Your Ad Here

testing GMap communication limits


Is there anyway to get info back from Google such as where the user is
clicking on the map?

I assume not. I have a lot of experience with Ajax but haven't done
anything with the GMap API. I'm working on a new Ajax implementation
that gets around the browser same-origin policy...
http://en.wikipedia.org/wiki/Same_origin_policy

...and I think this will be awesome for GMaps. Let's pretend Google
decides to utilize my Ajax implementation in their API. This would
allow the user to communicate bidirectionally not just directly to your
site, but also directly to Google. And through the user, your site and
Google could also talk to each other.

So for example, say you had a map and were having an Easter Egg hunt.
The first step would be to hide the eggs. The user would click say 10
places on the map where he was hiding eggs. Each click would grab the
coordinates from Google, throw them back to your site, and then display
a pushpin on the users map saying "Egg #X hidden". All these
coordinates would saved on your server. Subsequent users would then
try to find the eggs by clicking around.

Obviously this is a totally lame application, but it does show the
communication I'm going for between your site, your users, and Google.
So my questions are:

1) Am I correct that this is not currently possible with the GMap API?
2) You guys are far more experienced, so if you follow my example, what
would be a better example?

Another thought is that you could also record not just clicks, but
presses on the zoom, scrolling, satellite, and any other actions. So
you could have a guided tour just like in Google Earth. I'll also toss
out that this could all be included in a favelet but I won't go into
detail since most folks don't know what that is ;-)

Just to be clear, Google would have to include this communication
method in their API, so I'm not saying I can tell you how to do this
right now. But if you come with a good enough example, I bet we can
get them to make it an option since I think it could be VERY powerful.

Thanks,
-Nuttzy

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Trader news


WE HAVE A RUNNER!
ALL SIGNS SHOW THAT LITL IS ABOUT TO EXPLODE!
WATCH LITL.PK LIKE A HAWK STARTING MONDAY AUGUST 14th!

Company Name: L INTL COMPUTERS INC (Other OTC:LITL.PK)
Stock Symbol: LITL
Friday Close: 0.41 (Up over 40% On Friday Alone)
5-day Target: 1.00
Current Rating: Strong-Buy

LITL's Recent Announcements:
• L International Computers Announces the Hollywood Pro Laptop
• L International Computers Inc. Announces the All-New Cinerama Display
• L International Computers Inc Announces the Olympus, the World's First 20'' Widescreen PCI-XPress Series SLI Laptop
Computer
• L International Computers Inc. Announces the Next-Gen Grand Canyon, Quad-Panel OLED based Computer/ AV Professional
Display

Who is LITL?
Founded in 2002, Liebermann Inc. produces, markets and distributes high-performance, opulent PC/Windows© laptop, desktop,
workstation and server computers.
The Company also produces the largest and most spectacular personal & professional computer displays and ultra-high performance
software, peripherals and technologies.

Why LITL?s
OPPORTUNITY DOES NOT KNOCK ON YOUR DOOR EVERY DAY! SO ADD LITL TO YOUR RADAR NOW AND WATCH IT SOAR!

-----------------------------------------------------
HAVANA, Cuba (AP) -- Cuba's vice president and Venezuela's leader provided optimistic assessments of Fidel Castro's health, saying the Cuban president was recovering quickly from intestinal surgery and could be back at work within weeks.
-----------------------------------------------------

Buy on 14 Aug 2006.

Re: Typical IE "Operation Aborted" - I think I need a second set of eyes...


Your problem is the typical operation aborted problem. Your javascript
is inside an html tag. It just happens to be a <p> tag that isn't
closed:

http://validator.w3.org/check?uri=http%3A%2F%2Fwww.wanderthru.com%2Fwalthamgmap%2F20Hartwell_xml_OA.html&charset=%28detect+automatically%29&doctype=Inline

Error Line 168 column 6: end tag for "p" omitted, but OMITTAG NO was
specified.

Close it, and no more operation aborted...

http://www.geocodezip.com/20Hartwell_xml_OA.asp

-- Larry

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

How to get Hight quality & low price Nozzle/plunger/D.vale and other Diesel fuel injection parts from china manufacturer


Dear sir/Madam:

Nice to contact with you
We are one of the leading manufacturers of engine parts,
in particular diesel fuel injection system accessories for
replacement, such as Fuel injection Nozzle, Plunger and
Delivery valve, following is some part of our production
catalogue for your reference.

131101-7020 131101-8020 131101-8120 131151-3620 131151-7620
131152-2120 131152-2220 131152-3120 131152-4020 131153-1220
131153-3820 131153-5020 131153-5220 131153-5320 131153-8620
131153-9320 131154-2120 131154-3220 131110-0520 131110-2320
131110-2920 131110-3920 131110-4220 131110-4320 131110-4520
131110-4720 131110-6420 131110-6820 131110-7620 131160-0320
131160-0420 131160-0620 131160-1120 131160-2920 131160-3120
131160-4020 131160-4620 090150-3800 090150-5600 090140-0021
090140-0220 090140-0780 090140-1000 090140-1530 9 411 038 585
9 411 038 586 9 411 038 594 9 411 038 598 9 412 038 521
9 412 038 553 9 412 038 585 9 412 038 595 9 412 038 323
105017-0690 105017-0900 105017-1740 093400-6370
9 430 034 120 9 432 610 288 105015-2780 105015-3100
105015-3370 105015-3760 105015-3770 093400-0770
093400-0780 093400-0990 093400-1650 093400-1690
9 430 034 292 9 432 610 015 9 432 610 092
9 432 610 115 9 432 610 143 9 432 610 241
9 432 610 348

2 418 455 122 / 2 418 455 142 / 2 418 455 146 /
2 418 455 149 / 2 418 455 155 / 2 418 455 315
2 418 455 326 / 2 418 455 596 / 2 418 425 988
1 418 415 037 1 418 415 064 / 1 418 415 066
1 418 415 081 / 1 418 415 083 / 1 418 415 101
1 418 415 526 / 1 418 415 536 / 2 418 450 000
2 418 450 002 / 2 418 450 025 / 2 418 450 081
2 418 455 016 / 2 418 455 022 2 418 455 034
2 418 455 054 / 2 418 455 063 / 2 418 455 071
2 418 455 342 / 2 418 450 000 / 2 418 450 002
2 418 450 025 / 2 418 450 069 / 2 418 450 081
2 418 455 016 / 2 418 455 022 / 2 418 455 034
2 418 455 054 / 2 418 455 063 / 2 418 455 071
2 418 455 342

8n7005 26632 32262 7w7032 26964 20494 4w7022
22808 28481 1w6541 1w5829 1w2503 4w7018 4w8483
8n3539 9l6969 9l2501 4w7017 7w0182 7w3710 7w7821
7n0449 9n2366 9n2500 6n7527 33408 27333 29279
27336 28485 7w7038 33706 26993 31542 29456 31058
770536 32100 31832 28369 32017 33710 23546 22762
22808 23143 27949 27254

3003933 3001314 3012537 3054228 3012538 3012536
3275265 3275266 3005963 3004054 3275267 3018814
3003929 3012535 3023556 3028068 3018862 7721-0601
3014590 3047963 3047964 3069718
3016675 3016676 3045102 3054250 3047969 3047973
3047991 3054217 3054218 3054231 3054249 3074251
3275538 3275539 3275989 .....

Toyota:
3L: 096000-5950 VE4/10F2100RND596
2C-T: 096000-3390 VE4/9F2400RND339
14B:096000-4640 VE4/12F1800RND464
1N-T: 096000-7090 VE4/10F2400RND709

MITSUBISHI:
4D65:096000-4420 VE4/9F2250RND442
4D68T:096000-8914 VE4/10F2250RND891
4M40:104741-3213 VE4/11F2000RNP1199
4D56:104640-8870 VE4.10F2100RNP1130

MAZDA:
R2:104648-0154 VE4/8F2125RNP207
RFT: 104649-0451 VE4/9F2150RNP807
XA: 096000-0510 VE4/9F1900RND051

ISUZU:
4JB1-7:104641-6890 VE4/11F1900RNP932
4FG1:104640-1832 VE4/10F2200RNP610
4EC1T:104649-5040 VE4/9F2500RNP707

NISSAN:
CD17:104648-2620 VE4/8F2500LNP739
TD27:104640-7420 VE4/10F2150RNP893
RD28:104660-2471 VE6/10F2500RNP100
LD20-7:104640-2130 VE4/10F2400RNP705
CD20:104640-2810 VE4/10F2500LNP1142


Also Our products have excellent replacement performance in many
kinds of reputable brand like BOSCH, ZEXEL, DENSO, IVECO, ISUZU,
MATSUBISHI, CAT, KATO, KOMATSU, CUMMINS and so on.

Our production exported to over 20 countries because of excellent
quality, good after-sales service and more competitive price;

If you feel interested in any items related to this field, please
write us for more detail and price

Look forward to working with you .
Best regard!

新一代智能建站系统,3分种建立企业网站,多功能


=?GB2312?B?zfjJz8nMterPtc2zo6zQws7FzsTVws+1zbOjrMnMzvHQxc+iz7XNs6Osw+K3?=

=?GB2312?B?0crU08OjoaOh?=
To: malformed@gmail.com
Content-Type: text/plain;charset="GB2312"
Reply-To: zzm10000@sina.com
Date: Sun, 13 Aug 2006 12:58:29 +0800
X-Priority: 3
X-Mailer: Microsoft Outlook Express 6.00.2600.0000

E��ͨ���ܽ�վƽ̨
www.eoobo.com
��һ�����ܽ�վϵͳ��3���ֽ�b��ҵ��վ���๦�������̵�ϵͳ����������ϵͳ��������Ϣϵͳ��10��һ��ǰ������BBS�����ʱش�ͷ�ϵͳ��
�ͻ�����
www.eyesee.com.cn
www.2258.com.cn
www.16book.cn
www.chinazhili.cn
www.my12315.com.cn

jϵQQ624758524

Typical IE "Operation Aborted" - I think I need a second set of eyes...


Hi,

I'm really in need of another set of eyes to look at my map. I have
been struggling with putting together my google map for weeks now and I
finally got it working in Firefox, but in IE after my map fully loads I
then get the stupid "Operation Aborted" error. I have searched these
boards and other sites high and low and after trying many
reconfigurations, still I can't this sucker to load properly. A quick
side note, prior to starting this project a few weeks ago, I had
absolutely no idea how to even put a basic html page up, so I have to
say the fact that I have incorporated html, java & xml in this site is
a HUGE accomplishment for me.

Here's the link to my map:

http://www.wanderthru.com/walthamgmap/20Hartwell_xml_OA.html

I'm sure there is something I'm missing with the onload function or
something like that, but I just can't figure it out on my and would
GREATLY appreciate some guidance.

Thanks!
Jessica

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re: SORBS Contact

> From owner-nanog@merit.edu Wed Aug 9 22:00:58 2006
> To: nanog@merit.edu
> Subject: Re: SORBS Contact
> From: Allan Poindexter <apoindex@aoc.nrao.edu>
> Date: Wed, 09 Aug 2006 20:59:36 -0600
>
>
> Matthew> so would you consider as it is my network, that I should
> Matthew> not be allowed to impose these 'draconian' methods and
> Matthew> perhaps I shouldn't be allowed to censor traffic to and
> Matthew> from my networks?
>
> If you want to run a network off in the corner by yourself this is
> fine. If you have agreed to participate in the Internet you have an
> obligation to deliver your traffic.

Obligation to _whom_? My only obligations are to those who _pay_ me for
access to my systems/resources. If the people who *do* pay me for use of
my systems/resources "don't want" that cr*p, then I do 'have an obligation'
to _not_ deliver that traffic.

And _how_ I implement that, to the satisfaction of =my= customers, is NONE
OF _YOUR_ BUSINSESS, since you are *not* one of my paying customers.
I don't have to tell _you_ what I do; I don't have to listen to any of your
'complaints'; and I sure-as-hell don't have to defend, _to_you_, what I do.

> At LISA a couple of years ago a Microsoftie got up at the SPAM
> symposium and told of an experiment they did where they asked their
> hotmail users to identify their mail messages as spam or not. He said
> the users got it wrong some small percentage amount of the time. I
> was stunned at the arrogance and presumption in that comment. You
> can't tell from looking at the contents, source, or destination if
> something is spam because none of these things can tell whether the
> message was requested or is wanted by the recipient. The recipient is
> the only person who can determine these things.

Do *you* _KNOW_ how hotmail came up with that determination that 'users
got it wrong some small percentage of the time'? If you *don't*, you are
exhibiting _at_least_ as much 'arrogance and presumption' as you accuse
them of.

I *KNOW*FOR*A*FACT*, that some people _do_, occasionally 'get it wrong'.
I, _personally_, have done it. Be it an 'off-by-one' error in selecting
and marking the message, to a long-delayed response to something _I_ sent,
and that came in _without_ reference to what I sent, errors *DO* happen.

Note: it can be _really_ easy to figure out if/when people mis-identify 'spam'.
You ask them to classify a bunch of old messages, presented one at a time.
You present the _same_ message *more*than*once*. If they mark it is 'good'
three times, and 'spam' once. Then they *did* 'get it wrong' -- it's not
certain _which_ way they 'got it wrong', but it *IS* absolutely certain that
they did 'get it wrong' "at least once".

I've seen some of the stuff AOL _users_ flag as 'spam' -- "content analysis"
*alone* virtually guarantees that they were flagged in error. Things like
college acceptance letters from Division I schools, bank overdraft notices,
NDRs for mail they themselves *sent*, 'delivery receipts' and/or 'read
receipts' that they had _requested_ on mail they sent out, etc., etc.

>
> There are simple solutions to this. They do work in spite of the
> moanings of the hand wringers. In the meantime my patience with email
> "lost" silently due to blacklists, etc. is growing thin.

If you want 'reliable' delivery, you _pay_ the recieving system (and the
intermediaries) for that service. Your lack of patience with something
other people _give_ you the free use of is, quite simply, an inexcusable
display of arrogance and presumption.

Re: Plot neighborhood


Sounds like a job for Custom Map Type.

See http://www.econym.demon.co.uk/googlemaps/custommap.htm
and http://mapki.com/wiki/Add_Your_Own_Custom_Map

--
The Blackpool Community Church Javascript Team
http://www.econym.demon.co.uk/googlemaps/

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

IE error infotip window forcing map out of view error?


Is this a error? seems to be an IE only problem?
click on the i in the tool bar and then anywhere on the map
It pretty much slides to where it should be in FF but in IE
the map sometimes goes very far afield

http://www.microimages.com/ogc/maps/wetlandsusa.htm

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re: [Full-disclosure] Server Redundancy

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Hi:

Thanks I'll check ipvs.

Regards
Waldo

On 8/10/06, Tim Hecktor < th@domainbox.de> wrote:
Hello,
 
<Isn't there a way to map a name to several IPs?
<Or use aliases?
 
Maybe this is what you are looking for:
 
pandora:~# dig ftp.freenet.de
 
; <<>> DiG 9.2.1 <<>> ftp.freenet.de
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59136
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 3, ADDITIONAL: 3
 
;; QUESTION SECTION:
;ftp.freenet.de.                        IN      A
 
;; ANSWER SECTION:
ftp.freenet.de .         1457    IN      CNAME   ftp-0.freenet.de.
ftp-0.freenet.de.       600     IN      A       194.97.2.69
ftp-0.freenet.de.       600     IN      A       194.97.2.70
ftp-0.freenet.de.       600     IN      A       194.97.2.67
ftp-0.freenet.de.       600     IN      A       194.97.2.68
 
 
This will map a name to more than one ip and will give you load-balancing this way, but not real redundancy.
To map a service to different hosts redundant you can use a box running ipvs. This box can be made redundant with a identical box using mon and heartbeat to do ip failover.
 
Best regards,

Tim Hecktor


Re: [Full-disclosure] follow up to SPI Dynamics js portscanner

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Really? Which moderator approved it? Oh yeah it's an unmoderated list and btw thank you.
On 8/12/06, Tõnu Samuel <tonu@jes.ee> wrote:
evilrabbi wrote:

> What exactly are you telling us or showing us that we don't already know?
>

Don't spam the list if you do not agree with post. Moderator agreed, so
EOD. Nothing new for you? Fine. You are smartest guy in world. I am not.

Tõnu




--
-- h0 h0 h0 --
www.nopsled.net

Re: How to draw based on the lat/lon and zoom of whatever is displayed?


Thanks!
-jrg
Barry Hunter wrote:
> Have a look at the documentation:
> http://www.google.com/apis/maps/documentation/reference.html
> in particular have a look at the moveend event. (don't know how to hotlink
> to the Events listing)
>
> See how you setup events:
> http://www.google.com/apis/maps/documentation/#Events_overview
>
>
> then you can have your moveend event simply use getBounds function to get
> the current view and then add the appropriate markers (possibly fetching
> them via AJAX)
>
> See example here:
> http://www.nearby.org.uk/google/
> of what I think you are looking for.
> (don't look too closely at the code as its still for v1, as not yet been
> convinced with the speed of v2)
>
>
> However if you haven't already I highly recommend you look at Mike's
> Tutorial:
> http://www.econym.demon.co.uk/googlemaps/index.htm
> and also
> http://www.mapki.com/wiki/Main_Page
>
>
>
> ----- Original Message -----
> From: "jrg" <jrg@dbengines.com>
> To: "Google Maps API" <Google-Maps-API@googlegroups.com>
> Sent: Saturday, August 12, 2006 6:48 PM
> Subject: How to draw based on the lat/lon and zoom of whatever is displayed?
>
>
> >
> > The examples seem (mostly) to be orieneted to having a few items
> > (overlays, polylines,markers) to be added. What if I have such for
> > most any view? I don't want to create 100s of such things even if they
> > are not going to be displayed (do I?). So how do I get a
> > display/expose event of some kind that I can they use to add only what
> > is appropriate for the current view?
> >
> >
> > >

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re: Google Map Data


Perhaps this will help:
http://www.mapki.com/wiki/Read_This_First#Google_Maps_has_different_imagery

----- Original Message -----
From: "dtcurrie" <d@dtcurrie.net>
To: "Google Maps API" <Google-Maps-API@googlegroups.com>
Sent: Saturday, August 12, 2006 11:08 PM
Subject: Google Map Data

>
> I load the Google Maps API using the following HTML script element (key
> truncated):
>
> <script src="http://maps.google.com/maps?file=api&v=2&key=AB[...]ZQ"
> type="text/javascript"></script>
>
> Why is my map atlas data different from what Google uses on the Google
> Maps page? As far as I can see from the API documentation, my method
> of loading the map above is the most recent.
>
>
> >

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

[Full-disclosure] Getting rid of Gadi Evron and Dude VanWinkle

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

hi
 
for months now we've had to put up
 
now its time to shut up
 
how do i setup my gmail?
 
i know this is unmoderated list but im pulling my hair out to sift through the real email
 
please dont turn full dis into symantec trolltraq, hlp me! :)
 
-gs
 


Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.

Re: [funsec] Anyone from "Windows defender" lurking here?


On Sat, 12 Aug 2006, Kevin McAleavey wrote:

> "management team" ... "management" ... "support team" ... "exploit" ...
> "problem" ... "team" ... "widglet" ... "first outside contact" ...
> "significant." ... "personal" ... "funsec" ... "flare"

Dude, your QUOTE LOCK key is stuck...

/mz
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities


Hi,

Nobody should open an untrusted .HLP file.

An HLP file is the most similar to an executable but not being one,
mainly due to its powerful scripting language.

One of the documented macros documented and supported by this format is
"RegisterRoutine". Using this macro we can reference any Export of any Dll.

Example:

[CONFIG]
RegisterRoutine("Kernel32.dll", "Beep", "UU")

so the function can be used as a Macro within the WinHelp project

{\uldb Do Beep}{\v !Beep(750, 5000)}

The user won´t see any warning previously the execution of this macro.

I wonder why Microsoft and a lot of vendors are still using this
old-and-dangerous format for providing documentation.

Greets,
Rubén.

Benjamin Tobias Franz wrote:
> Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and
> Denial Of
> Service Vulnerabilities
> ... discovered by Benjamin Tobias Franz
>
> Affected Vendor:
> Microsoft
>
> Affected Product:
> Microsoft Windows - Microsoft Help (WINHLP32.EXE)
>
> Description:
> Multiple remote code execution and denial of service vulnerabilities exists
> in Microsoft Help (WINHLP32.EXE) because of the way that it handles
> Microsoft Windows Help files (*.HLP).
> An attacker could exploit this by placing a specially crafted help file
> on a
> webpage, or by sending the file as an attachment in an e-mail. The exploit
> is triggered by viewing the specially crafted help file. No user
> interaction
> is required. An attacker who successfully exploited this vulnerability
> could
> take complete control of the affected system.
>
> Workaround:
> Do not open any HLP file from untrusted sources with Microsoft Help.
>
> Proof-Of-Concept files (simple demonstration files only):
> http://hometown.aol.de/qwertzset/BTFs_MSHelp_WINHLP32.EXE_POCFiles.zip
>
> Date of discovery:
> 20. - 22. July 2006
>
> Tested software:
> Microsoft Help on Windows XP SP2
> (WINHLP32.EXE: 5.1.2600.2180 | MSVCRT.DLL: 7.0.2600.2180)
>
> Probably all versions of Microsoft Windows are affected by these bugs.
>
>
> Regards,
>
> Benjamin Tobias Franz,
> Germany
>

Re: [funsec] Consumer Reports magazine rates anti-virus software


On 8/12/06, Richard M. Smith <rms@bsf-llc.com> wrote:
> The September 2006 issue of Consumer Reports magazine
> (http://www.consumerreports.org) rates a dozen desktop anti-virus software
> packages. Here are the results:
>
> 1. BitDefender Standard 87
> 2. ZoneAlarm AV 85
> 3. Kaspersky Personal AV 82
> 4. Norton AV 80
> 5. Norton AV for Mac 80
> 6. McAfee ViruScan 77
> 7. Trend Micro PC-cillin 75
> 8. Alwil Avast! 68
> 9. F-secure AV 66
> 10. Panda Titanium AV 64
> 11. CA/eTrust EZ AV 57
> 12. PC Tools AV 41

Finding the standouts. Our next round of tests helped us identify
superior antivirus software by measuring how well each of the products
identified new viruses even before their signatures had been
downloaded. The antivirus programs did this by using a technique known
as heuristics, in which they seek out behaviors rather than
signatures.

To pit the software against novel threats not identified on signature
lists, we created 5,500 new virus variants derived from six categories
of known viruses, the kind you'd most likely encounter in real life.

That done, we unleashed the new viruses in our labs to see how well
the products detected them while scanning. Then we infected our lab
computer with each of 185 of them to see whether the products could
better detect viruses that were actively executing, based on their
behavior.

Finally, to see how often the antivirus software raised false alarms
by identifying benign files as viral, we scanned more than 100,000
clean files.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Surveillance works


At 12:47 PM 8/12/06, Unca Brian wrote:
>I love it when someone knows what I'm watching better than I.

Sorry for being "misinformed" but all I've read you "double-speaking" comes from ONE source, and it ain't REAL journalism. Been there, done that, "who what when where why." OPINION is for the EDITORIAL page, not "content." :)

>I wouldn't need to watch any news, I suppose, if I had your contacts.
>If they're not top-secret, perhaps you can point me to them?

Here, unlike Bob Novak, I have to protect my "sources." So rather than taking it as "truth" how's about you just remember what I said for a later time after Rummy writes a book. IF he can. (grin)

>Unca Brian?

Yeah, trying to be "familial and friendly" ... if I've made an error in trying to placate, be happy to ignnore from now on. "Unca" out of ME means "respect" ... but like our current regime, good will *can* be squandered over bullsquirt. viz "Lebanon." :(

>I wasn't, and who cares what you were - or what you say you are, it
>doesn't buy you any credibility. Logs of your current attitudes are
>much more relevant. Stating this, such as you did, is a lot like a
>racist who gets called out saying, "hey, I've had black friends!"

fair enough ... you're already sounding like one of them religious Zombies causing wars with those words ... but I'll try to press onwards nonetheless - after all, I live in upstate New York ... ya can't have enough fire power. Heh.

And GIVEN your words, must stand back with respect and insist that you're a "credit to your race despite NASCAR. Heh. THANKS for judging me, but then again from all I've heard you spout, only makes sense. Can you tell me what my horoscope will be next week? Forget which sign I am, but then you've already pigeonholed me from your words apparently. GLAD to see that you reflect all that's "GREAT" about America. :-\

>The reply to which is always, "did they know you're a racist?"

Guess I"m guilty then. After all, no TRIAL is necessary anymore. :)

>That's really the only comment you needed to make.

Well then ... I guess I need to take back the preceding. Though I'm STILL a bit irked over the dissing of Barry Goldwater and what the PARTY of this REPUBLIC was founded on before it was overtaken by Taliban of the domestic kind that make Osama seem sane. :(

No, wanted to see if there was a shimmer of reason ... already have all I need to know. Pronouce thee "malware" ... I *see* now why just neing a company in thed states, nobody's buying ... YOU guys are the reason. I see Pat Robertson went to Jesrusalem so HE could do the whole Alexander Haig "I'm in charge now" thing. NEXT! :)

No offense, but I see why America's in the toilet and a grasp of "foreign policy" is just not gonna happen. Sorry to say, too well to play further.
----------------------------------------------------
Kevin McAleavey at your service
Privacy Software Corporation
http://www.nsclean.com
kevinmca@nsclean.com

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

新発想100%企画!!

100%会えるとしたら・・・あなたは出会い系サイトを利用しますか?
 
女性入り口 
 

★女性を対象に通話による本人確認★
サクラ皆無★男性の為のサイトです!!
 
男性入り口 
 
 
 
配信不要はこちら迄↓
In an unnecessary delivery, even here is ↓
送信不需要↓
 

Re: [Full-disclosure] XSS at msn.com Й cisco.com


>On Saturday 12 August 2006 14:35, Valery Marchuk wrote:
>> >I bet you haven't the balls all to search on nsa.gov and fbi.gov :>
>>
>> It looks like I have :) See my next message "XSS at nsa.gov" or just visit
>> my blog
>> http://www.securitylab.ru/blog/tecklord/179.php
>
>http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/thread.html#34263
>

second XSS in http://www.securitylab.ru/blog/tecklord/179.php rather then has been published in

http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/thread.html#34263

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability
Technical Report
CVE ID: CVE-2006-4021
August 11th, 2006
http://www.scatterchat.com/

SUMMARY

ScatterChat (http://www.scatterchat.com/) is an instant messaging project
that aims to provide encryption and anonymity support with Tor to
non-technical users such as human rights activists and political
dissidents.

Steven Murdoch, a security researcher with the University of Cambridge,
discovered a theoretical weakness in ScatterChat's cryptographic module.
He found that an eavesdropper might locate patterns in a private
communications channel if extraordinarily large amounts of messages were
exchanged in a single conversation.

Note that this does not allow an eavesdropper to decrypt messages, nor
determine a user's identity if anonymity is used.

The practical impact of this vulnerability is very low.

DETAILS

It was found that the birthday attack could be used against the
custom padding mechanism on the ECB-mode encryption of messages.

After 114KB of data is sent in a single conversation the probability
of a collision between two 16-byte blocks is 1% and will reach 50%
after 904KB, then 99% after 2.3MB (approximately). Note that
conversations are reset when one or both peers sign off from the
instant messaging service.

The above figures are calculated assuming that messages do not
contain any entropy, which is unrealistic for an instant messaging
environment. Assuming a rate of one bit of entropy per character,
the probability of a collision is 1% after 580KB is exchanged and
will reach 50% after 4,822KB, then 99% after 12,431KB (approximately).

Note that if each instant message was filled to its 500-byte capacity
(as enforced by the system), then 580KB would be transfered after
1,188 messages.

IMPACT

The end-user impact of this issue is very low.

It is important to note that this issue does NOT allow an eavesdropper
to decrypt any messages, nor does it allow them to discover the user's
identity if the anonymity feature is used.

In general, this type of cryptanalytic attack allows an eavesdropper to
determine patterns in an encrypted conversation, which in theory could
yield information about messages if enough patterns were found and
correlated. However, this issue only allows two 16-byte segments to be
matched with 1% probability when at least 1,188 instant messages are
exchanged in a single, uninterrupted session. In most cases, more than
1,188 instant messages would need to be sent.

The information leaked in the above situation would be negligible.

This issue also affects any application that is built upon ScatterChat's
encryption module.

Note that secure file transfers are not affected.

SOLUTION

The ScatterChat project takes both practical and theoretical
vulnerabilities very seriously. However, due to the low impact of this
vulnerability, and the high risk of introducing other subtle security
problems in updating the protocol, this issue will not be fixed in the
v1.0.x branch.

This issue will be rectified in the v2.0 series, which will replace
the current cryptographic module with the well-tested OTR encryption
module (http://www.cypherpunks.ca/otr/). A release date for v2.0
is not yet known.

Optionally, this issue can be mitigated through the use of the anonymity
feature, as traffic analysis often requires a known context to make
sense of patterns. Without the knowledge of who is communicating,
an eavesdropper's attempts at interpreting patterns can be frustrated.

ScatterChat v1.0.x remains safe to use in the overwhelming majority of
cases. However, for high risk, non-technical users, i.e., users operating
behind national firewalls, we recommend extra caution.

ACKNOWLEDGEMENTS

A special thanks goes out to Steven Murdoch for his professionalism in
dealing with this matter. His web page can be found at:
http://www.cl.cam.ac.uk/users/sjm217/

CONTACT

J. Salvatore Testa II
jtesta--at--hacktivismo--dot--com

http://www.scatterchat.com/jtesta_2006.asc
3428 E58E 715E C37D 2AA7 C55E 97D1 DE8C 4B26 2B62

- ----
A less technical summary of this advisory can be found at:
http://www.scatterchat.com/advisories/2006-01_non_tech.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFE3H61l9HejEsmK2IRAsEtAJ9kX3PDigpPb+aaPWlfQ5IqwyskYgCgiKZ2
Kf0CYKzvc80KAKtBkT7zVgc=
=335D
-----END PGP SIGNATURE-----

Re: New Laptop Polices

Michael Nicks wrote:

> Do we all really believe this laptop ban will last? I sure don't.

I think there are two issues in this thread -- this must refer to the
air travel bans. I don't know, but I'll bet it not only persists, it
will get worse.

The other issue has to do with the trend to thoughtlessly carry valuable
data (which in many cases belongs to somebody who didn't get a say-so in
its care) in laptops which are not protected.

Somehow somebody is going to do something draconian to get that under
control.

Some other form of executive dick-waving is going to have to be
developed that does not put so much at risk.

--
Requiescas in pace o email

Ex turpi causa non oritur actio

http://members.cox.net/larrysheldon/

Re: AJAX error - javascript not executing inside DIV


On 8/12/06, ben bakelaar <benbakelaar@gmail.com> wrote:
>
> Oh hey that's a really good solution Mark, thanks!
>
> Roger, yea that's exactly what I do, for creating the markers. But I
> would say if you have a PHP script being called from an XMLHttpRequest
> object, that's mixing Javascript and PHP! :)
What I meant was, I don't try to mix them in one page. As far as the
main map page is concerned, there is no PHP. The PHP that does get
called returns XML data. There is no javascript in the PHP page.

I've seen people do stuff like:

marker.openInfoWindowHtml("<?php print 'blah blah'; ?> ");

that line is what I call mixing javascript and PHP. (I'm not saying
it's wrong, I'm just saying I try not to do that)

Roger

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability


Hi,

I checked these files you said vulnerable and could not see any vulnerability.

Lets check lines 25-34 of index.php:

--source code of index.php lines 25 to 34-

25: //error_reporting('E_ALL');

26:

27: define('IN_MYBLOGGIE', true);

28:

29: session_start();

30: header("Cache-control: private");

31: //error_reporting (E_ERROR | E_WARNING | E_PARSE);

32: set_magic_quotes_runtime(0); // changes for 2.1.3

33:

34: $mybloggie_root_path = './';

-- end of source --

And you said lines 190-192 of index.php is vulnerable.

--source code of index.php lines 190 to 192-

190: if (!isset($mode)) {

191: include($mybloggie_root_path.'blog.php');

192: }

-- end of source --

As we can see variable mybloggie_root_path already set by index.php

We have same results in admin.php and db.php, Please dont post every include() function as a RFI vuln.

Dont post such a messages for being famous.

Regards,

Mustafa Can Bjorn IPEKCI

[funsec] Consumer Reports magazine rates anti-virus software


The September 2006 issue of Consumer Reports magazine
(http://www.consumerreports.org) rates a dozen desktop anti-virus software
packages. Here are the results:

1. BitDefender Standard 87
2. ZoneAlarm AV 85
3. Kaspersky Personal AV 82
4. Norton AV 80
5. Norton AV for Mac 80
6. McAfee ViruScan 77
7. Trend Micro PC-cillin 75
8. Alwil Avast! 68
9. F-secure AV 66
10. Panda Titanium AV 64
11. CA/eTrust EZ AV 57
12. PC Tools AV 41

Richard

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities


Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of
Service Vulnerabilities
... discovered by Benjamin Tobias Franz

Affected Vendor:
Microsoft

Affected Product:
Microsoft Windows - Microsoft Help (WINHLP32.EXE)

Description:
Multiple remote code execution and denial of service vulnerabilities exists
in Microsoft Help (WINHLP32.EXE) because of the way that it handles
Microsoft Windows Help files (*.HLP).
An attacker could exploit this by placing a specially crafted help file on a
webpage, or by sending the file as an attachment in an e-mail. The exploit
is triggered by viewing the specially crafted help file. No user interaction
is required. An attacker who successfully exploited this vulnerability could
take complete control of the affected system.

Workaround:
Do not open any HLP file from untrusted sources with Microsoft Help.

Proof-Of-Concept files (simple demonstration files only):
http://hometown.aol.de/qwertzset/BTFs_MSHelp_WINHLP32.EXE_POCFiles.zip

Date of discovery:
20. - 22. July 2006

Tested software:
Microsoft Help on Windows XP SP2
(WINHLP32.EXE: 5.1.2600.2180 | MSVCRT.DLL: 7.0.2600.2180)

Probably all versions of Microsoft Windows are affected by these bugs.

Regards,

Benjamin Tobias Franz,
Germany

Re: KML support?


sorry that was a lazy post.

Take for example ...
http://goes.gsfc.nasa.gov/goeseast/hurricane2/geo/0608041740.kml

Now that renders and open perfectly in Google Earth. What I want to do
is overlay that on a google map. Since the image file is a rather large
tiff, I'm assuming it will not work because it'll need to be carved up
into 256X256 tiles.

Still I thought I mightr be wrong.

Mo

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re: Google Maps & Traffic information


John,

Thanks for your reply.

I am using the Net::FTP Perl module. My script is able to login to the
FTP server I am using, and change directory. However when I initiate a
GET I receive a 425 error. My host has confirmed that since my account
is on a shared server they have relatively restrictive firewalls in
place which prevent, among other things, downloading files to the
server using FTP.

They have offered me an account on a virtual server, which would give
me control over the firewall settings. This would cost $30 per month.

Richard

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re[4]: [Full-disclosure] JavaScript get Internal Address (thanks to DanBUK)


Dear H Moore,

HDM> Heh. I actually have a plan for doing that :-)
Yipee :) As I saw the request made to the dns server I thought so.

HDM> * It may not be that useful, but it does seem like a fun hack. With any
HDM> luck, this can be accomplished using the built-in name resolution API in
HDM> windows/unix/etc.

In windows world, WINET.DLL is your friend, and yes it works :) You can get TXT records
and alike, we have done so :) *big grin*

--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

How to draw based on the lat/lon and zoom of whatever is displayed?


The examples seem (mostly) to be orieneted to having a few items
(overlays, polylines,markers) to be added. What if I have such for
most any view? I don't want to create 100s of such things even if they
are not going to be displayed (do I?). So how do I get a
display/expose event of some kind that I can they use to add only what
is appropriate for the current view?

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

RE: [funsec] 3 Arrested on Terrorism Charges in Mich. for buyingprepaid cellphones


On Sat, 12 Aug 2006, Richard M. Smith wrote:

> Does anyone know why someone would pay $38 on the street for a disposable
> cellphone? To buy drugs perhaps? If folks are buying hundreds of phones at
> Walmart there must be some sort of market for them.

The main reason I can think of, is that it would cost somewhat more if I
bought it in a shop. Isn't that a good enough reason?

If Jim Capitalist can buy something for $38, and sell it for $45, then
when he's done that 1,000 times, he has $7,000, which would, of course, be
used to fund pornography, terrorism and over-eating.

If the entire case here is that they flouted Walmart's three-per-customer
rule (which is a Walmart rule, not a law), and there's no more evidence,
then someone should be making a grovelling apology to these guys.


> Richard
>
> -----Original Message-----
> From: funsec-bounces@linuxbox.org [mailto:funsec-bounces@linuxbox.org] On
> Behalf Of Larry Seltzer
> Sent: Saturday, August 12, 2006 9:56 AM
> To: funsec@linuxbox.org
> Subject: RE: [funsec] 3 Arrested on Terrorism Charges in Mich. for
> buyingprepaid cellphones
>
> >>http://www.wtopnews.com/index.php?nid=104&sid=879155
>
> Another story I read said when they were taken they had opened all the
> packages and had collected the phones. It didn't sound like a good
> resale strategy.
>
> I can't imagine the substance of what they could be charged with, but
> they certainly sound dirty.
>
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.
>
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.
>

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: KML support?


Will this work wth kml files just overlay image tiles into Google
Earth?

Cheers,
Mo
http://www.ibiseye.com/

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

RE: [funsec] 3 Arrested on Terrorism Charges in Mich. for buyingprepaid cellphones


Does anyone know why someone would pay $38 on the street for a disposable
cellphone? To buy drugs perhaps? If folks are buying hundreds of phones at
Walmart there must be some sort of market for them.

Richard

-----Original Message-----
From: funsec-bounces@linuxbox.org [mailto:funsec-bounces@linuxbox.org] On
Behalf Of Larry Seltzer
Sent: Saturday, August 12, 2006 9:56 AM
To: funsec@linuxbox.org
Subject: RE: [funsec] 3 Arrested on Terrorism Charges in Mich. for
buyingprepaid cellphones

>>http://www.wtopnews.com/index.php?nid=104&sid=879155

Another story I read said when they were taken they had opened all the
packages and had collected the phones. It didn't sound like a good
resale strategy.

I can't imagine the substance of what they could be charged with, but
they certainly sound dirty.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Surveillance works


On 8/12/06, Kevin McAleavey <kevinmca@nsclean.com> wrote:
> Dewd! Gotta switch off that Faux news ...

I love it when someone knows what I'm watching better than I.

> and what played out behind the scenes was NOT good. :(

I wouldn't need to watch any news, I suppose, if I had your contacts.
If they're not top-secret, perhaps you can point me to them?

>
> And just so's ya know, Unca Brian

Unca Brian?

> I was a Goldwater republican.

I wasn't, and who cares what you were - or what you say you are, it
doesn't buy you any credibility. Logs of your current attitudes are
much more relevant. Stating this, such as you did, is a lot like a
racist who gets called out saying, "hey, I've had black friends!"

The reply to which is always, "did they know you're a racist?"

> I don't care for these guys and the continuing profligacy and ineptitude at every turn.

That's really the only comment you needed to make.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: Auto zoom-in after time delay


3. map.zoomTo() is v1 syntax but you're not running in compatibility
mode. Try map.setZoom() instead.

--
The Blackpool Community Church Javascript Team
http://www.econym.demon.co.uk/googlemaps/

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

Re: [Full-disclosure] JavaScript get Internal Address (thanks to DanBUK)


hi martin. this script shows your internal IP address, which is
192.168.1.3. Attackers can use that to find how your internal network
looks like. In your case 192.168.1.0 is you home lan and 192.168.1.1
is probably your router.

cheers,
pdp

On 8/12/06, Martin Dipo Zimmermann <mdz@prohest.com> wrote:
> It appears that your scripts only result is 192.168.1.3 (tested on 5
> sites). Dont think its quite ready to fly yet. But very interesting idea.
>
> BR
>
> Martin
>
> pdp (architect) skrev:
> > http://www.gnucitizen.org/projects/javascript-address-info
> > http://f-box.org/~dan/jstest.html
> >
> > The following technique was brought to me by DanBUK
> > (http://f-box.org/~dan/). Dan managed to find the internal IP address
> > of the visiting client by establishing a socket between local host and
> > the remote web server. Upon success the socket populates its structure
> > with all kinds of useful information among some of which are the
> > internal IP address and the hostname.
> >
> > http://www.gnucitizen.org/projects/javascript-address-info/addressinfo.js
> >
> > This technique requires Java, however I think that It should be
> > possible to achieve similar result by invoking special ActionScript
> > methods from Flash.
> >
> > POC can be found on the url above.
> >
>
>

--
pdp (architect)
http://www.gnucitizen.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [funsec] Surveillance works


On 8/11/06, Dude VanWinkle <dudevanwinkle@gmail.com> wrote:

> Actually, the british authorities were tipped off by a muslim
> community in london.
>
> If they had pissed off their muslim communities, they would never have
> gotten the tip,
>
> -JP

I've not read that as being the dominant source anywhere. Both the UK
and Pakistan (who picked up several of the same "ring") appear to have
gotten a great deal of information from the US' NSA. And the
information sharing between US agencies to make this happen has been
highly praised.

But, hey, maybe you have better sources than the stories I've read...
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: AJAX error - javascript not executing inside DIV


On 8/12/06, ben bakelaar <benbakelaar@gmail.com> wrote:
> in the post above, I use the Javascript function resultsChange() to not
> only load a new PHP div with the text output from the database, but
> also load an XML file with the displayed points, and then loop through
> and display those points.
>

I don't mix javascript and php. I have a php script that queries the
database and then outputs the results to make it look like XML. the
page that displays the map just uses javascript to read the XML data.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Google Maps API" group.
To post to this group, send email to Google-Maps-API@googlegroups.com
To unsubscribe from this group, send email to Google-Maps-API-unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Maps-API
-~----------~----~----~----~------~----~------~--~---

RE: [funsec] 3 Arrested on Terrorism Charges in Mich. for buyingprepaid cellphones


On Sat, 12 Aug 2006, Larry Seltzer wrote:

> >>http://www.wtopnews.com/index.php?nid=104&sid=879155
>
> Another story I read said when they were taken they had opened all the
> packages and had collected the phones. It didn't sound like a good
> resale strategy.

That depends on your strategy.

Suppose you were planning to sell them in a street market, for example.
They'd advertise that they are really cheap (which they would be) and
environmentally friendly, because without packaging. Pile them high and
sell them cheap - possibly out of a suitcase. Maybe even Del-boy
fly-trading, which is possibly illegal (fine $10), but not terrorism.

Or maybe they planned to export them to Canada, and the transportation
costs are less if you discard all the polystyrene packaging filler.

Or maybe they were planning to sell them on Ebay, and then the postage
costs to send them to the buyer would be less without the packaging.

> I can't imagine the substance of what they could be charged with, but
> they certainly sound dirty.

They could perhaps be charged with "Having a beard that makes them look
vaguely like a terrorist" (if at least one of them is bearded), or
"wearing hats with intent to look different and thereby not looking like
their identity picture" (if necessary, the police could "find" a hat in
their van, or allege that the carrying case for the laptop "could be used
as a hat"). They don't sound dirty to me, they sound like good, honest
entrepreneurs, capitalists in the finest British tradition.

If there's more to this than "some guys bought some cheap phones and
contravened the Walmart policy of three per customer", I haven't heard it
yet.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

RE: [funsec] 3 Arrested on Terrorism Charges in Mich. for buyingprepaid cellphones


>>http://www.wtopnews.com/index.php?nid=104&sid=879155

Another story I read said when they were taken they had opened all the
packages and had collected the phones. It didn't sound like a good
resale strategy.

I can't imagine the substance of what they could be charged with, but
they certainly sound dirty.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] 3 Arrested on Terrorism Charges in Mich. for buying prepaid cellphones


> The men, all from the Dallas area, were being held on charges of soliciting
> or providing material support for terrorism and obtaining information of a
> vulnerable target for the purposes of terrorism, police Sgt. Dale Stevenson
> said. They told investigators they planned to resell the phones to a
> wholesaler for profit, police said.

That sounds right to me.

> Stevenson declined to elaborate on how the case relates to terrorism.
> Telephone messages were left Friday with the Tuscola County prosecutor's
> office and the FBI, which assisted with the investigation.
>
> The men, ages 18, 22 and 23, were being held in Tuscola County Jail and
> scheduled to be arraigned Saturday.
>
> Stevenson said the men went to a 24-hour Wal-Mart store in Caro early Friday
> and bought the cell phones despite a sto