Saturday, September 19, 2009
Dont knock on death's door.Break the door down and fight with him
sufer from insanity...I enjoy every second of it.This page has been distracted
by a noisey object.It may be gone for forever... Im The type of guy who will
kill every1 i see becoz of something that
happened...yesterday.Just becuz I smile doesnt mean im happy becuz it a smile can cover a quintillion hatred .
-o btw we better sue Disney for making every boy believe that mickey mouse is a mouse. HAHAHAHAHAHAHAHAHAHAHAHAHAH.....NO.Play with fire no
matter wat your mommy says.Its fun.Im not crazy!i like burning down trees!My reality is
just diffrent than yours.They laugh at me becuz Im guai lan.I laugh at them becuz their the even more guai.Im So paikia.My fist are made of cushion.
someone didn't remember to take their sleeping pills today OOPS!did my sarcasm hurt you?get over it.caution. my fist has sharp edges.do not touch the edges of my page.or u will die involuntarily.I dont only want to rain on your parade.I want to blow up all the people i hate.I was going to take over the world but i got distracted by something�food!.Im not retarded.I just like killing air
This�sentence is trying to lick its atoms.Ya,I know most of u dunno what is atom,but this�1 of it is determined.I RUN WITH CHOPPERS!IT MAKES ME FEEL GOOD. I CANT SEEM TO CONTROL MYSELF SO I JUST CHOP OF EVERY PERSON'S HEAD
Quoted from ahsilly's blog but i editted it
Lots Of Greeeeeeeeeeeeeeeeeeeeeeeeeeeeen,
Keen Tat~
Environmentalist Blogged:3:47 PM
i finally learnt a great lesson. after the incident dat happened... i lost many of my friends... so i went back to do some reflection. for the first few days, i insisted zhan yong is in the wrong but after a few days i listened to a song which made me come to my senses. i was in the wrong. if i did not do something bad to them before why would they do this to me? well i have to share with a saying " do onto others what others do onto you " remember dat and u would not fail like me. i failed to understand many things before but now, i understand it. another saying from spiderman " great power needs great responsibilities" that i really did not understand. i always wanted power so i was always the leader.hmmmm... like some ppl say " once a failure, always a failure" from naruto i think it applies to me. there are numerous things dat i have failed to understand yet but it's quite a good achievement for me to understand so much. im not asking for sympathy from my gang but there is sumthing i have to say to u guys. on the day which the incident happen, im not fully putting the blame to zhan yong cause i noe veri well that i am in the blame too. hmmmmmm.... to every1 who reads my blog Sorry Zhan Yong about that day. im not asking for forgiveness but if you do not forgive me i shall leave rulang with regrets. well i have to say a few days later after hearing a song i cried becoz of the effort i put into the gang. some of you might think " yeah rite u r jus toking crap" for example. friends are suppose to trust each other not have doubts. u guys think i dun like her but i do. it's jus dat u jus don't trust me. im sorry for all the things i did. i know thr are a few of you who despise me but i don't care whoever despises me. i jus wanna have a great childhood. for some ppl this might be veri confusing coz u dunno anything but its my blog for my thoughts. for example Lester, on dat day itself i didnt say i hate you but sum1 or u urself said that i hate u. hmmmm.... you guys never thought about me never trusted me. like everytime zhan yong say i owe him money never pay bak... dat onli happened once and u insist dat it happened alot of times? you onli thought bout yourself . for those of you who think im joking, strike alt+f4 and get the hell outof my life. all i want is jus frens who trust each other!i know many of you decided to hear the rumours or jus make up some story to screw me up. if u have anything unhappy about jus find me on msn. the great times we had... all got screwd up. for those who still dun believe me jus leave me alone. i know some of you will think dat im a bad fren who teaches you all the bad things. but you think, did you nt teach me any bad things? those who agree and still does not accept my apology we'll call it quits. i think its unreasonable to hit me with rubberbands when im jus taking my stuff back from u. when take your rubberband, you start to hit me. a rubberband is not even $1 while the pens u take from me cost alot. i think its not onli me who needs to do reflection u have to do it too. when i say u it means you ZY. i know u hate me veri much but cant u just say it? rather den buly me. what do you gain for bullying me? you will feel happy and wat? when i report your actions to adults you get a scolding and u get pissed off and come find me for revenge. well i have to leave the rest for your own thoughts. for the other readers remember the sayings i wrote... im sure it will benefite u sum day.
Lots Of Greeeeeeeeeeeeeeeeeeeeeeeen,
Keen Tat~
Environmentalist Blogged:12:18 AM
Friday, September 11, 2009
Quote :
Hackers have turned their attention to Facebook's hundreds of independent applications. The results are not terribly surprising, but do not tell a good tale: app developers don't seem to know a thing about basic security, and are putting private user information at risk. As a result, malicious hackers are able to access and change what should be private user data managed by the application providers.
Just a few months after this blog brought you exclusive news of privacy problems in Facebook's application system, we are now already seeing the consequences of Facebook's decision to pass the buck on on application security and privacy. Facebook shares user data with a large number of third-party application developers (without user consent), who then leave the data open to hackers due to nonexistent security and privacy protections. We at Surveillance State would be lying if we said we didn't see this coming.
Third-party developers
As I mentioned in a blog post back in January, Facebook permits application developers to get access to large amounts of sensitive data, all without clear user consent. Simply put, whenever a user installs a Facebook app, the developers of that application get access to data on every person who that user is Facebook 'friends' with, as well as most of the people in that user's network. While Facebook makes it perfectly clear when users install an application that developers will get access to their data, it doesn't do anything at all to warn users that the same data sharing occurs when their friends install apps.
Facebook has its legal bases covered though, as its Terms of Service clearly state that the company is in no way responsible for anything that the developers do with user data. It further notes that the company does nothing at all to verify that developers are doing anything at all to protect user data, or that they are not storing data beyond the time needed to process the application request (a strict no-no). The terms of service state:
"[each application] has not been approved, endorsed, or reviewed in any manner by Facebook...we are not responsible for...the privacy practices or other policies of the Developer. YOU USE SUCH DEVELOPER APPLICATIONS AT YOUR OWN RISK."
Flaws in apps, users at risk
According to a recent article in 2600, the Hacker Quarterly, many popular Facebook applications are vulnerable to trivial attacks, which permit a nefarious person to both set and read the data associated with that app. The 2600 article uses apps Moods, Free Gifts, and Super Wall to prove its point.
Quite simply, the developers have no authentication mechanism in place on their own servers when processing queries issued by a Facebook application. The developers rely instead, on the Facebook app itself playing by the rules. A nefarious hacker merely needs to intercept the Web request issued by the app, and replace his/her own Facebook ID with that of a potential victim.
While the 2600 article is not online, a reader of the Consumerist blog summarized it online:
In all three of those applications, User A can very easily modify User B's data by intercepting a form and modifying the uid (Facebook user ID) before transmission. In addition, with some applications, User A can gain access to stored application data (e.g. history, etc.) for any User B, whether they are friends or not. Such applications blindly trust form data that can easily be tampered with, which is very clearly a bad idea.
The Moods application allows unauthorized users to view the mood histories of non-friends, and with Firebug, anyone with the app can intercept their own mood change form before submitting it, change the uid in the form, and change someone else's mood.
Super Wall has a similar vulnerability that allows someone to intercept the form in a similar way and spoof messages from ANYONE to ANYONE (even a non-friend) just by changing the to and from uid's.
This is not rocket science, but far closer to computer security 101. Microsoft's Larry Osterman has written about these kinds of flaws on his own blog, describing his effort to educate Microsoft's programmers:
It takes a special mindset to think like a bad guy. Not everyone can switch into that mindset. For instance, I can't think of the number of times I had to tell developers on my team "It doesn't matter that you've checked the value on the client, you still need to check it on the server because the client that's talking to your server might not be your code."
On Wednesday, I spoke with Adrienne Felt, the University of Virginia researcher whose report first highlighted the excessive and dangerous data sharing that happens between Facebook and its Application developers. When asked for her thoughts on the lack of authentication and security at major Facebook apps, Adrienne told me that, "sadly i am not surprised at all" as "apps are written by people who just barely know anything about coding."
For those of you interested in learning more, someone has taken the time to record a screencast of the attack in action. All that's needed is a Facebook account, the Firefox browser, and the Firebug browser add-on.
Environmentalist Blogged:10:57 AM
Monday, September 7, 2009
Today is the worst day in my whole freaking life!
The day started when I was playing online audi with sum1 den i fell asleep. i woke up and found out that my audi download failed using mozzilla firefox but my bro help me download with orbit. Heng arh if nt i nid to wait few hours. So i extracted all the files on the desktop den i transfered them to a folder. i tried installing but they say insert setup.ini den i look around the whole place for it but it was in the desktop lol. i went to play beat up and it was like whoah so hard? then i thought "wat can u expect from newbies like me?" so i jus practised for awhile den i go bored so i went to play wii. the wii balance board i tried to connect couldnt work so i jus went to skii without it. after dat keith call me ask me go his hse play toy gun and study. so i tried connecting a while more but i couldnt so i jus go his house. on the way thr was fine. so i jus went thr to play PSP nt the book. i play GTA and DJ Max while zy they all playing hide and seek but keith ask me play so i go play. after dat me and zy smugged the toy pistols home. now the unlucky part comes i was cycling across the traffic light and almost got knocked which made me veri scared and then i was cycling pass the zebra crossing near my hse and ... i was veri scared... i thought it the end of my life but im still alive! :) well then i went bak home and ate den i went to check my e-mail.... i won the Mr. Strong and Little Miss Naughty ! but they say nid receipt but i lost it. sadd... i was veri disappointed as i wanted to giv mr. strong to mdm chia but nvm... haiz i nw veri veri tired and pissed so i dun wan blog le :)
More Greeeeeeeeeeeeeeeeeeeeeeeeeeen Please!
Keen Tat
Environmentalist Blogged:8:44 PM
