Wednesday, April 9, 2014

OpenSSL Heartbleed Vulnerable Server Testing

It seems that the OpenSSL heartbeat vulnerability (heartbleed) has not caused that many issues so far, and many servers are patched already. I believe there's a lot of hype behind it. However, time will tell if it causes any impact. Also we may never know what exactly is leaked, we can only know that a hack was attempted by using snort or another IDS/IPS. The version command doesn't really say if you're running 1.0.1[a-f], but it's safe to say that if your version is 1.0.1.[anything] and it's timestamp is older than April 2014, then that version is vulnerable.

These services may be vulnerable:
Any service that runs OpenSSL and uses the STARTTLS method
The TOR client
SMTPS
IMAPS
Android OS
Postgres database
The Salt Stack cluster execution manager


Here's the original vulnerability:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160

Here's the OpenSSL patch to the vulnerable portion of code:
https://github.com/openssl/openssl/commit/731f431497f463f3a2a97236fe0187b11c44aead

Here's a google search for all mentions of heartbeat (but not heartbleed) under github.com/openssl:
https://www.google.com/search?q=site%3Agithub.com%2Fopenssl+heartbeat&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

This is a search of github.com for heartbleed:
https://www.google.com/search?safe=off&q=site%3Agithub.com+heartbleed&oq=site%3Agithub.com+heartbleed

Here is a quick tool in Python to test for the vulnerability,
http://www.exploit-db.com/exploits/32745/

There's a great writeup at heartbleed.com which goes into detail about the issue. To quote their website:
We have tested some of our own services from attacker's perspective. We attacked ourselves from outside, without leaving a trace. Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication.
There is a metasploit script available for use:

https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/ssl

You can type this OpenSSL command (tested with gnuwin32 openssl binary version 1.0.1.6, dated 1/14/2014). By the way, this version does not have the -tlsextdebug parameter, perhaps it was compiled by the gnuwin32 team without this option.

s_client -connect a23-75-248-141.deploy.static.akamaitechnologies.com:443 -debug -state

Once connected type B and you'll see on a vulnerable host and you won't be disconnected:


B
HEARTBEATING
write to 0x801c17160 [0x801cbc003] (66 bytes => 66 (0x42))
0000 - 18 03 03 00 3d 8f 6f 3c-52 11 83 20 9c a2 c0 49   ....=.o 5 (0x5))
0000 - 18 03 03 00 3d    ....=
read from 0x801c17160 [0x801cb7008] (61 bytes => 61 (0x3D))
0000 - 05 4d f5 c0 db 96 d1 f5-c7 07 e5 17 1f 3b 48 34   .M...........;H4
0010 - 6e 11 9d ba 10 0c 3a 34-eb 7b a5 7c c4 b6 c0 c0   n.....:4.{.|....
0020 - b0 75 0e fe b7 fa 9e 04-e9 4e 4a 7d 51 d3 11 1f   .u.......NJ}Q...
0030 - e2 23 16 77 cb a6 e1 8e-77 84 2b f8 7f    .#.w....w.+..
read R BLOCK


You will get a heartbeat response that looks similar to this one.


On a patched host, you will see a response similar to below and you'll be disconnected:

Enter B

HEARTBEATING
write to 0x801818160 [0x8019d5803] (101 bytes => 101 (0x65))
0000 - 18 03 03 00 60 9c a3 1e-fc 3b 3f 1f 0e 3a fe 4c   ....`....;?..:.L
0010 - a9 33 08 cc 3d 43 54 75-44 7d 2c 7b f3 47 b9 56   .3..=CTuD},{.G.V
0020 - 89 37 c1 43 1c 80 7b 87-66 ff cb 55 5f 8d 1a 95   .7.C..{.f..U_...
0030 - 1b 4c 65 14 21 a1 95 ac-7a 70 79 fc cc a0 cf 51   .Le.!...zpy....Q
0040 - 0f 7e c5 56 14 c8 37 c1-40 0b b8 cb 43 96 8a e6   .~.V..7.@...C...
0050 - 21 42 64 58 62 15 fb 51-82 e6 7f ef 21 1b 6f 87   !BdXb..Q....!.o.
0060 - b9 c2 04 c8 47    ....G



Here's my source for the OpenSSL s_client command above:

https://blog.ipredator.se/2014/04/how-to-test-if-your-openssl-heartbleeds.html

There's also these tools:

https://github.com/titanous/heartbleeder

Web based:
http://filippo.io/Heartbleed/

Test results of Alex top 1000 websites:
https://github.com/musalbas/heartbleed-masstest

Conspiracy Theory Mode
Perhaps NSA introduced this bug into OpenSSL to be able to crack users of The Onion Router?
/Conspiracy Theory Mode

Update: Here's another tool which is supposedly more accurate:
http://possible.lv/tools/hb/

Update (10:37pm est 2014/04/09)
Packetstorm's files related to the vulnerability:
http://packetstormsecurity.com/files/cve/CVE-2014-0160

Sunday, March 23, 2014

Batch Files To Launch VMWare Workstation 7 and VMWare player Services And Close On Exit

I created batch files to start VMWare Workstation 7.0 and VMWare player. It starts the different VMWare services and stops them when VMWare is closed. This was tested on XP, Vista and later may be different.

Workstation batch file:
net start ufad-ws60
net start VMAuthdservice
net start vmnetdhcp
net start "vmware nat service"
net start vmusbarbservice

f:
cd "\VMWare Workstation 7"
vmware.exe

net stop ufad-ws60
net stop VMAuthdservice
net stop vmnetdhcp
net stop "vmware nat service"
net stop vmusbarbservice

Player batch file:
net start ufad-ws60
net start VMAuthdservice
net start vmnetdhcp
net start "vmware nat service"
net start vmusbarbservice

f:
cd "\VMWare Workstation 7"
vmplayer.exe

net stop ufad-ws60
net stop VMAuthdservice
net stop vmnetdhcp
net stop "vmware nat service"
net stop vmusbarbservice

Thursday, February 20, 2014

Install Chrome Web Store Plugins In Chromium Or SRWare Iron

If you use Iron, the version of Chrome that is privacy enhanced by default, you can install plugins from the official Chrome Webstore.

Proxy Switchy for example, uses this URL for browsing from the webstore:

https://chrome.google.com/webstore/detail/proxy-switchysharp/https://chrome.google.com/webstore/detail/proxy-switchy/caehdcpeofiiigpdhbabniblemipncjj

But this is the actual installation URL for the CRX file:

https://clients2.google.com/service/update2/crx?response=redirect&x=id%3Dcaehdcpeofiiigpdhbabniblemipncjj%26uc%26lang%3Dde&prod=chrome

Note the parameter after the id%3D in the url. Once you find the extension you'd like to install in the Webstore, simply replace the red text in the installation URL with the portion of the Webstore URL that looks like random letters and numbers such as the gobbledygook below, and paste the url into the iron or chromium "OneBar", then it should install the extension.

fdsjfkddddkkddjfjghttjfurjvvhggg

These ID's are thirty-two characters long and made up of lowercase letters.

There's a page on the Gentoo Linux Wiki that explains this as well.

Febuary 4, 2015 Update:
It appears that this method no longer works for some reason.

Friday, January 17, 2014

Schemer - Another Google service shutting down

Dear Schemers,

The time has come for
Schemer to power down.

Schemer launched in beta
over a year ago to help
inspire and motivate people
to do more awesome stuff,
and though the app is
shutting down, the
adventures will continue.
You can use the "Explore"
section on Google Maps for
Android and iOS to find
interesting things to do
around you, or Field Trip to
uncover hidden or unique
things in your city, among
others.

All your schemes are
available for download until
February 7, 2014, after
which all data will be
permanently and irrevocably
deleted. You can find the
simple steps to download
your data here.

In the meantime, stay
curious, ambitious, daring,
and above all, stay
adventurous!

Thank you for all your
support on this journey!

- The Schemer Team

Saturday, January 4, 2014


I've started pumping iron again. Mainly free weights with upper body using a dumbbell. Legs and anything that put force on my back not possible at the moment due to possible slipped disc.

I remember as a freshman at Mandeville High School (yes I went there for one year and sat next to miss teen louisiana, Sarah Price, CHS Lions fans) the football players had a chart that shows, given the maximum weight you can lift for a given lift, curl, press etc..., how much to increase your weight lifting at each workout. Does anyone have a chart like this or follow a general rule for upping your weights? Is it better to increase by a fixed rate, say, 5 lbs, or a certain percent? I am aware that to get bulkier you want to do shorter repetitions with heavier weights and for leaner, endurance-type muscle you should do more repititions with less weight.

I am leaning toward just doing whatever I can whenever I can (this will save time as well) until a given weight is easy, and then increase the weight. This would be simpler to stick to as I'm not aiming to be Bruce Lee, just increase my overall strength and long-term health. My favorite quote of Bruce Lee's is (well really the only quote I know, hah) "A man must constantly exceed his level."

Monday, November 4, 2013

SonicWall SSL-VPN setup from SSH Command-Line



Here's how to configure the Sonicwall SSL-VPN from the CLI. I'm trying to improve my SonicWall command line skills, so I thought I'd post this here.

In addition to below, you'll also need to add your user to the SSL-VPN group under Users, Local Users.

I left out the part where you exit the config mode and are prompted to save the configuration. Just type yes.

This uses the tunnel-all mode. You'll need to setup add your routes manually if you're limiting access to certain networks.


C:\Documents and Settings\Administrator>ssh -v
OpenSSH_4.1p1, OpenSSL 0.9.8 05 Jul 2005
usage: ssh [-1246AaCfgkMNnqsTtVvXxY] [-b bind_address] [-c cipher_spec]
           [-D port] [-e escape_char] [-F configfile]
           [-i identity_file] [-L [bind_address:]port:host:hostport]
           [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
           [-R [bind_address:]port:host:hostport] [-S ctl_path]
           [user@]hostname [command]


C:\Documents and Settings\Administrator>ssh adminuser@2.2.2.2
The authenticity of host '2.2.2.2 (2.2.2.2)' can't be established.
RSA key fingerprint is --------------------------------------.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '2.2.2.2' (RSA) to the list of known hosts.


Copyright (c) 2012 Dell | SonicWALL, Inc.



Using username 'adminuser'.
Password:

adminuser@SonicwallSerialNumber> conf

config(SonicwallSerialNumber)# ssl-vpn server
(config-sslvpn-server)# port 4433
(config-sslvpn-server)# cipher aes256-sha1
(config-sslvpn-server)# sslvpn-access WAN
(config-sslvpn-server)# exit

config(SonicwallSerialNumber)# ssl-vpn profile
(config-sslvpn-profile)# device-profile "Default Device Profile"
(edit-sslvpn-profile-routes[Default Device Profile])# tunnel-all
(edit-sslvpn-profile-client[Default Device Profile])# exit
(edit-sslvpn-profile[Default Device Profile])# exit
(config-sslvpn-profile)# exit

config(SonicwallSerialNumber)# exit
adminuser@SonicwallSerialNumber> exitRead from remote host 2.2.2.2: Connection reset by peer


Wednesday, October 23, 2013

3com asterisk binaries


Here's 3com's asterisk, v 1.4.1.1, with install instructions (it runs on an embedded type of board). I don't know anything else about this device and software, other than it has device os/flash and boot images. There's some manuals on hp's website for this device*. Hopefully this helps.

If this violates copyrights, please leave a comment and I'll remove it.

http://www.mirrorcreator.com/files/1DUSZHPW/3com_Asterisk_1.4.1.1__for_uploaded.net_.zip_links

* http://pro-networking-h17007.external.hp.com/us/en/support/converter/index.aspx?productNum=JF049A

Friday, November 2, 2012

eBay Removing Wildcards in Searches! (the '*' or asterisk)

Here's the email eBay just sent me. I think the net effect on searches will be negative. It's too bad Google doesn't just buy eBay. Then the search would vastly improve.


Your saved searches will change on November 5

Dear ****,

You're receiving this email because we noticed that you are using a wildcard (search terms with a *) in one or more of your saved searches in My eBay.

Starting on November 5, we will no longer support wildcard searches. We encourage you to revise your saved searches to whole words without the *.

Why are we making this change?

We've made many recent improvements to our search capabilities on eBay that now take into account many spelling variations. This has helped us to offer better search results to our buyers and sellers.

However, after November 5, your wildcard searches will not return the same results you're used to seeing. This means that you may possibly miss out on the new and recently-listed items that you're used to seeing in your saved searches in My eBay and in the emails that we send to you.

Here's how to revise your saved search terms

Replace any * in a wildcard search term with whole words.

EXAMPLE: Replace "Floral silk scar*" with "Floral silk scarf"

You can also include various spellings in a single search term by adding it in parentheses, with each additional term separated by a comma.

EXAMPLE: Replace "Floral silk scar*" with "Floral silk (scarf, scarfs, scarves)"

You can also exclude items from the results for your saved search by adding a "-(items to be excluded)".

EXAMPLE: Replace "Porcelain minifigur* -lot*" with " Porcelain (minifigure, minifigurines) -(lot, lots)"

Please update your saved searches today, so you can stay on top of the things you're most interested in finding on eBay.

Thanks for shopping on eBay!

Saturday, April 28, 2012

Get 25 Gigabytes of free online backup storage from SkyDrive.com

Get 25 Gigabytes of free online backup storage from SkyDrive.com.

It's a limited time offer!

https://skydrive.live.com/#!/ManageStorage?lu=1

Saturday, February 25, 2012

Sunday, July 10, 2011

Collection Of Blackberry Apps Liberated from App Store

This is LifeInPocket aka Life In Pocket version 0.733, a FREE! GPS Navigation App (it's an ad-sponsored app).  It may require Blackberry OS 5. I haven't used it on earlier versions. You might be able to get it to work:


http://www.4shared.com/folder/Tk1oawHE/0_online.html




This is MapQuest 4 Mobile, 8530-Generic, version 1.10.1, downloaded Over-The-Air from MapQuest. It does do directions and maps from your Blackberry's GPS location, but it doesn't go hands-free spoken navigation. It's a great app for traveling and vacations and long trips, not for short trips and commutes. Unlike Google Maps and other free GPS apps I've used, it actually gives the name of the highway and not just the highway number:


http://www.4shared.com/dir/NMUJoGgc/110.html




I'll be adding more apps to this post as I find the time.




Here's a bunch of other apps, dumped with BBSAK from AppWorld or OTA downloads. If you need any of them just leave a comment here and I'll upload them when I can.







Flurry.cod
PaymentLib.cod
SoftReset.cod
voice_42_en.cod
GoogleSync_40_en.cod
lifeinpocketg48.cod
PoyntTicketDaemon.cod
PoyntPushModuleInterface.cod
PoyntPushHandler_TetherHandler.cod
PoyntPushDaemon.cod
PoyntGraphics.cod
net_rim_bbapi_adv_app10155.cod
Glympse.cod
BlaCaDa19.cod
topoexplorer.cod
BBLauncher.cod
pandora$2dradio.cod
BeamExplorer.cod
MapQuestMobile_generic_rim_8530.cod
AFBBMetrix.cod
UberSocial.cod
GasBuddy.cod
GPSTool.cod
Bing.cod
bbtestfwkinterfaces.cod
BingLib.cod
BingData.cod
Poynt.cod
WWOZ.cod
net_rim_bb_travel_core.cod
net_rim_bb_travel_nav.cod
net_rim_bb_traffic.cod
net_rim_bb_travel_geom.cod
net_rim_bb_travel_comm.cod
net_rim_bb_travel_places.cod
net_rim_bb_travel_ui.cod
LogicMail.cod
net_rim_bb_myspace.cod
net_rim_bb_myspace_lib.cod
net_rim_bb_myspace_resources_large.cod
net_rim_bb_myspace_resources.cod
net_rim_bb_myspace_resource_en.cod
net_rim_bb_gmail_help_en.cod
net_rim_bb_gmail_resource__en.cod
net_rim_bb_gmail.cod
waze.cod
BeatTheTraffic.cod
SecurIDLib.cod
net_rim_bb_appworld_updater.cod
net_rim_bb_appworld_usb.cod
net_rim_bb_appworld_lib.cod
net_rim_bb_appworld_bbid.cod
net_rim_bb_appworld.cod
net_rim_bb_appworld_barcode.cod
net_rim_bb_appworld_resource_en.cod
net_rim_bb_appworld_payment.cod
com_emacberry_gpslogger_bbm.cod
com_emacberry_gpslogger_lib.cod
com_emacberry_gpslogger_def.cod
com_emacberry_GPSLogger.cod
WhiteNoiseLite.cod
APNews_421_en_app.cod
APNews_421_en_app_core.cod
APNews_421_en_core.cod
APNews_421_en_core_image.cod
APNews_421_en_database.cod
APNews_421_en_engine.cod
APNews_421_en_engine_core.cod
APNews_421_en_io.cod
APNews_421_en_ui.cod
APNews_421_en_account.cod
boltbb252.cod
Fierce_470_en_account.cod
Fierce_470_en_app.cod
Fierce_470_en_ui.cod
Fierce_470_en_screens.cod
Fierce_470_en_platform_bb.cod
Fierce_470_en_platform.cod
Fierce_470_en_io.cod
Fierce_470_en_image_icon.cod
Fierce_470_en_image.cod
Fierce_470_en_engine_core.cod
Fierce_470_en_engine.cod
Fierce_470_en_database.cod
Fierce_470_en_core.cod
Fierce_470_en_branding_en.cod
Fierce_470_en_app_core.cod
GoogleSearch.cod
net_rim_rimsecuridlib.cod
operette4$2dhifi.cod
GoogleMaps.cod
net_rim_font_latin_truetype.cod
net_rim_bb_appremoval.cod
net_rim_bb_trust_application_manager.cod
net_rim_bb_application_permissions_proxy.cod
net_rim_app_manager_console.cod
net_rim_bb_framework_api.cod
net_rim_m2g_internal.cod
net_rim_m2g.cod
net_rim_xml_org.cod
net_rim_xml.cod
net_rim_plazmic_themereader.cod
net_rim_plazmic_mediaengine.cod
net_rim_ui_extension.cod
net_rim_ui_impl.cod
net_rim_ui_api.cod
net_rim_process_launcher.cod
net_rim_platform_im_resource__en.cod
net_rim_platform_im_resource.cod
net_rim_services_impl.cod
net_rim_platform_resource__en.cod
net_rim_platform_resource.cod
net_rim_io_impl.cod
net_rim_cldc.cod
net_rim_app_manager.cod
net_rim_platformapps_resource__en_US.cod
net_rim_platform_im_resource__en_US.cod
net_rim_platform_resource__en_US.cod
net_rim_bb_phone_cdma_service.cod
net_rim_phone_tty_enabler.cod
net_rim_database.cod
net_rim_sql.cod
net_rim_ui_alpha.cod
net_rim_bb_timezonedynupdater.cod
net_rim_bb_localeremoval.cod
net_rim_jaxrpc.cod
net_rim_satsa.cod
net_rim_drm.cod
net_rim_media_api.cod
net_rim_media.cod
net_rim_escreen_app.cod
net_rim_escreen.cod
net_rim_amms.cod
net_rim_bb_spellcheck.cod
net_rim_bb_setupwizard.cod
net_rim_bb_sendusingbluetoothapp.cod
net_rim_bb_sendtomessengercontactapp.cod
net_rim_bb_sendasmmsapp.cod
net_rim_bb_sendasemailapp.cod
net_rim_bb_voice.cod
net_rim_bb_timezones.cod
net_rim_bb_recentcontacts.cod
net_rim_bb_search.cod
net_rim_bb_ribbon_lib.cod
net_rim_bb_quickcontact.cod
net_rim_bb_profiles_alertengine_app.cod
net_rim_bb_profiles_lib.cod
net_rim_bb_profiles_app_new.cod
net_rim_bb_profiles_app.cod
net_rim_bb_phone_resource.cod
net_rim_bb_phone_model.cod
net_rim_bb_options_app.cod
net_rim_bb_options.cod
net_rim_bb_models.cod
net_rim_bb_messaging_app.cod
net_rim_bb_messaging.cod
net_rim_bb_call_control.cod
net_rim_bb_browser.cod
net_rim_bb_addressbook.cod
net_rim_bb_phone_dc_resources.cod
net_rim_platformapps_resource__en.cod
net_rim_platformapps_resource.cod
net_rim_bb_device_selftest.cod
net_rim_cldc_vpn_diagnostics.cod
net_rim_vpn_options.cod
net_rim_cldc_impl_vpn.cod
net_rim_wlan_runtime_resource__en.cod
net_rim_wlan_bb_resource__en.cod
net_rim_wlan_runtime_resource.cod
net_rim_wlan_runtime_resources.cod
net_rim_wlan_bb_resource.cod
net_rim_wlan_bb_resources.cod
net_rim_wlan_apps_api.cod
net_rim_wlan_wizard.cod
net_rim_cldc_srp_diagnostics.cod
net_rim_cldc_wlan_diagnostics.cod
net_rim_bb_diagnostics_ui.cod
net_rim_bb_diagnostic_subsystem.cod
net_rim_bb_captiveportaldetector.cod
net_rim_bb_sitesurvey.cod
net_rim_wap_provisioning.cod
net_rim_wlan_options.cod
net_rim_cldc_impl_wlan.cod
net_rim_options_profiles_api.cod
net_rim_cldc_impl_api.cod
net_rim_tid_AddrBookRep.cod
net_rim_tid_spell_check.cod
net_rim_tid_dynamic_ling_data_english_us_45k_2.cod
net_rim_tid_dynamic_ling_data_domain_names.cod
net_rim_tid.cod
net_rim_tid_im_alph_core.cod
net_rim_bb_options_customwordlistscreen.cod
net_rim_tid_core.cod
net_rim_tid_dynamic_ling_data_english_us_ltr.cod
net_rim_bis_client__en.cod
net_rim_bis_client_resources.cod
net_rim_bis_client_res.cod
net_rim_bis_client.cod
net_rim_bis_lib.cod
net_rim_speech_data_en_US.cod
net_rim_speech.cod
net_rim_nuance.cod
net_rim_bluetooth.cod
net_rim_bb_sms.cod
net_rim_bb_clock_lib.cod
net_rim_bb_clock.cod
net_rim_bb_addressbook_vcard.cod
net_rim_serialformats.cod
net_rim_bb_globalsearch_app.cod
net_rim_bb_password_wizard.cod
net_rim_bb_mc_app.cod
net_rim_bb_sms_compose.cod
net_rim_bb_resource__en.cod
net_rim_bb_resource.cod
net_rim_bb_applicationdelivery.cod
net_rim_bb_recentcontacts_lib.cod
net_rim_bb_messagesearch_lib.cod
net_rim_bb_ribbon_skin_svg_DelayedInitializer.cod
net_rim_bb_ribbon_skin_svg.cod
net_rim_bb_ribbon_app.cod
net_rim_bb_banner.cod
net_rim_bb_timeddialogapp.cod
net_rim_bb_timeddialog.cod
net_rim_bb_remindermanager.cod
net_rim_bb_profiles_tunes.cod
net_rim_bb_email.cod
net_rim_bb_calendar_ota.cod
net_rim_bb_calendar_lib.cod
net_rim_bb_calendar_app.cod
net_rim_bb_browser_push.cod
net_rim_bb_browser_field2_api.cod
net_rim_bb_browser_field_api.cod
net_rim_bb_attachment.cod
net_rim_bb_apps_framework.cod
net_rim_bb_addressbook_groupaddress.cod
net_rim_bb_addressbook_models.cod
net_rim_bb_addressbook_gal.cod
net_rim_bb_addressbook_app.cod
net_rim_bb_activation.cod
net_rim_runtime_resource__en.cod
net_rim_runtime_resource.cod
net_rim_cldc_io_rim_impl.cod
net_rim_event_log_viewer_app.cod
net_rim_smartcard.cod
net_rim_os.cod
net_rim_bb_browser_plugin_docview.cod
net_rim_bb_browser_ninjainterface.cod
net_rim_bb_browser_mango_wrapper.cod
net_rim_bb_browser_mango.cod
net_rim_bb_rich_email.cod
net_rim_bb_browser_plugin_security.cod
net_rim_loader.cod
net_rim_bb_browser_daemon.cod
net_rim_bb_sbinjector_lib.cod
net_rim_bb_browser_lib.cod
net_rim_bb_browser_rendering_lib.cod
net_rim_bb_browser_cookiejar.cod
net_rim_font_european_sff.cod
net_rim_bb_standardcalculator_app.cod
net_rim_bb_mediaapp_launcher_app.cod
net_rim_cldc_io_remotefile.cod
net_rim_bb_mediarecorder.cod
net_rim_bb_medialibraryplayer.cod
net_rim_bb_medialibrary.cod
net_rim_bb_mediacontenthandler.cod
net_rim_bb_fileindexservice.cod
net_rim_bb_file_explorer.cod
net_rim_bb_diagnostic_resource__en.cod
net_rim_bb_ping_app.cod
net_rim_bb_dnslookup_app.cod
net_rim_bb_diagnostic.cod
net_rim_tid_dynamic_transcoding_data_CP1250.cod
net_rim_bb_otasl_channel.cod
net_rim_bb_otasl_app.cod
net_rim_MIDPRootCerts.cod
net_rim_bb_free_busy_lib.cod
net_rim_softtokens_options.cod
net_rim_cldc_impl_softtoken.cod
net_rim_bb_enterpriseconfig.cod
net_rim_bb_startup.cod
net_rim_bb_securitymonitor.cod
net_rim_bb_setupwizard_app.cod
net_rim_bb_implus_app.cod
net_rim_theme_precision_zen_320x240_b_01.cod
net_rim_bb_clock_faces.cod
net_rim_bb_preloaded_media_crawler.cod
net_rim_bb_games_app.cod
net_rim_bb_setupwizard_images_8900.cod
net_rim_bb_otaupgrade.cod
net_rim_bb_elt_resource__en.cod
net_rim_bb_elt.cod
net_rim_bb_supl_app.cod
net_rim_bb_geolocationagent.cod
net_rim_bb_gps_ee.cod
net_rim_bb_application_updater.cod
net_rim_bb_oldcodcleanup.cod
net_rim_bb_safe_mode.cod
net_rim_bb_manage_connections.cod
net_rim_wap.cod
net_rim_data_provider_resources__en.cod
net_rim_data_provider.cod
net_rim_bb_docviewimage.cod
net_rim_bb_docview.cod
net_rim_plazmic_pushactivator.cod
net_rim_api_wlan_hotspot.cod
net_rim_media_actions_daemon.cod
net_rim_media_actions.cod
net_rim_networkapi.cod
net_rim_bb_medialoader_accessibility.cod
net_rim_bb_web_jse_api.cod
net_rim_bb_appremoval_app.cod
net_rim_bb_caprofilesmanager.cod
net_rim_bb_drm_agent.cod
net_rim_device_api_games.cod
net_rim_bb_email_compression.cod
net_rim_bb_browser_script_ext.cod
net_rim_bb_media_plugin.cod
net_rim_bb_medialoader_ringtones_320x240_05_b.cod
net_rim_bb_medialoader_backgrounds_320x240_05_b.cod
net_rim_bb_medialoader_320x240_05_b.cod
net_rim_bb_medialoader_video_320x240_05_b.cod
net_rim_bb_autotz.cod
net_rim_bb_syncml_stack.cod
net_rim_bb_omadmcertificate.cod
net_rim_bb_syncml_omadm.cod
net_rim_bb_omadmlib.cod
net_rim_bb_mtp.cod
net_rim_vad_engine_resource__en_US.cod
net_rim_vad_resource__en.cod
net_rim_vad_resource.cod
net_rim_vad.cod
net_rim_tid_newWordsExtractor.cod
net_rim_bb_voicenotesrecorder.cod
net_rim_bb_videorecorder.cod
net_rim_bb_camera.cod
net_rim_crypto_2.cod
net_rim_crypto_1.cod
net_rim_crypto_resource__en.cod
net_rim_crypto_resource.cod
net_rim_bbapi_sharing.cod
net_rim_bb_lbs_api_3_resources__en.cod
net_rim_bb_lbs_api_3.cod
net_rim_bbapi_push.cod
net_rim_bbapi_contactlinking.cod
net_rim_bbapi_messagelist.cod
net_rim_bb_lbs_api_2.cod
net_rim_bbapi_stringpattern.cod
net_rim_bbapi_blackberrymessenger.cod
net_rim_locationapi.cod
net_rim_bbapi_invoke.cod
net_rim_bbapi_phone.cod
net_rim_bbapi_browser.cod
net_rim_bbapi_options.cod
net_rim_bbapi_messagelist_res__en.cod
net_rim_bbapi_messagelist_resources.cod
net_rim_bbapi_messagelist_res.cod
net_rim_bbapi_pim_res__en.cod
net_rim_bbapi_pim_res.cod
net_rim_pdap_resources.cod
net_rim_pdap.cod
net_rim_bbapi_pim.cod
net_rim_bbapi_menuitem.cod
net_rim_bbapi_maps.cod
net_rim_bbapi_mail.cod
net_rim_bbapi_mailv2.cod
net_rim_bb_app_center.cod
net_rim_tid_dynamic_ling_data_financial_english_10k_2.cod
net_rim_bb_fumoPokeLib.cod
net_rim_bb_memo_app.cod
net_rim_bb_lbs_resource__en.cod
net_rim_bb_lbs_lib.cod
net_rim_bb_lbs.cod
net_rim_bb_lbs_api.cod
net_rim_bb_help_8500_series__en.cod
net_rim_bb_help.cod
net_rim_bb_browser_wap_provisioning.cod
net_rim_apps_internal_browser_smil.cod
net_rim_plazmic_mediaengine_smil_mms.cod
net_rim_plazmic_mediaengine_smil_format.cod
net_rim_plazmic_mediaengine_smil_00.cod
net_rim_bb_mms.cod
net_rim_bb_browser_gears.cod
net_rim_tid_words_injector.cod
net_rim_tid_basicFastEuropean.cod
net_rim_tid_fastEuropean.cod
net_rim_tid_repositoryBasedEuropean.cod
net_rim_bb_options_SpellcheckableOptions.cod
net_rim_bb_options_fastEuropean.cod
net_rim_tid_fullPredictive.cod
net_rim_bb_ldap_browser_x509.cod
net_rim_bb_ldap_browser_pgp.cod
net_rim_bb_ldap_resource__en.cod
net_rim_bb_ldap_resource.cod
net_rim_bb_ldap_browser.cod
net_rim_bb_smime_lib.cod
net_rim_bb_pgp_lib.cod
net_rim_secureemail_resource__en.cod
net_rim_secureemail_resource.cod
net_rim_secureemail.cod
net_rim_crypto_keystore_browser_pgp.cod
net_rim_crypto_keystore_browser_certificate.cod
net_rim_crypto_keystore_browser.cod
net_rim_bb_crypto_resource__en.cod
net_rim_bb_crypto_resource.cod
net_rim_bb_crypto_api.cod
net_rim_crypto_pgp.cod
net_rim_crypto_cms.cod
net_rim_bb_smartcardreader_microSD.cod
net_rim_smartcard_piv_lib.cod
net_rim_smartcard_piv.cod
net_rim_smartcard_datakey.cod
net_rim_smartcard_gsacac.cod
net_rim_crypto_3.cod
net_rim_bb_task_app.cod
net_rim_ecmascript_resource__en.cod
net_rim_ecmascript_resource.cod
net_rim_ecmascript.cod
net_rim_bb_phone_app.cod
net_rim_bb_phone_api.cod
net_rim_bb_passwordkeeper_resource__en.cod
net_rim_bb_passwordkeeper_resource.cod
net_rim_bb_passwordkeeper.cod
net_rim_bbgroup_lists.cod
net_rim_bbgroup_messaging.cod
net_rim_bb_qm_lib_barcode.cod
net_rim_bb_qm_peer.cod
net_rim_bb_qm_peer_lib.cod
net_rim_bbgroup_photos.cod
net_rim_bbgroup_inbox.cod
net_rim_bbgroup_database.cod
net_rim_bbgroup_calendar.cod
net_rim_bb_qm_peer_resource_en.cod
net_rim_bb_qm_api.cod
net_rim_bb_qm_bbm_internal_api.cod
net_rim_bb_lbs_ribbon.cod
implus_ad_lib.cod
implus.cod

Thursday, March 17, 2011

Pandora Radio Is REALLY REALLY AWESOME!

I know I sometimes have a glacial mindset and am slow to new things, but I've realized how awesome Pandora internet radio is!!!!!!!! You choose a radio station that's based on an artist or song, and click a thumbs up to hear more songs like the one you've heard, or thumbs down for one's you don't want to hear as much. Pandora learns your tastes.As you listen to other 'stations', eventually after awhile you can just play the quickmix station and it will play varied music from all your stations. Essentially it's a customized radio station. Even Satellite radio can't beat that! If you want to follow me on Pandora, I'll follow you back,



http://www.pandora.com/people/justgold79

Saturday, March 5, 2011

Syncing Android, iPhone, Blackberry, Windows Mobile, Outlook and Gmail Contacts

Funambol is open-source, has an outlook plugin,  as well as apps for android, blackberry, windows mobile, symbian, iphone, and generic java micro edition phones! 

Your contacts, notes, calendar and pictures are online at http://my.funambol.com/


IT'S THE ONLY FREE SYNC APP I'VE EVER FOUND THAT CAN BACKUP MY BLACKBERRY'S NOTES WITHOUT A USB CABLE! AND THAT'S GREAT BECAUSE I LOST A FEW IMPORTANT NOTES (EG GREAT BUSINESS IDEAS) BECAUSE I WASN'T DOING DAILY BLACKBERRY DESKTOP MANAGER BACKUPS THROUGH USB!


Since they just released the Blackberry app, I've noticed the web interface isn't always online. Also the blackberry app and the service is still beta, so continue using Google Sync or m:IQ (eg miqlive) as well!


You can even host your own funambol server, in case you don't want your phone's data "in the cloud"! If you run your own sync server you can even synchronize with Microsoft Exchange, Google Contacts, Zimbra, or Yahoo!.

I cross-posted this from my post in the Gmail Help Forums.

Sunday, February 13, 2011

The Inbox Of The Future

This post is a copy of my comment on universal inboxes.


Like the author said, not having to leave the interface is the best solution.
For example, I like how one can reply to someone's facebook comment through the email program. It looked like Myspace was trying to do this (based on the fact that every email notification had some unique string in the 'from' address).

Ultimately Gmail will have to provide some kind of api for integrating outside 3rd-party messaging systems (eg a plugin or "Lab" for other not just reading but replying to IM messages, social networking site inboxes, etc...), to compete with Facebook's idea of a universal inbox that pulls them all together.

Thursday, April 1, 2010

Hitman Pro "Early Warning Scoring

The early warning scoring could be used to identify files that need further scanning, eg by uploading to virustotal.com for further "in the cloud" analysis.

in reference to: Hitman Pro 3.5 - Early Warning Scoring - Reviews by PC Magazine (view on Google Sidewiki)

Monday, March 29, 2010

USPS Shipping Tracking/Order Through RSS and SMS (Text Mesage)

I am compiling a list of the options that USPS uses on their shipping tracking numbers. I remember a few years ago that the U.S. Postal Service would only show that the package was either delivered or shipped. Now they show a little bit more timely updates, such as when it reaches the destination cities' sort facility and leaves the origination cities' sort facility, as you can see below. I hope that "Processed through Sort Facility" this means it arrives today.

Processed through Sort Facility, Mar-28-10, 03:26 AM, [Destination Facility]
Processed through Sort Facility, [Origin City]

Electronic Shipping Info Received, [Origin City]


Package was tracked with the uber cool boxoh.net package tracker + notify.me (which sends me a text when the status is changed)

Friday, January 15, 2010

How-To Run Programs On FAT32/16 Drives As Another User

Flash drives come from the factory FAT-formatted. This is recommended for purposes of speed and extending the drives life, AFAIK. If you want to run a portable application (Eg. one that doesn't require installation) from an external or flash drive, and you use Windows in a multiple user mode as recommended by Microsoft (where you use the computer as a regular user and install programs and perform maintenance as the administrator account), you're stuck in a predicament. Programs stored on FAT file-systems are not able to run as a user with different credentials (which means as the admin in the case of certain utilities which require direct disk access, MyDefrag for example). It's Microsoft's fault for not backporting certain things to the File Allocation Table (couldn't they store the extra ntfs stream data or extant data inside a text file in each directory)?

A solution I've found is to place the shortcut on your Desktop or Start Menu and modify the shortcut's properties to run as a different user (go to right-click, properties, shortcut, Advanced,  and select "Run with different credentials"). In the case of working on someone elses computer you can create a batch file on the portable drive itself which has the runas command, eg "runas /user:administrator Mydefrag.exe scripts\OptimizeMonthy.Myd". That's it!

Thursday, January 14, 2010

Techreevu's Google Voicehub Can Dial Letters!

I couldn't remember the number for Slydial so I typed 267-slydial directly into the Google Voice Desktop-based dialer I use (now called VoiceHub, originally called Lev's Google Voice app???). And no, there's still no way to actually place calls through the Internet only unless you were one of the fortunate few who got a Gizmo5/Gizmo Project account before they were bought by Google, AFAIK. Dialing by letters doesn't work on the GV web interface, so apparently the Techreevu app is doing the conversion.

Should I keep these Google Voice related posts here or move them over to my Google Voice Fanatic Blog? What do the three readers of my blog think?

Friday, October 30, 2009

What's The Most Secure Windows Firewall?

The reason I ask is, Google isn't much help in this most important security matter. What do I recommend to my computer repair business customers who trust my judgement? I don't like to tell a customer that there is no perfect firewall/anti-virus/anti-spyware/anti-rootkit program, even though it's true, as any who has ever read the Phrack e-zine or 2600 magazine knows.

Thursday, October 29, 2009

Don't Pay Best Buy To Uninstall Their Adware/Malware/Trial Software

My sister bought a laptop from Best Buy that had a lot of problems almost right away. The Trend Micro combination security/virus scanning software had some error. Also it had ran really slowly and had problems with the 64-bit version of Internet Explorer. Finally, it had a horrendous amount of other garbage installed and trial-ware to boot. Me, being the families system administrator and technical support by default, was at that time out of town on this occasion. Best Buy charged a friend forty dollars to uninstall their junk and fix all the problems she had, when only a mere two months old! (There's a program that can remove most of the junk programs installed on new computers called PC Decrapifier). She could have just returned it to HP, but for various reasons, she didn't want to take that course of action. Ironically, a few months later, and just eighty days before the warranty was ended, another problem with the system's memory cropped up which was fixed for no charge by HP. The screen cracked on its own too! Moral of the story: Best Buy is pretty bad. HP is less awful.

As a general rule, if you want a good computer with hardware that will last, get the business-class models.

Tuesday, October 20, 2009

Publicly Posted Google Voicemails are listed in Yahoo! Search

Concerning this post, Google Voice Blog: About Voicemail and Privacy

They are still in in Yahoo!, of course, as every SEO'er knows Google is the most strict in removing robots.txt content. Although in this case, Google probably manually edited the results for privacy reasons.

Saturday, October 10, 2009

My Google Wave Invitation Request

Here's what I asked on the Google Wave invitation request web site.
I want to collaborate with others in my corporation in real-time and prefer to use web-based tools to enhance productivity and avoid information being locked up in silos such as inboxes and MS Sharepoint behind a firewall.


What did you ask in your request?

Monday, August 31, 2009

Howto Check Your Voicemail From Any Phone For Free!

This guide will show you how-to check your voice-mail from any phone for free! This works well especially if you have some sort of unlimited long-distance phone system, like MagicJack, Voip, or Google Voice with a Friends & Family cellular phone.

There are two ways to do this. The first and easiest way is by calling your own phone number, then when your phone goes to the 'leave a voicemail' prompt, press the Star Key (called Asterisk in the phone world) and enter your voice-mail pin code and Bam! You're in.

There's a more complicated way to do this (and also a way to leave someone a voice mail without even ringing their phone or using Slydial [Slydial does leave your number but only rings for half a second]), but I'll add it to this post later because it's not possible to explain in a few words.

Monday, August 3, 2009

Google Voice/Grandcentral Email Support

IF you ever need help email voice-help (at) google.com with your pin#, google voice number, cell number, the date you opened the account and associated google account username. Also it would be smart to send a carbon-copy (cc) to these addresses,

support (at) grandcentral.com, grandcentral-help (at) google.com, accounts (at) grandcentral.com

Tuesday, July 28, 2009

Google Voice/Grandcentral Number/Business Cards iPrint Promo

I'm posting the the full html (minus my email and phone number) of the 'Google Voice Number Cards - powered by iPrint.com' landing page below since people are so curious what the page actually says as opposed to a screenshot.









Free Google number cards, powered by iPrint.com
Business Cards

Hand out your Google number
In celebration of the relaunch of GrandCentral as Google Voice we are giving away 50,000 sets of 25 Google number cards totally free. Yep, shipping, printing and everything is included. Have a little fun and show off your Google number.
Calling Personal Business
Layout Layout Layout
Layout Layout Layout
How it works:
1) Select one of three styles
2) Add the information you'd like on the card
3) Fill in your shipping and email information (iPrint will use this only for the purposes of confirming and sending you your cards)
4) Your personal Google number cards should come in 10-12 days

(Offer available to U.S. continental street addresses.)


Google Voice Support iPrint.com Customer Support
Business Cards Copyright © 1996-2009 iPrint.com All Rights Reserved. Terms and Conditions


Here's a screenshot of what your Google Voice 'inbox' looks like with the promotional business card invitation:






Oh yeah, one more thing, Google Voice is great!