NYC, Smoke 'em if you got 'em

Date: Saturday, March 29, 2003
Time: 10:00PM - 4:00AM EST (GMT-05:00)

RAVEN
194 Ave A - New York NY - 10009 (212)529-4712
http://www.raven-nyc.com/

Sat. March 29th:
SMOKE OUT PARTY:

The last day that smoking will be allowed in bars in NYC and we've got a great party in honor of that. Prizes will be given away, smokin' Rock 'N' Roll will be played, and everyone is invited to smoke to their heart's content.

It's the last time you'll be able to do so until this stupid law is repealed !

Just a stupid quickie: Hacking IRAQ is easy.
Hackers on Thursday replaced the English-language website for Arab satellite television network Al-Jazeera with a U.S. flag and the message "Let Freedom Ring." Hours later, the site was hacked again by others. Ha ha ha. I am laughing to hard to write anymore. Read it here.

Can I send porn though it.
Well if I didn't miss people like AbbyNrml so much I wouldn't ask for this device but... T-Mobile announced a new video service that will be available using a Nokia 3650 color videophone that allows customers to record a 10-second audio and video clip and then send it as an e-mail attachment. T-Mobile is selling the phone for $299, and customers will need to subscribe to a $2.99 a month service to transmit data, photos and video. The service allows 10 videos or 30 photos to be transmitted per month. Subscribers also will have to pay a monthly service fee for voice services. I wonder if they watch the video that goes through t-mobile MTA. The full story is here.

Redhat you suck at the ACPI...
It looks like I will be trying the Mandrake tonight. Mandrake announced it's new release of 9.1 bamboo. Redhat included ACPI in its beta but failed to produce it in the release. Not only does Mandrake have the ACPI but also includes the ability to play with operating systems that format hard disks with Microsoft's NTFS file system, which Linux is only beginning to support. Mandrake can carve off a piece of an NTFS, or NT file system, disk partition for its own use and read data from an NTFS partition, said Mandrake co-founder Gael Duval in an e-mail interview. However, it can't yet write files on the NTFS partition. Read more here.

It sure will be a bad day if I hear Welcome! when I call you.
America Online unveiled today their voice-mail service as as additional services to subscribers. AOL Voicemail costs $5.95 a month on top of AOL's standard $23.90 monthly subscription fee to listen to voice messages via e-mail and lets them hear e-mail over the phone. AOL also has introduced a concert ticket service called AOL Box Office, a partnership with USA Interactive's Ticketmaster division. Sounds like we might hear the ever famous "Good Bye". Read more about it here.

NIST AND FIPS approve of WiFi Firewall
Yeah I say, WTF were these guys smoking? Lets go wireless and lets put a screen door on Fort Knox. The certification, granted March 21, makes Cranite eligible to sell its wares to the U.S. government. Computer giant Hewlett-Packard plans to resell Cranite's software to government agencies. Cranite Systems, a 3-year-old start-up based in San Jose, Calif., is the maker of the WirelessWall Software Suite. Sounds like we are headed for more trouble or more script kiddies will get more jail time since the goverment has decided to take it's guard down. And you thought we are safe from terrorism? Read about the WirelessWall Software Suite here.

Check Point FW-1 NG FP3 & FP3 HF1: DoS attack against syslog daemon possible
I don't like to post buffer overflows and other attacks to the web but since all of you should be reading Bugtraq, I see no harm. This could be a big headache for some though. I pager went off about 65 times in two days.

Vulnerabilities: * Successful DoS from remote against syslog daemon of Check Point FW-1 NG FP3 (also FP3 HF1), perhaps remote root exploit possible. * Syslog message containing escape sequences directed to syslog daemon of Check Point FW-1 NG FP3 (including HF1 and HF2) remain unfiltered and cause strange output behaviour if the log is viewed on console.

Find the original post here.

Is Gentoo slow on the A/S/L?
A bugtraq announcement came out recently with a BitchX buffer overflow vulnerability.

- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200303-21
- - ---------------------------------------------------------------------

PACKAGE : bitchx
SUMMARY : buffer overflow
DATE : 2003-03-24 11:56 UTC
EXPLOIT : remote
VERSIONS AFFECTED : <1.0.19-r5
FIXED VERSION : >=1.0.19-r5
CVE :

- - ---------------------------------------------------------------------

- From advisory:

"Full of sprintf() calls and relying on BIG_BUFFER_SIZE being large
enough. There's multiple ways to exploit it by giving
near-BIG_BUFFER_SIZE strings in various places."

Read the full advisory at:
http://marc.theaimsgroup.com/?l=bugtraq&m=104766521328322&w=2

SOLUTION

It is recommended that all Gentoo Linux users who are running
net-irc/bitchx upgrade to bitchx-1.0.19-r5 as follows:

emerge sync
emerge bitchx
emerge clean

more here.