Search This Blog

Showing posts with label /dev/kmem. Show all posts
Showing posts with label /dev/kmem. Show all posts

20080303

Loss, and Profit within the context of HaX0ring

No, this aint a financial analysis of my so-called life. Today's story began at home, where I'd be stuck for about five or six day due to a slight influenza attack, which stormed in late last Sunday night, only to inflame my body the next day. For several days I passed in and out of consciousness, my breath hot, my throat parched, my joints aching...

Relief came to me only yesterday.

It's said that whether cold or flu, when the virus hits, it's due to contact with whomever suffered its ravages last, rather than because of inclement weather like rain, wind and often, snow. Once you realize this, then getting out of the house after being cooped up for too long is always a welcome relief despite the circumstances, especially when spring is barely nascent and big fluffy bits of snow are trying to obscure the landscape once more.

But I wax too eloquently to match the current mood, which has been briefly influenced by a book edited by Jeff Moss called Stealing the Network: How to Own a Continent, a hacker novel written by a collection of hackers for hackers, which is referred to as STC.

Because I am a great fan of Google, I had to research this book, but didn't get further than this link which I will obscure enough so the botnets don't rip it to shreds:

Bl@ckTo\/\/3r by Brian Hatch of Nmap dot org - the URL is insecure dot org fwf-slash stc fwd-flash sti dot html - is a great spy story for the hacker, complete with an indepth look at how to hack into X11. Yet the novel mentioned the use of /dev/kmem and after a brief spell of searching for it, I discovered the following URL: www dot la dash samhna dot de fwd-slash library fwd-slash rootkits fwd-slash index dot html which explains Linux kernel rootkits in a training manual.

Really wicked stuff!

Especially samhain, which is a great data integrity and host intrusion alert system. A brief use of searching the apt-cache revealed the following:


$ apt-cache show samhain
Package: samhain
Priority: optional
Section: universe/admin
Installed-Size: 1788
Maintainer: Javier Fernandez-Sanguino Pen~a
Architecture: i386
Version: 2.0.10a-2
Depends: libc6 (>= 2.3.4-1), debconf (>= 1.2.9) | debconf-2.0
Filename: pool/universe/s/samhain/samhain_2.0.10a-2_i386.deb
Size: 665100
MD5sum: 4441fd7bd602759c8e893a0f6ec00f46
Description: Data integrity and host intrusion alert system
Samhain is an integrity checker and host intrusion detection system that
can be used on single hosts as well as large, UNIX-based networks.
It supports central monitoring as well as powerful (and new) stealth
features to run undetected on memory using steganography.
.
Main features
* Complete integrity check
+ uses cryptographic checksums of files to detect
modifications,
+ can find rogue SUID executables anywhere on disk, and
* Centralized monitoring
+ native support for logging to a central server via encrypted
and authenticated connections
* Tamper resistance
+ database and configuration files can be signed
+ logfile entries and e-mail reports are signed
+ support for stealth operation
.
Homepage: http://la-samhna.de/samhain/index.html
Bugs: mailto:ubuntu-users@lists.ubuntu.com
Origin: Ubuntu


Oh joy! Oh, jubilation!

Then as I read bits of the la samhna article on Linux kernel rootkits, I realized that STC is more my speed than a manual on kernel rootkits, especially after the flu.

This brain of mine is done in by the flu I suspect, such that while I can understand about 1/3 of the quqntum dynamic stuff on wikipedia, total concentrated effort to grokk a technical manual on kernel rootkits is met with the same feeling I felt long ago when I had to study for not one test but several back in college twenty years ago.

Yes, my brain is currently mush, but hopefully with rest and relaxation I'll be able to finish STC and dive into the kernel rootkit manual... soon.

20040415

My grandparents

my paternal grandfather died a year before my brother was born.

My brother was born in 1957, me in 1958 and my sister in 1960.

My maternal grandfather died in 1972.

So both of my maternal grandparents were alive for most of my formative years as a child.

The influence of my maternal grandparents was subtle, since they did not speak English well enough to have an influence on my upbringing in Western culture.

However, I recall once after I had discovered the magic of magnets as a child, the magnet holding all my grandmother's pins. My grandfather doted on me, a bit, and have an argument over giving me the magnet. Grandmother wanted the magnet since it was a convenience. After hearing them argue, I told Grandfather, "Please stop arguing. I don't want the magnet anymore." This incident taught me a valuable lesson: when you desire something you like for yourself, do not want it so much that other people who love you argue over whether to give it to you or not.

When Grandmother reached her 80s her mind started to go. In her mid 90s, she had a few revelations: she kept dried orange peels in her room. My mom scolded her for that. The thing is, dried orange peels are essential to certain Asian dishes. Another time she had pots of water in her room. My mom scolded her over that one. My guess is Grandmother realized the lack of humidity in her room.

One time Grandmother opened the front door to let in the spirit of her son. Another time, she was going to go to a fine mansion where her son was waiting for her. She went outside with her suitcase, and stood for 20 minutes waiting.

I feel that the main thing is, that my mother could not empathize with her mother. Me, I don't believe for one moment that my grandmother was senile. I feel that my mom wanted her mother to follow her own sense of rational behavior along narrow confines that usually doesn't follow reality.

Another time, I had a dream where my dead grandfather who died in 1972 come to my bedroom, as though to remind me to be good.

As for my father's grandmother, she and her brother were born in Hawaii before the military invasion that led to the corporate annexation of Hawaii in the late 1800s. the long hours her father worked and the dissatisfaction in her life led my great grandmother to run away back to Japan with another man. Unable to look after two children on his own, Great-grandfather return to Japan with his kids, came into partnership with a married family friend who owned racehorses, and eventually was adopted into the childless couple's family. To this day I don't know the real last name of my grandmother.

Grandmother Koto grew up in a privileged life. She even had a servant look after her. Yet her mother kept an eye on her, and grew to envy the life of her daughter.

Can you imagine running away with another man, only to have your husband return, and gain a privileged life for their children, while you either get stuck with a dandy who's a drunk and a scoundrel?

So eventually my grandmother chose to be the picture bride of my grandfather, rather than have to endure her mother trying to pull the hairstrings of a young lady who never knew her real mother. I can almost imagine her mother confronting her, asking "Do you know who I am? I am your mother who bore me. Do you not know me, daughter?" And my grandmother at age 9 wondering who this lady bothering her is, the male servant dragging her away as she cries, "You're still my daughter!!"

The real cincher will be the stories I can tell about my maternal grandparents in Japan, based on the domicile records I had researched and photocopied. Now there's stories that will make you wonder.

My grandfather had a younger brother who was the playboy in the family. He was made the heir when my grandfather refused the arranged marriage and picked the nice young girl of a proper Buddhist family. He declared "That's the girl I'll marry." It's unknown what happened to the spurn girl.

My grandfather had two sisters lived as living at the family home. The elder sister is recorded to have left to go work as a servant for what I speculate was an older gentleman, because the records show she brought back part of his estate. She continued to work as a servant for that particular family house. Later she married, only to divorce her husband. She never remarried. Another sister married a man to escape her life in Hiroshima. She left that man due to drink and returned within weeks she had married a decent man, who - no surprise - also drank. Later she divorced him.

My mother recalls that the daughters of her playboy uncle all became geisha. One of her cousins had many abortions due to her promiscuous lifestyle. My mother recalls that her uncle encouraged his daughters to be geisha. They used to tease and put down my mother a lot. The eldest son volunteered in the army and lost his life in battle. That was fortunate, since otherwise he would have followed his father as geisha chaser and drunk.

It's not surprising that my grandmother's father, mother and relatives lived stable lives in stable relationships. No divorces, no family discord.