nuxx.net
Making, baking, and (un-)breaking things in Southeast Michigan.

Category computers

rez.nuxx.net hull breech

July 8, 2006

Well, I’m pretty certain I know how the attack was done.

It appears to have been a phpBB exploit targeted at crisishour.com launched from 213.219.122.11.

Within the course of ~30 minutes that IP hit every single vhost I’ve got, and on crisishour.com it actively went and ‘did things’ in phpBB. Looks like via whatever hole in phpBB it deleted the contents of every vhost it could find and tossed an index.html or index.php in the root, as appropriate. I believe it also may have parsed the config files for Apache, because it seems like a pretty intelligent script. It also deleted all files and directories that www:www had access to in those subdirectories.

Fortunately things in the database and Gallery data directory are intact. I just need to move all of that over to Dreamhost one site at a time. This will take a while.

For what it’s worth, that IP is zone-h.org, which appears to be a shady ‘security’ site and the IP is owned by people in Estonia.

So, lessons learned?

1) Separate privileges based on site.
2) Don’t host domains for people who won’t keep their shit reasonably up to date and won’t stay in touch with me.
3) Don’t run phpBB until it’s been secure for a while.

Click for log info…

computersmoved from livejournalnuxx.net

Free Stuff

July 7, 2006

I’ve got some things I’d like to give away. Anyone want them? My only rule is that you come pick them up somewhat soonish.

These things are as follows:

· Weller WP25 soldering iron, with two tips (screwdriver and 1/32″ conical), stand, and sponge.
· Two older, very quiet, Pentium 200 computers. I’ve used these as routers in the past, and can ensure that they come with enough NICs for you to do the same. Run Linux or OpenBSD just great.
· The microwave seen in this photo. It’s a good size for an apartment and is practically like new. I really never used it much, and it’s been sitting in storage for a while. I’d like a to trade something for this, maybe $20 or a nice dinner someplace or… Something. I’d just like it to go away.
· Two pairs of passive computer speakers.
· 10Mb hub, 24 port. HP J2601A.
· Netgear RP614 router / firewall thingie. Works, just isn’t needed anymore.

acquired thingscomputersmoved from livejournal

Ch-ch-ch-changes!

June 29, 2006

I’m going to be moving my personal website from static HTML to MediaWiki, possibly with Turck MMCache.

This is because I’m tired of not regularly updating my page because of the problems of dealing with static HTML and templates. A locked down, CMS-style copy of MediaWiki seems to do just what I want.

Anyway, if you’d like to take a look at a preview of the site, it can be seen here.

In order to maintain the ability to have a bunch of other subdirectories full of stuff, I’ll probably have things redirect from / to /wiki or something. But we’ll see about that…

Oh, and if you have any comments about how I can make the site better (besides a new theme) please let me know.

computersmoved from livejournalnuxx.net

rez.nuxx.net

May 18, 2006

Gur. rez.nuxx.net threw some SMART errors on /dev/ad10. I’m thinking that box needs some replacin’.

I mean, I would just replace the disks, but I can’t quite take the server down for long enough to replace them all.

My current thoughts are that a Supermicro 1U with four large SATA disks (in hardware RAID 0+1) would be ideal. Unfortunately, I don’t think FreeBSD supports the ICH7 raid stuff directly.

Hmm, I’ll have to do some digging on this… Definitely won’t happen within the next few weeks, though.

computersmoved from livejournal

Dump Switch Support for Windows

May 18, 2006

Ah! I finally came across this again… I’d been looking for it:

Dump Switch Support for Windows

Yes, it’s a schematic of a NMI switch which fits into a PCI slot, and it’s provided by Microsoft. Quite nifty, in my opinion.

Also, add DWORD CrashOnCtrlScroll set to a value of 1 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters to enable manual crashing when holding the right CTRL key and pressing Scroll Lock twice.

(This is documented for my purposes.)

computersmoved from livejournal

RAID

May 8, 2006

Oh, when at Gibralter Trade Center’s ‘Computer Show’ (to get the aforementioned DB25 cable) I was walking past a table of $25 laptops (old Zeniths and such) I heard the guy there saying to someone else “…oh, then you need a RAID. R-A-I-D. It’s what companies use. Have you ever heard of it?”

Yeah, it’s that kind of place.

computersfound thingsmoved from livejournal

eBay C64 Issues

April 28, 2006

Well, the problems with the eBay auction for the C64s is working out well. I’m talking to the guy on AIM and it seems my shipment did get mixed up with one from another auction.

It seems like everything is going to get sorted out. I may end up with only one SID out of the deal, but that’s all right.

acquired thingscomputersmoved from livejournal

eBay Wins Again!

April 27, 2006

While I don’t normally have a problem with eBay auctions, I’ve just had the first transaction which may turn into an issue.

In this auction, #8796103506 I won a C64 and spare motherboard. The auction lists the items as follows:

Hello and welcome to my auction!

What I have here is a Commodore 64 unit with a spare motherboard for parts / chips. It's in great shape but I no longer have the power supply for this unit...therefore I was unable to test it before I put it up for auction. I remember it working when put in storage years ago but as with anything recently untested of this age..it is...yep you guessed it...as is.

I'm thinking that this would be a great chance to grab some sid, vic, or ram chips for your next project. I just need to clear everything out of my house! If you can give these units a good home this please feel free to bid!

Thank you, take care, and good luck!

The description doesn’t sound too bad, and with the photo (mirrored here) showing an intact C64 and a board with all chip locations populated, I figured it would be a reasonable place to look for a few SIDs.

Well, what I ended up receiving is what you see above. The C64 is missing keycaps, the motherboard is missing parts, and its layout doesn’t even match the one shown in the auction. I can understand untested, but wholly misrepresented? I’d rather not go through the whole process of reporting the person to eBay and PayPal and whatever else is involved in handling this. < sigh >

I’ve sent the person the following message, so we’ll see what becomes of it all:

Tyler,

I received the C64 and spare motherboard today. Thanks for
getting those out so quickly. Everything was also very nicely
packed. However, there is a bit of a problem with the items I
received. The items I received don't match the photo nor
description in the auction.

First, the 'spare motherboard' doesn't match the photos, and is
missing parts which are clearly shown in the photos.

Second, the 'whole' C64 is missing keys which are shown in the
photo, and parts have been removed from the inside of it.
Most notably the CPU and SID.

While I understand that the auction was for untested parts, the
parts I received are clearly different from those described and
pictured in the auction.

I have photos of the items I received today available for you as
proof if you wish to review them.

Please contact me as soon as possible about this, as I'd like to
get everything sorted out as easily as we can manage.

Thank you,

-Steve

Sure, it was only $18 or so, but I could really use the parts there. Reading into what I’ve found on him thus far on Google, he seems to be a bit of a musician. I’m wondering if he bought some C64s for SIDs, parted them out, and is trying to dump them on eBay with false photos and misleading descriptions. I’m hoping that he just was running multiple auctions and send me the wrong parts. But hopefully he can correct the problem.

We’ll see.

acquired thingscomputersmoved from livejournal