From jproctor at persons.marlboro.edu Tue Jun 3 11:48:44 2003 From: jproctor at persons.marlboro.edu (Jason Proctor) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] YAPC? Message-ID: Any of you Jacksonvillians going down to YAPC in a couple weeks? For that matter, are any of the rest of you? :) (see http://www.yapc.org/America/ for more info.) j From lists at insecurity.org Tue Jun 3 12:05:19 2003 From: lists at insecurity.org (WC -Sx- Jones) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] YAPC? In-Reply-To: Message-ID: <8E034AF2-95E5-11D7-8CE4-0003930FDFC6@insecurity.org> On Tuesday, June 3, 2003, at 12:48 PM, Jason Proctor wrote: > Any of you Jacksonvillians going down to YAPC in a couple weeks? For > that > matter, are any of the rest of you? :) > > (see http://www.yapc.org/America/ for more info.) I was pondering grabbing a camera and doing a "Drive-by" shooting =) But seriously - I will likely loiter around the area until I get evicted... -Sx- From jproctor at persons.marlboro.edu Tue Jun 3 12:14:21 2003 From: jproctor at persons.marlboro.edu (Jason Proctor) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] YAPC? In-Reply-To: <8E034AF2-95E5-11D7-8CE4-0003930FDFC6@insecurity.org> References: <8E034AF2-95E5-11D7-8CE4-0003930FDFC6@insecurity.org> Message-ID: > I was pondering grabbing a camera and doing a "Drive-by" shooting =) > > But seriously - I will likely loiter around the area until I get > evicted... Which area? Jax? Boca? :) I need to commit to going (or not). With family in Jax, I was considering flying in there instead of PBI or FLL. Air fare is about the same either way, but I could carpool from Jax and split gas money. I was also considering driving, but it brings up the issue of where to sleep for cheap within a couple hundred miles of DC (about halfway), otherwise there's no cost savings (time is less of an issue). j From lists at insecurity.org Tue Jun 3 14:01:48 2003 From: lists at insecurity.org (WC -Sx- Jones) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] YAPC? In-Reply-To: Message-ID: On Tuesday, June 3, 2003, at 01:14 PM, Jason Proctor wrote: > Which area? Jax? Boca? :) > > I need to commit to going (or not). With family in Jax, I was > considering > flying in there instead of PBI or FLL. Air fare is about the same > either > way, but I could carpool from Jax and split gas money. Since I have no job I think you should fly here, (you) pay (my) "full" entry fees (the works); you stay with your family (of course) and then we can car pool there (I will even rent the car ;) How does that grab you? -Sx- http://InSecurity.org/ _Sx____________________ ('> iudicium ferat //\ Have Computer - v_/_ Will Hack... \|/ ____ \|/ "@'/ .. \`@" /_| \__/ |_\ \__U_/ From jproctor at persons.marlboro.edu Tue Jun 3 14:54:30 2003 From: jproctor at persons.marlboro.edu (Jason Proctor) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] YAPC? In-Reply-To: References: Message-ID: > Since I have no job I think you should fly here, (you) pay (my) "full" > entry fees (the works); you stay with your family (of course) and then > we can car pool there (I will even rent the car ;) > > How does that grab you? Uh-huh. How many job leads have I sent you? When HR gets around to posting *my* job, I'll be sending that one also. You coulda been working for my friend in Medford already (okay, admittedly, doing Java and JavaScript--yuck!). When do you switch over to being on the dole? I don't remember if it was June 1 or June 30. Going to a professional conference in your field counts as a job-search activity because you're networking, right? :) j From lists at insecurity.org Fri Jun 6 14:48:50 2003 From: lists at insecurity.org (WC -Sx- Jones) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] Decode URL Message-ID: Hi Jax.PM =) I have a bit of a decoding issue for you: This URL: http://click.lycos.com/director.asp?id=&target=http:// k8u7sdfjghgdfguygh9ojdfghghdfgygjhdfgyghjdfgyughjdfguyghjdfguyghd9o8iu7f gyugjhdfguygdjkhfguygdkfghdfgyhjdfgyugjhdfg@telmxrouleptycimuakbof.cc/ poiuytrewqlkjhgfdsa/ ?lksjdfpoiertkjhfdgiuhjdfgjhkdfguhkjdfguihrthbdfgbvkjhdfgugrehkdfgugerty gdfgiurthgdfgiugkhdfgy I would like to decode this portion: k8u7sdfjghgdfguygh9ojdfghghdfgygjhdfgyghjdfgyughjdfguyghjdfguyghd9o8iu7f gyugjhdfguygdjkhfguygdkfghdfgyhjdfgyugjhdfg@telmxrouleptycimuakbof.cc Any Ideas? -Sx- From greg at turnstep.com Fri Jun 6 15:39:25 2003 From: greg at turnstep.com (greg@turnstep.com) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] Decode URL In-Reply-To: Message-ID: <099dfd3a58d237269adf361424107622@biglumber.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > http://click.lycos.com/director.asp?id=&target=http:// > k8u7sdfjghgdfguygh9ojdfghghdfgygjhdfgyghjdfgyughjdfguyghjdfguyghd9o8iu7f > gyugjhdfguygdjkhfguygdkfghdfgyhjdfgyugjhdfg@telmxrouleptycimuakbof.cc/ > poiuytrewqlkjhgfdsa/ > ?lksjdfpoiertkjhfdgiuhjdfgjhkdfguhkjdfguihrthbdfgbvkjhdfgugrehkdfgugerty > gdfgiurthgdfgiugkhdfgy Lycos presumably does a redirect to the "target" parameter. Everything in the second URL before the "@" can be ignored, so the actual domain called is: "telmxrouleptycimuakbof.cc". The rest is just noise that is designed to confuse. Whois info: Registrant: Castro, Julia (CCWYCMWCXD) CAN Transversal 19 #45-12 Santa Fe de Bogota, Boyaca 023564 CO Domain Name: TELMXROULEPTYCIMUAKBOF.CC Administrative Contact, Technical Contact: Castro, Julia (GPJPJYMXRI) admin@keydist.com CAN Transversal 19 #45-12 Santa Fe de Bogota, Boyaca 023564 CO 57-1315-9000 Record expires on 14-May-2004. Record created on 14-May-2003. Database last updated on 6-Jun-2003 16:30:51 EDT. Domain servers in listed order: NS1.DIGITAL-INFO.NET 200.24.139.147 NS2.DIGITAL-INFO.NET 216.219.40.6 - -- Greg Sabino Mullane greg@turnstep.com PGP Key: 0x14964AC8 200306061628 -----BEGIN PGP SIGNATURE----- Comment: http://www.turnstep.com/pgp.html iD8DBQE+4PsTvJuQZxSWSsgRAsEoAJ9JdbwgRxi9yXqoFFyx/wCmS+OJ9gCgi/cj Rc2+3QA0XbVCwa/QHdtkH7A= =sWwG -----END PGP SIGNATURE----- From lists at insecurity.org Fri Jun 6 16:49:59 2003 From: lists at insecurity.org (WC -Sx- Jones) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] Decode URL In-Reply-To: <099dfd3a58d237269adf361424107622@biglumber.com> Message-ID: Hi Greg =) I thought about all that too - but it calls a script off the referenced domain's WWW server -- after I posted this I finally was able to "capture" the remote server and get the javascript off of it. The blasted thing does a "Thank You" and immediately sends you to msn.com :/ Grrrrrr. Spammers are getting better :( >> http://click.lycos.com/director.asp?id=&target=http:// >> k8u7sdfjghgdfguygh9ojdfghghdfgygjhdfgyghjdfgyughjdfguyghjdfguyghd9o8iu >> 7f >> gyugjhdfguygdjkhfguygdkfghdfgyhjdfgyugjhdfg@telmxrouleptycimuakbof.cc/ >> poiuytrewqlkjhgfdsa/ >> ?lksjdfpoiertkjhfdgiuhjdfgjhkdfguhkjdfguihrthbdfgbvkjhdfgugrehkdfguger >> ty >> gdfgiurthgdfgiugkhdfgy > > Lycos presumably does a redirect to the "target" parameter. Everything > in the second URL before the "@" can be ignored, so the actual domain > called is: "telmxrouleptycimuakbof.cc". The rest is just noise that > is designed to confuse. > > Whois info: > > Registrant: > Castro, Julia (CCWYCMWCXD) > CAN Transversal 19 #45-12 > Santa Fe de Bogota, Boyaca 023564 > CO > > Domain Name: TELMXROULEPTYCIMUAKBOF.CC > > Administrative Contact, Technical Contact: > Castro, Julia (GPJPJYMXRI) admin@keydist.com > CAN Transversal 19 #45-12 > Santa Fe de Bogota, Boyaca 023564 > CO > 57-1315-9000 From nate at campin.net Sat Jun 7 15:10:06 2003 From: nate at campin.net (Nate Campi) Date: Mon Aug 2 21:30:52 2004 Subject: [Jax.PM] Decode URL In-Reply-To: References: Message-ID: <20030607201006.GL29497@campin.net> On Fri, Jun 06, 2003 at 03:48:50PM -0400, WC -Sx- Jones wrote: > [a jax.PM member posting] > Hi Jax.PM =) > > I have a bit of a decoding issue for you: > > This URL: > > http://click.lycos.com/director.asp?id=&target=http:// > k8u7sdfjghgdfguygh9ojdfghghdfgygjhdfgyghjdfgyughjdfguyghjdfguyghd9o8iu7f > gyugjhdfguygdjkhfguygdkfghdfgyhjdfgyugjhdfg@telmxrouleptycimuakbof.cc/ > poiuytrewqlkjhgfdsa/ > ?lksjdfpoiertkjhfdgiuhjdfgjhkdfguhkjdfguihrthbdfgbvkjhdfgugrehkdfgugerty > gdfgiurthgdfgiugkhdfgy > > I would like to decode this portion: > > k8u7sdfjghgdfguygh9ojdfghghdfgygjhdfgyghjdfgyughjdfguyghjdfguyghd9o8iu7f > gyugjhdfguygdjkhfguygdkfghdfgyhjdfgyugjhdfg@telmxrouleptycimuakbof.cc OMG, what a small net. I've been going through hell trying to get the political issues solved to fix the click redirector. That's simple administrator-written perl (maybe 30 lines) running on apache mod_asp, serving millions of hits/day for redirecting and logging clicks on search results. Perl rulez. Damn spammers have been taking advantage of it for a while, but lately have been going nuts. Anyways, I think it'll be locked down this week finally. -- Nate Campi http://www.campin.net