Archive for the ‘Random’ Category

Google’s ‘Chrome’ released…

Wednesday, September 3rd, 2008

Google has recently released it’s browser ‘Chrome‘ for beta testing. After playing around with it a bit, I liked the shiny look of the interface, but it just doesn’t stack up to Firefox, yet. I do worry about the implications of using a browser developed by Google, being that Google is known for keeping large amounts of data on it’s users. A ‘Google Browser’ when integrated with with Gmail and Google itself could provide the internet giant with a new level of understanding of it’s users.

Interestingly, within days of it’s release Chrome has already been exploited. A simple exploit allows files, including executables, to be downloaded without any prompt. Milw0rm has provided the proof-of-concept for such an exploit.

Happy browsing!

Oops….

Monday, July 7th, 2008

It has been brought to my attention that the P3P settings in Firefox 2 have actually been disabled. I missed this in my research as I was going more to understand how it worked and simply assumed that it did work. Mozillazine states that “P3P functionality is not present in Firefox and will probably be removed from Mozilla Suite (see bug 225287).” (http://kb.mozillazine.org/Firefox_:_FAQs_:_About:config_Entries as provided in a comment on my Cookies, Cookies, Cookies posting.)

I apologize for missing this fact, however; the concept of P3P and third party cookies are still valid so I will leave the posting up.

and… we’re back!

Thursday, July 3rd, 2008

After nearly a month of no updates, I have returned to post again. Just because I haven’t been posting doesn’t mean that articles aren’t in the works. There are quite a few posts sitting in various stages of partial completion that I will be working to get posted soon. This week’s Reading Rainbow will encompass many of the achieved articles I’ve read since the last episode so it alone should make for decent reading.

Here’s a sneak peak at what’s in store:

  • Backtrack2 Wireless Shell-script
  • A continuation of the penetration testing series focusing on RefControl and the User Agent Switcher
  • My commentary on the “hacker mindset”

Utilities for backing up client-side website data

Friday, May 16th, 2008

I was looking into various methods for backing up websites on my localhost and have come up with 3 options. I’m sure there are more, but these require tools you already have.

Internet Explorer 6 (I don’t have IE7 installed yet, so I did it with IE6)

Internet explorer 6 offers the ability to “work offline” which downloads all data to your localhost and allows you to act as tho you are viewing the live site. In order to enable this, you bookmark the page and select “make available offline.” If you want more than just that one page, goto customize and you are prompted for getting pages it links too also. What is nice is that you can specify how deep you want IE6 to go. If you select 2, for example, all links on the page will be followed and downloaded. All links on these pages will be treated similarly and the process stops. You are then prompted for how you want to synchronize these local copies. You have 2 options: manually synchronizing and scheduling. Scheduling will do it at a specified time every n number of days. Since IE6 is “working offline” paths don’t need to be modified.

FireFox 2

Firefox 2 offers a similar solution, however; it does not appear to have the synchronization by default. To do this you “save page as” and then have the option of saving as a text file, as the single page, or “complete” which will build up all the files needed for that page. Unlike IE6 you cannot get pages linked to. There is a Firefox add-on that will provided added functionality, but this article’s scope is default functionality. Also, Firefox does not change links to localhost paths.

WGET

The previous options are great for GUI systems, however; if you are a sysadmin or a web developer and need to make a backup of a current live site before replacing it with a new version neither of these options are very good for you. So I provide a command line, no GUI option. running wget with the -r (recursive) option will provide the same functionality as IE6. Simply create a directory, change directory into it, and run:

wget -r site.com

and you have all the client side data. Much eaiser and without GUI.

These options bring up 2 more topics I’d like to cover. First is from the perspective of the site owner. Suppose you don’t want people going around downloading your content. For a dedicated person, this is not preventable, but you can make it more difficult and annoying. IE6 and wget both follow the robots.txt rules, this is not an issue for Firefox 2 since it doesn’t have this functionality by default anyways. In short, other than making it less convenient and data you send to a client (HTML, CSS, Javascript) will be available for backup which is obvious since it is client side data and the web would be useless if it was inaccessible.

The other topic is client side security. Browsers disallow cross site AJAX requests. This is a security feature to stop a malicious individual from putting AJAX calls to other sites on their page and stealing your personal information. Browsers do however allow this behavior from the localhost. So by downloading and viewing this malicious code it will execute. Also, by putting JavaScript code on your local file system you allow malicious individuals to access these files.

Interestingly it seems that Internet Explorer 6 actually beats the default install of Firefox 2 in this test. Seems Microsoft did a good job on this feature. wget doesn’t really enter into that comparison since both are browsers and wget is utility, however; it also tops Firefox 2 by having recursiveness. As backup utilities wget and Internet Explorer 6 are tied since they both preserve pages, links included. Personally, I prefer wget since I’m not a fan of GUI or tools that won’t run under linux.

A change…

Monday, May 12th, 2008

You may notice that I changed from full blog posts on the front page to excerpts posted on the front page. For posts that didn’t have an excerpt before (most of them) they are simply being truncated. I will be going through most of them an adding in excerpts to keep the site looking clean and nice, but bare with me while I get it done.

-Samurai

The return of the Tv-Links

Saturday, April 26th, 2008

For all those of you out there who morned with me over the loss of tv-links.co.uk, we can now rejoice in its return. Perhaps this isn’t new-news, but it’s news to me and perhaps some of my readers.

Not only is tv-links back, but with new functionality. They’ve added a “search” so that you don’t have to scroll through. (Though ctrl-f always worked for me.)

www.tv-links.cc

Enjoy,

Samurai

SamuraiNet Blog

Sunday, April 13th, 2008

So I’ve talked about writing a blogging engine for ages, but laziness got the better of me. So here I have now installed wordpress.

I’m going to try and post atleast once a week on something computer related, security related, or programming related as well as probably have randomly added posts about whatever I feel like.

Enjoy,

-Samurai