|
ima genius // User Search
ima genius // User Search
Aug 8, 2001, 5:37am
Hi,
Just to clarify, buffer overruns have nothing to do with the amount of
RAM in your computer. Programs are vulnerable to buffer overruns when they
copy an unchecked string from an untrusted source (such as the Internet) to
a statically sized buffer. Unchecked being defined as when the length of
the string is not verified to be smaller than the buffer. If a string
longer than the buffer it is copied to, the buffer will be 'overran' and the
rest of the string copied past the end of the buffer (into the stack).
While this is not how all buffer overruns work, it is the most common
case, and in no case does it depend on the amount of RAM in your computer :)
- Ima :)
[View Quote]"builderz" <sawran at yahoo.com> wrote in message
news:3B703976.8F86AF86 at yahoo.com...
> Well, if someone wanted to launch a Distributed Denial of Service (DDoS)
> attack against your server and you told them you were running Windows NT
> and had a 1.2 mbps upstream connection to the Internet, they could then
> estimate how many other computers they would need to compromise to flood
> your connection with useless data and knock you off-line.
>
> I don't know if you've ever heard of buffer overrun (also known as
> buffer overflow) errors, Agent, but those types of attacks exploit a
> flaw in unchecked buffers in either the OS itself or a running
> process/program and try to either crash the system or execute code. If a
> hoster listed the amount of RAM in their server(s), it would give a
> better general idea of how long it would take to accomplish this or even
> if it would be possible or not. Intelligence gathering is key if you are
> a hacker. Generally, the more you know about something, the easier it is
> to hack into.
>
> I believe that most "true" malicious hackers have a goal or motivation
> to break into your system, instead of script kiddies doing port scans on
> the same IP address range your server is located on. It also depends on
> how much (or how little) information you reveal. Just saying that you
> use Windows verses a flavor of Unix could make a difference. However,
> you are generally correct in saying that giving out your system specs
> shouldn't make you more vulnerable, Agent. Any system with any specs
> running any OS connected to the Internet has a chance of it being
> compromised.
>
> While I'm at it, let me bring up a good point, Agent. You said: "If you
> keep your OS and software updated you usually won't have a problem."
> Most people I know usually say that. However, have you seen how many
> servers have been infected with the Code Red worm (and its variants)?
> All of it could be prevented by a simple patch that was released almost
> a MONTH before the outbreak. One of the main problems is getting IT
> people to actually regularly patch and audit their systems the right
> way.
>
> Builderz
> Stuff-X - Bot & World Hosting Services
> http://aw.stuff-x.com/
> PGP Key ID: 0xAC0E7073 (for non-commercial use)
>
> agent1 wrote:
make you vulnerable. If you keep your OS and software updated you usually
won't have a problem. Also, how does giving out specifics like bandwidth,
processor speed, memory, etc. affect whether or not one can break in to your
machine?
|
Apr 3, 2002, 11:35am
Originally object paths were stored per world. However, trial worlds came
out and thus many worlds same the shared path (most often the AlphaWorld
object path).
I think a better idea is to make a one-way hash of the object path and store
the folder name as that. Perhaps using md5 or something similar.
- Ima
[View Quote]"jerme" <JerMe at nc.rr.com> wrote in message
news:3caaed12$1 at server1.Activeworlds.com...
> Give each folder a number then, and have the browser keep a table of which
> folder # is which op... (encrypted)
>
> just *something* other that putting the path info right out there. That
> totally defeats the purpose of the whole "hiding the path in the features
> dialogue" thing....
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Jeremy Booker
> JTech Web Systems
> (www.JTechWebSystems.com -- Coming Soon)
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> "ananas" <vha at oct31.de> wrote in message
news:3CAAA463.EF5A552A at oct31.de...
>
>
|
Apr 3, 2002, 11:46am
While it does sound like a good idea, it won't help as much as you
think. In the most recent case, the object passwords were not obtained by
zip cracking, but by decrypting the AW protocol and observing the password
as it was sent to the client. So, it would not help at all to solve that (a
hacker could just get the PGP key.) AW's encryption algorithm should be
improved to something much stronger.
However, this will not make it truly hack-proof. The difference between
AW and other systems requiring encryption is that you are trying to prevent
the user from knowing what the computer is doing... AW will still decrypt
the files on your computer. The idea with secure websites is that others
will not be able to take the encrypted data while it is traveling between
others' computers and decrypt it. With AW, your computer decrypts it but
the user cannot find out how.
In your example, you mention that the browser would store the key
internally. However, what is to prevent someone from viewing it in memory?
- Ima
[View Quote]"jerme" <JerMe at nc.rr.com> wrote in message
news:3caa75b8$1 at server1.Activeworlds.com...
> The recent events have prompted a lot of people to reconsider the .zip
file
> passwords, including me. As was proven, ZIP passwords are not sufficient
to
> protect object paths. It takes only a matter of hours, sometimes minutes
to
> crack a ZIP password. How people get the zip files to crack is the first
> problem, finding a different method of encryption (that cannot be so
easily
> cracked) is a much larger problem.
>
> First, all attempts to hide the object path's URL were totally obliterated
> when the "object warnings" feature was added. Sure, it can be very
helpful
> when you're working with new objects, trying to perfect your model, but it
> was a major oversight on the part of AWC. The solution to the first
problem
> would be to allow the user to turn on and off object warnings (just like
> they can now), but not actually print them unless the user has caretaker
> privileges in the current world. Also... why not just name the cache
files
> by the world name they come from? Store all the paths, or data that needs
to
> be cached in a encrypted file somewhere.
>
> To solve the second problem: Why not use strong encryption? Such as PGP
> keys... This system has been proven very secure. I'm not sure anyone knows
> how to crack these (I've heard only the government code breaks, with the
> supercomputers at their fingers can break these) If not this, *something*
is
> needed.. if not a proprietary tool for encryption (which I would not
> recommend for obvious reasons) I'm not sure if strong encryption is truly
> practical, as it takes a lot of processor usage, and would be slow to
> decrypt hundreds of objects..
>
> Here's how it works... You use a program like PGP (Pretty Good Privacy)
> (check out the yahoo search here for an explanation -->
>
http://google.yahoo.com/bin/query?p=%2b%22pgp%22+%2b%22explanation%22&hc=0&h
> s=0 ) to create your public and private keys. You then use the private
key
> to encrypt your object files. (You'll want to make a backup of your
private
> key, but keep it safe - you don't want anyone else to have it). You
upload
> the PGP encrypted versions of your objects to your object path just like
> normal (maybe a different file extension).
>
> Then when someone enters your world, the browser should receive notice
that
> the OP is PGP encrypted, and the world server will transfer the *public*
key
> to the browser. (Note: the public key should not be available via HTTP..
it
> could then be downloaded, and would defeat the purpose of all this
> encryption) The browser should store this key internally, and loose the
> information when the user exits the world. The idea is to keep the user
> from every being able to discover the public key, and only allowing the AW
> browser to have the public key, in a situation where the use could not
grab
> it from a file later on. The key should not be stored permanently, or even
> semi- permanently, on the user's hard drive. The browser then uses this
> public key it has received to decrypt the objects and display them
normally.
>
> I'm not sure this setup would actually work when put into use, it's just
an
> idea. It would definitely impact initial world load times, but it
shouldn't
> cause significant lag as the objects only need to be decoded once (as they
> come into view). Exploring areas with objects that your browser hasn't
seen
> in that session would be the laggiest. This would have to be considered,
as
> there are hundreds of objects that would need to be decoded in some
worlds,
> just by standing at GZ.
>
> No matter the disadvantages, this would be the *ultimate* in security for
> object path's. I've forward this e-mail to Roland, E N Z O, and AW support
> as I believe it is of the utmost importance.
>
> Let me know what you think...
>
> Regards,
> Jeremy
>
> a.k.a. JerMe (#296967)
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Jeremy Booker
> JTech Web Systems
> (www.JTechWebSystems.com -- Coming Soon)
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
|
May 3, 2000, 9:06pm
Hi,
BoneClient Build 7 and Bone SDK Build 7 have been released.
What's new in Bone SDK Build 7:
* Support for offline messages including a new event
BONE_CALLBACK_DELAYEDTEXT which is called when you receive an offline
message from the server.
* Two new errors.
* Some minor protocol changes.
What's new in BoneClient Build 7:
* Support for offline messages.
* Lots of minor changes.
You can download both at:
http://www.imabot.com/bone/
- Ima Genius
May 6, 2001, 5:46pm
Hi,
Preston 32 beta is now available. You can get it at
http://www.imabot.com/index2.htm . Release notes are also there.
Sincerely,
- Ima Genius
Jun 23, 2001, 1:07pm
Hi,
If you are an ImaTowns customer, please see
http://www.imatowns.com/billingchanges.htm for important billing changes.
Thanks,
- Ima Genius
Jul 11, 2001, 3:54am
Hi,
ImaTowns will be down from late Thursday night to early Friday morning.
Please see http://www.imatowns.com/news.htm for more information. If you
have any questions or comments, please let me know. Sorry for the
inconvenience.
Sincerely,
- Ima Genius
Jul 30, 2001, 1:25am
Hi :)
I released the AlphaWorld Property Search Utility on Friday. It can be
used to find objects/buildings in AW based on certain search criteria. The
URL is http://tangent.imatowns.com/
Sincerely,
- Ima Genius :)
Jul 30, 2001, 8:20am
Yes, I think we could see more large worlds searchable in the future as long
as we could get a propdump on a regular basis (quarterly probably). :)
- Ima
[View Quote]"brandon" <brandon at my.activeworlds.com> wrote in message
news:3b64d55c at server1.Activeworlds.com...
> any chance for more worlds like...AwTeen?
|
Dec 2, 2001, 7:56am
Hi :) BirdBot Build 6 has been released. You can download it from
http://www.imabot.com/
A large portion of the BirdBot code has been rewritten and now supports
specifying the number of birds to start.
Sincerely,
- Ima Genius
Jul 4, 2002, 9:51pm
Hi,
I've updated the AlphaWorld Property Search. :) What's new?
* Updated to the June 26, 2002 AlphaWorld propdump.
* 'Find First Object' should now work much faster.
* There is now a list of the 100 most prolific builders in AlphaWorld. :)
To check it out, please see http://tangent.imatowns.com/ . As always, let
me know if you have any questions or comments :)
Sincerely,
- Ima Genius :)
Nov 9, 2002, 3:53pm
Sure you can, to search for property with the AlphaWorld Property Search
utility, at least :)
- Ima
[View Quote]"ncc 71854" <NCC-71854 at USS-Venture.Starfleet.UFP> wrote in message
news:3dcd0a7e at server1.Activeworlds.com...
> You can't use a ppw of an expired cit.
>
|
Aug 4, 2003, 7:55pm
What's the bug? :)
- Ima
[View Quote]"katerine" <removethisailleurs at ailleurs3d.com> wrote in message
news:Xns93CD108E992CCatherine at 64.94.241.201...
>
> This, tutorial included, is already online on the Alterlinks website since
> more than a month now.
>
> Besides, the Preston bot has a little bug for the chat relay and I
> personally prefer to use the Xelagot one.
>
> Hosting and color script for the Xelagot are also available on the same
> website (these pages are only in english and dutch for the moment).
> You can see it working in French and Gala world.
>
> http://www.alterlinks.fr
> http://www.alterlinks.com
>
>
>
> "alcior" <alcior at virtuelfrance.com> a écrit
> news:3f2d60b6 at server1.Activeworlds.com:
>
|
Dec 6, 2003, 8:20am
Please join us for the grand reopening of AWGames, the popular world which
launched gaming in AW and won 4 Cy Awards in the process.
The event will feature:
* Debut of our brand new world design
* Debut of brand new games to add to our extensive collection
* Game Tournament (TBA at opening)
* Fun for all
It will be held on Saturday, December 13th at 8 PM VRT in AWGames world.
Games include:
-Soccer
-Checkers
-Chess
-Bingo
-Bowling
-Trivia
-Othello/Reversi
-CyPac/PacMan
-WarShip/BattleShip
-*Others which will be revealed at the reopening*
We'll look forward to seeing you there!
To contact us or organize an event, telegram Ima Genius.
Dec 13, 2003, 3:09pm
Hi :)
I just wanted to remind everyone that the AWGames reopening party is
today at 8pm VRT (world: AWGames ).
The event will feature:
* Debut of our brand new world design
* Debut of brand new games to add to our extensive collection
* Game Tournament (TBA at opening)
* Fun for all
Hope to see you there!
- Ima
Apr 18, 2004, 5:13am
Hi,
ImaTowns will be down on the afternoon of Saturday, April 24th (Eastern
time) to install major hardware upgrades, storage array upgrades, and
software upgrades.
Please see http://www.imatowns.com/news.htm for more information. If you
have any questions or comments, please let me know. Sorry for the
inconvenience.
Sincerely,
- Ima Genius
May 9, 2004, 6:57pm
About these banana rewards... were they cellular, modular, or
interactive-odular?
[View Quote]"ubermonkey" <ubermonkey at wcalliance.com> wrote in message
news:409e90b5$1 at server1.Activeworlds.com...
> I hate to have to bring this difficult topic up in a public forum, but I
> feel that, since we're all discussing and sharing our personal secrets, I
> need to come clean too.
>
> I'm not really a monkey.
>
> I know, I know -- for the past eight years, I've been letting everyone I
> knew in AW believe I was in fact a monkey -- an ape to be specific --
which,
> through complex genetic tampering, had become capable of communicating
using
> a rough form of "English" and a computer, and had even learned how to
> program through a system of "banana rewards."
>
> Well, it's all lies.
>
> I'm so ashamed.
>
> Sincerely,
> Uber "Not A Monkey" Monkey.
>
>
|
May 20, 2004, 7:28pm
Sorry to hear it... I don't even know what to say :( She was a great
friend, and was always there to help anyone who needed it.
Daphne was a terrific person, and I'm sure the community will never
forget her.
- Ima
[View Quote]"paul" <mpbarrow at NOSPAMyahoo.com> wrote in message
news:40ac2d68 at server1.Activeworlds.com...
> Telegram from Diane, sent 47 minutes ago:
> Daphne passed away tonight about 5:30 ;o( I know she counted you as one of
> her dearest friends. She was still weak from her surgery last year, and
> Sunday she and her husband went shopping, she insisted on taking the cart
> back, ran into a guard rail with it, and when it flipped her forward,
broke
> a rib. The rib punctured her lung lining. she thought she was having heart
> trouble, so she had Howard take her to the hospital. It was all downhill
> from there. I'm still in tears here, don't know what else to say. AW has
> been her life for alot of years, it won't be quite the same without her
> here. Muir Funeral Home in Lapeer, Mich probably Friday or Saturday
> services. Daphne Coon
>
> Diane said she requested to be wearing an aw t-shirt for burial.
>
> I've lost a dear friend and AW has lost a valuable citizen :((((
>
> Paul
>
>
|
Jun 25, 2004, 8:52pm
Hi,
I've updated the AlphaWorld Property Search. It now contains all
objects built up to June 8th, 2004.
The property search tool is intended to locate lost objects or buildings
in AlphaWorld. To check it out, please see http://tangent.imatowns.com/ .
As always, let
me know if you have any questions, comments, or suggestions :)
Sincerely,
- Ima Genius :)
Jun 26, 2004, 1:03am
Looks like a Mapper problem, even the "Quick Nav" page on their own site
causes the error. I'll e-mail them about it.
Thanks,
- Ima
[View Quote]"ry" <rbirkin at iinet.net.au> wrote in message
news:40dcd089 at server1.Activeworlds.com...
> When selected view Map, Error:
>
> Internal Server Error
> The server encountered an internal error or misconfiguration and was
unable
> to complete your request.
> Please contact the server administrator, webmaster at activeworlds.com and
> inform them of the time the error occurred, and anything you might have
done
> that may have caused the error.
>
> More information about this error may be available in the server error
log.
>
>
>
> --------------------------------------------------------------------------
--
> ----
>
> Apache/1.3.29 Server at 65.86.125.142 Port 80
>
> --
> Ry
> www.zenithblu.net
> "ima genius" <webmaster at imatowns.com> wrote in message
> news:40dcacb5$1 at server1.Activeworlds.com...
> buildings
http://tangent.imatowns.com/
> .
>
>
|
Jun 29, 2004, 4:07am
Actually, I sent an e-mail to the address on the site and got the error:
"unknown user <maps at activeworlds.com>"
- Ima
[View Quote]"themask" <ricky at whaletech.net> wrote in message
news:40e0efa3$1 at server1.Activeworlds.com...
> Ima has spoke about him contacting AW about some problems.
>
> --
>
> Signed,
> TheMask
>
> :: Owner of Delusional-Minds Hosting ::
> Free world hosting.. Just a T-Gram will do it.
>
> http://www.delusional-minds.com
>
> "kathryn delanuit" <me at me.com> wrote in message
> news:40e0ecca$1 at server1.Activeworlds.com...
> window
>
>
|
Dec 12, 2004, 3:54am
Jeremy is correct. It's a significant amount of work for AW to generate
a few propdump file for us, so we typically only update it twice a year or
so.
Please let us know the dates of your friend's builds.
Thanks,
- Ima
[View Quote]"jerme" <JerMe at nc.rr.com> wrote in message
news:41bbccb6$1 at server1.Activeworlds.com...
> How recent are his builds?
>
> The property search is not done in real time. ActiveWorlds Inc. takes a
> "snap shot" of everything in the world, puts it in a file, and sends it
> to Ima. This file is then used to populate a database, and the property
> search scripts use that database to locate your builds quickly. The
> problem is that the property search database for AW doesn't tend to get
> updated very frequently, so what the search returns can be very
> different from what's actually in the world.
>
> So, check the dates on those builds. Looks like the last time the
> property search was updated was "June 8, 2004, 10:11 am" so anything
> built after that isn't going to show up in the search results.
>
> -Jeremy
>
>
> lioness. wrote:
something
typoing
|
Jul 30, 2005, 1:58pm
Hi everyone :)
The following is the schedule of AWGames tournaments for the AWEC
Festival. Please try to attend if you can, as they're lots of fun ;) We'll
be giving away 21 points at each event.
* Saturday, July 30th at 7pm VRT
Othello Tournament:
Join us for this classic game of strategy, also known as Reversi.
* Sunday, July 31st at 7pm VRT
Bowling Tournament:
Participate in this favorite game of many AW users, now tastefully appointed
with talking mugs.
* Monday, August 1st at 7pm VRT
Trivia Tournament:
Take part in this battle of the wits, with questions touching on all topics
and difficulty levels. Your choice of avatar; realistic or
flies-apart-when-you-walk.
To join, simply teleport to AWGames world :) Hope to see you there!
Sincerely,
- Ima
Aug 2, 2005, 1:03am
Hi :)
Due to popular demand, we decided to add another AWGames tournament for
the AWEC Festival: Nine Men's Morris.
* Tuesday, August 2nd at 7pm VRT in AWGames world
Join us and "mill" around at the Morris tournament. You may just "capture"
some prizes. :D
- Ima
Aug 2, 2005, 3:44am
Here's an article on it :D
http://en.wikipedia.org/wiki/Nine_men's_morris
- Ima
[View Quote]"Lioness.." <nobody at nowhere.net> wrote in message
news:42ef0258 at server1.Activeworlds.com...
> ok, here's a dumb question: what is Morris??? 0_0
>
>
> "Ima Genius" <ima at imatowns.com> wrote in message
> news:42eee26c$1 at server1.Activeworlds.com...
>
>
|
Aug 2, 2005, 3:47am
Blame RoadKill ;D
[View Quote]"syntax" <syn at swcity.net> wrote in message
news:42eefb09 at server1.Activeworlds.com...
> lol, laaame :P
>
> "Ima Genius" <ima at imatowns.com> wrote in message
> news:42eee26c$1 at server1.Activeworlds.com...
>
>
|
Oct 28, 2005, 4:03am
Yeah, we were moving our servers to our new location (and new ISP).
Everything should be back now :)
- Ima
[View Quote]"joeman" <john at fakeplastic.com> wrote in message
news:436142b5$1 at server1.Activeworlds.com...
> Could be a problem over at imatowns ;)
>
> -Joe
>
> Alcior wrote:
|
Feb 9, 2006, 2:37am
"Sounds" good :D
It sounds much better now :) Nice work ;)
- Ima
[View Quote]"goober king" <gooberking at gkstudios.net> wrote in message
news:43eab8ef at server1.Activeworlds.com...
> Good news for broadband and modem users alike! AWRadio now has *two* radio
> streams: one for high bandwidth users, and one for the poor souls still
> stuck on 56K modems! Here's the straight dope:
>
> http://awradio.mine.nu:8200 - High BW stream (96kbps/44100kHz/Stereo)
> http://awradio.mine.nu:4100 - Low BW stream (24kbps/22050kHz/Mono)
>
> We may increase the bitrate on the High BW stream as time goes on,
> depending on our bandwidth usage, so stay tuned! Also, High BW listeners
> should notice a significant decrease in the delay between the server and
> your media player. Oh, and unlike some other radio stations out there, our
> Low BW stream actually works! ;)
>
> Enjoy, and thanks for tuning in! :D
>
> --
> Goober King
> Straight dope
> http://www.awradio.com
|
Jun 2, 2006, 10:50pm
Preston, the popular, versatile, and easy to use bot is now available for AW
4.1 The details and download can be found on the ImaBot page at
http://www.imabot.com/ .
Thanks,
- Ima
Jun 5, 2006, 12:25am
You shouldn't get any bluescreens randomly unless you have a driver or
hardware problem :)
- Ima
[View Quote]"Lady NightHawk" <dmurtagh27 at hotmail.com> wrote in message
news:44838c4d at server1.Activeworlds.com...
>I knew and it happens to me now n then, nothing new with MS Windoze ...
>same OS more windas. LOL
>
> LNH
>
>
>
> "shalimar" <janet_mcintosh at charter.net> wrote in message
> news:448234ce$1 at server1.Activeworlds.com...
>
>
|
|