html

Well I think Kagesenshi will do something about it. I should give them credits for turning out my prophecy into reality.

Well I'm not going to ramble about it too much since I'm sure my other colleagues will go on rampage and berserk. My advice think before you act.

So once again here I'm just finished up my latest design for the Fedora Keychain!!! Yeah. I don't plan on putting it on the market yet but if anyone interest on it check out my wiki since I'll host the SVG file over there and maybe on the Market Colloberate. Here i proudly presents to you the keychain designs..

What do you guys think about it?

**Update**

We finally got the green lights from the Fedora to proceed with the T-shirts I will updated the price, sizes availabality by the end of this week :)

Fedora shirts anyone?

2008-03-03T20:10:00.006+08:00

Well starting today, I am officially become a part of the Fedora Ambassador team. Does it makes me a hardcore programmer, leet or a master of the universe? No but it gives me some driving force on promoting Fedora across the country.

As always , ambasaddor likes to brag about their product so here I am with some quick messy job inkscape hack. I present unto you my Fedora Shirts design for the local community .

So I'm planning on selling those shirts for the sake of fedora community in Bolehland. I'm not so sure about the cost and etcx3 if someone willing to assist me on the marketing side. I' ll be glad.

Last but not least:

http://fedoraproject.org/wiki/ShahrimanSamsudin

Cheers

***Updated****

Those who are interested in obtaining the shirts. You can mail at:

yondie [a][t] fedoraproject dot org with Subject Title: Fedora-my Shirts

Please include your name and contact details with sizes. I'll confirm the price Insha-Allah at the end of this week. (Still waiting about pricing strategy from mo).

Rawhide: A battle for survival (2).

2008-02-29T20:33:00.004+08:00

After last night updates, dbus-daemon --system keeps hogging up my cpu resoures at 100%.
Personally I don't find it actually slowing down my box. But I have to admit with that kind of usage, the rigs keep restarting and that is so damn annoying. Killing it won't make me feel better since certain apps won't run if dbus is killed.

Mypapit told to me that dbus-daemon is some sort of messege bus act like a layer interaction between applications. I found out my culprit, NetworkManager!!!

chkconfig --level 123456 NetworkManager off

After disabling NetworkManager services (for now) everything went on smooth. I can execute /usr/libexec/gnome-setting-daemon without a clinch.. :)

Apa Khabar Planet MYOSS!!

2008-02-29T11:33:00.005+08:00

Well after getting myself involves inside the FOSS world for 2-3 years actively (no thanks to somebody),
here I am inside this wonderland of Planet MYOSS.

Since this is my first post and as a proud Malaysian, I would like to shout :

Apa Khabar Planet MYOSS !!

Cheers!

Simple WM Switcher using Zenity

2008-02-29T09:41:00.006+08:00

It's nearly weekends. I'm planning on finishing my Gundam model GN-002 Dynames!!. Life have been so packed like sardines that I didn't have the leisure or to laze around (except blogging i guess) . Anyway here is a simple script on switching your Windows Manager using zenity as our GUI front-end. I decided to write it down since i didn't find any other scripts elsewhere. (Put a comment if you find one!)

Click here to download

Some screenshots perhaps?

I`m so evilz hahaha.

Disclaimer..

Owh well here it is.

*Updates: There' s already a program call switchdesk that is more superior than this ugly bash script. Nerveless the program is written in python while here is just bash.

Switching from GDM to KDM.

2008-02-28T08:38:00.004+08:00

For some reason, after yesterday Rawhide updates, GDM crashed my Xserver which freeze the whole UI system. After a few experiments i found out it have some sort of sigsev when dbus-daemon is being executed causing the gdm to breakdown

I'm not a funky foss devolopers besides bugzilla there's nothing i can do about it. So I started looking for an alternatives besides GDM. There are always wdm , kdm and simply xdm. All we need to do is just installed the respective Windows Manager and change our preference,

Some snippets from cat /etc/X11/prefdm:

if [ -f /etc/sysconfig/desktop ]; then
. /etc/sysconfig/desktop
if [ "$DISPLAYMANAGER" = GNOME ]; then
preferred=/usr/sbin/gdm
elif [ "$DISPLAYMANAGER" = KDE ]; then
preferred=/usr/bin/kdm
elif [ "$DISPLAYMANAGER" = WDM ]; then
preferred=/usr/bin/wdm
elif [ "$DISPLAYMANAGER" = XDM ]; then
preferred=/usr/bin/xdm
elif [ -n "$DISPLAYMANAGER" ]; then
preferred=$DISPLAYMANAGER
fi
fi

As we can see from the codes there's a file name /etc/sysconfig/desktop that holds a variable called DISPLAYMANAGER. By changing the value of DISPLAYMANAGER with the respective WM, we can use KDM or XDM as default.

The fastest way is just to vi /etc/sysconfig/desktop and added DISPLAYMANAGER=KDE .

Credits to Kagesenshi for poiting out the obvious!

Rawhide: A battle for survival

2008-02-25T23:05:00.000+08:00

Yeah after few weeks of long survival battle against rawhide. I finally managed to get hold on it with a stable state. Yeap stable.

Using a propitery graphic cards such as ATI/Nvidia is usally not a good choice if you want to throw yourself up into the hell of unstable distro. (P/S: the blob binary won't be able to catchup with the kernel development for some time).

Yet here I am armed with the latest kernel a binary based distro could offer and the latest xorg.

Of course there are some sacrifies i have to make, first i can no longer continue to depends on gnome/kde desktop envy. Too much applet error is a hassle. So right now switching on fluxbox 1.0.0 which rocks!!

Gnome-setting-daemon and some gnome-apps crash alot. A sigsev error occured in all the latest gstreamer-plugins (bad/good/ugly/base). No time to dwell . Mplayer config caused flip-hebrew error on line 133 (this is not a Jew effect).

So here is my current desktop workspace proudly on Rawhide!

Workspace 1: Netzz

Workspace 2:Artz

Workspace 3: Work Maa (Sorry couldn't display the content since it's work!)

Workspace 4: Multimedia

Once again! I survived Rawhide aftermath.

Ubuntu-my Meetups February 2008 : In my Eyes

2008-02-25T19:11:00.000+08:00

Well I'm extremely please when i heard that the guys from #ubuntu-my have make a bold movement to hold a massive gathering meetup meeting :) at Uitm Shah Alam on 24/2/2008. I used to think such massive gathering is not possible especially on weekend due to small/big problems such as families/gf/bfs/shopping time etc...3. Neverless well done.

To come to the events cost me a lot of hassle actually . The plain old kancil owned by my MakCik is actually quite dangerous to ride on!. (Break lamps and breaks not working properly and the car spotlights are very dimmed).

Around 7-8 am i decided to kidnapped KageSenshi from his hikokimori life to attend the events. I haven't met him for months so might as well snatch him . Who knows what kind of unpredictable events waiting for us over there.

Well we arrived there around 9:30 am. First time ,i miss the signboard and go to Dewan Seri Budiman (must be due to the assumption since I hack is over there so the ftmsk should be over there). But thanks to wariola we got there just in time. Hurm bringing the a Fedora guy is a bless in many events, with our KageSenshi aids everyone can connect to the Internet.

I'm so amazed , there were more girls than guys in this geeky event. What happen to the rest of the guys? Well I'm not that worried as i prefer the opposite gender as audience (joking).

The first talk is done by Kaeru , He explained about Ubuntu@Work .It's an interesting talk how he showed us the power of Ubuntu in handling multitasking Office/Desk jobs very efficiently. Tomboy + Evolution , sycn with palm, IM and so on so on.

The second talk should be coming from Mypapit. However he's gone MIA since Saturday, the commitee aren't very sured what had happen to him. So me and Kage took our time to create our community advertisment in order to locate Papit from the evilz doodlers!!( see here and here)

So wariola asked me to replace his place instead. Yeah well earlier (2-3 days ago before the events ) i was asked to make some presentation 10 Myth on Linux . Since i wasn't this, combining with what little charm i have and some slapsticks remarks. (Sorry if anyone got offended by my jokes, I'm just trying to keep things alive).

Next is our first local Fedora Ambassador , Abang Sharulzaman , he explain bout translation project and how we should change our attitude for our own mother toungue langauge. Yeah I'm feeling a little bit ashamed , yeah since i primaly use English as my main medium of technology talks rather than my own mother tounge.

Next talk comes from Project Tango arch enemies leader ,, Abang Adli from 3xb055.
He introduce us SBDCcomputing which is interesting for if you want to create a standalone firewall/server/routers etcx3. It's quite hard to find SBC boards unless you are involves in heavy industries.

Well in the afternoon Fenris and Wariola try to make a demonstration installing Ubuntu under VMs. Somehow or some things jus don't work when they need to.. Yeah well, my advise next time, don't bother explaining bout the vm just . If we can't make a live demonstration Installation , A series of screenshots is helpful ( A picture worth a thousand words). ( A bad movie attract none). Peace

Well kudos to the commitee members who dedicated their time for this events! Nice shirts by the way.

P/S: i uploaded my slides on the web . Click here

All photos are taken using Abang Sumardi Cam. Visit his flickr at http://www.flickr.com/photos/sumardi/

Live from Ubuntu Malaysia Meetups 2008;

2008-02-24T15:43:00.001+08:00

Mypapit , a well known FOSS supporter have gone MIA!!!
It is believed that mypapit have gone missing when he arrived in Kuala Lumpur yesterday.
Mypapit should be attending the 1st Ubuntu Malaysia Meetups. However he mysteriously disappearing act is worrying us.

Mypapit loves to play outside all day long. So any geeks and dorks who goes out in the sun please be careful.

Ubuntu Malaysia Official Meetup

2008-02-22T11:14:00.000+08:00

Yeah it's the first massive Ubuntu Malaysia Official Meetups. After so long we finally have to come to an age where we (malaysian) finally managed to host a massive distro convention. It's a small step towards great future!!

Details can be found at http://ubuntu.com.my/.

I'll be going there as a volunteer/presenter for the events. I'll be presenting "10 Myth on Linux" targeted towards casual users so that they are not afraid to change from the old system.

Blergh. a little bit nervous since i usually shielded myself from public appearence.
Okay I hope everything is going to turn out allright!!

Go FOSS Malaysia!

*I'll post my presentation slides after the events.

Nmap scanning technique and SSH tunneling and various other methods.

2008-02-20T10:37:00.000+08:00

Since my ex roomate , who is currently engage with internship somewhere around KL keeps bugging me how to do tunneling inside his own network. I think i ought to write one, please take not in the real life job world, the benefits of having good networks versus getting kicked out of office is not something we really like ( but hey somehow the rules doesn't apply to most local malaysian company).

1st. we would like to check if your internet connection is using transparent proxy or not by just opening your web browser.

If it points out to a website that you need to enter a password or something, let say it forwards the connection to service.checkout.com .

Entering password is boring so will nmap give us a clue?

nmap service.checkout.con -p 80,3128,8080

if it reveals something like this:

PORT STATE SERVICE
8080/tcp open http-proxy

Just connect it directly and you should be okay.

2nd. Bypassing firewall rules

Note this method may or maynot work depending on the level of your administrator skills. But it might helps a little bit.

Let's assume the firewall block all incoming/outgoing traffic from any other ports except 80 and 443. To make matter worst every non encrypted packet will be monitored review and etcx3.

This is a good practise actually since i ImHO you shouldn't waste time surfing stuff u shouldn't at the work place. But to continue there's a method that we call SSH Tunneling.

What it does? We can say in some case as a cheap ugly poor man lowlevel vpn. SSH have an ability called remote portforwarding and local portforwarding.

To simply matter a local portforwarding will create a connection from your choosen localport encapsulate in the ssh traffic and conect it to an's external ip with it`s chosen port.

While remote portfowarding does the thing reversely.

So how do we get this thing to work on?

1st. Setup a SSH server running at port 443 . Here is a list of good servers

2nd. Get a good client i think Putty is quite nice. Links

3. Now let's make some simple example we are using jaguars shell as a dynamic port forwarding. Here's a quick and ugly guide using screenshots .. I don't like writing too much.

Using Minefield as example:

P/S: Ghust gunalah meebo

Fedora: Virtualization made easy. with Qemu

2008-02-18T23:15:00.000+08:00

The needs to run multiple operating system at the same time is not something that is unsual these days. Rapid developments from hardware layer to software layer need to be tested and simulated to ensure the product to work properly. In iserver enviroment, running multiple virtual operating system from one machine is a common practise.

Virtualization inside our own x86machine is not something so easy to deal with until recently. With massive distribution of Linux a we know what distro, Operating system virtualization begins to come into end user machine (since they desparately need windows for i don't know what). Unfortunely from what i read across most of the forums, this particular distro are so focused on the usage of Vmware and Virtual Box while leaving Qemu behind.

There a lot reasons why we shouldn't use Vmware and Vbox in the first place. The main reason is both software couldn't keep up with the latest kernel developments (from my experience). Also the needs to rebuild the kernel module after each updates is pain . Also have any of this users try running their virtualization at daemon level (instead of running vmware player and virtualbox player in the first place). So with that as my point of argument i left both methods and choose qemu.

Leaving my ramblings outside, let's take the easy step how to administrate qemu usage inside Fedora.

1. Install respective packages

yum install virt-manager qemu kqemu

2. Ensure libvitd is running

service libvirtd start

3. Well do we really need bridge networking? Yes/no/Idon'tcare

Kagesenshi have wrote an excellent guide on this

4. Create some raw virtual image first using qemu-img.

qemu-img create -f raw whateverimage.img 20M *or it can be K,G,B

5. Launch Virtual Manager

Application>System Tools> Virtual Machine Manager.

The rest of the step is just some simple wizard walkthrough :)

Additional information,

If "cat /proc/cpuinfo |egrep "svm|vmx" , is detected. You might want to try on setting up a KVM.

As usual some snapshots

Fedora: 3 simple steps to make booting/shutdown faster

2008-02-17T12:45:00.000+08:00

Arjan van de Ven, in his latest comment inside the fedora-devel have critics the initscripts processing is too damn slow inside Fedora 8. So he decided to make a quick fix on this matter. Quoting directly from the email:

What I changed:
* if you do if [ -f FOO -o -f BAR ] in bash, bash will look to see if BOTH files exist,
and then decides that since FOO exits, everything is fine and executes the if body. Looking for non-existing files
(first time) is expensive.. so splitting this kind of "if" in two reduces disk seeks and IO.
[this kind of split I had to do in a few places]
* Don't let the initscripts change the VGA font; after all, this is done during early boot already.
Programming the VGA fonts is SLOW. (Note: in F7 this was done for each init script, in F8 things were
a tad, but not much, smarter than that)
* Cache the information from /bin/consoletype. this info is used (and calculated with an exec!) all over the place;
the new code just sticks it in an environment variable. (well it was in one before, just it STILl got recalculated)
* Check if the service is running before deciding if it's a good service; the common case for "telinit' is that it is and then
no further file IO on the service needs to be done. (and if it's not we need to check that regardless)
* cache the value of "the user wants me to ask"; that's not changing so just stick that in a variable rather than looking at
the file every time. We still do look at the file IF the var is set, because the user might hit continue
* don't call into "rhgb" if rhgb isn't on the kernel commandline (I have that off on all machines to make them boot faster).
rhgb got called several times, and isn't cheap, because each time it has to realize rhgb is really not there ;)
* don't grep each script just to see how to pretty print it; assume a fedora quality script and if not, it's only a tad less pretty

Attached are the new files that implement these tweaks:
/etc/rc.d/rc
/etc/init.d/functions
/etc/profile.d/lang.sh

Tested it on my rawhide box and it works . Click here to download the corresponded tweak,

Rawhide (2nd day experience): Gnome_Clock_Applet crash

2008-02-17T00:38:00.000+08:00

After updating into rawhide and restart (exclude kernel and xorg update).

It turns out the date and time is a little bit mess out. Probably will be fixed later. Any hints anyone?

UTP-Network : RiP? probably yes....

2008-02-15T15:44:00.000+08:00

Well since the title is quite heavy:
Do read this post first before trolling around:

http://blog.kagesenshi.org/2008/02/open-letter-for-rector-of-utp.html

http://rumble.yondie.org/2007/08/utp-doomsday-network-is-it-becoming.html

It's quite a sad phenomena to see the younger generation is less interested in contributing for the benefits of the community. We are in quite deep trouble as they are no padawans for the #project-tango team and IRC Network. If the UTPchat IRC network haven't been acknowledge legally by the Management. My fear for the utp doomsday network will become true. Yeap our high and glory days in bleeding edge computing is over people. Is having a small chatting daemon running inside a network is so evil?

Since i got myself involves in the Open Source development (directly or indirectly) I come to realized that we cannot escape from using the network as a medium of distributing information or for communication. Regardless the information is bad or good. We cannot escape the trend of the worlds today.

The network infrastructure inside our local campus is something that we should be proud of not shame. The ideas of the old timer volunteer should be treasured and share as a legacy of the University. But sadly trolls exist and will says something lame like:

"Instant Massenger ada"
"Buang masa sahaja"
"So more people will become lazy"
"Tak kemane pun actually, jaguh kampung sahaja"
"Takat main fserve aje semue orang"

Doesn't any of the trolls know that social-networking is the latest trend on collaborating ideas and knowledge these days? Didn't they knew the chatting isn't just about a/s/l . Maybe it's our fault for not exposing these guys towards serious development chatting server such as freenode. But the channel linux@utpchat.net does this honor and so are other channels.

My idea if the IRC network is to link the service with the lecturer system , Discussion can be made openly, we know some students are not used to go and see the lecturer privately. By using the IRC network , one can just PM the lecturers and have a private conversation.
If things goes wild, there always the tracking logs to prevent abused. Also i believe our students loves to critics and arguing on certain stuff. Why not hold an open debate using the IRC networks with medium moderation and witness.

Well that's a little point on the benefits towards non-technical people or in other words normal students. In term of technical benefits it's one of a hell benefits that couldn't be put into one post . And frankly i believe those knowledge is damn helpful when you are in the working world. Teamwork , responsibility , how to act on emergency outbreak etcx3. I could elaborate each and any of them but that's another story for another time.

From my perspective point of view. Having an organized social network such as IRC does have it pros and cons. To those who thinks IRC makes your life harder to study. Do tell the mods to kline your name and spouse . We would also be delighted to block any income traffics from your MAC address. Blocking troll traffics also is a good education on how to configure firewalls on advance level. (More practical approach). The networking world should be free, it is up to us how well do we restrict and refrain ourself from bad temptation.

Best luck for Kage, hope he get a good response .

Boycott Trend Micro

2008-02-14T03:00:00.000+08:00

Well inside the campus, I'm sure all my friends from UTP have knowledge or otherwise heard about Trend Micro. The lovely dowey antivirus company which have make itself as a permanent residents inside their Windows Box. True i have no objection against antivirus company after all they want to help making me our PC better right? right? Like I'm going to fall for it.

Quoting directly from the FSF website:

Join us and the ScriptumLibre.org Foundation in boycotting all products and services sold by Trend Micro.

The proprietary software company Trend Micro has filed a patent infringement lawsuit against Barracuda Networks. They claim that Barracuda is violating their patent by distributing the free software antivirus program ClamAV.

We should avoid using any proprietary software, but companies that use software patents for aggression are the lowest of the low.

Lawsuits like this are a threat to the entire IT community, and to free software programmers in particular. There is little that can be done to stop patent trolls from exploiting the patent and legal system for financial gain, until we put a stop to the patenting of software altogether. But there is an immediate opportunity to punish and deter trolls like Trend Micro.

Let all of Trend Micro's potential customers know that by doing business with Trend Micro, they are supporting this attack on all creators of software works, including the entire free software community, and that the strongest message they can send to Trend Micro is to publicly boycott all of their products and services.

It's a shame on you Trend Micro. ClamAv didn't even have real time scanning so why the heck you guys so pissed of bout it anyway?

Transcoding using VLC . A quick fix

2008-02-13T10:40:00.000+08:00

Say for example your ipod or any mp3 players are out of space, and you need to sacrifies a litlle bit quality of the songs file for the sake of saving space . We can use VLC to transcode the file on the fly.

Note they are many other software that we can use such as mencoder, ffmpeg and transcode itself. The reason i choose VLC since it have been ported to other platforms such as BSD, Win and Macs.

So the step that we should use.

File> Wizard
Transcode/Save to file
Select stream (Choose a file , and you can also use specified a range of time frame you want to transcode)
In the transcode menu, choose the setting that is appropriate , in this example i use a song file so i tick onl the audio transcoding.
Select Raw if you don't know anything.
Create a save file name and click on Finish
Test playing your song. That's it

Some screenies.

Sayonara my imouto and Dlink

2008-02-12T12:45:00.000+08:00

It's quite a bitter moment for me for the past Chinese New Year Weeks. My dear little sister have gone back to Wellington , New Zealand to finish her studies in Tesl. (there goes my the Ipod touch). Well, I'm not sure i'll be seeing her again maybe until the next 2-3 years .(Unless i spend all my money that i've been saving for the next Uitm I-hack to buy a plane ticket).

Another sad story was, my faithful sempron box (used to be called Ahca Hub in UTP but codename Vermouth have died ". After working like crazy for 24 hours non stop batch encoding videos. It suddenly when kaput just like that. The reason the motherboard seem to busted. Too bad.

Also my Dlink DWL G710 start behave weirdly. When i check the router connectivity to the streamyx it works just fine. The problem is i can't connect to the Internet via all my nix box [Fedora, Ubuntu, SuSe] and also win box. All of my arts of geeks machine failed to connect except the Ipod Touch. I can't figure it out what exactly happens . I have tried resetting the router to factory setting but the problem still happens. In the end i've got to replace it with a new router/modem . Cost me 300 bucks. What a sad and despair mode .

However there's no time to dwell in the past . So hopefully with the new templates i hope i wouldn't be feeling bitter too much. >.<

Mounting FTP Server as a filesystem in Linux

2008-01-30T20:12:00.000+08:00

My friend float123 who currently engaging with Intel have asked me the
possibility of mounting a ftp directory as a filesystem in a non X enviroment system. Meaning we are not going to use features from gnomefs. Instead we are going to use what we curlftpfs . I
From the websites:
CurlFtpFS is a filesystem for accessing FTP hosts based on FUSE and libcurl.

To install this package in fedora just issue yumming as root or sudoers

yum install curlftpfs.

That's it for the installation now to get things working up smoothly. They are two methods of mounting the ftp filesystem . The first method is using this simple command:

 curlftpfs ftp://user:pass@uploader.yondie.org   /mnt/mountdirektori

However this method is not advisable on a multiuser platform as the username and the password will be visible.

To avoid this problem we create a .netrc inside your $HOME Folder.
The format is:

    machine ftp.host.com
login myuser
password mypass

Then u can easily mount the ftp directory :

curlftpfs ftp://uploader.yondie.org /mnt/mountdirektori

You can also make it automount each time the system boots up by editing the /etc/fstab

  curlftpfs#uploader.yondie.org /mnt/mountdirektori fuse rw,uid=500,user,noauto 0 0

Some screenshots.

Astalavista release hardening guide for Linux

2008-01-24T19:59:00.000+08:00

We all know linux is secured by default. At least that is the initial assumption for those who are new to Linux. However make some dumb permission and you have all your files goes rm -rf /.

Luckily astalavista have publish a paper on how to hardening your Linux system in general. Keep in mind the guide didn't guarantee your system will be 100% secured (it miss certain features such as jailing and SELinux Policy for serious security). Go keep your system safe and secure. !

Securing and Hardening Linux

Returning from slumber

2008-01-24T01:15:00.000+08:00

Well things are getting really busy lately so i haven't got much time to spare on bloggings. But within this limited amount of time I would like to wish all of my Indian friends Happy Thaipusam.

Well one thing that kick me out to live today is because after waiting for like eternity, amd/ati finally release the ati driver version 8.443 which works nicely with aiglx.. Well i don't care much bout the 3d stuff at the moment but it have fix at least the multimedia site where i can finally watch movies using -vo gl or -vo xv .. For the past 2 years my faithful rigs can only managed to display either -vo sdl or -vo x11 which consumed a lot of cpu usage and generate we all know Heat!.

I received several mails claiming is there any Download Manager such as Flashget in the Gnu/Linux system. Well it's called Multiget developed by an anonymous chinese guy known only as china_kfc. Basically it possess similliar interface with Flashget. Ubuntu or Fedora users can just yum it or apt-get .

Until next time I probably write something off on the project i'm working on maybe later.

Malaysia Rubik Association

2007-11-27T22:59:00.000+08:00

It's been a while since I wrote something. Bz with final i suppose. Finally finish and yezza preparing myself for an enjoyable holiday.

One of my favourite pastime is solving rubiks cube. At first it was quite hard but eventually you turn out loving and craving for it. Unfortunely it's sad to see that most Malaysian are not into puzzle solving so much . Which is sucks ( i mean where the heck is Semangat Malaysia Boleh? Don't tell me we need political influence to be good in puzzles).

Our neighbours in Singapore and Indonesia have setup their own Rubiks League while we continue to be ignorance (in sense of puzzle solving lah.. ). So i got tired of waiting and decide to set up our association as quickly as possible . So if you are one of the cube freak lovers in our country come and join arms with me . Maybe we could create a local tournament or might be International one or tutorial class!

Here is our link : )

http://groups.google.com/group/my-rubik

So there is a service for Ubuntu.

2007-11-14T20:18:00.000+08:00

After toyying and tweaking around after my F8 box , it 's time to give some care for my ubuntu. One thing i like about the fedora /redhat system is their service stuff. True you can just run the script by /etc/init.d/ but

So i went back to my room and out of the blues:

hub@Hub:~$ service dbhub stop
The program 'service' can be found in the following packages:
* debian-helper-scripts
* sysvconfig
Try: sudo apt-get install
bash: service: command not found

So there's a service package for all fedora/red-hat lovers . apt-get it and presto.. done.
hub@Hub:~$ sudo service squid stop
* Stopping Squid HTTP proxy squid [ OK ]
hub@Hub:~$ sudo service squid start
* Starting Squid HTTP proxy squid [ OK ]

Well it may seem nothing much important but it's better than go on typing /etc/init.d/

Fun with LD_PRELOAD, libtsocks and Tor

2007-11-13T14:11:00.000+08:00

I`m getting some troubles during the finals in UTP. Due to some of my sadistical slapstick joke.. regardless that i found it`s quite annoying as there are no compiz-manager for compiz fusion for ubuntu gutsy. So i prepare myself to download from gits and found out that :

Sigh .. owh well looks like we need to look around a little bit.. Kagesenshi mention it to me that we can sockcified the connection using tor. But wait a minute gits doesn`t support sockcification by default!!
So we must find a way to wrap non socks aware program into it.

Hence after googling around we can use LD_PRELOAD enviromental variable with tsocks library.
Taken from both sites:

Tsocks:

Tsocks' role is to allow these non SOCKS aware applications (e.g telnet, ssh, ftp etc) to use SOCKS without any modification. It does this by intercepting the calls that applications make to establish network connections and negotating them through a SOCKS server as necessary.

LD_PRELOAD:

LD_PRELOAD is an environment variable that affects the runtime linker. It allows you to put a dynamic object, that will create some sort
of a buffer layer, between the application references and the dependencies. It also grants you the possibility of linking with the
application and relocating symbols/references.

Install tor and tsocks respectively from your repository or compile from source (ubuntu apt-get install tor tsocks or fedora yum install tor tsocks

Next step is taken to configure /etc/tsocks.conf something like this

#Local-Address local = 165.0.0.0/255.255.255.0 # Otherwise we use the server server = 127.0.0.1 server_port = 9050

Done now let`s test our connection.

More info on LD_PRELOAD : http://neworder.box.sk/newsread.php?newsid=13857

UTP Install FES 2007

2007-11-11T02:40:00.000+08:00

Yeah, once again we manage to pull out some sort of ad-hoc event inside our local campus. At first i'm a little bit worried since we are making the Install Fes without any proper permission to use cafe . But it seems nobody mind us so with go back down to business.

We set up our booth around 11 am . Kagesenshi kindly provide us with his 16 switch box and Fedora 8 mirror repositery. Setting up our booth and network is a clinh. Due to some technical reason (most probably lazy) we only managed to provide installation for Fedora and OpenSuse . The reason why they ain`t any ubuntu? The color is kinda sickening these days.

At first i thought we only get hits around at most 10 people (usually the normal guys ) but surprisingly we manage to pull a lots of crowds too. I say around 30-40 people (one of em is a girl) have their box install with Fedora or SuSe which is pretty amazing.

Unfortunately not all installation are work out of the box. One guy who wish to remain anonymous couldn`t kick in to linux because of the PCI Bios Bug which had n`t been fix yet. Bios vender i suggest you checkout with linuxfirmwarekit to make sure it`s not ship for "Windows only" . That is sucks.

Special thanks to all our #linux@utpchat.net without u dorks this ad hoc event won`t be a success.
*Note.. i was not in the picture. There`s no way i would like to take pictures with bunch of dorks. no fun :p