wpa attack:
Use dictionary attack: need 7gb dictionary. You can torrent, or create your own
Man in the middle: monkey-jack… Dumps all ur username and passwords to you first before sending to server…
Fake ap – to thwart man in middle hackers – but only if hacker use other than kismet.
Securing: disable ssid, change ssid, disable dhcp, position your ap, change password, vpn?
One of the more ‘risque’ topics in barcamp today: wireless hacking. It was way too tempting to resist: they had a barainstorming session on web marketing that i wanted to attend… Nah… It was too good to resist.
Notes:
10db antenna gives you 1km radius
Atheros chipset wireless card the best for hacking wireless… Look for higher MW. Mormal is 100, best is 300MW
Software: no support in windows, many in linux
How: detect wireless (war driving), war chalking – marking wireless zones
Wirelss can be detected using: beacon sniffers use – airopeek etc.
Passive sniffers use kismet
Netstumbler lets you map gps coords of access points
Kismet: detects hidden ssid And mac ids – also checkout gkismet 4 mobile: mognet, ministumbler macs: mac stumbler ap scanner
Openwrt with a linksys router that has 32mb ram. Wl ap 0 wl monitor passive promisc 1. Run kismet.
Posted by asyraf in barcamp
if you’ve never been to yahoo’s developer network, then it’s my turn to say: where you been ma?
Today yahoo presented one of their cooler apps: the yahoo search monkey.
Search Monkey lets you define more information for your search results when searched in yahoo. In other words, customize your search results!
On the side of the coin, if you’re a website owner, you can build apps that expose data from your site that other users can use to customize their search results… Case in point was linked in profile data for users to use to present their search results
Unfortunately, you need to know html (duh..) and php. Well i’m out! Still cool anyways. Check out Search Monkey here.
Posted by asyraf in barcamp
I was watching this presentation on Flex… And I’m asking myself: dude, where’ve i been all this while?
Flex rocks! I’m gonna be looking at it once i’m done with learning the crazy prototype, jquery, and scriptaculous… Phew… Turns out that by itself is more than just a walk down the park… It’s more (to me) like a swim in the rapids… With no pants! Ouch..
Anyways, back to flex…
Flex seems to be able to take your data and make useful graphical representations out of it…(mmm, i like…) . In my case, working with erp systems, we can actually present data in cool, interactive ways now…
Sweet…maybe i’ll blog more on this later…
Posted by asyraf in barcamp
it’s a fine saturday morning and i’m not in bed (What?). That’s right L&G’s! Barcamp’s in town, and i’m warming up my cold ass on the tiny seats (truth is, my ass is huge) of the presentation rooms this fine day.
Cool stuff coming up today! We got yahoo dev network, we got presentations on flex n JRoR, and a kickass demo on making money in youtube!
Look’s like it’s gonna b a long, butt flattening, but exciting day for us malaysian geeks… Reminds me of chandler’s party chant: ‘Spring Break! Woohoo!’ (Geez… how geekier can I get?)
more on this later!
For example:
id |category_id | inventory_id
1 384 1 #first entry
2 384 2 #this would be ok.
3 384 1 #this would not be ok
To ensure that a category_id doesn’t have any inventory_id duplicate:
[sourcecode language="ruby"]
class CategoryProduct < ActiveRecord::Base
belongs_to :category
belongs_to :inventory
validates_uniqueness_of :category_id, :scope => :inventory_id
end
[/sourcecode]
Well, well, it’s been a month since we wrote… a lot of new stuff’s come out,
Our customer required WYSIWYG capability for editing their blogs, which they used
There are lots of Javascript editors out there.
TinyMCE was one of the coolest I found, with everything you need under the sky for WYSIWYG editing – link to pics, link to media, blockquotes etc…
If you plan on putting up WYSIWYG for your forms, here’s a link to download.
Posted by fadhli in Rails
A good read on table index.
http://www.railway.at/articles/2008/04/24/database-agnostic-database-ignorant
Sometimes, it is easy to forget when someone or something else handles it for you. For instance, ActiveRecords. Rails does not create foreign keys for you. It only creates the primary key. It does not impose constraint on the database level. The association is handled on the application level. So always remember to create an index for your model associations. It could save your database server from working too hard.
Do not name your database column with the name ‘no’.
You’ll get this error when you try to run your test
ActiveRecord::StatementInvalid: Mysql::Error: Unknown column ‘false’ in ‘field list’
If you’re someone who has multiple git branches on a project and seem to always do git branch to check which branch you’re in. Then here’s how you can make your bash aware of a git branch.
Well, I’m not sure if this works on others, but it sure does works in my Ubuntu Hardy. Just edit your .bashrc at your home folder.
vim .bashrc
Add the following at the very bottom of your .bashrc
[sourcecode language='cpp']
parse_git_branch() {
git branch 2> /dev/null | sed -e ‘/^[^*]/d’ -e ’s/* \(.*\)/(\1)/’
}
PS1=”${debian_chroot:+($debian_chroot)}\u@\h:\w\$(parse_git_branch) $ ”
[/sourcecode]
After that, save it and restart your terminal. You should see something like this at your terminal:
fadhli@atlantis:~/projects/crimson_mdec(master) $
I have a branch named biz_idea, so after a git checkout biz_idea
Switched to branch “biz_idea”
fadhli@atlantis:~/projects/crimson_mdec(biz_idea) $