Forum > General Discussion

Computer Software Security

(1/7) > >>

AGelbert:
Agelbert NOTE: What People should know about the Replace Exclusive OR Instruction (RXOR) and Hackers.


--- Quote from: Palloy2 on May 25, 2017, 09:57:23 pm ---
The page contains images that come from the domain "somecards.com" which is presumably on Symantec's blacklist for hosting malicious .jpg images.
This blanket approach is too broad, giving false positives, but you can never be too careful, especially if you are using a Windows OS.

--- End quote ---

In regard to ensuring careful attention to potential attacks, for once, we agree. 

I programmed a mainframe air traffic control computer for several years. I was one of the few who could program in machine code. That means I am an expert at using Boolean algebra (denoting a system of algebraic notation used to represent logical propositions, especially in computing and electronics.) to talk directly with a computer. What does that have to do with this discussion?

I know, for example, that the RXOR instruction (that ALL COMPUTERS USE ROUTINELY)  is a toggle switch to completely reroute a program path a certain way, and then when the same key sequence is made, reroute it back. THAT is one of the FEW ways that hackers use to do their thing. Yes, I'm sure you know that. But I am bringing it to the fore here  so readers can understand that hacking is not some big mysterious thing for math "wizards"; it is a way for devious individuals of average, not superior, intelligence to try to STEAL from honest people. 

ALL computers MUST run in machine language, regardless of what "high order" language they use to interface human speak commands about math and labels to the machine language of binary bit coding. The only nuances in machine language (bit pattern the hardware understands) come from the size of a "word" (this determines where to set the far left bit when a "word" is a negative number) and whether you use octal or hexadecimal numbering. But in the end, it's all  LA(load accumulator) followed by other instructions like shift left so many bits or shift right so many bits, OR, XOR, RXOR, AND, NOT, SA (store in the accumulator), jump to label contents (address) if flag is set or don't jump if the flag is not set. etc.

The point is that hackers can ONLY get into your stuff by pushing some code into a program branch that is routinely used. THAT'S IT. They make a big deal about "viruses" and "malware" and "ransomeware" and "phishing" (and so "I am the greatest and can steal you blind so be afraid" on braggadocio), but it's all MAINLY about the RXOR.

The RXOR can, by jumping to a subroutine that zeroes out multiple memory locations, effectively wipe out giant swaths of code, if that's what you want to do, AND LEAVE NO TRACE that it was done. But they do that only when they want to crash your system without leaving evidence you can analyze in a post crash dump (trigger a Store zeroes instruction to the area the they reprogrammed).

The BASTARDS that do hacking these days do not really want to crash your system; they want to WATCH what you do in order to steal you blind. So, they insert a RXOR to, in nanoseconds, store some of your activity and rapidly return to your normal routine.

What they call "worms" and "viruses" are simply a step by step process to to get into what is called "protected" memory (read only) and WRITE something into it. That "something" is usually a RXOR (replace exclusive or) instruction that sends your program to a quiet key logger and back. They can be real "sophisticated" and put timers for DOING STUFF at certain dates or when certain activity is detected. It is all quite entertaining to unethical bastards that enjoy this sort of thing.

So, yeah, you can be assured that I will ALWAYS be VERY careful.  8)

GWarnock:
Instead of just a link, how do you show the article in full?

AGelbert:

--- Quote from: GWarnock on November 07, 2017, 02:52:01 pm ---Instead of just a link, how do you show the article in full?

--- End quote ---

I have to do exercise for an hour now, but I will retun and show you how to do that.

At first, I had the same problem. Once you see how this works, you will have no problems.

But while you wait, just go to any of my posts with imagers and hit the "Modify" button. Then look at how I formated the image. I'll explain more in a little while.     

GWarnock:
take your time..  :)

AGelbert:
Okay, I'm back.  I see that you aren't here right now so I'll just start the discussion for you you to pick up on when you get back.

As you know, some small smiley images are available just by pressing a button on the menu just above the text area for a post or a reply to a post (there are also lots of other cool tools in the posting menu but I am just discussing images today).

These are the ones you never size which are easy and quick to add  to posts anywhere in the text:

 :) ;) :D ;D >:( :( :o 8) ??? ::) :P :-[ :-X :-\ :-* :'(

Now, when you want to post an image like a jpg or a gif or a png (etc.) that you have uploaded to the gallery OR you have the full address of from somewhere else, the situation is different.

For example, below is the address to one of my kitty images:

http://renewablerevolution.createaforum.com/gallery/renewablerevolution/3-250817124114.png

As you can see by the path of the address, it is an http (hypertext marking internet protocol address) image in the renewable revolution forum. It is located in the gallery and has an image number of 250817124114. It was uploaded as a png (Portable Network Graphics) type of image.

However, you do not see the image here.

In order to see the image, you need to format it properly. I will now show you the simple format to use, with a space between each character, so it will be be displayed here (when you use this format, do not put any spaces between the characters or it will not work).

[ i m g ] http://renewablerevolution.createaforum.com/gallery/renewablerevolution/3-250817124114.png [ / i m g ]

NOW, I will repeat the above without the spaces:



Is all that clear as mud?  :D

Now let us go to one of your recent posts and modify the image properly. But before we do that, there is a trick I took a while to learn in the gallery that I will pass on to you.

You see, the gallery does NOT give the right image address right after you upload an image to it.

Yeah, it gives a link, but not the one you want.  ;)

To show you what I mean, I will go to the gallery and grab an image by copying the link address (see below).

http://renewablerevolution.createaforum.com/index.php?action=gallery;sa=view;id=1295

That's basically useless. Yes, you can "attach" the image to post, as you have done, but it doesn't look as good.

So here is what you do:

1. Right Click on the image and select "open link in new tab".
The address in the new tab is not what you are looking for:
http://renewablerevolution.createaforum.com/index.php?action=gallery;sa=view;id=1295

2. Go to the new tab and Right Click on the image and select "open  link in new tab".

3. The second tab has the address you are looking for.

http://renewablerevolution.createaforum.com/gallery/renewablerevolution/3-071117175342.jpeg

NOW you can post that image by putting (without the spaces):
 [ i m g ] http://renewablerevolution.createaforum.com/gallery/renewablerevolution/3-071117175342.jpeg [ / i m g ]

Here is the image:


It's too big so I have to size it down somewhat. I do that by putting a space after the "g" in "img" on the left side and assigning it a width in pixels. In this case, I assign it a "width=640".



I can make it as small as I want. Here is the image with a width=50.



You can now save the image address in a document for posting here or on the internet. If you post the address in Disqus, you do not have to format it but you cannot control the size. A brief description of the image in your document (e.g. Crime does not pay  calculator) will help you be able to find it quickly when your collection starts building up.

What you did with the Trump baby image, using the "attach" feature, has this address in the link:

http://renewablerevolution.createaforum.com/index.php?action=dlattach;topic=134.0;attach=40;image

I looked up that picture and found the address on the internet (see below):

http://2.bp.blogspot.com/-9XFIvswc62s/Vqg2umdA5YI/AAAAAAAAAno/yUTmXzcpJRk/s1600/CJgxC5wUAAED55j%2B%25281%2529.jpg

I will now format the above with [ i m g ] http://2.bp.blogspot.com/-9XFIvswc62s/Vqg2umdA5YI/AAAAAAAAAno/yUTmXzcpJRk/s1600/CJgxC5wUAAED55j%2B%25281%2529.jpg [ / i m g ]



Now I'm going to size it down to img width=200.




Now I am going to center the downsized picture:



I size the images I want to use to cover the whole screen at img width=800. However I have several images at img width=640. The smileys are usually either without sizing or img width between 80 and 20, depending on how much impact I want them to have.

Returning to the galllery in this forum, always remember when you want to grab one of those images to do the "right click, open in new tab" twice" to get the address on the second tab of the image for posting and resizing.

I am ready for questions. 

Navigation

[0] Message Index

[#] Next page