Wednesday, May 12, 2010

Cyberwarfare arrives on the Blogsphere – An update on the Hacking of KOVTR.

It would appear that the main IP numbers [dedi158-145.envisional.net - 62.128.158.145]
involved in the reasons for the slowdown in services on KOVTR belong to a small organisation called:

Envisional Ltd
Betjeman House
104 Hills Road
Cambridge
CB2 1LQ
United Kingdom

They represent other not so small companies like:

What I don’t understand is why these company’s should hire an internet sheriff to come after and block my little armless blog.
Envision offer the following peace of mind to their customers:

Your return on investment

- Brand value maintained
- Reputational risk minimised
- Reduced loss of revenue

- Future attacks deterred
Future attacks Deterred. I wonder how they offer that?
Will they write me a polite letter and say: Please stop and desist mentioning our clients names in your Blog postings Mr. Koltai.
They have spent a lot of money in attempting to master the course of smooth legislative tampering and you are making their attempts look sleazy.

Or will they just ping flood my blog site with a DOS attack (that’s an illegal denial of service attack).
We live in interesting times where words are attacked, not by a polite letter or email but by illegal activity. Which, if I were to engage in upon any other persons website would end up with me observing the world
through the bars of a jail cell.
However, these large corporations and their servants (Envisional Ltd) appear to be immune to normal criminal prosecution.
It’s interesting that persons can be arrested and jailed for sharing a couple of songs or movies.
Yet, corporations that infringe on individuals rights to publish are protected by a system that recognises only dollars spent on lawyers as a validation of right and wrong.
It would appear that you can buy anything with money, including government
agencies that are paid for by the citizens to keep them safe from harm.
I’m a citizen, my Blogsite is being attacked, why isn’t anyone investigating the cause of this attack?
Pardon? I didn’t make a large enough campaign contribution last year? Oh, I see
.

P2P is Killing the Porn Star

Originally posted by Tom Koltai at 06:31AM (EST) on January 17, 2009

Hollywood is not the only casualty of P2P.

In 1998, Forrester Research published a report on the online "adult content" industry which speculated on an industry-wide aggregate figure of $8-10 billion
The prefix porno- is derived from the Greek term for a prostitute; hence, it may be argued that pornography is as old as the “world’s oldest profession”.
It has been a long held belief that sex drives technology and its depiction in various media formats has been a common tool in expressing resistance against authority. Be it Religious, legislative, societal norms, or well meaning parents.
Sculpture[i] and Painting from early cave man times often depicted acts of copulation and male and female genitalia.
With the advent of writing early scribes adorned their works with hand coloured caricatures that were often voluptuous and sometimes incongruously presented, e.g.: The Bible[ii]
The invention of the Gutenberg Press in 1440 made books, easier to produce and cheaper and it was no wonder that the sizeable market in books often including plates of damsels, elicited a predictable response from the Church; Pope Paul IV in 1563 listed erotic books in the Librorum Prohibitorum, a list of church prohibited literature.
The Photograph (1839) expanded on naked caricatures and replaced them with young ladies in risqué poses and precipitated the first “anti-porn Legislation.
Banning didn’t stop the trade in printed pornography. It just drove it underground and as all black markets function, made the content more expensive. The push to control or stop sexual content from being seen by people has continued through the ages and now we tend to accept that consumption of pornography equals aberrant behaviour… although there are plenty of other examples of content that is aberrant to societal ‘norms’ that are accepted by religious groups, governments and parents: such as the violent pornographic images of women and children being wounded or slaughtered in war zones around the world, seen on the evening news. These may not shock in the same way that violent porn may do, but nevertheless the impact is not dissimilar.
The Stereograph (the worlds first 3D media – 1840), The Radio (1920s), The Television(1950’s), VCR’s (1981), CD (1992), DVD’s (1997) and now the Internet were all widely adopted initially because they allowed the masses at home to view or listen or listen and view content “PRIVATELY” in their own home.
There is evidence that the Pornography industry has been solicited by the standards authorities and manufacturers of new forms of media for their views, opinions and suggestions about proposed formats.[iii]
In 1999 I was an ISP on two continents and I wrote an email about the quantity of Pornography that was transiting the internet at two locations in the US. Mae East and Mae West.
My claim derived from packet sniffing the peering backbone was that there was around 87% of content that was or could be pornography.
It appeared to me, that the availability of Pornographic images (since 1979 on BBS) and now multi-media content on the Internet was opening the flood gates to an aberrant future where the major questionable truism was the massive erosion of my profit margins (bandwidth – not porn).
But then Napster was born and the Porn web pages started to be re-organised by overly capable 15 year olds from web pages for their mates to Napster listed resources.
Because Geko (my ISP) was the global host to the worlds biggest Quake game my concentration was focused on adding more bandwidth for game players than worrying about the occasional user that downloaded porn.
But by 2000 I had started to notice a drop-off effect. Traffic was changing. Music files appeared to overtake Porn as the bandwidth hog.
Socially speaking that was probably a good thing, however, my bandwidth was still being eroded….
Fast Forward – January, 2009 – Sydney, a house in the suburbs…..
A quick poll of the milleniumite[iv] members of the household (both of them) confirmed to me that 3D action based games were a far higher priority in the minds of the male population of the house than naked forms gyrating in obviously posed and uncomfortable positions.
This was evident in the unanimous requirement that I install 802.11n equipment to replace the 802.11g that just didn’t cut mustard with the Ps2 (the 18yo) and Ps3 (the 22yo) interaction.
It would appear that today's youth – do not want Porn. They want access to entertainment. Games, Movies and You-tube.
Empirical data from multiple cited sources[v] suggest that the high availability of Pornography has made its acquisition a much lower priority for milleniumites.
According to Ipoque, 22% of Internet users generate 76% of all internet traffic via Bit Torrent or emule downloading 38% movies, 25% Games 14% TV shows 9% music and only 1% porn.
In Summary, it would appear demographically, that net denizens of at least three years vintage and those of legal adulthood, move away from Porn as a primary interest and start using P2P for entertainment.
Thank-you Hollywood, the Music Industry and Microsoft – it seems that our littleuns are growing up without us having to look over their shoulders constantly – except to ensure they are not exceeding their monthly download bandwidth limitations.
Based on the foregoing, where are these continuing claims for porn originating from and why[vi] ?
In Australia, hyped media stories about the high volumes of Internet Porn have led to the Crimes Legislation Amendment (Telecommunications Offences and Other Measures) Act (No. 2) 2004 requiring ISP’s and Carriers to report illegal (juvenile orientated) pornographic materials on their networks and to the current attempts at instigating an Internet Filter[vii].
Lobbying of the Australian Government has been undertaken by such misinformed individuals as the Reverend the Hon. Dr GORDON MOYES requesting the NSW Parliament to be more active in banning Pornography even though his allegations about pornography inciting young males of both Indigenous and European origin to instigate predatory behaviour towards Juveniles is in direct contrast with all published academic works on the subject of non-indigenous attacks [specifically, citing the Meese Report;] “In none of the studies cited "has a measure of motivation such as 'likelihood to rape' ever changed as a result of exposure to pornography”]; and reference to Indigenous sexual miscreant behaviour refers to the 10,000 year old Aboriginal tradition of taking a bride at age 13. Specifically:
6.23 In Aboriginal customary law, marriages may be agreed between the prospective husband and the persons responsible for a young girl.20 This is a contract to which the child is not a party. The contract imposes material obligations on the prospective husband with respect to the child and her fa mily; and obligations on the parents and child with respect to the prospective husband.
6.24 Generally speaking, the child is expected to understand the nature of the contract when she reaches puberty (say 12 or 13).[viii]
Nevertheless, it is the authors contention that the Government is using such claims to instigate (initially in Australia) an http filter for ostensibly restricting access to child pornographic content, which once implemented will be easy to expand to include other “unspecified, inappropriate content”
When questioned about the unprecedented move for a Government to filter its citizens Internet, Senator Stephen Conroy replied that the UK, Sweden, Canada and New Zealand have already implemented similar filtering systems with no impact to performance.
Unfortunately for the Senator, Google isn’t included on the restricted sites yet and a series of google searches resulted in discovering that the UK Government is precluded from introducing online censorship by the Communications Act and BT does provide a parental “voluntary” clean feed to their customers “on request” In Canada eight ISP s run a “voluntary” parental control feed, again on request - there has been no Government intervention or legislation. A single ISP in Sweden runs an optional blacklist – by user request - Potential misuse of this voluntary system was highlighted recently when the Swedish Police threatened (unsuccessfully) to stop Torrent P2P by having the Pirate BayBlacklisted as a child Pornography site.” And in respect to New Zealandwhat filter ?
So why against all this evidence and the public outcry does the Labour Government insist on installing the filter.
Well, one reason as pointed out in Stilgherian's Blog Page on the subject tells us that 20,646 Church going Australians signed a dozen petitions to have the internet filtered. (Remember the good Reverend the Hon. Dr GORDON MOYES misquoting data ?)
So – is it about Petitions ? Because if so, Getup.org.au have collected nearly 95,0000 petitions for the other side of the argument.
But I don’t think the Government will listen to the Filter Nay-sayers. After all, Australia is a member of WIPO and they do want to show the US Government how clever they are.
It may well suit the Government to control what the public consume intellectually.

In that way, taxes are paid, public discussion and dissension are kept to a minimum and we are all good little sheep. (As in sheep to the slaughter….)

I think David Edwards[ix] in his 1992 article possibly said it the best:
We are faced with the difficult question of balancing individual liberty against an externally enforced "security." Freedom carries with it an inextricable element of danger. In order to eliminate the dangers associated with freedom, we would need to render freedom unrecognisable.”
I believe that this nation has been to war on a number of occasions – The First World War, The Second World War, the Korean War, Vietnam, Afghanistan, Kuwait, Iraq to defend this country against anti-democratic regimes, fascists and Dictators, but principally, to defend the free world against all forms of political or religious persecution and to defend the right of free speech.
I refuse to believe that the current Labour Party has forgotten about the Australian lives forfeited over the last hundred years in our attempts to preserve these freedoms, not only for ourselves but generously for others.
We all remember the famous quote “I'm mad as hell, and I'm not going to take it any more”
I love that quote…. If I wrote it today, I would make just a minor change
I'm mad as hell, and I'm not going to take your bullshit about the filter any more”
Try saying it to yourself… sounds good doesn’t it. Now open the windows [Twitter, Digg, Facebook, Myspace – all your friends], lean out and shout……

References:

[i] The “Venus of Willendorf” figurine, found in Austria, dates to as early as 24,000 B.C.
[ii] Pornography: DVD: The Secret History Of Civilisation Koch Vision // 1999 // 312 Minutes // Not Rated
Reviewed by Appellate Judge Mike Pinsky // March 20th, 2006

http://www.dvdverdict.com/reviews/pornsecrethistory.php
[iii] Pornography customers first to buy DVD technology Reuters Posted online: Monday, January 10, 2005 at 0150 hours IST http://www.expressindia.com/news/fullstory.php?newsid=40548
[iv] Born between 1982 and 2000, the Milleniumites were the first generation that grew up with the Internet that commenced global commercialization in 1994 just as the first milleniumites were reaching 12 years of age.
[v] Dolf Zillmann, Influence of unrestrained access to erotica on adolescents' and young adults' dispositions toward sexuality, Journal of Adolescent Health, Volume 27, Issue 2, Supplement 1, August 2000, Pages 41-44, ISSN 1054-139X, DOI: 10.1016/S1054-139X(00)00137-3.
(http://www.sciencedirect.com/science/article/B6T80-40RTM34-8/2/d8568349f3984dbaa02fbfdd7a5f1a09)
[vi] http://stilgherrian.com/politics/petitions_drove_filtering_policy/ Retrieved 17 January, 2009
(Originally Sourced from Irene Graham's http://libertus.net/censor/resources/studies.html)
[vii] Closed Environment Testing of ISP-Level Internet Content Filtering: Report to the Minister for Broadband, Communications and the Digital Economy. June 2008.
http://www.acma.gov.au/webwr/_assets/main/lib310554/isp-level_internet_content_filtering_trial-report.pdf Retrieved 17 January, 2009
[viii] Committee of Inquiry: Aboriginal customary law Page 23-24
REPORT OF THE COMMITTEE OF INQUIRY INTO ABORIGINAL CUSTOMARY LAW – Recommendation 5. Published by the Northern Territory Law Reform Committee
http://www.nt.gov.au/justice/docs/lawmake/ntlrc_final_report.pdf Retrieved 17 January, 2009
[ix] David M. Edwards  - Politics and Pornography A Comparison of the Findings of the President's Commission and the Meese Commission and the Resulting Response – 1992 http://home.earthlink.net/~durangodave/html/writing/Censorship.htm Retrieved 16 January, 2009

Sunday, May 9, 2010

Corporate Spetnatz Cyber Comandos vs Aussie Blogger

What if there was an organisation that was employed by some of the largest publishing conglomerates in the world that not only had the capability to interdict content digitally, but did so, illegally and boasted of their prowess to do so.
What if these people had utilities to make themselves almost invisible to the operating system, the log files and knew how to clean up after themselves to ALMOST make it appear as if they were never there.?
What would happen if these Internet Corporate Spetnatz Cyber Comandos decided to take on the small (less than 50 average readers per day) website of an aging and nearly extinguished Internet entrepreneur?)
… and whatif that internet entrepreneur had been hacked a few times in his life, had a reasonable knowledge of Unix, PID’s, ascii txt log files as a supplement to MYSQL datafiles and made lote of diverse backups of everything?
Last week the unthinkable happened. I had the pleasure to come to the attention of just such an organisation and of course, they injected [pun intended] themselves into the focus of my attention.
I also had the “luck” to be logged in and observed and captured (using Camtasia video screen capture) their antics in real
time as they went about destroying my Blog site.
Their actions could not be called piracy, as they didn’t take anything.
They didn’t physically harm anyone.
Yet approximately 12 people were possibly infected with a virus and I lost two days of my life exploring the damage by looking into several hundred PHP files. Testing their scripts and tracking the IP numbers that they deleted from the log files and the SQL server. 

In our upcoming article entitled “Corporate interests Hijacking the Net” we will discover who is behind the Hacking of KoVTr.com, who are their shareholders and Directors and why they appear to be able to move around the net at will, invisibly wrecking havoc on web sites globally.
No need to keep checking back, just follow me on Twitter and you will receive a Tweet when I post.
The additional benefit is that I have set-up a number of alternative sites, as I believe that this suite will be targeted so the company involved can protect it’s interests.

Comment to the Internet Spetnatz Commandos….
The incursion last night into my home computer system failed.
The Sony VGNA-190 that you took down the MBR for was an unprotected seven or eight year old computer used only as a Media Server for the family. (It took eight minutes to restore the MBR, because first I had to remember where I left the USB key….. and then I had to find the Sony boot CD……). However the Router captured all traffic to and from the Sony and the log file has been written out to a computer not on the net. Sec B1 & Class C-a)
The score for Round 1 at half time 

Group NBT Plc Spetnatz Internet Raiding Party 1
vs
Koltai, ageing internet entrepreneur                  0


Lets see how we do later in the week…….

For those 12 persons that were infected by the virus, it has been identified as:
Common name:
Winantivirus
Technical name:
Application/Winantivirus2006
Threat level:
Low
Alias:
WinAntiVirus Pro 2006,
Type:
Potentially Unwanted Program (PUP)
Effects:
It is a Potentially Unwanted Program, which can affect the users’
consent, awareness or control over the program. It does not
spread automatically using its own means.
Affected platforms:
Windows 2003/XP/2000/NT/ME/98/95
First detected on:
Dec. 5, 2005
Detection updated on:
Oct. 8, 2007
Statistics
No

 

Virus – Brief Description

Winantivirus belongs to the category of Potentially Unwanted Programs, also
known as PUPs.
PUPs are programs that, due to their features or means of
distribution, can affect users’ consent, awareness or control
over operations like:
  • Installation.
  • Modifications carried out on the computer.
  • Behavior of the program.
  • Processing of personal data.
  • Uninstallation.
The evaluation criteria of PUPs are based on the proposals
suggested by the Anti-Spyware
Coalition
, organization
Winantivirus uses the following propagation or distribution methods:
  • Exploiting vulnerabilities with the intervention of the user: exploiting
    vulnerabilities in file formats or applications. To exploit
    them successfully it needs the intervention of the user:
    opening files, viewing malicious web pages, reading emails,
    etc.
  • It is dropped or downloaded to the computer by other malware
    specimens, for example: Downloader.LHW, Downloader.NEX,
    Downloader.NEY.
The Notice on KOVTR whilst it was down over the weekend.
We apologise, KOVTR is down whilst we remove the virus that was placed there by the
kind people from Envisional Ltd Who were hired by the nice people at:

To place a virus on KOVTR so that regular readers would not want to come back
here and  so that the site would be listed by Google as being infected by Malware.
If you have received one of these on your screen don’t click on it or attempt to close it.
We apologise and suggest that you NOT turn off or reboot your machine.
At 1:12 am on the 7th of May, an employee of Envisional or a contractor sanctioned by
the owner of IP number [62.128.158.145] that in-addr-arpa resolves as dedi158-145.envisional.net did cause a scruipt to be executed on KOVTR.com that altered approximately 224 php files in the Wordpress
area of KOVTR and caused them to be infected with a downloadable
virus file.
The insertion code in the PHP files starts <?php /**/ eval(base64_decode(“aWYoZnVuY3R… and is executed by the browser on the client side to binary decode the virus to install in the registry of the reader of the content causing the above popup “fake MALWARE” warning. The Registry entry looks like this and should be removed using Run, regedit with the reference in the picture below being the appropriate location in the registry that requires removal. The file has no name – yet, and will only execute on reboot or power cycling.
Otherwise please run a good virus removal tool
We apologise for this incursion and assure you that we will publish the complete log-files proving
that an IP number from Envisional Ltd
Was responsible for inflicting this damage on our readers computers.
KoVTr will be back up within seven hours. (Sorry – it’s taking longer than I thought –
estimated time of “reappearance is now approximately 14:30
hours AU EST 8th of May.)

We just need to go and close a few WordPress security holes and reset the rat-trap shoebox filters
Envisional Guys – sometimes you should check who you’re messing with before such a
blatantly public and uncloaked hacking incursion is attempted.

I will be sending you a bill for my time and I will be asking my readers to estimate the time and cost loss to them also.
Either way, please be advised that you will be hearing from our solicitors.
Each and every key stroke was logged (okay, byte uploaded) its; just keystroke logged sounds so
much groovier therefore denial is impossible.

We suggest you have a quick whip around from your clients for the upcoming legals……
Whilst there is the tiniest possibility that they were not the ones that placed the file on KOVTR, our system log files confirm that theirs was the only IP number that spanned the period of the PHP script execution and the
time stamps on the altered PHP files.
Their action can only understood by comparing it to a zealot religious Proctor, circa 1650 in Olde
England that would enter your home looking for books that were on the list prohibitum of Holy Mother Church and burning them.
However, we would add that the Priests had a carte blanche by the populace who accepted that the book burnings of salacious materials were for their own good.
We sincerely doubt that any such comparable arrangement/defacto agreement now exists between the
worlds Internet users and Envisional Ltd and their employer/clients, namely Warners, Sony, IFPI, Microsoft MPAA Vivendi/NBC Paramount and Fox.
Additionally, the Priests didn’t leave behind nice little virus easter eggs that would cause the users of the Internet that chanced upon KOVTR to become infected with Malware that was extremely difficult to get rid of.
Our opinion is that this activity borders on criminal malfeasance and is certainly in contravention of Australian Federal laws on illegal entry into a computer system and alteration of data thereon. Older readers would remember the Ausnet Services Hacking incident where the perpetrator received a three year jail term for a similar break and enter.

Thursday, May 6, 2010

KOVTR is being attacked for telling the Truth.

Hot:
Dear Readers
I apologise for the slow response from the KOVTR site.
It appears that someone doesn’t like what I am writing.
KOVTR is at the moment the target of some pretty inefficient hacking. The good news is that I am an old hat at being attacked/hacked by disgruntled persons…..
Of course, that might change and the parties whom are paying these hackers might find better hackers, in which case, we might disappear all together.
The attack is focused on the KOVTR mysql server in an attempt to break links and prevent me from posting new stories.
But fear not, we have backups of all the data and a shadow site ready to go at a moments notice.
So I ask you to grin and bear it whilst we try to ignore those that would attempt to interfere with your enjoyment of reading my posts on file sharing and an inept domineering content creation industry that would appear to not understand the Internet at all.
The Internet is about sharing information.
It has scant regard for commercial needs and would appear to repel all hostile boarders who would attempt to use it’s share-all meme for their own global control ambitions.
We will continue with the development of our storyline which is:
The content industry are misrepresenting the facts about file sharing to legislators.
The content industry hire economists who then use anecdotal data rather than empirical file sharing data to prove or disprove their paymasters whims.
These economists, skilled at presenting 1 + 1 = “what would you like it to be today?” reports are not above using incorrect data and carefully constructed grammar to mislead, obfuscate and distract their intended legislative policy makers from the real facts.
The real facts are that Gaming has taken over from music as the home entertainment preference for the majority of the western worlds computer users.
Music, whilst still popular, is being relegated to a secondary level popularity position and it’s major publishers are not astute enough to alter their business models to factor in consumer preferences.
Company’s like Vivendi, Sony and in the past Warners all own/owned major computer game publishers. So this news is not unknown to them. However, it is unknown to our politicians who believe the men that donated millions to their campaign finds are “good guys”.
Think about it dear reader, if someone gave you twenty million dollars for your campaign fund for you to be elected, would you think they were a good guy or a bad guy?
Well the good guys are now ping flooding KOVTR in an attempt to stop you getting to the data.
Which given my anecdotal, disjointed, rotten grammar style of writing bemuses me somewhat.
So today, I shall add another hundred or so feed links and ensure that the mirror sites are upto date.
Normal service will be resumed when they get sick of attempting to censor my content.

In the meanwhile…..  I may set-up a newsletter version of the site on P2P and direct email. For those that are unable to get the good goss directly via RSS feed or HTML;  please email cgtkinc at gmail period com for inclusion on the list-server for new articles.  It’s old technology but uses a different server.