Cyconet Blog » hacking

(old) L-root DNS Server “stolen” (for a short time)

cyco — Tue, 20 May 2008 08:20:02 +0000

After shutdown of the old L.ROOT-SERVERS.NET the IP address formerly associated with it, the IP continued to answere requests. More informations can be found at the ICANN Blog
UPDATE: Before bothering around, if you read the ICANN Blog, you realize that the issue was fixed very shortly. The whole problem is, that the file of the root DNS servers have to be keeped up to date. This issue should be fixed by operator of resolving nameservers (usually your ISP). A goody will be, to have this fixed by the next point release of debian, but it is NOT security critical.
Thanks Thijs for make me sensible that my article may misslead people who are not reading the referenced document.
UPDATE 2: A more technical description can also be found at Renesys Blog and a disussion how it is related to debian.

Pimp my T5725

cyco — Sat, 19 May 2007 17:18:16 +0000

Yesterday my ordered HP Thin Client T5725 arrived. The clue is, Debian sarge is and no moving parts (no noise) are inside. It’s a really nice thin client and it can be used as Surfstation out of the box. There is also a “HP Connection Administrator” which can manage ‘Citrix‘, ‘rdesktop‘ and ‘XDMCP‘ connections.
After taking a short overview, I decided to update to etch. This was a kind tricky, cause packages did need to update in correct order to save the HP packages. Due the switch from Xfree to xorg with etch, the graphical frontend for configuring the X server didn’t work anymore, but in my environment this is no issue.
So now I’m really happy with a HP Thin Client and bleeding edge software on it, for xdmcp use. ;)

Serial console with VMWare

cyco — Sun, 25 Feb 2007 17:26:20 +0000

In your config file of virtual machine you need the following:

# grep serial openwrt.vmx
serial0.present = "TRUE"
serial0.fileType = "pipe"
serial0.fileName = "./serial1"
serial0.pipe.endPoint = "server"
serial0.hardwareFlowControl = "TRUE"

Redirect output to stdio or a port:

# socat /serial1 >

OpenWRT 0.9 / X-WRT 2.75

cyco — Sat, 24 Feb 2007 00:41:28 +0000

Last week I updated my WRTSL54GS to OpenWRT 0.9 with X-WRT 2.75.

Since my box has an USB port, I was missing a way to umount mounted usb storage. Looking deeper into it, I noticed that partitions get mounted by ‘/etc/hotplug.d/usb/01-mount’ like this:

# mount
[...]
part1 on /mnt/disc0_1 type ext3 (rw)
part2 on /mnt/disc0_2 type vfat (rw)

The correct devices are missing. A patch is available:

mount.patch

Okay … So far, so good. Now some tweaking to webif^2 for umounting attached usb storage devices. Here comes the patch:

umount-button.patch

WRTSL54GS debridged

cyco — Wed, 28 Jun 2006 08:47:27 +0000

Okay … we got the serial port running (same like WRT54GS), so we could be more risky. After some tries I decided to work analog the WRT54G models.

Successfull was the following modifications to factory (linksys) defaults:

nvram set vlan0ports=”0 1 2 5*”
nvram set vlan1ports=”4 5*”
nvram set vlan0hwname=”et0″
nvram set vlan2ports=”3 5″
nvram set vlan2hwname=”et0″
nvram set dmz_ifname=”vlan2″
nvram set lan_ifname=”br0″
nvram set lan_ifnames=”vlan0″
nvram set wan_ifname=”ppp0″

Now the door is open to extend the functionality of the openwrt router

# df
Filesystem 1k-blocks Used Available Use% Mounted on
/dev/root 7296 3420 3876 47% /
none 15276 36 15240 0% /tmp

Hrhrhrhr … :-) Disassemble photos can be found here

Hacking Extended Live Archives plugin to support multisite installations

cyco — Fri, 26 May 2006 21:11:08 +0000

Since IÃƒâ€šÃ‚Â´m running a couple blogs on one wordpress installation I noticed today, that ELA doesn’t work well in this environment. Since it uses only one cache directory the archive is mixed up with all these articles.

I was digging around and noticed, that only 3 values in 3 files are related. So decided to make use of ‘$_SERVER["SERVER_NAME"]‘ to have unique cache directories.

Here comes the patch:
diff -Nur orig/af-extended-live-archive-options.php af-extended-live-archive-options.php --- orig/af-extended-live-archive-options.php 2006-02-22 19:06:00.000000000 +0100 +++ af-extended-live-archive-options.php 2006-05-26 22:47:28.000000000 +0200 @@ -7,7 +7,7 @@ */


 include_once(ABSPATH . WPINC . '/class-snoopy.php');

-$af_ela_cache_root = ABSPATH . 'wp-content/af-extended-live-archive/';

+$af_ela_cache_root = ABSPATH . 'wp-content/af-extended-live-archive/' . $_SERVER["SERVER_NAME"] .'/';
 function af_ela_info($show='') {

        switch($show) {

diff -Nur orig/af-extended-live-archive.php af-extended-live-archive.php

--- orig/af-extended-live-archive.php    2006-02-19 15:26:00.000000000 +0100

+++ af-extended-live-archive.php       2006-05-26 22:47:35.000000000 +0200

@@ -13,7 +13,7 @@

 // | http://www.sonsofskadi.net/wp-content/elalicenses.txt                |

 // +----------------------------------------------------------------------+

 */

-$af_ela_cache_root = ABSPATH . 'wp-content/af-extended-live-archive/';

+$af_ela_cache_root = ABSPATH . 'wp-content/af-extended-live-archive/' . $_SERVER["SERVER_NAME"] .'/';

 $debug = false;

 $utw_is_present = false;
diff -Nur orig/includes/af-ela.php includes/af-ela.php

--- orig/includes/af-ela.php     2006-04-28 14:07:00.000000000 +0200

+++ includes/af-ela.php        2006-05-26 22:46:33.000000000 +0200

@@ -397,7 +397,7 @@

        $paged_post = 0;
        // the paths for the cache files and settings

-       $path = ABSPATH . 'wp-content/af-extended-live-archive/';

+       $path = ABSPATH . 'wp-content/af-extended-live-archive/' . $_SERVER["SERVER_NAME"] .'/';

        if (!is_dir($path)) $path = get_settings('siteurl') . '/wp-content/af-extended-live-archive/';

// get settings and construct default;

Hacking google-highlight plugin

cyco — Thu, 25 May 2006 22:30:51 +0000

Today I found a nice plugin for highlighting searchstrings from referer called google-highlight, when coming from a search engine. The problem was, when the site includes a substring of $_SERVER["SERVER_NAME"] it was highlighted … maybe not what you want.

Here is the patch:
--- /tmp/google-hilite.php 2005-06-17 02:36:02.000000000 +0200 +++ /usr/share/wordpress/wp-content/plugins/google-hilite.php 2006-05-26 00:17:32.000000000 +0200 @@ -81,6 +81,10 @@ break;

case 'wordpress': + if (preg_match('|^http://'. quotemeta($_SERVER["SERVER_NAME"]) .'|i', $referer)){ + return false; + break; + } if ( is_search() ) return true;