28/9/2004

Security Flaw in Jpeg File handling

Filed under: Technology, Programming — Mulyadi @ 6:07 pm

A new security flaw in the way Jpeg files are being handled has just been announced bout few days back. This flaw will cause a buffer overrun and allow code execution without the user knowing it. All this by just viewing a picture.

Imagine this scenario…

You get a forwarded email from your friends which contains lots of cute pictures. Thinking its just pictures, and nothing harmful, you continue to view it. While u are viewing the picture, the malicious codes within the picture file proceeds to download a trojan horse from a remote server and then executing it in your computer. All this are done in the background while you view the picture. You close the email and u think, “Hey, I didn’t download any exe files so my computer is still safe” Wrong…. Your computer has already been infected and anybody can now access your computer.

The above scenario is not only limited to just email. You can be viewing a picture from a website, or from a word document, or powerpoint slide etc.. and you’ll still be affected by it.

Cool huh…. I’ve already managed to get the software which allows me to do the above scenario. What the software does is to embedd a small piece of code into the jpeg file which will cause a buffer overrun and execute a file, downloaded from a remote server, locally on your computer. Now all I need right now it to find the source codes to this software so I can start experimenting with it.

Those who need this cool piece of software can email me for it and I’ll be glad to let you have it. If anyone can find the source code to exploit this vulnerability, can u let me know about it.


end of post

22/9/2004

No school tom :)

Filed under: General — Mulyadi @ 10:16 pm

Yay… All classes for tommorow is cancelled due to a strike. Yesterday, it was Monash university on strike. Today was Swinburn, I think and tommorow, will be RMIT’s turn to go on strike. There were so many notices being pasted in the school today announcing the cancelling of all classes tommorrow. Seems like the lecturers are going on a strike to demand higher pay and less workload. hehehehe…

Managed to take 1 of the notice back home. Here it is..
Strike


end of post

21/9/2004

A Short Holiday

Filed under: General — Mulyadi @ 12:01 am

The school holidays are here( Mine only starts next week :( ) and a group of my friends decided to go on a road trip to Great Ocean Road for the holidays. We left on Sunday and today at 9pm, I was already back home. The trip was fun but one word of advice to everybody out there. Do not attempt to go camping by the sea side when its still winter time. LOL.. Those who went includes me, Sharen, Erlina, Gabriel, Rupesh, Jay, Yoshio and….

Rented a huge Toyota MPV, prepared tons of food to BBQ, bought tents to sleep in and we’re all ready to go. Left at bout 1pm on Sunday and reached our first checkpoint, Lorne at bout 4pm. Rupesh was the driver. Jay was on a bike though. Took a walk around the town and the beach. Weather was nice. After a while, continued on with our journey. The view along the way was breath taking.

Finally reach out camping area at bout 7 and we quickly started to set up tent. Boy, was it cold at night. I shared a tent with Gabriel and Yoshio. Gabriel and I were both freezing in the tent. Yoshio was quite comfortable in his sleeping bag. My feet was frozen numb that I can’t even feel my toes. Despite wearing thick socks, 3 layers of clothing, being in the tent away from the wind, I was still feeling so cold. Yoshio was feeling quite irritated by this time. Reason being that I keep trying to squeeze my feet under his sleeping bag and that Gabriel was trying to lie on him cos Gabriel has no pillow. I could not sleep and after 4 hrs, Gabriel gave up trying and suggested we sleep in the car. I couldn’t even walk properly to the car, which was bout 2m away cos I was so cold. Almost trip and fell since I could not even feel my own legs. It was that cold.. The girls, in the other tent were feeling warm though. Thanks to the quilt covers, comforters and thick blankets they brought along. To think that I laughed at them when I saw them bringing it along. Who brings all those when going camping??? Hehehe.. now I know…

In the morning, we drove to the 12 apostles. Basically, its just some rock formation. Hard to describe. Have to see the pictures or be there to really appreciate it. Then it was off to Apolo Bay where Gabriel went swimming while me and Erlina just wadded in the water. The rest felt it was too cold to go in the water. Met this really nice dog that Gabriel ended up playing with.

Then it was back to Lorne, for a last BBQ before heading back home. It has been a nice trip. I just wish that someday, I can come back here again with Syerida but from the looks of it, things dun look good. Oh well… :(


end of post

15/9/2004

New Student in my class???

Filed under: General — Mulyadi @ 10:15 pm

Yesterday, there was a new student in my class. Well, not really a new student but just a guest actually :P Erlina has no school every Tuesday so she decided to accompany me for my 1 hr lecture from 1.30-2.30. Boy was she bored. Hahahah…

The lecture was on dynamic data structure for C and lecturer was going on bout node and list etc.. and Erlina was so lost. In the end, she asked me for some paper and started drawing so that she won’t feel bored. So cute :D A classmate of mine saw her and was wondering why she’s furiously taking notes. Lol…

Well, eventhough she was bored, she did listen to quite a lot of things the lecturer was talking about. She had so many questions to ask after that lecture. Went to play pool at the cafeteria after that and she beat me at it too. She won 2 games out of 3. To think that she claimed she doesn’t know how to play. Looks like its me who need more practice….


end of post

13/9/2004

Protected: Rantings….

Filed under: General, Ain — Mulyadi @ 1:21 am

This post is password protected. To view it please enter your password below:


end of post
Older Entries »