A Deeper Look at SuckerPunch The Movie

Ok, I finally got to watch it and it blows me away. Before you continue reading, I would want to stress that the below are all SPOILERS! If you had not watched the movie, I strongly suggest you do so before you read on because otherwise, you won't understand what I am talking about anyway. Also, you should catch the 3 short animated trailers SPOILERS below!!

Here is my post to links for the 3 short animated features:
http://nemesisv.blogspot.com/2011/03/suckerpunch-animated-shorts.html

OK, I think this film is really going to be a cult movie very much like Pulp Fiction and Matrix. Some will not agree, but there are many many deep levels to talk about. First, lets set some terms. I group the reality into 3 levels. The first, being the asylum. The second, the brothel and the third will consist of the 3 other worlds - The Nazis, The Dragon and The Robots. Now, before I go on, I want to talk about the number 5 in SuckerPunch. I read somewhere it took 5 years to cook up the whole SuckerPunch movie and so there are a lot of things in 5s. 5 Heroines, 5 worlds, 5 days to lobotomize, 5 items etc... I think Zack wanted it that way. They could had made 5 level 3 worlds for 5 items, but of course the film would be too long.

So, let me talk about the 5 worlds. The asylum is what we all agree should be the reality. I think the brothel is a world created by Sweet Pea as she mentioned she is the star of the show and then later introduced to BabyDoll. The idea of using music as a therapy is also first applied to Sweet Pea. After BabyDoll was introduced to the brothel, she had her own way to "dance" out the other reality necessary for them to complete their mission. I actually had the thought that BabyDoll was Sweet Pea "Guardien Angel", but I kinda think its Wise Men in the end that was her angel. So, there is a possibility that BabyDoll was nothing more than a split imagination of Sweet Pea, because you will notice that Sweet Pea and BabyDoll has many in common especially the sister relationship.

Back to the remaining 3 worlds. Each of these world represents a conflict, especially if you had watched the 3 animated shorts. The first Nazi worlds is a conflict about the living and the dead. This could had been brought out by the trauma of death of BabyDoll's mother. The second world of the Orcs and Dragon represents a conflict of the religion where the Orcs believe in their "god" - The Dragon and the human denies it. I would interpret it as BabyDoll's blaming that a true "god" did not exist or else all the suffering will not had been rushing to her like a tsunami. In the end, we also see that BabyDoll killed the "god" (Dragon) as a form of denial. The third world of the robots. In the shorts, it was revealed that it was a conflict between the rich and the poor, at least in physical cash. This is probably a result of BabyDoll's father selling her out for money.

After looking at this, I was very inclined to believe that BabyDoll exist and is not part of Sweet Pea imagination, until. I reach the end. After being lobotomized, the movie purposely did not want o reveal BabyDoll's face giving the audience some expectation that it could be of Sweet Pea's instead. Which then would really be a SuckerPunch! But in the end it show that it was of BabyDoll and not Sweet Pea. So maybe BabyDoll did exist.

Now, there is also the never ending question whether Amber, Blondie and Rocket really existed. I guess maybe and maybe not. I did recall seeing a few girls fight in the first scene when BabyDoll was introduced to the theater, but are those girls our heroines? I guess not. But Rocket especially was in many way a shadow of BabyDoll's sister whom she had failed to protect and thus dies in the level 3 world. Their existence however does makes the obtaining of the items much easier to explain. Sweet Pea or BabyDoll would had more trouble getting all those item on them own. The question remains then is, did they really died? Remember in the end, to Dr Gorski, there is only mentioned of her setting a fire and letting one patient (Sweet Pea) escape. I think if 3 patients died, it would be worth mentioning. So I did not think the 3 heroines died. At least not physically. They could had been lobotomized, but it was never mentioned that they faced this fate, especially one scene where it was mentioned to BabyDoll that that's her own problem, not theirs. So, we can simply even imagine they got taken away and isolated and thus could not continue their mission and thus have to die away in the level 2 world. Of course, if we read that these 3 heroines are not even real, then its just fragments of Sweet Pea's or BabyDoll's imagination that died off.

The 5 items was pretty clear, especially the map and the lighter. their purpose was to create the fire that unlock the main door and guide our heroines out. The knife was to defend, but ironically it was used both as a defence and as an attack to obtain the key. The only thing left was the 5th item which was the ultimate sacrifice. If BabyDoll was unreal, it would means that Sweet Pea had to make her final sacrifice to give up her last fragment of imagination before she leaves the asylum. I am more convinced that Sweet Pea did really made the escape in the end. And another segment that supported the fact that BabyDoll was not real was that BabyDoll had to made the last sacrifice to set herself free. In the end, she was lobotomized. One way to explain her getting the freedom is through Sweet Pea. And it seems that the whole thing may had been Sweet Pea imagination because of the Wise Man character. It doesn't make sense for BabyDoll to meet him where the only person that saw him in reality is Sweet Pea at the very end. This could only had been possible is all the other characters were created by Sweet Pea to help herself escape in the end. It was mentioned by Rocket that Sweet Pea came in because of her and that is a suggestion that Sweet Pea is totally sane. Well, but every insane person I met says he or she is not insane. Could this be what Sweet Pea cooks up too?

We all know the whole movie is about Sweet Pea and not BabyDoll as the film suggested throughout, before the end. I guess this was deliberate as well. Well, thats the SuckerPunch (SP=Sweet Pea)! I hope you are not more confused after reading my thoughts. Of course, all the above are only my interp[retation. Feel free to share yours in the comments!

SuckerPunch Animated Shorts

The following 3 shorts animated films aims to give more information and details about the 3 world where our heroine visited to obtain their items.










Enjoy!

Sucker Punch Theme for Windows 7

Download at:
http://www.fileserve.com/file/zREjZfX

ATI Catalyst Application Profiles

If you think you don't need it, you could be wrong. The Catalyst Application Profiles are NOT just for crossfire or Eyefinity. As long as you are using the ATI Catalyst Drivers, you will be able to leverage on the application profile to optimize your game play. Here is a link to the original Application Profiles:

http://www.rage3d.com/cap/

And yes, you will realized its actually faster and newer than the AMD / ATI site.

For a understand of the Application Profiles, here is a good FAQ:

http://www.rage3d.com/board/showthread.php?t=33961798

Enjoy you ATI Card!

Asus Express Gate Update

Well, it seems that when your motherboard is no longer the latest model around, Asus will stop updating the drivers and tools available for it, even though there are newer version out there which will work with your board. Express Gate is only of those tools. So, what exactly is Express Gate? It allows you to boot into a minimized Linux with basic function such as Skype, web browsing etc and all these straight from the BIOS. And in a way this is safer than you normal OS because the hacker will have compromise your Linux image in order to get something working, but the image is not saved and can be restored at every reboot. However, it is not said impossible because basically its a Splashtop OS which if the files are modified, it can still be hacked as described in this article:

http://phoronix.com/forums/showthread.php?11610-Hacking-Express-gate-(Asus-Splashtop)

Here is one of the description of Express Gate:

Technology developed by ASUS and introduced with their P5E3 motherboard that utilizes Splashtop, which is a Linux environment that is integrated onto the motherboard. With this technology users can turn on their computer and in five seconds be able to access the Internet using Firefox, online e-mail,Skype, and the Splashtop desktop without having to wait for their operating system to load.

Now, not all motherboard will support Express Gate. You will know when it says so. After the first Express Gate, there are many other version which differs in the way the image is installed. These are namely Express Gate SSD and Express Gate HDD. In any case, I notice that the latest version can be option via FTP from:

ftp://ftp.asus.com.tw/pub/ASUS/misc/utils/

And the latest version for the first Express Gate is v1.5.17.10 as of today.

DoS on DBS / POSB ATM?

I recently had seen 2 cases of hanging the POSB / DBS ATM machine. On both occasion, it was done with a NETS FlashPay CEPAS Public Transport Top-up card. That lead me to wonder if this is a SURE way to DoS the ATM.

Lets take a look at what happened. Bascially a man in front of me decide to top up his CEPAS card using the built in facility. This is a supported and legit function as you can even see the announcement here:
http://www.dbs.com/newsroom/2009/Pages/press090123.aspx

In both case, the man decided to take out this NETS FlashPay CEPAS-Compatible Card and place it next to the contactless reader (Ermm, why do people have to press it so hard onto the contact, when its suppose to be contactless???). This is how the FlashPay card looks like:
http://www.nets.com.sg/netsflashpay/

And the next thing that happened really pissed me off. The whole ATM just froze there. (Remember, I am next in the line!!!) I can only give that guy a WTF look while he start taking out his phone to call the IBM guys to come fix it because he is not sure if the transaction is done, but either way, his ATM card is stucked inside.

OK, the strange thing was that NETS claim that you can actually top-up their FlashPay card at ANY DBS ATM. Apparantly, I had seen it DoS on me twice...

Have you seen something like this happening?

Mozilla - Firefox, Thunderbird, SeaMonkey all re-patched AGAIN

The reason why I gave up on Mozilla is really because its unsafe. Such poor poor patching and testing... Within 2 days of release, we get yet another important update. And this actually address multiple vulnerabilities, so it is not optional.

Category: Widely Deployed Software
Affected:

• Mozilla Firefox prior to 3.6.14
• Mozilla Firefox prior to 3.5.17
• Mozilla Thunderbird prior to 3.1.8
• Mozilla SeaMonkey prior to 2.0.12

Metasploit Framework 3.6.0 Released!

Here are the new additions:

New Modules since 3.5.2

Exploits and Auxiliaries¶

• Wireshark CLDAP Dissector DOS
• Microsoft Windows MRXSMB.SYS _BowserWriteErrorLogEntry Pool Overflow DoS
• SAP Service Discovery
• SAP Management Console getEnvironment
• SAP Management Console Brute Force
• SAP Management Console Extract Users
• SAP Management Console getStartProfile
• SAP Management Console List Logfiles
• SAP Management Console Instance Properties
• SAP Management Console Get Logfile
• SAP Management Console ABAP syslog
• SAP Management Console Version Detection
• NetSupport Manager Agent Remote Buffer Overflow
• Citrix Access Gateway Command Execution
• Mozilla Firefox Interleaving document.write and appendChild Exploit
• Internet Explorer CSS SetUserClip Memory Corruption
• Microsoft Word RTF pFragments Stack Buffer Overflow

Post modules

• post/multi/gather/firefox_creds
• post/osx/gather/enum_osx
• post/osx/gather/hashdump
• post/multi/gather/filezilla_client_cred
• post/multi/gather/pidgin_cred
• post/windows/escalate/screen_unlock
• post/windows/escalate/service_permissions
• post/windows/gather/filezilla_server_cred

For those who had been using the svn, you should get 3.7.0-dev by now.

Xmas Getaway Day 4

And so this was the last day of our short trip. We basically did not have a good idea where to go, and we only have that much time in the morning. So we went back to Sungei Wong and we finally saw a pet shop this time. We did not really buy anything there, but we saw something of interest... You will never guess.. Its a pair of Prairie Dogs... They are.. well... hyperactive... We did not take any photo because they shop owner probably won't like it, but here are some info and photo about Prairie Dogs:

http://en.wikipedia.org/wiki/Prairie_dog

Then we went back to the shop and bought the "Prawn Cracker King". We tried a few that other day and loved it. The normal one that is. I didn't like the Tapioca one though. So we both bought one deluxe pack of 3 x 3 pieces each and carried it all the way back.. And I also found out that although the packing looks great, it wont really last... You will still have to finish them soon.

So for the last meal here, we decided to try out the Toilet Cafe here... I had heard rumors that its real bad in Taiwan and Hong Kong, but what the heck, you have to try it to know it. And guess what, the rumors were right after all. It look cute, but the taste just won't make it.. Maybe its because when you associate it with toilet and such, you lose appetite somehow. 

Here are some photos of the food we got:

And of course, even the restaurant is designed as a toilet :

After that, I took a little bit of time to quickly buy some flashrive (which was cheaper there) and we rushed back to our hotel to finish our packup and finally bought the bus back. The bus was a double deck, but our seats end up in the lower deck. We had our usual stop and such. What we did not anticipate was that it turns out to be a holiday on the day we were coming back and there was a bad jam at the course way. To make it worse, there was this China lady which was like skipping queue (with a stupid excuse like, you all do not want to move in front, so I moved). At first, it was only her. Then I grumble to get the people to unit against her. EVIL. But social engineering was one of my better trade of skills. And when she tried to ask her group to slot in as well, everyone turns and gave her a good scolding. But the real reason I did not took it against her at first was actually because SHE IS ON THE SAME BUS as me! So you can imagine because of her, we got delayed. And more jammed. And really really late when we get back. It was ok, I did not really care because I was with Jane. With her, every second feels nice.

So we came back and took a cab home. That finally ended our 4 days short trip to KL.

Here were the previous posts:

http://nemesisv.blogspot.com/2011/02/xmas-getaway-day-3.html

http://nemesisv.blogspot.com/2011/02/xmas-getaway-day-2.html

http://nemesisv.blogspot.com/2011/02/xmas-getaway-day-1.html

Bad Chinese from Local Chinese Newspaper

Ever wonder why is Singaporean kids really bad at Chinese? Just take a look at this photo...

This local Chinese newspaper manage to make 2 mistake in writing 7 characters! Wow! That must be some record.

Farewell Onee

Onee (04 Jan 2010-25 Feb 2011)

Onee came to my house the very night Hino passed away... I almost felt as if Hino held on until Onee came to me... But it as only been a short 1 year plus and now Onee had gone over the rainbow bridge as well. Onee had been a really fun loving hamster and had many signature moves (the twist, flip over etc) that made us laugh at many times. Onee was well and even the day before, he enjoyed his strawberry yogurt snack when my mum gave it to him. On the 25th Feb night, Onee just slept, peacefully as ever and did not wake up.

I just want to share this poem with you Onee, for one last time...

Just this side of heaven is a place called Rainbow Bridge.

When an animal dies that has been especially close to someone here, that pet goes to Rainbow Bridge.
There are meadows and hills for all of our special friends so they can run and play together.
There is plenty of food, water and sunshine, and our friends are warm and comfortable.

All the animals who had been ill and old are restored to health and vigor; those who were hurt or maimed are made whole and strong again, just as we remember them in our dreams of days and times gone by.
The animals are happy and content, except for one small thing; they each miss someone very special to them, who had to be left behind.

They all run and play together, but the day comes when one suddenly stops and looks into the distance. His bright eyes are intent; His eager body quivers. Suddenly he begins to run from the group, flying over the green grass, his legs carrying him faster and faster.

You have been spotted, and when you and your special friend finally meet, you cling together in joyous reunion, never to be parted again. The happy kisses rain upon your face; your hands again caress the beloved head, and you look once more into the trusting eyes of your pet, so long gone from your life but never absent from your heart.

Then you cross Rainbow Bridge together....

Flash Drive Wiping

From article
http://www.theregister.co.uk/2011/02/21/flash_drive_erasing_peril/

I just want to add some of my views here. I had tried to wipe a flash drive once before, but with any recovery tool, you can easily get the data back. It seems that for flash drive, when there is a write, it will automatically try to spread the write evenly so that the drive will wear out uniformly. As such, the wiping does not work.

Solution to the Web Hacking Game from OWASP EU

The original game:
http://www.appseceu.org/?page_id=175

Here is my solution:

In the first request, grab the Viewstate and decode it. Its basically Base64 with the linefeed 0d0a at the end.

Just submit. Do not change the userguess because there is a check that it must be 3 digits. You will get it right with 1 attempt.

Click continue and you can change the count to 0 and the viewstate to any number above 999.

This accomplish part 1 of the game. 

Next, there is a form input, which allow you to search player. This is vulnerable to SQLinjection. It as a MySQL server and you do not even need to use commenting. Just inject:

' or 2=2 or '

and it completes the whole sql statement nicely. I dun use 1=1 because its, well too common.

With the big list, its just a matter of finding the WORSE possible guess. At first, I would think its the HIGHEST number of guess, which I am wrong because the way the answer choose is based on the SIGNED long int, so the negative score is HIGHEST. Weird. Basically its user "appseceu"

Or really if you just want to cheat, view those who hacked the db and all their names has appseceu there! :P X_X

Just back and resubmit the first request to make that record with the user appseceu and with a POSITIVE score (because its a requirement).

Anyway, have fun.

Web Hacking Game

There is a small mini hacking game on the OWASP EU page at
http://www.appseceu.org/?page_id=175

Its too late for the ticket winning, but you can still play with it. I will give the answer in the next post.

Upgrading Windows 7 SP1 Beta to RTM / Final

Now that the final version of the Windows 7 / Windows 2008 Service Pack 1 is available to everyone, you may want to install that. However, for those who had installed the BETA, you may realized that when you ran hte update, it just said that the updated had already been installed (or something similar).

If you compare the beta file and the final file, there will be a few hundred MB of difference (depending on which version). That probably mean if you keep the BETA, you will be missing those hundreds of MB of patches. So my best advice is to uninstall the BETA. However, where will you get the information to uninstall? You will only get it when you manage to get to the first installation screen in the help link.

So here you are, I had copied the instruction out here:

To uninstall SP1:

1. Click the Start button, click Control Panel, and then click Programs.
2. Under Programs and Features, click View installed updates.
3. On the Uninstall an update page, click Service Pack for Microsoft Windows (KB976932), and then click Uninstall.
4. Follow the instructions on your screen.

So here you go. Go ahead to uninstall the BETA, then it will reboot and reboot again before you can cleanly install the new RTM or Final.

Xmas Getaway Day 3

Day 3 started at the same time (due to breakfast) but I am sure I could have slept a bit longer. So we spend the morning packing and wasting some time watching TV etc. It is near lunch that we decide to set off to Times Square. Time Square is as last year, decorated with the snow houses for Christmas. Here are some of the photos I took:

There is a indoor theme park with a indoor rollercoaster which I had seen for many many times over the year, so it was not such a "wow" for me. There are lots of food there too. I remembered I had a Thai buffet the last time I came with my guys from EY, but I will definitely give it a skip because I think I prefer something lighter for my stomach on that day. There is Wendy too, which I had skipped last year and I skipped it again this year because I did not find something I really love there. We had Secret Recipe last year too and the service really sucks, so no way I am going back... While wondering around looking at fake bags, fake watches and stuff, we finally ended up in a unlikely place. Its a Hong Kong Restaurant called Uncle Duck (得哥火锅餐厅).

Now, normally you will order the most famous stuff, which Jane did, was the Duck Rice. I, instead, went for the Beef Western. Well, I did regret. Of the 2 pieces of beef I got, one of them was in fact over cooked and it was so hard I couldn't cut or swallow it. Damn, I thought I will never come back again. On the other hand, Jane's duck rice was suppose to be very good.

After a lousy lunch (for me), we went to check out what was on the theater and we ended up buying 2 tickets to Tron : The Legacy in 3D. Well, at least 3D is consider expensive to the local folks considering its RM15 where as normal is RM10, and pirated DVD is RM4. Do the maths. But the normal is filling up fast, so I thought: what the hell, I just went for the 3D. Tron is a good show. It does brings back the memory and feelings of the 80/90s. The soundtrack was really really good too. Well, I can't say the 3D is something very different, as it was just like any other 3D movie out there. But at least we had a great time.

And after some more looking around (without much buying though), we end up at dinner time. Its again time to decide what to eat. We had reserve a seat for the shuttle bus to Chinatown for tonight, but thats going to be at 9pm which is so late for dinner. So after some wondering, we end up at Uncle Duck again. This time I ordered the duck rice. And yes, it was really really good. In fact, after this meal, I did not had duck rice anywhere else for a long long time. Here are some photos of it, but I doubt I could express the taste with the photos:

After a good dinner, we return to the hotel. I did some shopping (for other people) at the shop selling pearls which was honestly pretty cheap. Before I know it, I am on my way to Chinatown again. This time, we did not need ot buy any more stuff from Watson or Guardien, we just walk around, enjoy looking at the cheapo imitations bags and stuff. Along the way, we sat down on a beef noodle store. I overheard a funny conversation from a lady (probably from Singapore) asking how many grams are the beefs for some cost and the store keeper can only answer, that she roughly just take. Pay more, take more. Its really funny because at Chinatown, things just doesnt't run the way it is as if in the city (Although Chinatown is right in the middle of the city). Anyway, we each had a good bowl of beef noodles there seated at the old wooden chair by the roadside. 

We hang around until the shops starts to close and we realized its also time for us to return to get our ride back. I notice this truck selling really big buns the last few times we came, but never tried it. So this time I decided to have it a go. The bun is huge and named after Amy Yip (叶子媚) and it is really huge as you can see here:

Thats how big it was as compared to a 50 cents and a HTC Snap Handphone. Took us a while to finish it. 

When we returned to the hotel, we found a nice candy man in our room with courtesy of the hotel. It was kinda cute.

After some washing up and we took our time to watch some TV, it's time to sleep and get ready for the last day of our trip...

(To Be Continued)

Previous Posts:
http://nemesisv.blogspot.com/2011/02/xmas-getaway-day-2.html
http://nemesisv.blogspot.com/2011/02/xmas-getaway-day-1.html

Nmap 5.51 Released

It took a while, but 5.51 is finally here. Here are the fixes from 5.50:

o [Ndiff] Added support for prerule and postrule scripts. [David]

o [NSE] Fixed a bug which caused some NSE scripts to fail due to the
  absence of the NSE SCRIPT_NAME environment variable when loaded.
  Michael Pattrick reported the problem. [Djalal]

o [Zenmap] Selecting one of the scan targets in the left pane is
  supposed to jump to that host in the Nmap Output in the right pane
  (but it wasn't).  Brian Krebs reported this bug. [David]

o Fixed an obscure bug in Windows interface matching. If the MAC
  address of an interface couldn't be retrieved, it might have been
  used instead of the correct interface. Alexander Khodyrev reported
  the problem.  [David]

o [NSE] Fixed portrules in dns-zone-transfer and ftp-proftpd-backdoor
  that used shortport functions incorrectly and always returned
  true. [Jost Krieger]

o [Ndiff] Fixed ndiff.dtd to include two elements that can be diffed:
  status and address. [Daniel Miller]

o [Ndiff] Fixed the ordering of hostscript-related elements in XML
  output. [Daniel Miller]

o [NSE] Fixed a bug in the nrpe-enum script that would make it run for
  every port (when it was selected--it isn't by default).  Daniel
  Miller reported the bug. [Patrick]

o [NSE] When an NSE script sets a negative socket timeout, it now
  causes a controlled Lua stack trace instead of a fatal error.
  Vlatko Kosturjak reported the bug. [David]

o [Zenmap] Worked around an error that caused the py2app bootstrap
  executable to be non-universal even when the rest of the application
  was universal. This prevented the binary .dmg from working on
  PowerPC. Yxynaxen reported the problem. [David]

o [Ndiff] Fixed an output line that wasn't being redirected to a file
  when all other output was. [Daniel Miller]

Download it from:

http://nmap.org/download.html

Metasploit Framework 3.5.2 Released!

Version 3.5.2 of the Metasploit Framework is live! This release fixes a security issue where unprivileged users on Windows were able to write files in the framework installation directory, allowing privilege escalation. For details, see the 3.5.2 release blog post. In addition to fixing this vulnerability, 3.5.2 includes a revamped WMAP courtesy of Efrain Torres, improvements to Meterpreter's railgun extension thanks to chao-mu, and a fledgling version of Post Exploitation modules (a more powerful replacement for Meterpreter scripts). The full release notes for the framework can be found online. 


It can be downloaded from:
http://www.metasploit.com/

DBS MasterCard SecureCode 3DS sucks!

Why do I say so? It is supposed to be safer and more secure. Yes, that is provided the information is correct in the first place!

What actually happened was I did my shopping happily keying in all the information and ready to pay. Then I was told that 3DS is required to completed the purchase for security reason. Sure, why not. Then I come to a page to enter my OTP (via handphone)... which I waited and waited... It NEVER came. Why?

I took a look at the phone (ends with XXXX) on the page... WTF? The phone number is WRONG! By 1 digit anyway. I thought it was my bad, I probably entered the wrong number into their banking webpage. I went to the internet banking immediately and guess what did I saw. The number was CORRECT on the banking site. And I do recall now that I actually was using the OTP on the banking site as well. WORKING.

So could someone tell me WTF was going on and how my number can be wrong on the 3DS site? One immediate idea stuck me. Keyboard Monkeys. They probably did not transfer the information digitally over to the 3DS system. Instead, they hired cheap labor in the form of Keyboard Monkeys to re-key in all the mobile numbers. That would explain how a typo like this can happen.

Man, and I thought we are going to conquer space someday. Well, not if bank still decides to do things the analogue way instead of going digital. But then again, at least they could have implemented checks to ensure correctness. Which they did not. So here we have it. The National Bank of Singapore. Would you trust your fortune with them. For all you know, they could miss one 1 zero in your savings someday. (Or they had already did...?)

Using xxd with DNS to do file transfer

This is a real sneaky trick and works in environment where you want it clean without additional tools. Its not rocket science, but it really works!

http://isc.sans.org/diary.html?storyid=10306&rss