Miscellaneous category of Luke Hutteman's public virtual MemoryStream http://www.hutteman.com/weblog/cat_miscellaneous.html Get a complete rss feed (all categories) at <a href="http://www.hutteman.com/weblog/rss.xml">http://www.hutteman.com/weblog/rss.xml</a> en-us luke@hutteman.com Copyright 2008 2006-10-02T21:21:07-05:00 hourly 1 2000-01-01T12:00+00:00 Firefox vulnerability http://www.hutteman.com/weblog/2006/10/02-251.html A few weeks ago, Microsoft had its VML zero day exploit; this week, it's Firefox's turn. Obviously, as more people are switching from Internet Explorer to Firefox, hackers are doing the same. The thing that struck me about this particular problem was that the hackers gave no advance warning to Mozilla prior to their presentation, and The hackers claim they... (224 words) 251@http://www.hutteman.com/weblog/ A few weeks ago, Microsoft had its VML zero day exploit; this week, it's Firefox's turn.

Obviously, as more people are switching from Internet Explorer to Firefox, hackers are doing the same.

The thing that struck me about this particular problem was that the hackers gave no advance warning to Mozilla prior to their presentation, and

The hackers claim they know of about 30 unpatched Firefox flaws. They don't plan to disclose them, instead holding onto the bugs.
why are they holding on to them? one of the hackers explains:
what we're doing is really for the greater good of the Internet. We're setting up communication networks for black hats
for the greater good of the Internet? yeah right.

The scary thing is though that one of the hackers works for Six Apart, the company behind popular blogging software like Movable Type, Live Journal and Typepad.

Six Apart needs to do some major damage control, fire this guy immediately and review all code he may have had access to. It doesn't exactly ease my mind to know my weblog is running on code this guy may have had access to. Maybe it's time to move to WordPress...

UPDATE: it looks like this may have just been a hoax. Still not exactly good publicity for six apart though...

]]> Miscellaneous 2006-10-02T21:21:07-05:00 http://www.hutteman.com/weblog/2006/10/02-251.html#comments Spammers using Google links http://www.hutteman.com/weblog/2006/05/05-249.html In my "Spam Suspects" email folder today, I noticed some spam which used Google as a redirection service, by linking to http://www.google.com/url?q=http://www.somespamsite.com. When trying this technique with some other site, I found that google responds to this query with a 302 redirect to the site in question. Clearly, the spammer was using this system to lure people who trust Google... (176 words) 249@http://www.hutteman.com/weblog/ In my "Spam Suspects" email folder today, I noticed some spam which used Google as a redirection service, by linking to http://www.google.com/url?q=http://www.somespamsite.com. When trying this technique with some other site, I found that google responds to this query with a 302 redirect to the site in question. Clearly, the spammer was using this system to lure people who trust Google into visiting their site.

What I don't understand is why Google needs a public redirect system like this that is so obviously open to abuse. The google.com/url?q=... page doesn't seem to accept anything but already fully specified urls, so the sole purpose of this page is to do redirects.

The only reason I can think of for them needing a service like this is if they serve up one in a thousand search-results pages with redirect links, in order to log what people actually click on. If this were the case though, why not at least check the referrer to see if the user actually came from a google.com page? Am I missing something here?

]]> Miscellaneous 2006-05-05T21:13:41-05:00 http://www.hutteman.com/weblog/2006/05/05-249.html#comments Support the fight against diabetes http://www.hutteman.com/weblog/2006/03/26-248.html Scott Hanselman and his wife will be joining the walk for diabetes on May 6 2006. They've set a goal of raising $10,000 for this event and could use your help in reaching that goal. I encourage all of you to go to Scott's blog to find out more about this worthy cause, or go directly to diabetes.org to make... (64 words) 248@http://www.hutteman.com/weblog/ Scott Hanselman and his wife will be joining the walk for diabetes on May 6 2006. They've set a goal of raising $10,000 for this event and could use your help in reaching that goal. I encourage all of you to go to Scott's blog to find out more about this worthy cause, or go directly to diabetes.org to make your donation. Thank you.

]]> Miscellaneous 2006-03-26T23:41:36-05:00 http://www.hutteman.com/weblog/2006/03/26-248.html#comments Xbox 360 http://www.hutteman.com/weblog/2006/01/08-243.html After seeing it in stock through their inventory locator, I drove by Circuit City yesterday to try and get myself an xbox 360. Since the store is about 20 minutes from my home, there was a pretty big chance they'd be gone by the time I got there, and they were indeed nowhere to be found in the showroom by... (374 words) 243@http://www.hutteman.com/weblog/ After seeing it in stock through their inventory locator, I drove by Circuit City yesterday to try and get myself an xbox 360. Since the store is about 20 minutes from my home, there was a pretty big chance they'd be gone by the time I got there, and they were indeed nowhere to be found in the showroom by that time. Then I noticed an employee carrying two to a counter, so I followed him, asked if they had more in stock (the ones he carried were spoken for), and was finally able to get me one.

When I asked the guy why they hadn't put them on the floor, he responded "we can't - there would be fights", suggesting this had actually occurred before. Then again, in an attempt to sell me their $70 extended warranty, he also told me half of them were returned to the store because of defects, so he wasn't exactly that trustworthy I guess.

First impressions:


  • While it looks pretty good on a standard TV, it's clearly designed for HDTV. Some of the in-game text can be hard to read at times on a regular TV, and the Need for Speed most wanted demo looked better on my PC with 20" monitor than it does on my 52" projection TV. Since I won't be buying a HDTV any time soon, I might just end up getting the VGA cable and connect it to my monitor instead.
  • Having finished Need for Speed Underground 1 & 2 on my PC, I thought I was pretty good at racing games. PGR proved me wrong - I've got a lot to learn (like: you should actually let go off the gas and brake before turns).
  • The built in PC connectivity is very cool, allowing me to access my entire music collection from the living room. There's also supposed to be iPod connectivity, but I don't think I'll even need to try that since the PC connectivity works so well.

For people still looking for one: Best Buy also has an inventory locator (though it's a bit buggy), or you could subscribe to xbox360tracker's RSS feed to be notified of availability at dozens of online stores.

Gamertag: aMillionMonkeys

]]> Miscellaneous 2006-01-08T18:12:37-05:00 http://www.hutteman.com/weblog/2006/01/08-243.html#comments Outage problems http://www.hutteman.com/weblog/2005/10/23-234.html My hosting company ran into some issues this weekend that, besides causing a two day outage for both my blog and for sharpreader.net, also potentially caused some email to get lost. If you sent me anything on Friday, Saturday or Sunday, you may need to resend it - I'm not sure how much is lost for good and how much... (331 words) 234@http://www.hutteman.com/weblog/ My hosting company ran into some issues this weekend that, besides causing a two day outage for both my blog and for sharpreader.net, also potentially caused some email to get lost. If you sent me anything on Friday, Saturday or Sunday, you may need to resend it - I'm not sure how much is lost for good and how much will be redelivered later :-(

Also, if anyone has any positive experiences with hosting a 50+ Gb/month site at a reasonable price (I currently only pay $17/month), please let me know. This wasn't the first outage I've had, nor do I expect it to be the last. Maybe it's time to move on.

update: looks like my hosting company still has some issues to be worked out; I can't send any emails through outlook for getting some weird "503 valid RCPT command must precede DATA" error (though sending through the web-based interface seems to work fine), and for some reason my movable type install is not showing any of your comments. Comments have not been lost though, as I can see them through the MT admin interface, and am also getting the email notifications (i'm actually getting those twice now... weird) - I just need to figure out why it's not rebuilding the pages correctly...

update 2: email issue has been fixed - for some reason I had to use some outlook setting that wasn't needed before their servers crashed... now all I need is to figure out what's going on with MT...

update 3: turned out that all comments were in a pending status and needed to be manually approved (the email notifications conveniently failed to mention this though). My MT-Blacklist was setup to only force moderation on old posts, but since the crash-recovery it now seems to force it on new ones as well. Oh well - I'm long overdue for an upgrade to MT 3.2 + SpamLookup anyway; guess it's time to stop procrastinating (but not tonight).

]]> Blogging Miscellaneous SharpReader 2005-10-23T22:59:14-05:00 http://www.hutteman.com/weblog/2005/10/23-234.html#comments