Categories
blog hash Security

MD5, Should we really be using just it?

Well why are we still using MD5 hashes? I really want to know as I’ve heard of & seen at least one example where this is happened. This made me think that the solution might be to use multiple methods of saying it is what it says it is. I say this because all of the encryption methods I know of were developed by humans & thus have a good chance of having some sort of flaw in them. I strongly believe in the following, nothing is fool proof against a sufficiently talented fool.

My idea is to use three different hashes to significantly reduce the chances of the file being intercepted & replaced with something else. The three that I’m thinking about are MD5, SHA-1, & cyclic redundancy check. Yes I know that cyclic redundancy check is considered to be highly insecure, but I think that it would help a bit unless someone else has a better idea of what a third hash function that is better. Since they all have different mathematical functions this should reduce the chances of people faking files.

In the example I showed the files they provided only matched on the MD5 hash value with entirely different SHA-1 & CRC values. I only proposed those three because they are the only functions I know of that can determine if the files are the same. Also size is important, but in the example I showed earlier all the PDF files they had are exactly the same size. I guess this proves that one hash & the file size is not enough.

Categories
blog DMCA Evil MPAA RIAA Sony

The RIAA, the MPAA, Sony & the DMCA

I was looking up the word terrorism & I realized that it applies to the RIAA & MPAA, as they are trying to instill a sense of fear into the population. I had heard someone saying the at it should apply to Sony back when the rootkit was first discovered in 2005. (I had to use the Internet Archive to get that because the original page is gone now.) I know I’m afraid of downloading MP3 files because of the number of lawsuits that the RIAA has started & the MPAA doesn’t seem much better only I haven’t heard as many frivolous lawsuits from them. By that I mean how the RIAA keeps suing people even people who are dead & didn’t have a working computer.

Since President Bush declared war on terrorism I think that should to apply to organizations like Sony, the RIAA, & the MPAA. Sony for the rootkit they released & the attitude they had about it. The RIAA & MPAA for the way they behave with all the frivolous lawsuits. I think I should be able to have my movies edited so they don’t have the filth that Hollywood seems to keep coming out with.

They seem to think that if they scare us they can stifle technology. They seem to be going into the future while traveling into the past. They didn’t embrace the Internet or MP3’s when they came out. Now you have to hear crap about you would do this or that before you can watch the DVD you just bought. I agree the artists should receive some money for what they have done, but I believe that with the Internet the artists should be able to free themselves of the shackles that the RIAA & MPAA place on them.

Next that the MPAA doesn’t seem to have a clue about how to do a proper rating system. Here are some rules that I think should be implemented on the rating system.

  1. The people who are rating the movies need to be on a publicly available list. This is so they can be held accountable. The only group I know of that doesn’t do this for a rating system is the CIA & I am ok with them keeping it secret. All other major rating systems I know of have a way of finding out who did what. (Do we really want another Enron?)
  2. There needs to be a set of rules written as to what makes a movie to what rating & it needs to be followed to the very last jot & tittle. (BTW from what I understand a Jot & a tittle are two of the smallest marks in the Hebrew Language.)
  3. When a precedent is set by saying one thing is ok in a certain rating to be fair it should be allowed or the previous rating needs to be stricken.
  4. There should be at least one clergy from each major religion making the rules. Yes I know this means the Catholics, Protestants, Jews, Mormons & several other religions that I can’t remember the names of.

Ok those are the rules I can think of so far. If anyone has any other Ideas I’d be glad to hear them.

More information about the RIAA can be found at this blog. And they prove me right about Sony being evil too. Wow I hate to say this but AOL now actually has competition for being the most evil major corporate entity. I mean the spyware, adware, & other scumware programs come close, but they are to small after all to really compete with the RIAA, MPAA, Sony, or AOL.

So where does this leave us. We need to do something about companies with attitudes like this. The evil needs to be stopped. I don’t pretend to know how, but I know something must be done.

One other thing while I’m ranting about evil companies. What I really don’t get is why do they call DRM “Digital Rights Management” when it should be “Digital Restrictions Management”. Yes that’s right it is about putting Restrictions on what you can do & thanks to DMCA (PDF warning) you can’t legally go around the DRM.

Categories
blog DNS FrontPage Internet Microsoft work

FrontPage Server Extensions

Well I guess it is time I make another post.

Here is what I know about the Microsoft FrontPage Server Extensions & how to troubleshoot them.

1) Go to http://www.yourdomain.com/_vti_bin/shtml.exe (replace “www.yourdomain.com” with the domain in question. This works on Windows based web servers, Unix based web servers, & Linux based web servers.). You should get the following message ‘Cannot run the FrontPage Server Extensions on this page: “”‘, anything other than that indicates the server extensions are broken, that means they need to be reinstalled. The exact procedure depends on your web host so I won’t post directions for doing that.

2) If you are not able to open site with http://www.yourdomain.com (replace “www.yourdomain.com” with the domain in question.). If this lets you sign in, only asks for user name & password once. They are working otherwise they are broken or something is preventing you from signing in. The causes of it not signing in are vast and many if the extensions are not truly broken. On Linux & Unix servers it is frequently the “.htaccess” file has something screwed up in it. On Windows servers I’m not sure because I never had this happen with the extensions not being broken.

3) You can’t publish in FrontPage on a 16-bit TCP/IP stack as it requires a 32-bit stack, I’m not sure which version this started with, but I know that at least FrontPage 98 required it & above. This means AOL customers, unless AOL decided to actually use a 32-bit TCP/IP stack.

Oh Microsoft has a good article on how to tell if the FrontPage Server Extensions are installed & working. OH & yes I did write the article, I have no idea why they said it is for FrontPage as it is for the FrontPage Server Extensions versions 98, 2000, & 2002. That’s right even though Microsoft made FrontPage 2003 the last extensions were the 2002 extensions.

Well thats all for now I’ll post more another time.

Categories
blog work

New job

Well I’ve got a new job doing technical support for Blue Host. Obviously they are a web host. So far I’ve been learning a lot about Linux, SSH, & more about how the Internet works.