Search This Blog

Thursday, September 30, 2010

Skyfire 1.x Sucks, but so does 2.x


Skyfire is a browser. See the site above, there is 2 things to note. Officially,
http://www.skyfire.com/focus-geography-and-skyfire-1-0/

  1. Skyfire 1.x does not run on other regions except north USA and western Europe, which about leaves the whole world out...
  2. Skyfire 2.x is only for Android.
This almost sound like a conspiracy. Suppose Google sponsored this and wants to force everyone into using Android, this certainly fits the bill. While Skyfire has its glorious days, I think with this move, it will begin its path into the history just like Netscape... By forcing people into a certain OS is definitely the way to do this. That leaves out the Symbian, windows mobile and AppleOS users, which I dare say takes the majority of the market.

Anyway, I was at first keen to look out for a way to hack out of this using 1.x on my wm6.5, but why not just let it go... After all, there are plenty of choices for the wm6.5 users from IE, Opera to the infamous porn browsers. Skyfire is a good to have, but not dying to have. 

And why doesn't Skyfire support area such as china, japan or eastern Europe? It sound like a lazy way to say "Sorry, English only". If they leave these region out, they can heck away with the language support. This does sound logical?

BTW, if you are on Android, do you really want to use Skyfire? 

Tuesday, August 31, 2010

USB Loader GX Black Screen on All Games

I had recently did my first virgin softmod on Wii. I might blog about that in details later, but one thing I came across which I think is worth sharing is the problem of black screen on loading games from HDD using USB Loader GX.

I had checked many forums and also nothing really work. But I managed to solve it. So here it is. Before you go further, ensure the following:

1. Your Wii is properly softmodded. All steps works according to whichever guide you followed.
2. Your HDD is using WBFS file system.

I know many will disagree with point 2. But that exactly what happened to me. I was told NTFS works. So I copied a few games onto my NTFS drive using Wii Manager. Black screen. What I eventually did was to format it as WBFS. Load games using the WBFS Manager 3.01. Tada! Works like a charm.

I hope this is useful for you.

Sunday, August 29, 2010

A Dangerous Bus Ride

I notice this will never occurs to anyone when they step up the bus: This could very well be your last ride!
Well, I am not trapped on the Philippines bus, but it was a close call anyway. This was what happened:

I was on a typical bus ride on 5xx which passes through many freeway to reach my destination. It was suppose to be a fast ride since its the bus usually travels quickly on the freeway. However, I failed to realized this because I was reading. The bus was, in fact, travelling quite slowly and was doing zig-zag movement like a snake. I suddenly realized this and I took a look at the driver through the back-view mirror. It was a sight of horror! The lady driver's eyes was a thin slit of white. I could even see her purple! It was as if she was a zombie who just step out of some horror movie!

Now, we all know what actually happens. Hot afternoon. Cool air conditioning. Riding fast on the freeway. Its a good time to doze off. And that's precisely what I thought I saw. My mind raced quickly. OK, I grab my phone and SMS J. I was just worried that this will be my last SMS, so I better make it count. After the SMS, and realized I am still alive. I move myself to the "safest" seat I could get to, just in case of a crash. I do not want to be near the side windows or being throw out of the bus.

Now its time to act. I could wake up the driver and give her a good scolding, but knowing how people in this city acts, I pretty much am sure that she will deny everything. Of course, I also did not want to wait until the buss crash and maybe flip a few turns to prove her wrong. I look around to see if there was anyone else who might help me. No luck. Opposite me was a mother and his son sleeping on her lap. And behind us, almost everyone else was asleep. So, I guess its me. If I did not have to risk walking to the bus driver, which if an accident does occurs before I reach her, I am sure my fatality rates shoots up be a few hundred percent.

The buzzer. That could work. Even when I look stupid to press the bell on the highway (And I did not want to alight anyway). Actually this was quite a good idea. But instead, I thought of a better one. I just flip my phone out and blasted it with some MP3. That should be enough to wake her up. Of course, I do realized that I cannot do it so suddenly that it give her a shock and swing the bus 180 degree around.

In any case, I was lucky. She regain control and exited the bus from the freeway. Because it will be all slow and traffic lights, she had to kinda wake up. I sweat I almost felt as if I survived a plane crash or something. The rest of it is nothing special. But I just wonder how many people actually realized how close they were to the final gate in that journey. But I remind myself that I should watch the driver before I decide to sleep on these journey.

Tuesday, August 17, 2010

Hacked my HDB Lift

For most lift out there, there should be some way to cancel a command (floor button). Some of them uses double press, other just hold and it will cancel that button. But the current HDB Lift I have from EM (I think) took me a while to figure out. Basically, in the end, it is just a simple press and hold any 3 buttons and all commands are cancelled.

Well, some of you will tell me to go RTFM. IF only the manual is that easy to find. :)
Anyway, if your HDB Lift is the new generation one, this may also work for you. Don't need to endure those empty floors if you make a mistake and press the wrong one or some bloody kid press all the buttons.

Tuesday, August 10, 2010

Triceratops is actually baby Torosaurus!

Rather sad that one of my favorite dinosaur never really exist ( as a distinct species ). Triceratops was in fact the baby version of another dinosaur called Torosaurus. Well don't be too disappointed yet, Torosaurus actually looked pretty much like Triceratops.

Read more about it:
http://www.rightpundits.com/?p=6950

Sunday, August 08, 2010

Alisan Express is finally fucked!

Its not that I have no faith in the old man up there, but divine retribution is simply taking far too long...
If you recalled, Alisan had really pissed me off in a previous holiday when I blogged in:

http://nemesisv.blogspot.com/2010/02/xmas-getaway-09-epilode-really.html

Now it is about fucking time they close shop, but not in a good way. Apparently, the boss had ran back to Malaysia with all the customer's money leaving them with no coach, no money and a wreaked holiday. Totall sucks, man.

Details:
http://www.channelnewsasia.com/stories/singaporelocalnews/view/1074007/1/.html

I hope they get the bastard for it. See, thats why I do not believe in divine retribution.

Tuesday, August 03, 2010

CVE 2010-2568 is finally patched

This is the LNK vulnerability or aka MS10-046. Full information:
http://www.microsoft.com/technet/security/bulletin/MS10-046.mspx

Basically, the vulnerability only requires the user to render the icon of a specially created LNK file. This file will point to a DLL on local / remote or possibly over internet via WebDAV. As far as exploitation is concerned, I find that the follow is possible:


  • Embedded in Real-media files. This opens up possibility that it can be done in Quicktime, AVI as well if they uses the same vulnerable routine.
  • Embedded in Microsoft Office documents of a certain variants.
  • Deployed on USB device. Well, unless the user do not open USB device using Explorer, but let's say, DOS prompt.
  • Transmitted over email in certain email clients. This has not been tested. Just a theory. If this is possible, it will be disastrous.
  • I tried 7zip and WinRAR. Not possible. Likely they uses the standard Load Resource instead of the vulnerable routine. However, there are hundreds of unpacker out there. Who knows, maybe one of them gets it.
  • Any other way you can think of to get the user to render the icon.
Of course, I will not reveal how it will be done for security reasons.

Well, what are you waiting for, go activate your Windows Update and get it patched. BTW, if I do not recall wrongly, WinXP SP2 will not get this patch. If this is the case, ALL the Windows XP SP2 and below are sitting ducks out there, just askinig to be hacked times after times.

Thursday, July 22, 2010

Many new updates

There is a bunch of updates for free software this week.

Firefox has been updated to v3.6.7. There are 14 vulnerabilities patched:
http://www.mozilla.com/en-US/firefox/3.6.7/releasenotes/

Thunderbird has been updated to v3.1.1. See changes:
http://www.mozillamessaging.com/en-US/thunderbird/3.1.1/releasenotes/

And Truecrypt v7.0 is released. See updates:
http://www.truecrypt.org/docs/?s=version-history

I guess thats a whole lot to download and patch this week.

Friday, July 16, 2010

Tell Me Now (What You See) King Arthur 2004 SoundTrack ~ Moya Brennan



Long Ago,
Your name a shadow,
In my dreams, the white,
Brave still searching,
Raining Winds, fall apart.
I believe, your heart.

Tell me now,
What you see.
Tell me what you feel,
Now you're here.

Tell me.
Tell me now,
What you know.
Never let me go.
Tell me now,
What you see.

Who Cries from the hill?
The mist creeps from your eyes,
Your banner will promise,
Let's remember the start,
I believe, your heart.

Tell me now,
What you know.
Never let me go.
Tell me what,
You see.
Tell me now,
What you see.
Tell me what you feel,
Now your here, tell me,
Tell me now.
What you know,
Never let me go.
Tell me now,

Long Ago,
Your name a shadow,
In my dreams, the white,
Brave still searching,
Raining Winds, fall apart.
I believe, your heart.

Tell me now,
What you see.
Tell me what you feel,
Now you're here.
Tell me.
Tell me now,
What you know.
Never let me go.
Tell me now,
What you see.

Who Cries from the hill?
The mist creeps from your eyes,
Your banner will promise,
Let's remember the start,
I believe, your heart.

Tell me now,
What you know.
Never let me go.
Tell me what,
You see.
Tell me now,
What you see.
Tell me what you feel,
Now your here, tell me,
Tell me now.
What you know,
Never let me go.
Tell me now,
What you see.
What you see.

Tuesday, July 13, 2010

Windows XP SP2 End of Life on 13th July 2010

It had been a long 6 years and XP SP2 can be said as one of the longest lasting OS from Microsoft. But still even today, many will still clinge on to SP2. What actually happens when Microsoft says it is end of life for support?

Info:
http://support.microsoft.com/lifecycle/search/default.aspx?alpha=Windows+XP

Basically, you will not get patches anymore from Microsoft that support Windows XP SP2 32 Bits specificly as well as its other component including media player, IE, Outlook Express etc. Wait, you will notice that I mention 32 Bits, that is because 64 bits is still support as there is no such thing as SP3 for 64 Bits.

Some people may decide to hang on for whatever reasons, claiming that if they drop IE and uses Firefox, Outlook Express for Thunderbird and WMP for VLC, they will still continue to get updates. True. But do not forget that some components are still presents, especially those of IE, which arguablely is part of the OS.

Why not simply live a better life and have some peaceful sleep by upgrading to Windows XP SP3? Or even better to Windows 7? Let me know the reason if you happen to be one of those who still need to hang on with XP SP2...

Citibank forces clients to use older (vulnerable) version of Java Runtime (JRE)

Source :

http://packetstormsecurity.org/1007-advisories/citibank-java.txt

Basically in short, Citibank forces their client to use a vulnerable JRE because only that version is compatible with their application. No wonder Citibank is always on the frontpage getting hacked for at least a few times per year. Why doesn't Citibank upgrade their application? Lazy programmers? No budget? To pentest it (again) is too expensive?

Well, its all up to guesses, but seriously, to protect yourself, it is extremely important to uninstall all older version of JRE (btw, in case you did not know, upgrading doesn't really remove the older version in some cases - flagged as vulnerability in 07) so that application such as the above will not work (without telling you).

Also, as a side note, there is also a simply utility called JavaRa to remove older version of JRE:
http://sourceforge.net/projects/javara/

Sunday, July 11, 2010

ALZIP 8 and its time to say good bye to another junkware

While ALZip looks cute, there is absolutely nothing that freeware like &-zip cannot do except the special ALZ format, which is in no way faster ot compress better as compare to other formats. The other possible reason you may want to use this may be the cute icons.

So, it finally upgraded to v8.0 and suddenly my license is no longer valid. Naturally I will not pay another $30 for this crap since 7-zip (which is free) does all the same and I had actually never encounter another ALZ files since then.

So, it time to say goodbye and uninstall another piece of software which is basically wasting space and slowing down my PC in the right click context menu. Moreover, it did not really work well,. Often I get files extracted to the wrong places and all over the places actually when there are nested directories. Well, but thats my opinion, you can still give it a shot and buy it if you like.

Monday, July 05, 2010

Stealing information via USB devices

I know it had been known for a long time. But does anyone cares? You should. That innocent looking China-made hello kitty cup warmer or the free thumbdrive from some company in Blackhat. Are they really as innocent as they look? How can you be sure that those are not just means to obtain information by other entities?

In short, devices can "mimic" any other devices by coding in the ID into ttheir chip while in fact they are totally not that device and can be performing other functions such as storing keystrokes or send out files to nearby wifi devices etc. Its all up to the maker to create.

Read about it at:
http://gizmodo.com/5578183/usb-coffee+cup-warmer-could-be-stealing-your-data

Tuesday, June 29, 2010

D-Link from Starhub will NEVER fix the HNAP vulnerability?

Earlier this year in Jan, SourceSec Security Research published a exploit which in fact is just a SOAP packet which allow users to set admin passwords (in the LAN, unless someone finds a way to use HNAP over WAN) on some of the routers. I have reasons to believe in fact it is all routers supporting HNAP.

The details:
http://www.sourcesec.com/tag/hnap/

D-Link replied and stated somethings which I think was stupid such as it can only be exploited with the software (which I see is nothing more than injecting a SOAP packet because there is no authentication). I believe anyone with some SOAP knowledge is able to just send the packet over or simply run the bash scripts available on the website.

The argument about which firmware is probably some overlook by the security researcher, but D-Link should spend more time checking which are the affected firmware instead of check out which of the listed firmware did not exist!

BUT, this is the best part. Singapore telco Starhub has some promotion for their users to get D-Link products (for free I guess) and D-Link has even created a special page for Starhub users.

Here is the "Download" page for the Starhub equipment on D-Link:
http://www.dlink.com.sg/Starhub/downloads.asp

The best part is, look at those firmware. They are ancient! The link still works though, but it seems like this page is totally forgotten and they will probably not update it any further. What this means is that all Starhub users who follows this link will believe that this is the latest firmware available for their routers. And take for example DIR-655. The vulnerability is only fixed in 1.33NA which has the following update notes:

¤ Fixed: Correct HNAP issue.
¤ Fixed: DNS relay issue ( WAN Slowdown )
¤ Added: Advanced DNS descriptions


And we still have 1.11 on the Starhub page. To add some damage to this, 1.33NA is essentially for North America. I had tried looking for 1.33WW (world Wide) and this only thing that came close is from the Russia FTP which may very well end up giving you a Russian web interface (unconfirmed).

Has D-Link forsaken the rest of the world on DIR-655? Well share your thoughts here in the comments.

Disciples 3 Renaissance Gameplay

It is finally released and available for purchase. Hope they dun screw it up like the HOMM series.

Friday, June 25, 2010

心竅 -《蒲松齡》主題曲 ~ 馬浚偉



《蒲松齡》主題曲:心竅-馬浚偉

作曲 鄧智偉
填詞 張美賢
編曲 Johnny Yim
監製 鄧智偉

迷惑太多 能望見太多 明白太少
預計長夜深 終於天曉
暗黑的心 才最叵測 難料

雲象太多 而道理太多 提示太少
直到長夜深 星光普照
聽風的笑 能盡世間 奇妙

如夢初醒 無言才動聽心的呼叫
鏡中緣 霧裡花 在美好 從未需要
如夢不醒 芒然流淚過荒島身照
愛很長 夜再深 還有破曉

迷惑太多 能望見太多 明白太少
預計長夜深 終於天曉
暗黑的心 才最叵測 難料

同伴太多 沿路過太多 留下太少
別算人或妖 鬼影 心竅
有酒今宵 讓最困擾 忘掉

如夢初醒 明明還在笑怎麼哭了
鏡中緣 霧裡花 最假的 才越心跳
如夢不醒 明明流淚了怎麼失笑
怨很長 恨太多 唯愛太少

Thursday, June 24, 2010

Onee and his house

Onee is not much of a home maker and actually make a mess of it. Well, this one is taken BEFORE he messes it up.

Amazon Gift Cards!

Thanks for viewing!

Copyright © 2008 nemesisv.blogspot.com, All rights reserved.