Technology As If People Mattered : Weblog 🙂

AWStats sucks, I am done with it. I have disabled it since my server got hacked last time, and according to this that *was* the point of entry!!

– ————————————————————————–
Debian Security Advisory DSA 1058-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
May 18th, 2006 http://www.debian.org/security/faq
– ————————————————————————–

Package : awstats
Vulnerability : missing input sanitising
Problem type : remote
Debian-specific: no
CVE ID : CVE-2006-2237
BugTraq ID : 17844
Debian Bugs : 364443 365909 365910

Hendrik Weimer discovered that specially crafted web requests can
cause awstats, a powerful and featureful web server log analyzer, to
execute arbitrary commands.

The old stable distribution (woody) is not affected by this problem.

For the stable distribution (sarge) this problem has been fixed in
version 6.4-1sarge2.

For the unstable distribution (sid) this problem has been fixed in
version 6.5-2.

We recommend that you upgrade your awstats package.

And it is DONE!!!!

ayn@NGBERT:~>sudo apt-get remove awstats
Reading Package Lists… Done
Building Dependency Tree… Done
The following packages will be REMOVED:
awstats
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0B of archives.
After unpacking 4202kB disk space will be freed.
Do you want to continue? [Y/n]
(Reading database … 45001 files and directories currently installed.)
Removing awstats …

Technorati Tags: awstats, hack, security

Pretty insane man… But I guess that’s better than not moving at all…

Technorati Tags: athr, stocks

So the MacBook is out! I love it!

• It comes in white and black
• There is only one size so far, the 13" widescreen
• built-in iSight
• Now they sport Gigabit ethernet
• front row remote is included
• they use Li-polymer batteries, I’m not sure if it did in the iBooks
• Now graphic cards support dual-screen like the PowerBooks/MBP’s
• mini-Toslink audio i/o ports
• all this for 1100 bucks!!

technorati tags: macbook

Treo 700p Overview

• Dual band CDMA 2000 EvDO radio
• 128MB non-volatile memory (60MB user available); 2GB and up SD card support
• Intel XScale 312 MHz processor
• 320 x 320 color TFT Screen
• Palm OS 5.4.9
• 1.3-megapixel digital camera (1280×1024 resolution)
• Built-in Bluetooth®1.2 wireless technology (A2DP not available)
• Extend EvDO speeds to your laptop using DUN
• Innovative phone features
• Enhanced award-winning Blazer 4.5 web browser
• Rich multimedia capabilities for streaming music, video and more
• Enhanced email -wireless access to Outlook, Yahoo!, AOL, and Gmail
• Supports native Microsoft Word, Excel and PowerPoint documents, and PDF viewing on the go

treocentral.com >> Stories >> Hardware >> Palm Reveals Treo 700p Smartphone

technorati tags: treo, treo700p, palm, verizon

Softbank Corp. and Apple Computer Inc. plan to jointly develop cellular phone handsets that have built-in iPod digital music players and can download songs directly from Apple’s iTunes Music Store, The Nihon Keizai Shimbun is reporting.

AppleInsider | Report: Softbank and Apple to co-develop iPod phones

technorati tags: apple, cellphone, softbank, ipod

technorati tags: skype

I got the IT department to do a fresh Windoze install on my work Thinkpad, it’s kindda a twice a year ritual, Windows sucks… and to keep things simple, I’m gonna go Skype-only… This is mainly because there isn’t a Windoze IM client I like… So if you need to contact me when I’m at work please Skype me instead (chat preferred over voice calls)…

technorati tags: skype, im

This is pretty interesting read, especially with the new rules with expensing stock options and when we’re trying hard to hire good people into our team…

Fractals of Change: Why a Great Programmer is Worth Fifty Good Ones

So Amazon/Alexa/A9 dumped Google for MSN Live search, I use A9 mainly because of the PI/2 discount at Amazon, and it also searches images, blogs, technorati, and Google at the same time, which is kindda nice. Now they have this OpenSearch thing where anyone can create an OpenSearch search for their own website. (Kavin showed me how to do one with WordPress and it was cool!)

But I refuse to use MS Live search, I’m not partial to Goog or anything, but for web searches it works pretty well. Maybe I’ll write a Google OpenSearch thing and add it to A9, but I’m sure they will delete it right away… WTF…

Drop a line in the comment box if you figure out how to add Google back to A9.

technorati tags: a9, google, msft, websearch