OS x-86

Here's your HowTo

Super Notebook kicks serious ass...

"Take these guys seriously; their ideas are the future of computing..."

SPECIFICATION:

Processor: 6.8GHZ CPU (AtomChip® Quantum® II processor or 4 x Intel® Pentium® M processors 1.7CHz) / System Compliance: Two Operating Systems with Voice Command (Microsoft® Windows® XP Professional and Linux®) / Memory: 1TB Quantum-Optical non-volatile RAM (NvIOpSRAM-SODIMM 200-pin) / Storage: 2TB non-volatile Quantum RAM (NvIOpRAM-ATA IDE) / Optical Drive: DVD Super Multi / LCD Display: 12.1” WXGA (1280 x 800, 16:10) TFT Glare Type LCD display with 1.3 Mega pixel CMOS camera / Video & Graphics: Two Integrated graphic controllers [Intel®855GME internal graphics, support Intel® DVMT (Dynamic Video Memory Technology) and AtomChip® DVM (Dynamic Video Memory)] / Communication: 10/100 Base-T LAN on board, MDC Fax/Modem V.90/V.92 on Board, 802.11a/802.11b/802.11g WLAN, Intel® PRO/Wireless 2100/2200BG/2915ABG network connection, WiFi, Bluetoth, GPRS -with Bluetoth antena, CMOS camera with USB interface, Mega pixel resolution CMOS image / Pointing Device: Synaptics touchpad with 4 way scrolling button / Application Launch Key: E-mail, Internet, Capture, WLAN / LED Status Indicator: Power, Suspend/Resume, Battery Charging Status, Quantum Storage Access, Num Lock mode, Caps Lock mode, Scroll Lock mode, WLAN Lock mode / Keyboard: 3.0mm travel, inverted-T, 88keys with 2 windows key (Internet & Microsoft For Connectivity) / Interface Ports Front Side: One 4-in-1 card reader slot (support SDIO/SD/MS Pro/MS), Audio line out, Stereo Microphone-in / Interface Ports Left Side: LAN port, Modem port, SVGA–out port, One Type II PCMCIA slot (support CardBus), 1394A port (mini jack) / Interface Ports Right Side: USB 2.0 ports x 3 / Interface Port Rear Side: DC-in, Kensington Lock / Audio: Built-in two stereo speakers and Built-in Microphone / AC Adapter (Input: 100-240V AC, 50-60Hz, 1.5A. Output: 20V DC, 2.5A, 50W) / Battery: 6 cell Li-lon battery pack. Battery Charge: 3 hrs charge time to 100% capacity while system off and 4 hrs charge time while system on. Battery Life: Approximately 8 hours for AtomChip® Quantum® II processor and 3 hours for 4 x Intel® Pentium® M processors 1.7CHz / BIOS: AMI, Support PnP, password, Bootable from USB and DVD / Power Management: ACPI 2.0 compliance / Smart Battery System Support / Security: Kensington Lock / Size: 320.0(W) x 242.0(D) x 22.0(H)mm/28.0mm (front/back) / Weight: 1.9kg(when fully equipped with AtomChip® Quantum® II processor) and 2,20kg(when fully equipped with 4 x Intel® Pentium® M processors) / Packing Accessories: Quick Guide, Support CD (Driver, Utility, Manual), AC Adapter, Power Cord, Battery Pack, BOSE Headphone Music System with noise Cancelling.

USB Car key!?

I think that its an awesome idea: Mazda's new hatchback is to open your door, start your car, add music to the car's internal hard drive, and provide a means for loading GPS Maps. I think that this will be my next vehicle definetly. Like the guy that wrote this article,"Good thing this is still a production car, and my [truck] is still running good.

http://www.japancorp.net/Article.Asp?Art_ID=10779

Knoppix Arcade Machine

So another knoppix distro for the kiddies

Knoppix Mame will turn any machine into a sweet arcade machine. Sounds great for my little brothers and sisters...

The original package can be found on sourceforge, but I would say its a hell of a lot easier just downloading off of exeem or demonoid. (torrents) If you go with the original package then you still have to add your own roms to the distro and rebuild, whereas if you go do a search for "mame" on a torrent network of some kind, its already there. But hey if you dont have anything better to do then have fun.

Chinese Hacking the DoD

Interesting Article ...kinda long

Identity Thieves in Action: Video

http://www.identitytheftsecrets.com/videos/paypalemail3.html\

Interesting to see how these guys go through this process...

Detect weak network passwords with Hydra

Security experts always advise you to use only strong alphanumeric
passwords for network applications, and change them often, but you know
that not everyone on your network is security-conscious. Starting to
worry that weak passwords may be slipping through your defenses? Then
it's time to unleash Hydra, a network login cracker for more than 30 network services.

Hydra comes from The Hacker's Choice

(THC), a group that has written more than 60 open source network
security tools and research papers. Hydra receives frequent updates and
is the group's second most downloaded project.

I ran Hydra against a MySQL server on my local machine. The simplest
way to run Hydra is to specify a user name and password combination for
it to try. This is useful only when you know what the username or
password of the service is likely to be. To get a feel for Hydra, use a
login and password that you know will succeed. I did so by running:



hydra localhost mysql -l root -p rootpass


This runs Hydra against MySQL on the local machine with a login of root
and a password of rootpass. By default, Hydra spawns 16 concurrent
processes. Adding more processes with the -t
option can speed things up a bit at the risk locking yourself out of a
network service if the administrator restricts the number of connection
attempts. Here, Hydra reports it succeeded in connecting with this
combination and outputs:



[3306][mysql] host: 127.0.0.1 login: root password: rootpass



To run Hydra against a machine on a network, just substitute localhost with an IP address or hostname.

Specifying a login and password combination for every attempt is not
very efficient. The login part of the equation is the easy one. Typical
logins for most network services are words like root or admin. The
password part is where the difficulty lies. That is what makes Hydra's
ability to use dictionary files for both logins and passwords so
useful. A dictionary file contains a list of words (one word per line)
that Hydra can cycle through for logins or passwords.

You can specify a dictionary file with the following syntax:



hydra localhost mysql -L login.txt -P pass.txt

Hydra does not come with any dictionary files -- you must
create your own or download one. One option is to use something like an
English language thesaurus
from Project Gutenberg. This list contains commas and does not have
only one word per line. You can clean up this list with the following
Sed command:



sed -e 's/,/ /g' -e 's/[ ]/\n/g' mthesaur.txt | sort | uniq > pass.txt



This removes the commas, places each word on its own line, and removes
duplicate entries. This gives you a dictionary file with 74,618 words.

One way to test Hydra with a file this size is to create a small
login dictionary file with usernames and use a large dictionary file
for passwords. Next, add a MySQL account with a username and password
combination from these files. For example, using a login dictionary
file with 10 entries and pass.txt gives Hydra 746,180 combinations to
cycle through.

If you know the service you're testing against has a minimum
password length -- say, passwords must be at least 10 characters long
-- then testing passwords with fewer than 10 characters would be a
waste of time and resources. Hydra comes with pw-inspector, a utility
that sorts passwords based on criteria you pass to it. You can sort
pass.txt to words with 10 or more characters, by running:



cat pass.txt | pw-inspector -m 10 > sortedpass.txt



This trims the list down to 28,571 words. The final command to run is:



hydra localhost mysql -L logins.txt -P sortedpass.txt



This brings down the number of combinations to a slimmer 285,710.

The amount of time this takes depends on the speed of your machine
and the placement of the login and password in the files. Hydra updates
you as the process goes on. My 1.2GHz AMD Duron processor can crunch
approximately 4,000 combinations per minute with an estimated time of
one hour 10 minutes to run the whole set. This particular scan took an
hour. I achieved nearly the same result over a switched 100Mbps network
in later testing. In that test, Hydra's bandwidth usage averaged
100Kbps. If you need to quit mid-scan, go ahead. Hydra saves its
results in a file named hydra.restore. To pick up where you left off,
use the command hydra -r from within the directory where you initiated the scan.

There is much more to Hydra then what these simple examples show.
Hydra can scan entire networks at a time and work through proxy
servers. A GTK-based graphical interface called xhydra is also
included.

With the help of Hydra, you can weed out the weak logins and
passwords that pose a security threat to your network. It's a good tool
in your network security arsenal.

Paul Virijevich is working to eliminate the "Linux consultants cost more" TCO myth. He recently started a consultancy, providing cost-effective open source solutions to small businesses.

DVD Shrink

For whatever reason, dvd shrink is no more. Apparently the team hasn't worked on it for a little bit now, and they are now closing the site. You can however find the dvd decrypter download off of
r8.org

...and the dvd shrink program here at afterdawn
DVD Shrink at AfterDawn

Nessus Vulnerablity Assesment

So this should turn to be an interesting project...

For the windows boys...
Windows Nessus

Just straight off the Auditor boot cd
http://new.remote-exploit.org/index.php/Auditor_main

How to use it:
Iron Geek on Nessus
He's got a speech issue but the guy is damn brilliant

If you're thinking I should have to put the link for a nessus download in linux then maybe you shouldn't be using linux...

The ultimate hack

Hacking started out on phones right? I think that would be great to make this work:

• Go and grab a GSM transciever and rig it up with an asterisk linux based pbx box.
  
• Make the pbx talk VOIP (Work your system out with a VOIP carrier...)
  
• Have your GSM phone talk to the transciever and send your calls through the PBX via IP
  
• Start saving a crapload on calls..
  

found somewhere on slashdot

test your firewall

Test your firewall (for the new guys...)

http://www.hackerwatch.org/probe/

HTTP headers explained

Ever wonder how people can find out so much about you through the internet? Check into how your computer talks to the internet. Headers have a bunch of information that will allow people to assess how you get to you...

fun with http headers

Coolest CarPC out there

This is by far the coolest car computer ever. You know you want one, even if you aren't a nerd...

password recovery

A list of security firms:

http://www.passwordportal.net/



Have you lost or forgotten a password? Do you need help recovering a password? Here you will find links to Commercial Password Recovery resources.

Newsgroups: Faster downloads

Torrents are great, but you know you wont be getting those awesome download speeds that the internet is capable of. 800 kb/s sound good???

Newsgroup download tutorials. They have a movie with some helpful search sites for material. Definitely worth looking into if you are even somewhat interested in awesome download speeds...

monster telescopes made easy

These things are huge, and you can build one.
heres how...

Build your own Wireless ISP

IBM Wireless ISP Server page

Myth (TV)ology

Myth TV

This prog plays well on Fedora Core 3

http://wilsonet.com/mythtv/fcmyth.php

Although I have found a mythKnopp version. (installs a myth tv system straight off of one distro installation disc...

KnoppMyth Torrent



Systm did an episode on a MythBox. All you need is a 2.0ghz machine with 512 mb ram, as much storage as you think you need (80gb is sufficient), and one or two tv tuner cards and you're in shape for some HDTV picture in Picture tivo session whatever.

podcasts galore

The latest version of iTunes has support for Podcasts, the latest and greatest reasoning behind buying one of those $300+ purchases... So far the best podcasts I have found so far are:

• Diggnation
  
• TWIT
  
• Systm
  

...and there is a podcast no matter what your flavor of preference is over at Odeo.com

WRT54G Firmware and WDS

WDS- Wireless Distribution System

By default, the stock firmware on the WRT54G does not support a whole list of features that it is capable of...

... and despite Sveasoft charging for their supped up version of the firmware its out under GPL protection circulating. Apparently they have been kicking people off of their subscriptions if they find that you link out to one of the GPL download sites.

WRT54G Forum
WDS Tutorial
WRT54G firmware Download Site Download
Sveasoft
Subnetting WDS
Open WRT Download
Open WRT Documentation