Facebook Blocked?!? (static.ak.fbcdn.net)

I tried to logon to facebook today using google chrome and was presented with the following screen:

It would seem that static.ak.fbcdn.net is being reported as a phishing website!

This is the information for the domain fbcdn.net:

Registrant: 

Facebook, Inc 

156 University Ave, 

3rd Floor Palo Alto, 

CA 94301 US 

Domain name: FBCDN.NET 

Administrative Contact: Admin, 

Domain domain@facebook.com 

156 University Ave, 

3rd Floor Palo Alto, 

CA 94301 US +1.6505434800 

Fax: +1.6505434800 

Technical Contact: Admin, 

Domain domain@facebook.com 

156 University Ave, 

3rd Floor Palo Alto,

 CA 94301 US

It would seem a though this is a legit facebook domain, but I am not able to find any info on the net as to why this domain is blocked! If anyone has any info please let me know.

The PHP Driven World Will End in 2037!

PHP / Unix seems to have its very own Y2K bug. Except it will happen in 2037.If you try and do any date/time calculations greater than 2037 with PHP it freaks out and goes back to 1 Jan 1970!

I am currenlty writing a bookings application and was playing with the calendar and checking out the future. All of a sudden when I went past the year 2037 the system would jump back to 1970!

Apparently this is a known but and is a limitation in counter that is 32bits long. (http://bugs.php.net/bug.php?id=7103)

Apparently 64bit machines are not vulnerable to this.

After doing some reading it would seem that this is indeed the Unix equivilent of the Y2K Bug!

(http://en.wikipedia.org/wiki/Year_2038_problem)

So the moral of the story is that in the year 2038 you better make sure that you have a 64bit machine if you are running any unix based machines. Also make sure that the time_t is set to 64bit !

Image derived from: http://openclipart.org/media/files/valessiobrito/2564

Hack my Coffee?

This could be the funniest security vulnerability ever! I read about how a new coffee machine that can be hooked up to your computer has a buffer overflow vulnerability that can allow a hacker to take control of the application that controls the coffee machine on Trend Micro's Website.
Imagine waking up in the morning to the horror of getting black coffee without out sugar when you programmed your machine for white coffee with 2 sugars!

Oh what a crazy world we live in! :P

Photo courtesy PDPhoto.org

Facebook Phishing

I got an email from facebook that looked like a legit notification that one of my buddies have written on my wall. Except it was written in broken english:

"hello , howdy?? lisen i got a new friend here..shex kinda new here..maybe you can give her a lil tym so she can enjoy here?? not forcin u but u can chk out =)

It was followed by the following link:

http://www.facebook.com.profile.id.aymacc.2810ly6l.dortos.net/facebook/index.php?id=5aaz6677&auth=j5xp2&cyua=hwy9e1l821

It looks pretty legit at first glace, but if you take a close look you will notice that the domain is actially for dortos.net.
Whois information from whois.net

Now the thing that I found wierd was that when I logged into my profile on facebook I still got a notification about the wall post, but there was no post on my wall.

I cautiously opened the link to the fake profile and Firefox 3 Beta blocked it. (See screenshot)

I then decided to open the page up in IE8 and guess what. It looks identical to the facebook login screen. Except that it aint. (screenshot below)


This is a typical phishing attempt. I imagine that my buddy who sent the origional wall post recieved the same thing and his account was compromised. My personal information was then obtained through his profile and a wallpost was placed on my wall.

I am not sure exactly what is going on, but I recon there will be some information once the security researches around the world get a similar "phantom wall post".

I guess this is another reason to upgrade to Firefox 3 :P

Trend Micro Officescan 8.0 Clients Crashing

Double Click Error



Right Click Error

We seem to be experiencing some difficulty with Trend Micro Officescan lately. When a client right clicks on the system tray icon and tries to open the Officescan console Trend Crashes. If they try to double click on the tray icon Officescan also crashes.

This is happening on all the clients that are attached to the servers that we recently updated to the latest patch from Trend Micro. It is happening to both Windows XP SP2 machines as well as Windows Vista Business SP1 machines. As yet I have been unable to find any information on the Trends website on how to resolve the issue.

When you double click you get the following error on Windows Vista:
"Trend Micro Officescan Monitor has stopped working"

When you right click you get the following error on Windows Vista:
"Trend Micro Officescan Management Console (32-bit) has stopped working"

Server Version: Officescan 8.0 build 1834

Pacemakers Hacked !?!

The New York Times reports that it is possible to hack some pacemakers:

"They were able to reprogram it to shut down and to deliver jolts of electricity that would potentially be fatal — if the device had been in a person. In this case, the researcher were hacking into a device in a laboratory"
New Your Times

Imagine a heart attack toolkit being released for sale! (Ok so it would cost you an arm and a leg)
I hope these kind vulnerabilities don't become common place in future!