How to find a backdoor in a hacked WordPress

Edit: This post has moved to here: http://ottopress.com/2009/hacked-wordpress-backdoors/. Take your comments there.

Over here, Jorge Escobar is writing about how he got hacked with the latest version of WordPress. After some minor back and forth on FriendFeed, I got him to do a search which found a malicious backdoor he might not otherwise have found.

In so doing, it occurred to me that most people don’t keep up with the world of WordPress in the way I do, and so have not seen nearly as many hack attempts. So I figured I’d post my little contribution, and show people how to find hidden backdoors when cleaning up their hacked sites.

Non-technical users can safely ignore this post. 🙂
Continue reading “How to find a backdoor in a hacked WordPress”

Waze – Free iPhone Directions Application

Playing around this weekend, I discovered a neat and fun little app for the iPhone.

A lot of new apps have came out for the iPhone lately that are based around driving directions. TomTom came out with theirs for $100, and Navigon is another popular one that runs $90. But, if you want to try out something a little different, this one is free.

iPhone image

Waze is a free driving directions app, with a twist. Basically, the maps on it are “incomplete”. That is, they’ve got the map data, but like all maps, the data is inaccurate. So, to get the data to be better, they’re enlisting your help.

How do you help? Simple. You use the app in the car, then drive around. As you do so, the GPS will be reading your location and noting that there is indeed a street there. It makes it kinda fun to confirm streets in this way since a little Pac-Man like figure appears, eating dots on the map where you are driving, and giving you “points”. The points aren’t useful for much, except a ranking system with everybody else using the app, but it’s fun nevertheless.

So what else? Well, obviously it’ll do driving directions. However, when I tried it to get to my friend’s place at Cooper-Young fest this last weekend, it was laughably wrong. It suggested an 8 mile trek through ridiculous parts of town for no reason. I drove there the normal route instead, letting it complain that I was “off route” all the way and listening to the Waze-pacman gathering up the points as he munched his way down the road. However, something odd happened then. On the way back, when I turned it on, it knew that route. Investigating today, I’ve found that it really doesn’t like to route people on routes that haven’t been “confirmed” yet very much. So, since I’d confirmed that route already, it picked it for my way home.

But there’s a bonus to all that. By confirming the route, it’s getting more than street maps. It’s also getting average speeds. So it can use that information to give optimal routes, knowing how fast each street tends to be.

iPhone Event Reporting

You can even more than that though. Along the way, you can report events too.

An event is like an auto accident, or a speed trap. Whenever you see one of these, you can touch the report button and report one quickly. If you’re totally stopped in traffic, then you can also type in a short message (it won’t let you do that while moving), and the message will instantly be sent, where other drivers (and their iPhone’s) can see it. Those drivers will then get routed a different way, possibly saving them some time.

Or, even better, somebody else reports a problem, and you get to save some time.

Downsides to the app: Battery life. Like any other GPS app, it sucks the battery right down. You’ll need a car charger to run the thing. Probably a quality iPhone mount too. It does do landscape mode as well, and hidden down in the options is a “3D mode”, which makes the map lay back and look like the more expensive iPhone driving apps, if you prefer that sort of thing. The 2D map is easier to read, to me.

From what I’m reading, Waze has only been around a month or so, and not many people are using it. As far as I can tell, almost nobody in Memphis is using it, since almost all the roads are unconfirmed. But it would be pretty neat if everybody driving around was sharing data like this, what with Memphis traffic being what it is. I sure wouldn’t mind getting routed around half the crap I see on the streets around here.

If you’ve wanted to try out a driving directions app without spending $100 or so, then you cannot beat free. So I highly recommend it. I’m using it all the time now.

Bob Dylan to be new voice of GPS system

According to the Telegraph, Bob Dylan has been approached by multiple GPS manufacturers to be the voice of their GPS system.

While this is ludicrous on the face of it (having listened to Bob for many years, let’s face it, clarity ain’t his strong suit), I find that the best part of the whole story is what people have to say about it. Some of the comments on Digg about this development are truly the greatest remarks I’ve ever seen.

There’s the predictable ones about his clarity, or lack thereof:

“tuhhhhh lef at the lighhhhh”

What?

The natural comparisons to other celebrities doing GPS directions (such as Arnold Schwarzenegger in this case)

“Dis Twaffic sucks. GET TO DAH CHOPPA!”

Or Alan Rickman, which had this as my own contribution:

Hello.

This is

Alan Rickman.

You need to take

a left

in

two hundred

yards.

Do not disappoint me.

And this one:

BILLY MAYS HERE. TURN RIGHT AHEAD POINT 1 MILES.

Or an R. Lee Ermey one:

“I SAID RIGHT YOU WORTHLESS WASTE OF SHIT, I HAVEN’T SEEN DRIVING THIS BAD SINCE I LET MY WIFE DRIVE”

“IF GOD WANTED YOU ON THE TURNPIKE HE WOULD HAVE MIRACLED YOUR ASS ON THERE BY NOW.”

Of course, reworked song lyrics:

Come gather round people wherever you are,
And thank you kindly for using on-star,
And I will help you to maneuver your car,
For the trip you are arranging!
So don’t miss that turn,
And don’t go too far!
Oooh, your destination is a-changing!

Even a pretty decent meta reference comment:

Well, in these modern times, I’m not sure this would be street legal. I mean, when you’re going down highway 61, I’d imagine you’d be fine. You and John Wesley Harding can gaze at the Nashville skyline all you want while using the GPS. But when you’re on those back roads, the system might miss some railroad tracks, leaving you stranded with a slow train coming. If you don’t know to move, oh mercy, there’s going to be blood on the tracks. I can see why one would desire such a GPS, though, as they’ve saved many people from having to drive in circles until the new morning before finding their destination. Well, I guess the times, they are a-changin’, and when you’re out on the road, under a blood red sky and trying to bring it all back home, a GPS will definitely keep you from freewheelin’ for too long.

Digg comments are often a wasteland of human misery and suffering (not as bad as YouTube comments, but close), however this one is pretty good and worth checking out.

Google Maps traffic… it needs work.

I always wondered how Google Maps knew traffic conditions. Today, there’s a blog post where they explain it a bit better.

That ain't on an iPhone...
That ain't on an iPhone...

Basically, they simply have all the phones running Google Maps with GPS send back data as to a) where they are and b) how fast they’re moving. Both of which GPS gives you more or less by default.

It’s a clever idea, and I like it, but it fails in a couple of major ways, IMO.

Firstly, when I use Google Maps on my phone, I tend to not leave it open. Google Maps is fine, but it’s not a very good navigation system. It’s just a map. A real navigation app is worlds better. I recently got Navigon Mobile Navigator on the new iPhone, and it’s pretty slick. Thinking about a dashboard mount for it now, actually.

Secondly, this system relies on a lot of people having Google Maps open and running and sending back data. If nobody with Google Maps running has been on your street recently, you get no information.

What Google really needs to do is to open it up as an API. Let other navigation system manufacturers both send and receive traffic data from the Google Maps system. It doesn’t have to be complex.

Any good navigation app knows your location and speed, so a simple way to send that info could be made easily enough. The problem, of course, is allowing third parties to use the data.

Google Maps works in layers of images, which is one of its major shortcomings, IMO. The street views are images. The terrain are images. Just big sets of tiles that get displayed next to each other. And I’m almost certain that this traffic thing is just another set of images they’re generating or updating. For navigation providers that use 3d views and such, they don’t need that stuff in the form of images, they need it in the form of data. What streets are busy? How can that information be used to improve the navigation? Etc.

Google is generally pretty good at opening up their APIs to third parties. However, they’re generally not good at providing data in different forms. Most of their APIs are “this is what we use, if you need something else we don’t have it” sort of thing. Hopefully, the Google Maps team will see the light here and realize that to get good data, you have to give good data, and start pushing in that direction. Because open traffic data would be pretty cool for everybody.

How to Taste and Describe a Beer

It occurred to me that some of my friends don’t really know how to taste and describe beer properly. Even my wine friends, descriptive as they are, are pretty poor at describing beer. The methods of tasting are not all that different, really.  There’s more of a snobbery surrounding wine and some of people are loathe to come down to the beer world, even though we beer snobs are far bigger jerks. 😀

But I figured that I’d try and educate some people on the proper way anyway. What the heck, eh?

There’s four steps to tasting a beer. To make it fun, let’s make them all start with the letter S. 🙂

1. See.

When a beer is poured it produces a foamy head. This head usually dissipates quickly, leaving behind a bit on top called the “lace”. This same lace remains on the sides of the glass when drinking the beer. Hold up the beer and take note of the color as well. These are all descriptive aspects that help in understanding of the beer.

  • Color describes the malts used, or the brewing process.
  • The amount of foam describes the carbonation.
  • How it dissipates describes the thickness or heavyness of the beer.
  • The amount of lace describes the freshness of the beer, the freshness of the hops used.

2. Swirl.

Yes, damnit, swirl it a bit, like you would a wine. This agitation pulls out the scents and carbonations from the brew. It also tests the head retention, which gives you more info about the lacing.

3. Smell.

Smell the beer, obviously. Something like 80-90% of taste is actually smell. It’s the most important part of tasting. Breath deeply of the beer through your nose and then, yes, through your mouth as well. The combination of these two gives you the best experience of the brew. Describe the scents you have. Wheat beers, for example, are often fruity or citrusy, usually because the brewer adds these types of ingredients specifically. Hops have a distinct odor, of course, but different types of hops smell different. Cascade hops (the most common type) smells completely different from fuggle hops, for example, and they are used in completely different types of beers.

4. Sip.

Take a sip, swirl it around your mouth a bit. Don’t swallow right away, let it warm up a small amount. Important bits to remember here:

  • Mouthfeel. You see this one a lot in beer circles. What does it feel like? What’s the texture of the beer?
  • Consistency. Does the beer change a lot as you taste it? From beginning to end of glass even.
  • Breathe out while the beer is in your mouth. This increases the flavor experience. Really. Google “retro-olfaction”.
  • What does it taste like? Salty? Bitter? Sweet? Acidic? Oily? Fruity? Beer can taste like just about anything, think of what it’s similar to. Describe what it would go with.

Now, once you’ve done this, describe the beer. Here’s an example for PBR:

Clear golden color, with a 3/4 inch thick white head, which quickly reduced to a minimal thin lacing. Pleasant but subdued scent, mostly sweet lagered malts. Slight amount of grain flavors, with subdued grassy hop undertones. Minimal bitterness. Somewhat fizzy in apperance, but only lightly carbonated flavors. Crisp and dry mouthfeel, with a slight hint of oilyness when warmer. Overall clean flavor, very light malts used. Good session beer, would be excellent with stronger beef or spiced chicken flavors.

Simple.

The media are a bunch of idiots.

I’m getting really annoyed with all the hubbub over the latest Tennessee gun law. You know, the one similar to the one passed in Arizona recently? TN and AZ are getting singled out as places that allow guns in bars.

The problem is that it’s not true.

That’s right, it’s just not true. Jon Stewart got it wrong. Stephen Colbert got it wrong. Every major media outlet talking about “guns in bars” got it 100% wrong.

You can’t carry a firearm into a bar in Tennessee. Period. It’s simply a lie.

To understand why it’s a lie, let’s examine the facts. Here’s a section of the TN State Code, before the law changed:.

39-17-1305. Possession of firearm where alcoholic beverages are served.

(a)  It is an offense for a person to possess a firearm within the confines of a building open to the public where liquor, wine or other alcoholic beverages, as defined in § 57-3-101(a)(1)(A), or beer, as defined in § 57-6-102(1), are served for on premises consumption.

(b)  A violation of this section is a Class A misdemeanor.

(c)  The provisions of subsection (a) shall not apply to a person who is:

(1)  In the actual discharge of official duties as a law enforcement officer, or is employed in the army, air force, navy, coast guard or marine service of the United States or any member of the Tennessee national guard in the line of duty and pursuant to military regulations, or is in the actual discharge of duties as a correctional officer employed by a penal institution; or

(2)  On the person’s own premises or premises under the person’s control or who is the employee or agent of the owner of the premises with responsibility for protecting persons or property.

For those of you that can’t read legalese, here’s a quick translation:

  • You can’t have a firearm in a place that serves alcohol.
  • Doing so is a misdemeanor.
  • Exceptions to this rule:
    • If you’re police or military, that’s okay.
    • If you own the place or are a security guard hired by the owner, that’s okay.

Pretty simple, right? No guns except for the obvious exceptions.

Now, look at the text of the new law… Basically, it adds a new exception. Here’s the text itself:

(3)
(A) Authorized to carry a firearm under § 39-17-1351 who is not
consuming beer, wine or any alcoholic beverage, and is within the confines of a
restaurant that is open to the public, serves alcoholic beverages, wine or beer,
and is not an age-restricted venue as defined in § 39-17-1802.
(B) As used in this subdivision (c)(3), “restaurant” means any public
place kept, used, maintained, advertised and held out to the public as a place
where meals are served and where meals are actually and regularly served, such
place being provided with adequate and sanitary kitchen and dining room
equipment, having employed therein a sufficient number and kind of employees
to prepare, cook and serve suitable food for its guests. At least one (1) meal per
day shall be served at least five (5) days a week, with the exception of holidays,
vacations and periods of redecorating, and the serving of such meals shall be the
principal business conducted.
(C) This subdivision (c)(3) is subject to the provisions of § 39-17-1359,
permitting a property owner to post notices on such property prohibiting firearms.

Still don’t get legalese? Well, let’s break it down more simply:

First, 39-17-1351 is the section of the law that defines Handgun Carry permits. So that’s what that is talking about.

Next, 39-17-1802 is part of the new non-smoking law. Wait, what?

Recently, TN banned smoking in all restaurants and bars. However, they added an exception. They defined an “age-restricted venue” as a place that only allows people in who are 21 and older, all the time (instead of just at night or something). These places can allow smoking. Obviously, a lot of the bars did this, since large parts of their clientle smoke. However, many restaurants did not. These places make most of their money from food, they can’t ban families from coming in.

Basically, this definition created a rather obvious separation between a “restaurant” and a “bar”, without actually making any definitions along those lines. “Bars” are 21 and up. “Restaurants” are not. There’s exceptions of course, but for the most part this is the way it went down.

Now, reading that law again, you’ll find that it says “and is not an age-restricted venue as defined in 39-17-1802”. That part matters. Remember, “bars” are age-restricted venues in order for them to allow smoking in the place.

So this new law adds a new exception. Basically you now have this:

  • You can’t have a firearm in a place that serves alcohol.
  • Doing so is a misdemeanor.
  • Exceptions to this rule:
    • If you’re police or military, that’s okay.
    • If you own the place or are a security guard hired by the owner, that’s okay.
    • If you have a carry permit and are not drinking and the restaurant is not age-restricted, that’s okay.
      • If the owner is okay with it too and doesn’t post a sign about it.

That not age-restricted bit means, basically, “and it’s not a bar”. If you prefer, it really means “and is a non-smoking establishment”, for the most part, but these are basically equivalent at this point.

So, the bottom line: you still cannot carry a gun into bars in Tennessee. Restaurants, yes. Bars, no.

So if you’re a member of the media (or even if you’re Stephen Colbert) then please, do your research first before laying down your opinion. Your ignorance of the subject leaks out into the public, and they form biased opinions based on it, and frankly I’m sick of correcting people about the new gun law. It’s not a bad thing, really, because it doesn’t allow anything that the media claimed it does. Sheesh.

A couple of Xmas shopping deals

Found out about an Amazon deal on their Amazon Prime Shipping. Until the end of the year, it’s discounted 20 bucks, but only if you go through this special link. Apparently it’s some kind of tie in with Ellen Degeneres or something. This is a good deal for regular Amazon customers, as it gets you free two day shipping on pretty much everything you order.

Also found this site called Free Shipping Day. A bunch of stores are banding together and offering free shipping this Thursday, the 18th. That’s the last day you can order anything and get guaranteed delivery by Xmas. So if you need to get that last minute shopping done, check out those sites on Thursday.

Advertising and Gaming

Dunno if you heard of this one, but I thought it was pretty good.

If you’ve played a lot of games, then you know that some of them have advertising in them. Over the years, games have had all sorts of advertising, sometimes fake, sometimes funny, sometimes real stuff. Many years back, I recall participating on usenet in a discussion of the virtual worlds of games, and the subject of in-game-advertising was brought up.

See, up until this point, advertising in games was mostly a static thing. The games didn’t, on the whole, change the ads much. At some point during the discussion, the idea was advanced to the point of changing them dynamically. I mean, these are just big textures, there’s no reason that the game could not detect an internet connection and download new ones on the fly. At the time, this was roundly hailed as preposterous, mainly because “internet” at that time mostly consisted of modems and dialup connections. Large scale multiplayer gaming was relatively new, and home broadband was basically limited to expensive ISDN connections.

Of course, the idea was natural and obvious, but I quit most of my gaming about then, and so I didn’t see how the idea went on and advanced in reality.

Both the Xbox 360 and the PS3 have more or less mandatory internet support. That is to say that while you can certainly use the thing without internet hooked to it, virtually nobody does, because it enables the vast majority of the functionality of the thing. And so, naturally, advertising came in-game on those too.

IGN Worldwide handles almost all of this advertising, from what I can tell. And recently, this got a big story boost, as it affects the elections.

Screenshot of the Obama Ad in Burnout Paradise
Screenshot of the Obama Ad in Burnout Paradise

Burnout Paradise on the Xbox 360 and PS3 have billboards beside the highway that show advertising. On the 360 version at least, from October 6 through November 3th, if you are a player in one of ten “battleground” states, then you’ll be seeing Obama ads in the game.

The ads say that Early Voting has begun as well as pointing to Obama’s Vote For Change website.

NPR’s Morning Edition went on to confirm that the ads will appear in a total of 18 different games in those 10 states only, including Madden NFL and other sports games.

They also mention that the ads are targeted to men 18-34, but I’m not certain if that means that they will only be shown to players fitting that demographic or not. It certainly could be, since if you use those consoles on the internet, then you have an account with demographic information like that.

I find it fascinating that I missed this trend, and I can certainly see how it could be a good thing or a bad thing. I would not personally mind my games having live ads like this, as it would add a sense of realism and up-to-date-ness about them. On the other side of the coin though, I can see a lot of gamers upset by this sort of thing, as some people are simply against ads wherever they may be under any circumstances.

It’s still pretty neat, I say.

css.php