Terrorfahndung in Kinderzimmern

1 Comment

Telepolis über die "Terrorfahndung in Kinderzimmern", die neulich im FOCUS reißerisch aufgemacht wurde, eigentlich lächerlich wäre, aber ein sehr erschreckendes Licht auf die juristische Praxis in Deutschland wirft, wie auch die Kommentatoren im Lawblog meinen.

Zum Glück steht mein alter Chemiekasten nicht in meiner Wohnung, sondern bei meinen Eltern auf dem Dachboden. Hoffentlich rufen die mich an, wenn die Polizei vor der Tür steht, ich würde niemals eine Hausdurchsuchung verpassen wollen.

XCP, XCP, XCP

No Comments

Der SPON schreibt über "Neue Vorwürfe gegen Sony BMG", der recht umstrittene Kopierschutz von Sony installiere sich selbst dann, wenn der Benutzer dem EULA nicht zustimme. Der Artikel ist mit einem Bild illustriert, das das Logo und Motto des Kopierschutzes zeigt: "XCP - the true meaning of audio security".

Was SPON nicht daran hindert, im Text durchgängig "XPC" zu schreiben.

(Und was sind denn "versteckte Codes" oder "Malicious Codes"? Vielleicht sollte man bei der Übersetzung aus dem Englischen etwas mehr Sorgfalt walten lassen.)

Google is sorry, and Canon no habla UI

3 Comments

We're sorry...

... but we can't process your request right now. A computer virus or spyware application is sending us automated requests, and it appears that your computer or network has been infected.

We'll restore your access as quickly as possible, so try again soon. In the meantime, you might want to run a virus checker or spyware remover to make sure that your computer is free of viruses and other spurious software.

We apologize for the inconvenience, and hope we'll see you again on Google.

It happens when searching for "TC80 N3 inurl:canon.com", but not when searching for "TC80 N3" only. Actually, it happens as soon as I use "[term] inurl:".

One would think that Google had the brains to make better filters. Or that they would give some means to complain about the block. I guess that means I'll have to go back to the old days of browsing to a product page from the manufacturer's page.

If only Canon.com didn't suck so much for finding product info.

There is no general product information, you have to choose your region (America, Europe, Asia, Oceania). In the case of Canon Europe, you reach the Product Finder ("For Home").

Now where would the TC80-N3 (a remote release with timer) be? Accessories? Doesn't look like it, that only lists some consumer cameras, under the heading "Digital Compact". Didn't I just click "Accesories"? I'm confused, but reasonably certain that they won't hide the TC80-N3 for DSLRs somewhere behind a link to the PowerShot A80.

Ah, so it surely must be in "Digital SLRs"! Following that link tells me that I can "stretch my visual limits" thanks to the EOS system. I'm not sure I actually want to do that, but if Canon marketing says I can, I'll believe them. Despite their good efforts though: No, I don't want to compare up to three cameras side by side, thanks. I just want to know where the heck you put the TC80-N3 technical information, including a large picture that shows the button layout.

Heck, just a large picture would suffice now. So, back to the "Product Finder". Isn't it curious how there is no obvious search functionality in this "Finder"? I suppose it's really only meant for finding, not searching. Turns out that there is a search functionality, but it's below the content, out of the viewport, and the link to it is hidden really well in 11px #666666 text: the "click here" in "If you cannot find what you are looking for, please click here to go to the Consumer Products search engine" is actually a link, and don't think it's marked in any way - it's the same color, size, and text decoration as the surrounding text. Didn't we stop using "click here" as link markers years ago anyway?

What keywords would you use for a remote release with timer, called "TC80-N3"? I tried "TC80", "TC80-N3", "TC80N3" without results, "timer", "release", and "remote" with a lot of completely unrelated results, and "remote release" and "remote release timer" for even more random results. The more terms you add, the more results you get, which suggests Canon use an OR relation by default.

Indeed, trying "remote and release" gives only 15 results. Unfortunately, they are all about cameras, not the TC80-N3, and they don't even mention the terms "remote" or "release" anywhere on the product pages.

What gives?

Common Sense and Sony

No Comments

Unfortunately, common sense and Sony are only passing acquaintances..

phpMyAdmin scanning

1 Comment

Just got 26 requests from some bot or script looking for unprotected installations of phpMyAdmin. The requests, one per second, were made to the following URIs:

  • /phpmyadmin/main.php
  • /PMA/main.php
  • /mysql/main.php
  • /admin/main.php
  • /db/main.php
  • /dbadmin/main.php
  • /web/phpMyAdmin/main.php
  • /admin/pma/main.php
  • /admin/phpmyadmin/main.php
  • /admin/mysql/main.php
  • /phpmyadmin2/main.php
  • /mysqladmin/main.php
  • /mysql-admin/main.php
  • /main.php
  • /phpMyAdmin-2.5.6/main.php
  • /phpMyAdmin-2.5.4/main.php
  • /phpMyAdmin-2.5.1/main.php
  • /phpMyAdmin-2.2.3/main.php
  • /phpMyAdmin-2.2.6/main.php
  • /myadmin/main.php
  • /phpMyAdmin-2.6.0/main.php
  • /phpMyAdmin-2.6.0-pl1/main.php
  • /phpMyAdmin-2.6.3-pl1/main.php
  • /phpMyAdmin-2.6.3/main.php
  • /phpMyAdmin-2.6.3-rc1/main.php
  • /phpMyAdmin-2.6.2-rc1/main.php

The requests all originated from 66.235.201.231 (ds201-231.ipowerweb.com, which doesn't forward resolve). A portscan shows ports 21 (ftp: 'Microsoft FTP Service'), 25 (smtp: 'Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830'), 54 (ftp: 'Serv-U FTP Server v5.2 for WinSock'), 80 (http: 'Microsoft-IIS/6.0'), 135, 139, 445, and 1433 open. Some ports just above 1024 are sporadically open. The host is probably a zombie.

I've mailed {abuse,hostmaster}@ipowerweb.com at 01:17 CET.

If you're running any management software without proper protection (IP-based where possible, HTTP Authentication with a strong password at least), this is your last warning call.

Even for protected directories, you should change the default directory name, e.g. by appending a random string to make 'phpMyAdmin_Irogah2A' (pwgen is great for this), just to make it harder to find and thus (somewhat) protect from brute force attacks. (Yes, this is obscurity at work. Security by obscurity is only bad if it's the only line of defense, but it's great as an additional safety measure.)

PS: If you're running phpMyAdmin <= 2.6.4, upgrade to the latest version.

Update 2005-05-12 22:09

Response (Angel P.) 12/05/2005 01:06 PM

Thank you for contacting the iPowerWeb Abuse Department.

We apologize for any inconvenience this may have caused you. We have taken action regarding the network scan originating from our network.

Thank you for your time and patience.

schuehsch rockt

4 Comments

schuehsch rockt.

Seifenblasen! (thumbnail)

And so do Seifenblasen!

DANKE SEHR! <3

*kicher-wie-ein-schulmädchen*

(Es sind eindeutig die kleinen Dinge im Leben. :))