Showing posts with label Hacks n Security. Show all posts
Showing posts with label Hacks n Security. Show all posts

Friday, October 27, 2006

Some Tips/Tricks for computer Users

**How to increase life of your DVD drive
Now almost everyone watch movies on their computer's Dvd rom drive.
There is a software called DVD Idle Pro which can really increase the life of your dvd drive.

By using the "Smart Read-ahead" Cache, DVDIdle saves DVD data which will be played soon onto the hard disk cache or RAM cache, and then feeds it to DVD player. This allows the DVD drive to rest. For example: a 6X-speed DVD drive will only work for 15 minutes when you are watching a 90 minutes DVD movie.

here is the link to get the software

**Some Mouse wheel tricks/tips
If you have a mouse with a scroll wheel on it, you can do some cool things listed below:

1.CTRL + Spin(I love this)
If you are in a web browser (Explorer or Netscape or Firefox) , hold down your Ctrl key and spin the wheel. It makes the text larger or smaller depending on which way you spin. For Opera users, it magnifies both the images and the text.

2.Shift + Spin
Ever wonder what happens when you hold down the Shift key on a web page and spin the wheel on your wheel mouse? Explorer goes either back or forward, depending on which direction you spin.
Give it a try. Open up Internet Explorer(or any other browser) and follow a few links. Then, hold down your SHIFT key and spin that wheel.

**Firefox extension to Translate
This is a small extension that translates Web pages (via the toolbar button) or selected text (via the context menu) from several different foreign languages into English.This plug-in (extension) uses babel fish to translate pages. It’s small, but it does the job effectively.
To install Translate, click here.

**Trick to lock your private folder

Many will be familiar with this simple trick.
What I am using here is windows renaming trick including any registry entry and DOS batch files.
Suppose you want to lock the folder "Games" in D: which has the path D:\Games -
In the same drive create a text file and type
ren games games.{21EC2020-3AEA-1069-A2DD-08002B30309D}

Now save this text file as ren.bat
--U can use any reg word like above from your registry(Run-->Regedit)

Create another text file and type in it
ren games.{21EC2020-3AEA-1069-A2DD-08002B30309D} games

Now save this text file as Key.bat
Now you can see 2 batch files Ren and Key.Press Ren.bat and the folder "Games" will change to control panel and you cannot view its contents.Press Key.bat and you will get back your original folder.
To save the above 2 bat files anywhere on comp ...to do that u can provide absolute path of your folder to be locked in batch files.

Tuesday, October 17, 2006

How to Upgrade, Repair, Disassemble ur Mobile Phone

Need to repair your mobile (cellular) phone? Need to fix a broken display? Want to know what chips are actually inside your mobile phone? Or just in the mood of modding your mobile gadget? Here is a collection of links to take apart instructions, disassembly pictures, upgrade and repair manuals, as well as do-it-yourself (DIY) tips and tricks for mobile phones.

Read the full article here...

From the article:
Below are the links you can directly goto your make of mobile/cell phone

Friday, October 13, 2006

Backing up a Unix(-like) system

User Halfgaar finally got sick of all the helpful users on forums and mailing lists who keep suggesting backup methods and strategies to others which simply don't, won't and can't work. According to him, this indicates that most of the backups made by *nix users simply won't help you recover, while you'd think that disaster recovery is the whole point of doing backups. So, now he explains to the world once and for all what's involved in backing up *nix systems.

Read the full introduction,"recommended" processes to be followed etc here.....

Web Password Hashing

Official website is here...

Whenever you access your bank account via the web, or login to eBay or any other web service that's access controlled, you trust that service to protect your account details.

In most cases your username and password pair are submitted to the web service in an encrypted form via the SSL protocol. Whereupon they are further encrypted before being stored in the account database. This process offers a relatively high degree of security and is used by many of the web services we use every day.

In most cases then, your trust is justified. If, however, you're one of the many millions of people who use the same username and password for different web services, then your security and privacy is at risk.

Hackers and scammers have a variety of tricks and tools that can, under the right conditions, obtain the usernames and passwords that you use online. The important thing to remember is that the bad boys only have to get lucky once. once your username and password (for one service) is acquired they can be tried at a variety of "secure" websites until another match is found. Such attacks are remarkably effective
.
The obvious way to protect yourself against this is to use a unique username and password for every website you visit.
However, in the real world, this just isn't practical However, in the real world, this just isn't practical so most of us will continue to put our bank accounts, and even our identities, at risk with a "global" username and password.

It doesn't have to be this way: Three cryptographers at Stanford University have devised a ridiculously simple solution to the problem.

PwdHash

Blake Ross, Dan Boneh and John C. Mitchell have produced an Internet Explorer plug-in, PwdHash that, in theory, allows you to use a common username and password at disparate websites with impunity.

Here's how it works:

1. You create an account at example.com. Whilst doing so, you specify the username and password that you want to use to access your account;
2. When you click the "Submit" button, PwdHash steps in. It takes the password you have entered, adds it to the website's domain name, and creates a one-way hash of the result;
3. That hash is then sent to the web-server where it is stored in a database (for the sake of brevity let's imagine that the web-server stores the username and password in plain text).

The web service now has a password on record that is not the same as the one you entered but, and here's the clever bit, the next time you login to that website, PwdHash will perform the same operations again - so the web-server will get the same (effectively garbled) password, match it against the one in its database and you will be able to access your account blissfully unaware of the entire process.

Now let's imagine that a hacker manages to get access to the account database at example.com. He takes your username and hashed password and tries to login to various secure websites with the stolen credentials.

Unfortunately for our crook, it's impossible for him login to your other online accounts because the credentials he's acquired have "example.com" encrypted within them. Your account at eBay has "ebay.com" tied to it, your online bank account is locked to "bigbank.com" and your Hotmail account can only be accessed with your special "hotmail.com" password. Remember: You've used the same password for all these websites - PwdHash has performed all the trickery.

As a result, the only account that the hacker can access is the compromised account at example.com. Score 1 for the good guys!
No Fishing!

There's a rather pleasing bonus to all this. Because the password you use is hashed along with the domain name it is registered to, you are also protected (to a degree) from "phishing" scams. Let's look at how phishing works:

1. You receive an email purporting to be from your bank;
2. The email states that the bank is updating their records and urges you click a link through to your bank's website to check/correct your account details. The link appears to point to your bank's domain name so you click through, being the conscientious customer;
3. However, its a scam! The URL is cunningly disguised, it actually takes you to the scammer's website which, remarkably, is an exact clone of your bank's home-page;
4. You dutifully enter your username and password and click "Submit";
5. At this point the credentials you entered are sent to the scammer, then his server redirects you to the real home-page of your bank (if the scammer's really cunning you'll see the bank's "Login Failed" screen);
6. You think you miss-typed your username and password so you try again and you successfully login - unaware that you have just surrended access to your life savings to a clever fraudster.

Now run through that same scenario with PwdHash in the equation: The scammer gets a password that is hashed against his domain - not your bank's! The credentials he has retrieved are absolutely useless to him. The good guys score again!
Deployment Challenges

There is a downside though: Users must reset their passwords for every website they have an account on (in order for the password/domain hash to be calculated and stored).

There is also a slight inconvenience when the user needs to login to a PwdHash-protected account from a computer where he can't install the PwdHash plug-in (at work, in a cybercaf�, etc). The Stanford team have at least recognised this problem and are working on a special "Remote Hashing" service to generate the correct password as required.
Summary

Password hashing, and the Stanford team's PwdHash implementation, represents a significant step forward for online security and it's reassuring to know that the common practise of using the same username and password for many online services need not be as risky as we know it to be.

I can only hope that PwdHash will soon be available for Mozilla/Firefox/Opera/Safari etc

Worm automates Google AdSense fraud

Click-fraud menace spreads using IM
Virus writers have crafted a malware threat that serves up expensive Google AdSense web pages related to mesothelioma, a rare cancer caused by exposure to asbestos.The cost-per-click for the term "mesothelioma" is among the highest in the online ads business ranging from $4 to $13 and higher on various keyword bidding networks.

This, in turn, makes the term a prime target for click-fraud. Google AdSense allows online publishers to make revenue by displaying Google ads relevant to the content of their site. Because Google pays the host Web site based on the number of clicks on their ads, the process can be susceptible to "click-fraud".

The KMeth worm, which targets Yahoo! Messenger users, directs infected users to a web site serving a barrage of Google AdSense advertisements related to mesothelioma. Financially-motivated malware writers apparently hope to cash on the ruse through shares in the resulting advertising commissions which we doubt will materialise. Fraud detection mechanisms employed by Google are more than likely to identify rogue sites generating suspiciously high returns using such illicit tactics but that doesn't eliminate the other security risks consumers face from the worm.

KMeth exploits IE vulnerabilities to infect surfers who visit malware infested sites controlled by hackers, promoted through IM messages sent to the Yahoo! Messenger contacts of infected users. The "status message" in Yahoo! Messenger can also be also hijacked, presenting potentially enticing messages to their contacts, such as "check out my blog" in order to trick potential marks into becoming infected, IM security firm FaceTime reports.

Meanwhile an infected user's IM control panel is disabled, and their home page is hijacked to point towards rogue web sites designed to generate maximum revenue through click fraud. Using malware to perpetrate click-fraud is an established technique but the KMeth worm extends this idea by employing a battery of social engineering techniques.

A full write-up of the threat can be found on FaceTime's security research blog here.

AOL releases free anti-virus tool - Its very good

AOL is giving consumers a free anti-virus software package, dubbed Active Virus Shield, powered by technology from Kasperesky Lab.
No AOL membership is required to use the service, though users are obliged to submit their email details in order to activate the technology.

Although free anti-virus packages already permeate the market, most notably Grisoft's AVG, coverage is far from universal, so AOL's entry is welcome.A US study by the National Cyber Security Alliance last December found that more than half (56 per cent) of the participants either had no anti-virus protection or had not updated it within the last week.


Active Virus Shield offers protection against viruses, spyware, malware and Trojans before they attack, as well as real-time scanning of files and email. Signature updates are updated "every hour", a significant difference from other free packages that offer far less frequent updates.

The software comes bundled with a free security toolbar for IE users. The toolbar includes a a password manager, pop-up blocking technology, and a link to the Whois domain registration database that allows users to find more information about potentially suspicious sites.

AOL's anti-virus software promo is the latest give-away in its strategy of becoming more like a portal, such as Yahoo!, and less like a conventional ISP. Last week, AOL announced plans to give away integrated email and software, security and other products as part of a strategy to drive more traffic to its sites and ramp up advertising revenue.

In recent days, AOL has offered web users 5GB of free storage online and a range of web-based security products (via AOL Safety and Security Centre) to which it is adding Active Virus Shield as a software download. Free products including personalised email domains, video and search, as well as an update of its AOL software, are promised over coming weeks.

Please post your comments on this anti virus if you have already used it. I feel its really good next to AVG free antivirus.

Thursday, October 05, 2006

Illegal Vista OS to become crippled after 30 days

Unlike previous Windows OS,Vista is loaded with inbuilt abilities to stop piracy to some extent!!
HAHAHA...waiting when somebody hacks this feature itself and MS starts distributing patches every month!!!hehe
Anyway read the full article here

In summary the main features are:

  • Reduced Functionality Mode: this allows minimal use of the OS until it is validated. Microsoft has not disclosed full technical details, but they have indicated that the web browser (presumably IE) will work for about an hour before interrupting the session and forcing you to log off. Additional limitations are described below.
  • Buy a key online: Go online, buy a new key, and you're done.
  • Phone in for activation: instructions on how to activate over the phone rather than the Internet. (i really dont know who uses this feature now!!)
  • Enter your key : Yada yada yada!!!
In short, unless you input a legit key, or purchase one after 30 days of using the Operative System it will "lock down" it's best functionalities.

However, even if your key is identified as legit, Microsoft will continue to monitor your machine permanently, and if your key becomes invalid, or your system is identified as illegal you will receive a warning and it will lock down in 30 days from there onward.

Microsoft knows that this won't stop piracy completely, but at least they have a more realistic goal this time.

The company says it is interested in continuing to build tools that make it difficult and inconvenience to be a pirate.


Ajay

Wednesday, October 04, 2006

Some old GOOGLE HaCkS

Using Google, and some finely crafted searches we can find a lot of interesting information.

For Example we can find:
Credit Card Numbers
Passwords
Software / MP3's
...... (and on and on and on)
Presented below is just a sample of interesting searches that we can send to google to obtain info that some people might not want us having.. After you get a taste using some of these, try your own crafted searches to find info that you would be interested in.

Try a few of these searches:

intitle:"Index of" passwords modified
allinurl:auth_user_file.txt
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
allinurl: admin mdb
"ORA-00921: unexpected end of SQL command"
inurl:passlist.txt
"Index of /backup"
"Chatologica MetaSearch" "stack tracking:"

Amex Numbers: 300000000000000..399999999999999
MC Numbers: 5178000000000000..5178999999999999
visa 4356000000000000..4356999999999999

"parent directory " /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory "Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.

METHOD 2

put this string in google search:

?intitle:index.of? mp3

You only need add the name of the song/artist/singer.

Example: ?intitle:index.of? mp3 jackson

METHOD 3

put this string in google search:

inurl:microsoft filetype:iso

You can change the string to watever you want, ex. microsoft to adobe, iso to zip etc…

"# -FrontPage-" inurl:service.pwd
Frontpage passwords.. very nice clean search results listing !!

"AutoCreate=TRUE password=*"
This searches the password for "Website Accesss Analyzer", a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: http://www.coara.or.jp/~passy/

"http://*:*@www" domainname
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net

"http://*:*@www" bangbus or "http://*:*@www"bangbus

Another way is by just typing
"http://bob:bob@www"

"sets mode: +k"
This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.

allinurl: admin mdb

Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!

allinurl:auth_user_file.txt
DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun, and all belong to googledorks. =)


intitle:"Index of" config.php
This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.

eggdrop filetype:user user
These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.

intitle:index.of.etc
This search gets you access to the etc directory, where many many many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!

filetype:bak inurl:"htaccess|passwd|shadow|htusers"
This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version).
Every attacker knows that changing the extenstion of a file on a webserver can have ugly consequences.

Let's pretend you need a serial number for windows xp pro.

In the google search bar type in just like this - "Windows XP Professional" 94FBR

the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' porn sites that trick you.

or if you want to find the serial for winzip 8.1 - "Winzip 8.1" 94FBR

Wednesday, September 27, 2006

Untraceable Messaging Service Raises a Few Eyebrows - read on

A messaging service called VaporStream announced today at DEMOfall will allow any two parties to communicate electronically without leaving any record of their interaction on any computer or server. Messages cannot be forwarded, edited, printed or saved. After they're read, they're gone.


Read full article at here [networkworld.com]


Void Communications had better be ready for a call from Department of Homeland Security. Why? Because in a world where a bottle of shampoo is considered a risk to commercial aviation it's likely that federal security officials will see red flags in a service designed to provide any two people -- say, Osama bin Laden and his right-hand man in the U.S. -- with an electronic communications channel that leaves not a trace of its contents or the identities of the participants.

Key to Void's Web-based VaporStream service is the fact that at no time does the body of the message and the header information appear together, thus leaving no record of the interaction on any computer or server. The message cannot be forwarded, edited, printed or saved, and, once it's been read, it disappears; nothing is cached anywhere. No attachments allowed.

"If you need a record, use e-mail. If you don't, use VaporStream," said Void CEO Joseph Collins in the company's morning presentation at DEMOfall.

Billed as potentially controversial by show organizers, it's not difficult to see why an application of this sort would cause concern among corporate security officials in addition to the feds.

"Bad people can do bad things with just about anything," Void's chief brand officer Bob Hall told me at the company's show booth. The company doesn't see VaporStream being a useful tool for terrorists because it's built for one-to-one conversations, not one to a group. As for corporate concerns, Hall says companies will need to fashion acceptable-use policies and, in some cases, block access to VaporStream, depending on their security needs.

What they're trying to do with VaporStream is provide a secure, confidential means of communication that also happens to be recordless.

"Good guys need confidentiality, too," notes DEMO Executive Producer Chris Shipley.

She's right, of course, but that's not going to stop people from raising concerns.

Saturday, September 16, 2006

A nice notice to Orkut user from Orkut himself

SOME HEALTHY RULES FOR ORKUT USERS

ONE
If you're ugly, stop acting like you don't know it & stop using cute
nicknames. The captions under your picture that says "top model pose",
"sexy", "arnt i hot" doesn't convince anyone.

TWO
To the people who have like over 1000 friends, are you serious? Nobody
in this universe can keep up with that many friends. You're just
stupid. Go play in traffic.

THREE
If you're real pretty, dont approve all friends request and bitching
later on how u hate getting stupid comments & messages. You're the one
who approved them in the 1st place!! Be realistic on what u're getting
into!!

FOUR
Don't ever post pictures and say "OMG, I'm so ugly" "OMG,I'm so fat"
because if you were, you wouldn't post them.

FIVE
Stop peeping others scrap book to see wot that guy or gal have
conversed. Also stop being a Tomboy looking for hot chicks in others profiles.
(vice versa too)

SIX
Writing tons of scraps a day, begging people to send a testimonial,
etc.. " IS PATHETIC & IMATURE. " .PEOPLE WHO ACTUALLY CARE ABOUT YOU WILL
SEND YOU TESTIMONIALS.. Pls dont junk others scrap book so to get your
scrap figures multiply!

SEVEN
If all your pictures look the same, don't post them all. Please put
some variety in your pics. Nobody wants to see your face 10 different
ways.

EIGHT
Who really cares if I/U don't accept you/me as a friend? MOVE ON!!!
Don't send me another request or message asking "what's up with you not
adding me?" I don't want you as a friend; that's what's up!

NINE
Little 6th graders, go somewhere else because nobody wants you here and
than Orkut, you have better things in dis world to get addicted!

TEN
Nobody cares about threats over the internet. Don't try to act hardcore
with the keyboard. Fighting online is like racing in the special
olympics; even if you win, you're still retarded.

ELEVEN
If you get a scrap/ message and it says something like "repost this
within 100 seconds or a ghost will rape your dog tonight!!," IT'S NOT
REAL!! QUIT BEING AN IDIOT!!!!!!!! Pls don't forward Hoax messages like
"Orkut is gonna delete the profiles…if u don't forward dis…n junks lik
dat!!)

TWELVE(now dis is out of da subject)
If you have decided to read this, you are a true friend of the person
who has sent you this.

Thursday, September 14, 2006

Warning! Orkutting can turn ugly


CRIME FILE: For girls especially, Orkut has turned nightmarish in several cases.

Kolkata: Orkutting may be the in-thing today, but the nightmare is fast catching up with complaints of harassment, sleaze and twisted psyche.

For three girls it has already turned a nightmare. Talking to UNI, Kolkata Deputy Commissioner Detective Department Gyanwant Singh said: "The city police have probed at least three complaints the last of them from Bilaspur (Madhya Pradesh) where jilted lovers and spurned friends had turned to Orkut.com with vengeance, creating obscene profiles and lewd albums, making life a living hell for the victims."

The three complaints, two of which were made by Kolkata-based girls and one from Madhya Pradesh, were received in a space of 90 days and in all three cases, it has been found that their tormentors were known to them.

"They were let off with a stern warning. We explained to them that these acts were punishable both under the Information Technology Act and the Indian Penal Code. If slapped with cases, either their careers will be ruined or they might land up in jail. They are young people who claimed to have done this in momentary madness," Singh said.

For the victims, however, this hasn't been easy. A 23-year-old Bengali girl now doing her postgraduation in Bilaspur (Madhya Pradesh) was quite depressed after her long relationship with her boyfriend fell apart.

They had called off their engagement. While the girl was trying her best to come to terms with reality, this youth was plotting revenge.

And he did this by turning to Orkut. After creating a new profile of the girl with all possible details, the spurned lover put up obscene photographs in her album and wrote lewed innuendoes in her testimonials.

The result was that the girl was flooded with obscene calls.

Saswati Chatterjee, an MBA student, says: "I did not put up my photo on Orkut as I had heard about the trouble girls are facing with their images being used for sleaze and porno stuff. It's best to stay out of such troubles."

While girls are becoming more aware, some still leave phone numbers on their scraps. Suhani Chaudhuri said: ''I didn't start with my photo after hearing all this."

Singh said: "Most people don't realise that from the point they log on to net, to the time they enter data and send it, it's being logged. If only one cared to look in the address bar in the top, would they realise they are leaving behind a trail of everything they do. All we had to do is ask the service provider (in this case Google) for the details. They responded (in all these three cases) very fast."

"Now if you log on to Orkut, these cautionary notes flash constantly at the top of your screen. One can even report its misuse to the service provider directly," he said.

The Deputy Commissioner added that cyber-rooms are never safe. "They are impersonal. People tend to do things in cyber world that they fail to do in the real life. As long as there is no personal information, it can't harm you."

Wednesday, September 13, 2006

IP's Binary Roots

This is a geek article from Linux.com that shows you how to calculate the binary number from any IP address to show you how your network “ticks”. Very useful for...um....for....hell I don't know. If you ever have a homework assignment I guess.

http://www.linux.com/article.pl?sid=04/04/21/0250223



A wise man once said, "There are only 10 kinds of people in the world -- those who understand binary, and those who don't." OK, so I saw it on a T-shirt. Fact is, if you're in charge of a network, or just want to understand how your network ticks, understanding binary is a requirement. Luckily, binary isn't very difficult when it's applied to something you already know -- namely, IP addresses and subnet masks.

If you've ever run /sbin/ifconfig from a command line to see your IP address (or to see if you even have an IP address), you've undoubtedly seen something similar to 192.168.2.22. This is referred to as "dotted decimal notation," and it's a simplification created to make IP addressing more digestible to humans. Much as DNS resolves host names to IP addresses, the IP stack resolves dotted decimal addresses into binary format, so that the address above, 192.168.2.22, resolves to 11000000101010000000001000010110. And a hearty thanks goes to the good folks who gave us dotted decimal notation!

If you want to make efficient use of your IP space, or you have more hosts than available IP addresses on a given network, or just the opposite problem -- not enough networks to properly maintain and control the traffic flow -- knowledge of binary IP addressing becomes critical. With a good knowledge of how binary and IP are related, and a thorough knowledge of your network's needs, you can perform various bit-munging maneuvers to make the most of your address space.

First, some basics

How did I come up with that crazy binary string? Well, I know (and it's written all over the place) that IP uses a 32-bit address space. Note that every binary digit is known as a "bit." Also note that there are 32 of these bits in the above binary string. Dotted decimal notation breaks the address down into four decimal numbers separated by, well, dots. Each decimal number represents 8 bits of the address's binary equivalent (which is why you'll hear them often referred to as "octets"). So, 4 numbers, multiplied by 8 bits that each number represents, equals 32 bits.

Let's take it even more slowly. We know that each decimal number in a dotted-decimal address represents 8 bits in the binary equivalent. So what's the largest number represented in 8-bit binary? Well, that would be 11111111, which is 128+64+32+16+8+4+2+1, or 255. If I don't use all 1s, clearly the equation changes. In the case of 192, the binary equivalent is 128+64+0+0+0+0+0+0, or 11000000. For 168, it's 128+0+32+0+8+0+0+0, or 10101000. I think you get the point; if not, here's your homework.

IP addresses never travel alone

The networking world would be quite a mess if not for the existence of subnet masks. A subnet mask really makes an IP address meaningful, because it's what defines which portion of the IP address is used to identify the network and which part is used to identify the host. It does this by providing a "mask" over the network portion of the address. A subnet mask places a 1 in every bit used by a given IP address to identify a network. The rest of the bits are used to identify the host.

Let's look at a host with an IP of 192.168.3.2 and subnet mask 255.255.255.0. This one's easy if you've brushed up on your binary. We know that each octet in a dotted decimal address has a maximum value of 255. We also know that 255 in 8-bit decimal is all 1s (so this mask in binary is 1111 1111 1111 1111 1111 1111 0000 0000). We've just learned that a subnet mask uses 1s to identify the network portion of an address. It should be quite clear, then, that this subnet mask defines the network portion of the IP address using the first 24 bits (or, the first three octets) of the IP address! In other words, our network is 192.168.3.0. The rest of the address (the last octet) is used to identify the node or host on that network -- in this case, we're talking about "node 2."

Next time we'll take a closer look at how to create a custom subnet mask and how it can help you get a handle on your network. Until then, practice your binary math.

In the Beginning was the Command Line by Neal Stephenson

This article by sci-fi author Neal Stephenson, is a very interesting and insightful read on the world of user interfaces. Though a bit dated (covers up through roughly 1999), it is still worth the few hours it will take you to read it, and it is available for free on the internet.

http://www.cryptonomicon.com/beginning.html
nd Wozniak,
About twenty years ago Jobs athe founders of Apple, came up with the very strange idea of selling information processing machines for use in the home. The business took off, and its founders made a lot of money and received the credit they deserved for being daring visionaries. But around the same time, Bill Gates and Paul Allen came up with an idea even stranger and more fantastical: selling computer operating systems. This was much weirder than the idea of Jobs and Wozniak. A computer at least had some sort of physical reality to it. It came in a box, you could open it up and plug it in and watch lights blink. An operating system had no tangible incarnation at all. It arrived on a disk, of course, but the disk was, in effect, nothing more than the box that the OS came in. The product itself was a very long string of ones and zeroes that, when properly installed and coddled, gave you the ability to manipulate other very long strings of ones and zeroes. Even those few who actually understood what a computer operating system was were apt to think of it as a fantastically arcane engineering prodigy, like a breeder reactor or a U-2 spy plane, and not something that could ever be (in the parlance of high-tech) "productized."

Download the rest of the article here.

Mac stuffit
or
PC Zip

Hacking Pepsi Machines

How to hack Pepsi machines

Too freaking cool. i-Hacked.com has an article showing you how to hack into a Pepsi machine and view the Diagnostics and Sales data for that machine. While it would be cool to get free drinks, that is also kind of messed up to get free stuff at the expense of breaking the law (momma raised me right).

You would think that something like this would be difficult, but it is surprisingly easy with just the push of four big buttons. Now I just need to find me one of these machines.

How-To: Automatically download and convert TV for your iPod

http://www.hackaday.com/2005/10/19/how-to-automatically-download-and-convert-tv-for-your-ipod/

Duplicating your Firefox profile

If you use several computers, then you're likely familiar with the frustration of having to re-input your settings, passwords, bookmarks, history, extensions, and form auto-fill information into your new Firefox installation everytime you re-install your operating system, or get a new computer altogether (lucky you!). I recently got my hands on yet another extra laptop, and I thought of transferring my profile from one of my existing systems. Yes, you can download software that automatically does the backup and restoring for you, but where's the geekiness in that? Real geeks do it manually--which is perhaps the most straightforward way, anyway.

So how do we go about with duplicating a Firefox profile?

First, open up your source (the original one, where you want to copy the profile from) profile in Windows Explorer. Let's assume you only use one profile on your system, which is automatically named by Firefox as default, and that you use Windows XP. Point Explorer to:

[Windows installation drive]:\Documents and Settings\[Your username]\Application Data\Mozilla\Firefox\Profiles

You might have to first enable viewing of hidden files and folders and system files at TOOLS - FOLDER OPTIONS - VIEW. Simply uncheck the boxes that say "Hide protected system files ..." and select the radio button for "Show hidden files and folders."

You will see at least one folder inside, with this format:

XXXXXXXX.default

where XXXXXXXX is an eight-character code for your Firefox installation on that particular machine.

This folder contains all your Firefox information, including bookmarks, history, extensions, form auto-fill, passwords, and cache. You can already ZIP/compress and copy this onto a USB flashdrive or any other recordable media, or transfer via the network. Remember that this folder could get very large if you have a large cache of temporary Internet files, so you might want to clear your browser's cache first.

Then, in the destination computer, make sure you've already installed Firefox, and opened it up at least once, so that the application would automatically create a new default profile for you. Then open up Windows Explorer and then browse to:

[Windows installation drive]:\Documents and Settings\[Your username]\Application Data\Mozilla\Firefox\Profiles

where you will see a folder named

YYYYYYYY.default

where YYYYYYYY is the eight-character code for that firefox installation.

Simply copy or uncompress the folder containing the original profile into this \Profiles folder.

Now copy the YYYYYYYY string onto your clipboard (so you won't forget), and then rename that folder as you please (i.e., YYYYYYYY.default.backup). Then rename XXXXXXXX.default into YYYYYYYY.default. Make sure Firefox is not running while you do this, or you'll get file access conflict errors.

Now open up Firefox, and voila! Your original settings have been copied. Do check some of the options, though, as some extension and proxy settings may not have been transferred. But what's important is that your new Firefox installation looks and feels like your old one. Now you can go and browse away to your favorite, bookmarked sites, not having to re-input all your URLs and passwords again.



Another option is to use a utility like MozBackup to backup your profile and restore it to another machine.



SORRY

This is WRONG!!!!
As other users have said, copying the whole profile results in extension failure.

Follow instructions from offical mozilla FAQ: http://kb.mozillazine.org/Migrating_settings_to_a_new_profile

"Note: Do not copy the whole profile directory. Some of the other files contain absolute path information (like for security certificates), and your profile might not work correctly with old entries from the original profile.:"

Note first line: "This article describes how to copy data and settings from one profile to another and lists a suggested set of files. This process will not migrate extensions, themes or toolbar/window customizations." You must reinstall extensions and plugins. MozBackup does not work for FF 1.5.

Beginner's guide to podcasts and podcasting (plus: how to create a basic podcast of your own)

Much has been said about podcasts and podcasting since they were popularized especially in the tech/geek scene more than a year back. Just like blogs, podcasts are yet another Web 2.0 offshoot, bringing content-generation away from centralized sources (i.e., radio, television) into the consumers themselves--we are now prosumers of information and content. We produce, and we consume.

Let's say you came late in the game. Perhaps it's only now that you've purchased your own portable music player, got a broadband connection, or simply got wind of this wonderful new medium that lets you listen to just about anything under the sun, and even create your own audio programmes about anything under the sun, beyond the sun, and even the sun itself!

Let's revisit some basic concepts on podcasts and podcasting. Let's also have a brief rundown of how to produce your own podcast.

What is a podcast? And what is podcasting?

A podcast is an audio programme distributed via the Internet. It is very much like a broadcast on AM radio, with much commentary or discussion involved. Or, it can be like FM radio, with artists regularly releasing original music tracks on a regular basis.

A podcast is different from a regular downloaded audio recording or streaming audio, however, in that the content-distribution is automatically done through RSS (really simple syndication / rich site summary). For instance, a regular podcast subscriber would expect the audio recording to be automatically transferred to his computer (and portable media player, if available) once there is a new edition or episode of his subscribed programmes available.

What can podcasts contain and discuss?

Very much like blogs, podcasts tend to have niche audiences, with material specifically aimed at a target audience. And there are podcasts on just about any topic, from technology, to business, to politics, to fashion, to entertainment, and even very obscure and specific topics like, say, hairdressing, and your extensive Teletubby doll collection.

Podcasts can consist of short, ten-minute commentaries, but can also span to hour-long round-table discussions. Podcasters are not limited by airtime constraints, like in broadcast media; but one should be mindful of the boredom thresholds of listeners!

How are podcasts created?

Podcasting essentially consists of four steps:

  1. Content preparation

  2. Recording and post-processing

  3. Publication (and syndication)

  4. Marketing

How are podcasts delivered to the intended audience?

  • Some listeners prefer to download podcasts as individual audio files over a web browser or sometimes even peer-to-peer file transfer software.
  • Some would search submissions and entries in podcast directories, and download files individually.
  • Others would play audio directly on a web browser as an embedded, streaming media.
  • However, the standard way of receiving podcasts is by subscribing using a pod-catcher or a podcast-client like iTunes or iPodder. Subscription may be through podcast directories or by manually entering a podcast’s RSS feed URL onto the client.
  • Podcasts may be listened to on a computer or on a portable media device (not necessarily an iPod).

What do I need to create a basic podcast?

Let’s start out with a simple setup—we begin with the most essential parts of podcast creation, as these would still be very much the same steps to take when you graduate into more technically-sophisticated setups.

Hardware requirements

  • Computer – laptop or desktop running on a fairly recent processor (i.e. Pentium IV, Pentium M, or latter Celerons), and with a sound card

  • Microphone – either analog or USB (but USB mics may be problematic with some setups

  • Speaker or Ear/headphones

Software requirements. The following should be installed on your system:

  • The base operating system – may be Windows, Linux or Macintosh, but for simplicity’s sake, let’s assume Windows XP

  • For recording and mixing – Audacity

  • For encoding – LAME MP3 Encoder

  • Web browser – any modern web browser, such as Mozilla Firefox 1.xx or Internet Explorer 6.xx, will do

  • A podcatcher or podcast client – iTunes or iPodder (now called Juice)

Other things you’ll need

  • Music tracks (if so desired) – podcast-safe music can be downloaded from http://podsafeaudio.com and other similar sites.

  • A web host, or a blog, or an account with a blogging provider

  • An account with FeedBurner (to help standardize your RSS feed) - optional

  • An account with any of the following (or any other) services that can host media, particularly audiofiles: Gcast, Odeo, OurMedia

Creating your simple podcast, step-by-step

Part 1: Preparing the content

Create a script. Unless you’re an experienced talk show host, then you’d need a script or at least an outline to guide your show. Otherwise, you’d have ten minutes of umms, ahhs, and errs which will surely annoy your audience. Some prefer podcasts that are spontaneous, while others prefer clear-cut 'casts with a definite message. But I think it's best if you have at least an outline or a summary of the flow of what you would be discussing.

Here’s a rule of thumb you can follow in creating a ten-minute podcast:

  • 10 seconds: Intro music or audio
  • 20 seconds: Introduce the podcast. State the title, your name(s), and the purpose of the podcast. Also state the URL where your podcast and the show notes can be found. Introduce your guests, if any.
  • 10 seconds: If you have any sponsors, mention them now!
  • 20 seconds: Provide a brief outline of your show, if you have a script; if not, state here what you plan to talk about.
  • 9 minutes: The main body or discussion
  • 20 seconds: Wrap up the discussion, outlining your main points. If you have guests, take this time to thank and acknowledge them.
  • 10 seconds: If you have sponsors you’d like to mention again, now’s the time!
  • 20 seconds: Introduce the podcast once more. State the title, your name, and the URL of the podcast and show notes.
  • 10 seconds: outro music.
  • Optional: 3 to 5 minutes: Podcast-safe song or piece from an independent band or artist at the end of your show

Of course, these are just suggested guidelines, but for a beginning podcaster, hopefully useful enough. You are free to do variations, as necessary. For instance, some podcasters place ads right before the intro music.

Part 2: Recording and post-processing

Record the audio. This is the most fun part of podcasting. Now you can fulfill your dreams of becoming like your radio idol Howard Stern, ranting and raving about anything under the sun! Here’s what to do:

  • Open your preferred audio recording software, in our case, Audacity.
  • Check if your microphone works, and if the recording level is acceptable. Press the round, red record button and speak a few test lines into the mic. Then end the recording and then play back your test message. If you don’t hear what you just recorded, then adjust the mic and volume controls accordingly. If the recording level is acceptable, then create a new, clean recording by pressing File-New. You may now start recording your programme.
  • If you press the stop button and then record again, this will record the new audio on a new audio track (use the pause button instead, if you simply want to pause for a while).
  • Make sure you save the Audacity project after recording.

Alternative means of recording include importing an existing voice recording (say, from a portable media player with recording features, or from CD), and recording a VoIP conversation/interview (i.e. roundtable discussions).

Edit the audio recording. Once you’ve recorded the audio, you may want to take out a few blank spaces (i.e. silent pauses) or unwanted portions, or bleep out inappropriate words. You may also want to vary the audio levels on some portions of the recording, or remove noise. You can use Audacity to:

  • Delete any portion of the recordings.
  • Bleep out portions.
  • Change and vary the amplitude of the recording or any other track.
  • Change the positioning of each track with the time shifting tool.
  • Insert or move around portions of tracks by using copy/cut-and-paste.
  • Merge your voice recording into only one track, for easier editing later on.

You can now mix the audio recording with the other tracks. Once the voice track has been cleaned and merged into only one track, it is now time to mix other audio and music tracks.

  • You can import MP3 music into Audacity. You can then select and copy a few seconds, for instance, of the music intro, into the beginning portion of the recording. You can adjust the position of the voice recording using the time shifting tool.
  • Try to use podcast-safe music as much as possible. We wouldn’t want the RIAA running after us for copyright infringement, would we?

Save the podcast. Once you’ve deleted the unnecessary tracks, save the audacity project (with the music and voice tracks separate). Then export the file into MP3 format with the “export as MP3” function. You are asked to type in the ID tags (title, artist, genre, etc.) for the MP3 file. This will be used by MP3 media players to identify the media while playing.

Part 3: Publication

Upload the media. Once the file export is through, you may wish to listen to the finished product first. If you are satisfied, then it is time to upload.

  • You may upload the MP3 onto a podcast-hosting service such as Gcast, or Ourmedia. These have various features like automatic-XML/RSS generation and playing through an embedded player.
  • You can also upload onto your own host (or a free host) and then link the media to your blog or website. We shall then use FeedBurner to convert our blog RSS or Atom feed into a podcast-compatible format.

Prepare your podcast’s RSS feed. RSS is probably 50% of what makes up your podcast, because this is the technology that lets people pull the content from your server automatically as soon as you have uploaded a new episode.

  • You can hand-code your RSS feed, but this can be difficult and not recommended. Besides, blogging software and podcast hosting services usually already generate their own RSS feeds.
  • If you use a podcast hosting service, do retrieve the automatically-generated URL of the podcast RSS.
  • If you have uploaded your MP3 file onto your own paid or free host, you may use FeedBurner to automatically convert your blog’s feed into podcast-friendly format. Just make sure you use the tag when linking to the MP3 file.

Try it out yourself. Subscribe to your podcast’s RSS feed through your podcatcher, and see if it can automatically download the episode for you. If you’re using an embedded player, try to play a streaming version of your podcast on your computer.


Part 4: Marketing

Publicize your Podcast. What’s a show without an audience? If you have a fresh, new podcast, it pays to do some PR to get people listening in on your programme. Much like with blogs, the best way to market your podcast is word of mouth:

The last step would probably be to start anew! Once you’ve published one episode of your podcast, it’s time to sit back awhile for a well-deserved rest, and to think up topics to discuss on your next episode.