I was reading earlier tonight about the Yahoo!/Flickr censorship issue that happened recently and thought to myself, wow that really sucks.

Such was my opinion of Yahoo! when I went to login to my email account there and received this wonderful little nasty message:

For those not willing to click-thru, it basically says that since I haven’t logged into Yahoo! email for more than 4 months, my account (of at least 10 years) has been deleted including ALL of my email from that time. Not only that, but nothing is recoverable. No warning message saying, “hey, log in more often” or “recover your email this time, but if you don’t log in more often…it’s gone”. It’s just gone. Just like that. Despite the fact that I log into Flickr on a daily basis. Despite the fact that I’ve had that account since Yahoo! began offering email. I can appreciate them trying to clean up, but this is simply alienating their users. I’m too peeved to write anything more intelligent at the moment. I realize that it’s only email, but I’m just more upset at how the account is deleted without a trace. Should I have logged into my Yahoo! mail more often? Sure. Should they have deleted it without question even when I was using other Yahoo! services…I don’t believe so.

Thanks a lot, Yahoo!…

It’s funny what a similar line my sister and I have been on with respect to housing in the past 8 months or so. We moved halfway across the country within about one week of each other and are both again sharing some grief over housing. Mine is best illustrated with the picture below:

This is a picture from HousingMaps that combines Craigslist and Google Maps - that big blank area in the middle (between 99 and I-5) that shows no rentals…exactly where I want to live. The area around the lake is insanely popular and any good rentals usually gets snatched up in less than a day. I really would like to buy as there are a ton of places for sale in the area…but I just don’t happen to have $500,000 lying around, which is what most of these places start at…if you’re lucky. I’m hoping the lull in rentals is mostly due to people being away for Memorial Day weekend…but we’ll see.

If I haven’t blogged in a while, there’s a very good reason - I’ve just been super busy. So a quick brief about what I’ve been up to!

I’ve been working on a fun research project for work that’s taken up most of my time when I’m not doing something else. More on that later. I’m dancing, as usual, and working on a Rumba, (something secret), and a Viennese Waltz to perform this summer, just when the parents happen to be coming to visit me. ;) On a side note, I was interviewed for a brief radio bit about Dancing with the Stars and Apollo - I have no idea when it aired, but it was pretty fun. And hopefully (!!) I should have my videos soon from my most recent competition! And finally, I’m getting booted asked to move out of my current apartment. Yea…that one that I just had a housewarming for, barely two months ago. I’m really quite bummed - it was an amazing space that I have really come to love and feel at home in. Unfortunately, the landlords want to move back in and as such, I am left trying to find another place. No luck yet, but I’m optimistic something will come along. Regardless…it’s an great deal of stress that I really didn’t need right now…or at any point!  On a positive note, it does mean I get to have another housewarming. grin

There was a recent post on the Nmap Development mailing list about an nmap/vmware osx bug.  I recently experienced the same thing and after brief mention from a co-worker about VMware Fusion’s network interfaces not being “real” interfaces, and confirming this by opening up the Network Preference pane and not having the vmnet interfaces be listed under Network Port Configuration - I dug into the problem a little bit deeper.  The specific error I was getting was the following:

$ sudo nmap –iflist Starting Nmap 4.20 ( http://insecure.org ) at 2007-05-14 14:09 PDT getinterfaces: Failed to open ethernet interface (vmnet8). A possible cause on BSD operating systems is running out of BPF devices (see http://seclists.org/lists/nmap-dev/2006/Jan-Mar/0014.html). QUITTING!

A quick look at my process list for vmware stuff (ps -aux | grep -i vmw) showed the following processes:

root 108 0.0 -0.0 27296 56 ?? Ss Wed01AM 0:00.00 /Library/Application Support/VMware Fusion/vmnet-netifup -d /var/run/vmnet-netif-vmnet8.pid vmnet8 vmnet8 root 111 0.0 -0.0 27296 56 ?? Ss Wed01AM 0:00.00 /Library/Application Support/VMware Fusion/vmnet-netifup -d /var/run/vmnet-netif-vmnet1.pid vmnet1 vmnet1

Ahh, so they aren’t “real” interfaces.  A quick kill -9 108 111 and Nmap was again able to run successfully.

From time-to-time, I need an old version of IE due to application compatibility or for “other” security testing.  MultipleIE has saved me numerous times, so I figured I’d blog a blog about it. I also came across some good tools on the Edge-Security site, many of which I’ve had the inclination to begin in previous lives but ended up never finishing. Thanks, guys!

I just spent the weekend participating in the 2007 San Francisco Dance-o-Rama. I have to run to the airport now, but it was a fantastic weekend and I’m even taking home a little something! ;o)

Update: It looks like a couple people have already found my site via Google searching for info on the San Francisco Dance-o-Rama - I’m not sure what they were looking for, but allow me to post a little more info.  In addition to my day job, I spend anywhere from four to sixteen-plus hours a week taking ballroom dance lessons.  This past weekend was the Arthur Murray Area 6 Dance-o-Rama, held in the lovely Grand Hyatt in San Francisco, CA.  A dance-o-rama consists of (at least) two days of constant dancing competing against hundreds of other students from studios across the country.  I personally had 52 “entries”, plus two solo routines, and a group formation - to give a little perspective, the top instructor had 307 entries dancing with various students.  My instructor came in 2nd with 297(?) or so entries - congrats. ;-)

It was a great weekend, though.  Dancing, especially competitively, is a great rush and when we weren’t dancing we were cheering on our fellow students and teachers.  As noted above, I did pretty well taking first or second in nearly every heat I competed in.  I only recently (in the past year) took up this hobby and I am very pleased and surprised at how well I did.  I am already looking forward to the next competition I’m going to which will either be in Chicago in the fall (if I can finance it…) or Hawaii at the beginning of 2008.  I’d love to go to Chicago so I can re-unite with my original Arthur Murray studio as well as see all my old friends, but I will have to budget very stringently in the next few months in order to do so.  I also have a lot of work in front of me in order to step up to the next level in the dance world and compete at the level that I want to.

I only recently came across Google Co-op, but I have to say it looks like it could be pretty useful. I’ve already created an Information Security Search consisting of some of my favorite sites that I frequent. Conveniently, the co-op allows contributors, so if you’d like to help me flesh it out, just volunteer to contribute!

Feel free to try it out straight from here:

In other news, Google also recently announced their new history feature, which records what web pages you’ve visited and allows you to search and view the full text of them. There have been other services like this before, but for some reason having Google do it makes it a little more scary. Perhaps it’s the fact that they appear to be cataloging every aspect of my life these days. This gives me even more reason to work on that little plugin I’ve been thinking about…

Have no fear, I am actually alive…just busy as usual.  Just before Easter weekend, I had the fortune to be in Boston for some training and used that opportunity to stay on the East coast for the holiday to visit my family.  I got to meet my new nephews, who are awesome, and spend time with my sister and her kids.  The best part of the weekend was Easter.  My sister had the great idea of only telling our mother that there would be a “mystery guest” present at Easter dinner and I did not reveal that I had even left Seattle.

To further the illusion, I signed on Instant Messenger at my sister’s house on Saturday and put up an away message that I was playing soccer, which is what I typically do on the weekends when I’m home.  Finally, to complete the illusion, I utilized an instant messaging client for my phone (Octro) while we were on the road to Easter dinner and started chatting with my mother.  At the same time, my sister called to let her know that we were on the road and had been for quite a while.  The deception was complete - my mother assumed I was home in Seattle, but I’m sure she had an inkling her techno-geek son might have had some way of being tricky.

After arriving at our destination, I slinked down in the back of the car and waited a few minutes for the onlookers at the window to stop trying to see if somebody was going to get out of the car.  After waiting a short time more, I climbed out the opposite side of the car, then dashed along the woods and the side of the house up to the side door.  Eager to see my family, I burst in through the door with a giant grin on my face while my mother gave a cry of shock and surprise.  We gave each other a giant hug and I was able to sit down and eat Easter dinner with my family all the way across the country.

I’ll post some pictures soon - it was a great day! I’m back in Seattle now, but busy as usual.  I’ve got some work stuff I’m focusing on as well as a dance competition coming up in San Francisco shortly that I’m preparing for.  It’s been a busy month!

There’s been a few notable releases of some security tools recently - I’ll reference packet storm’s site.

• Nipper - nipper is a Network Infrastructure Configuration Parser. nipper takes a network infrastructure device configuration, processes the file and details security-related issues. (This sounds very similar to a tool I’m working on - I’ll have to check it out in more detail soon!
• Scapy 1.1.1 - Scapy’s an awesome tool that I’ve used in the past for messing with packets.
• Bluediving 0.7 - Bluetooth Penetration Testing Suite…time to fire up my linux box!
• Cutter - An oldie, but a goodie…something I came across via another (really) old blog entry, but very useful - allows you to kill specific connections on your linux firewall box

On that last note, I’ve come across a lot of really good security blogs lately. I’ll post them here at some point, but you can also just check out my blogroll and look under the Security folder.

It was a great night for a photo shoot recently, and I took a bunch of pics of the Seattle skyline. I still have a few to upload, but you can check out my Seattle skyline pics on flickr!