Went to PA today for a while and saw a couple of funny things:
This sign was outside of a resturant in Bridgeville, PA:
The second was at Krispy Kreme.. They have a special, all you can eat for $2.99 on Thursday nights:
anything dealing with *NIX or what ever I want to write about
Went to PA today for a while and saw a couple of funny things:
This sign was outside of a resturant in Bridgeville, PA:
The second was at Krispy Kreme.. They have a special, all you can eat for $2.99 on Thursday nights:
So as if it weren’t bad enough that every message you send is logged with your username and password in the system.log… They decided to log the userid and password in clear text in the sqllite database that it stores information in. Funny all you have to do is a:
strings ~/Application Support/Nambu/Nambu.db
and the second line will contain your userid and password. They keep saying that it is because they are in beta, and when they move to production, it will go to the encrypted keychain, yadda yadda yadda. But these little things should have been done from the begining… Just wondering why people do stupid security stuff like this…
Because I am in that sort of mood tonight I started looking at other log files to see what kinda crap I could find.
So it appears that the iPhone has a bug where it seems to like to send the Userid and Password for Websites that you log in to as a referring link if you click on an outside link from inside an protected place. Say what? Well let me explain some more:
Say I set up a password protected web site that uses an htaccess style password protection. I then go to that web site, say http://somecoolsite.com/protected. If the userid and password is stored or used in the URL, say I had the user id of unixwiz and my password was IamCool, and I went to the web site with http://unixwiz:[email protected]/protected… Once inside the protected site, I then click on a link to some external site, for example http://mycoolsite.com, the iPhone is sending the refering URL as http://unixwiz:[email protected]/protected/ .. Which you guessed it, shows up on mycoolsite.com’s access log if they have referrer logging set up, or are doing anything that captures referr data. I would be interested in seeing if it still does it if you are prompted to enter your username and password and not save it. How cool is that, with the amount of people using iPhone’s now, wonder how many people are looking at the logs to see this sort of data….
FWIW
I had been playing with Nambu until I was working in blender tonight and had the OSX console up and running.. What did I see it logs the user and password in the clear in the system.log file… BAD BAD BAD!!!!! Their response, “it is beta software so it does extensive logging…” Well you don’t need to log the freaking password and username in the CLEAR. Needless to say no more nambu till they fix that..
So not even 3 days after they started having WNPB in QAM on the Morgantown system, they have changed stuff again. Now instead of it being on PSIP 24.1, 24.2, 24.3, they for what ever reason decided yesterday to change it to 8.3, 8.5 and 8.6 and they removed the PSIP identifiers to say what channel is what. I believe that 8.6 is the HD one 8.5 is Create and 8.3 is the SD version of 8.6.
In addition to this change they also moved the Pittsburgh CW HD Channel from 65.2601 to 7.2601. Which leads me to believe they are getting ready to start here what they are doing in other cities. Basicly the only thing that will be in the clear in the Analog channels will be the local ABC,CBS, NBC, FOX and PBS. Everything else will be moving to a digital channel. Because of this they will move most of the “analog” stuff down to the lower channels, and start using all the upper channels to do digital stuff. This is would explain why WNPB and the Pittsburgh CW were moved. WNPB they had on channel 66 and the CW was on 65. So what does all this mean? I assume that pretty soon that you will have to have a DTA (Digital Television Adapter) to make your “non-obsolete tv” that was supposed to “still work after the OTA digital switch work with cable now. So basicly even though they have said that the switch to digital transmission for the people who are not using rabbit ears and had cable would not be affected… You will be now.
Now if Comcast wanted to do it the RIGHT WAY, they would make all the channels that are currently available in the analog channel band, be in the clear on the digital side. So all those people who have the new TV’s that do Clear QAM recepition, will be able to still get the channels with out having to add another box and remote.
Wonder what Comcast will do next? And the TVGOS still doesn’t work……