My heart is ok, but my eyes are bleeding

Leaf Security Research

TL;DR: heartbleed is bad, but not world ending. OpenSSL is not any more vulnerable because of its freelists and would still be vulnerable without them.

We felt that there weren’t enough heartbleed write-ups yet, so we wrote another one. Unlike many of the other posts, we are not going to talk about the TLS protocol or why we think the heartbeat extension is pointless. Instead, we are going to focus on the bug itself and more specifically, why sensitive data gets leaked.

First we would like to state that, as far as complexity goes, the heartbleed vulnerability is nothing special, but that doesn’t mean it was easy to find. All bugs are easy to spot after someone else points them out to you. Hindsight is 20/20 after all. Riku, Antti and Matti at Codenomicon and Neel Mehta at Google all independently discovered this bug. Neel was also kind enough to…

View original post 2,226 more words

Advertisements

Lost and Found Code: Dianemo P2P

No, that really is the correct spelling….

Tonight’s update is actually coming to from a hospital bed, but that’s a whole ‘nother story.

I was rummaging through an old computer the other day and came across this project (after installing 63 XP updates because it was in storage). It’s been ages since I’ve last fired it up let alone browsed the source code for this project.  I thought it was a very good starter project and, even with a few glitches, was still usable and had given me some good ideas. Mind you, it was written in .Net 1.1 considering the age (folder last modified Thursday, ‎August ‎14, ‎2003).

I can’t remember who the author was and the original download file which may have had the author’s info and license is lost (found the zip, but still no author info) and I’m fairly sure the site where it was hosted doesn’t exist any more because Google couldn’t find it either. So if you happen to come across this post and is the author or know the author, plase let me know and I’ll add the credit.

… On a side note, I wonder how many other such projects disappear completely every day. And speaking of long lost, remember the good old days when total awesome (sprinkled among totally rank) Photoshop and creative web design sites a la Halovison, Eight83 and Floodgear were dime a dozen? Ah… the first decade of the 21st century; But I digress…

Here’s the download file for the source and project. Let me know if the link stops working. You may need to do some conversions to get it to run.

R.I.P Bravo TV (1980 – 2001)

Once what used to be the “film and arts network” turned into the “watch what happens” petty drama, I was truly dismayed.

Then again, I would tune into it to see if anything has changed. Nope…
Now they’re committed to giving the rest of the world the impression that gay people and women have the worst taste in television ever!*[see notes]

Why would you encourage “arts” or “film” or even “class” when you can entertain with non-entertainment.

Former class act... Bravo TV sucks!

Former class act...

Now I’m starting to spend more and more time on IFC which has also been seeing its share of hiccups, but I think it probably won’t end in the same fate. Considering it is owned by Rainbow Media, the original owers of Bravo, I’m more hopeful. In fact, I think IFC (though a bit rough around the edges) is what Bravo should have been today.

There is some reality TV and semi-reality TV out there (ones inspired by some predicted outcome that goes horribly awry resulting in entertaining moments I.E. Mythbusters) that are actually interesting beyond the same arguments and silly banter we’re already used to only relocated to more affluent settings.

“Project Runway”…
Reinforcing my belief that fashion designers have no sense in fashion. I’ve seen abstract art from the 60’s that seem more comfortable and functional wrapped around a person (I.E. a scene from What a Way to Go!  from 1964 is a classic example). What better way to give a great first impression than to dess like a freak.

Whatever happened to “usable fashion”. As in something you could wear on a daily basis without handing out free seizures to everyone on the street?

“Sheer Genius”…
And I don’t care about hair! If I didn’t have to cut it or comb it to step out of the house, I would forget that I even have any. I understand you need to present some sort of upkeep there, but if I could, I would place a restraining order between my hair and each and every contestant in that show.

“Millionaire Matchmaker” ?
Here’s a hint for the naïve… There’s no such thing as romance. You find someone who puts up with you, produce offspring, and then you die. End of story. If you want comedy between that, then consider stubbing your toe and your partner laughing at you as your personal highlight. Excitement? The time you pretended to enjoy the company of your significant other while menacing over another unsuspecting soul. Your options are only as good as your looks and the size of your wallet.

If you’re wealthy, then chances are, your wallet is the only reason your significant other puts up with you. And that person isn’t so significant to you either, if their looks start to fade.

Then there’s Kathy Griffin’s “My Life on the D-List”…
I’m not going to bring up her personal life and difficulties as that has no bearing here. I just don’t give a flying intercourse about celebrities, their idiosyncrasies or other gossip. And if you’re not living a sham of a life with your only source of entertainment coming from the misery and suffering of famous intellectual midgets, neither would you.

As Patton Oswalt once exclaimed, we’re spending all our time watching “***holes and ****wads at work”, only to come home and watch the same on TV. Why?

People with enough privilege to afford plenty of therapy and be motivated to stick their heads out of their shells to see a world of suffering are not looking to reality TV to boost their careers. Those that don’t are media whores.

Notes

*Apparently, the network primarily caters to a gay and female audience between the ages of 18-54. If the line-up is any hint, according to the Bravo execs, the folks in this range, who also happen to be gay or female, are tasteless, pretentious dimwits. I sincerely hope that’s not the case.

Considering Agnieszka Holland co-wrote and directed Europa Europa, Sarah Jacobson wrote and directed I Was A Teenage Serial Killer, and Kathryn Bigelow directed Point Break, I also can’t believe female writers and directors are all one trick ponies a la “Romance” & “Comedy”. I put quotes around them as I’m seeing a disturbing trend in films created by women, allegedly part of these genres, that failed to induce either sentiment.