GETRUNTAH

Not Superbia

Available link for download

Not much to add pretty girls Not sure why some are wearing masks now I think previously the sam

Available link for download

Not so super hooper

Available link for download

Not from Life

Available link for download

Not even a single penny for Sachin Andhra news daily

MS Dhoni: The Untold Story opened to phenomenal response at the Box Office. Now, Be ready for the biopic of most celebrated cricketer Sachin Tendulkar.

As per reliable sources, Sachin didnt charge a single penny for his biopic. Ravi Bhagchandka, a friend of Master Blaster, is producing the movie. James Erskine helms the project. Music is by AR Rahman.

Sachin shared some untold secrets about himself and his love story. He also encouraged his son Arjun Tendulkar to play his role of a Teenager in the biopic.



First look teaser of Sachin: A Billion Dreams was unveiled on April 14th this year. So far, it earned over five million view. Makers have plans to release the biopic in all the cricket playing Nations. Its like a tribute to a great man who inspired three generations with unbelievable records.

Available link for download

Networks blur policy of not paying for interviews

NEW YORK – Policies forbidding payment for news interviews increasingly seem like the network television equivalent of the 55 mph speed limit: a rule often winked at unless youre heading into a speed trap.

Three of the past months accidental celebrities — Jasper Schuringa, who helped thwart an attack on a Detroit-bound plane; David Goldman, who took a custody fight for his son to Brazil; and the White House party-crashing Salahis — have either sought or received goodies from TV networks eager to hear their stories.

Schuringa gave interviews to outlets that had agreed to purchase blurry cell phone images hed taken of a man who authorities say tried to use explosives to take down the plane. Goldman and his son accepted NBCs offer of a ride home from Brazil on a charter airplane.

Representatives for Michaele and Tareq Salahi, who embarrassed the Obama administration by sneaking into a state dinner, were reportedly seeking six-figure bids from networks to tell their story.

"I dont know if people would have thought of that in the past," said Andy Schotz, head of the ethics committee for the Society of Professional Journalists. "But now often the first thing people think of is to get a publicist, a lawyer and an agent and figure out how to make money" from instant notoriety, he said.

The society condemned NBC for "checkbook journalism" with the Goldman trip. NBC said it had already chartered a plane to bring its personnel back from Brazil, and Goldmans lawyer said the invitation was accepted so father and son could avoid being accosted by multiple camera crews on the way home.

But NBC took multiple pictures and interviewed Goldman on the plane before his exclusive "Today" interview with Meredith Vieira. And the network seems immune to the industrys financial troubles: A chartered jet from Brazil to New York would cost about $90,000, according to Blue Star Jets, a New York-based charter company. Going commercial, a coach seat runs under $1,400.

Policies against paying for interviews are in place to avoid distorting the news. The concern is that news subjects will change their stories to make them more valuable or please those who paid them.

Evasion efforts seem centered primarily on ultra-competitive morning news shows and prime-time magazines. These outlets now fight for stories that might have been considered tabloid fodder years ago, often against Web sites or other outlets that wont hesitate to pay for an interview or information.

News organizations now frequently pay interview subjects for the use of personal photos or videos. Both CNN and ABC paid for a Schuringa photo, reportedly thousands of dollars, and insisted they were not paying for an interview. Yet Gawker.com said Shai Ben-Ami, a Schuringa friend who was helping arrange media appearances, made it clear the Dutch hero wouldnt speak to an outlet that didnt buy rights to a photo. Ben-Ami would not comment to The Associated Press.

Its an increasingly easy dodge in these days of cell phone cameras, when there are usually visual images available to accompany an interview.

Morning shows will often bring an interview subject to New York and cover expenses. (Its not payment for an interview, but it can be a nice vacation.)

Networks can skirt ethics policies by putting their entertainment divisions in charge of an interview, said Nicolla Hewitt, a longtime network news booker. These would seem most likely in cases involving major celebrities.

"Do I think its right? No," Hewitt said. "But is it the new reality? Yes."

Paul Friedman, a veteran news executive and CBS News senior vice president, said theres a generational change with more people in the industry who argue that the old standards are too rigid.

The Schuringa case led Foster Kamer, a Gawker writer, to mock the network news divisions. Gawker has acknowledged that it paid for a story last fall where a collaborator to Richard Heene provided evidence that the "balloon boy" episode was a hoax.

"Mainstream outlets who hold themselves in higher regards than those (like ours) who openly admit ponying up for a story are doing the same thing themselves, the sole difference being: We dont feel the need to lie about it," Kamer wrote. "Why do they?"

Paul Levinson, head of the communications department at Fordham University, said hes been paid for interviews by the British Broadcasting Corp. ("Im not allergic to money," he said.) He said he cant recall a case where the story was distorted because money was exchanged and argues that the policy doesnt make sense.

"It has always been the case that our free press operates in a capitalist economy — meaning money is involved, whether we like it or not," he said.

Networks have a cadre of paid consultants, like former generals or national security experts who share insights when a complicated story breaks that involves their topic. There was a time theyd do it for free for the attention it offered, Friedman said.

Even with policies in place that prohibit payment of interview subjects, its interesting how many news subjects think they can cash in. And how quickly: Schuringa had wrestled with the Detroit terror subject and dragged him to the front of the plane yet still had the presence of mind to snap photos when authorities came.

Its hard to know how frequently evasion practices are taking place, said Kelly McBride, ethics group leader at the Poynter Institute think tank. They dont usually become known unless the interview subjects talk about it or disgruntled network officials leak the news, as happened with the Salahis.

Reporters at local TV stations or newspapers that dont pay for interviews are more frequently meeting news subjects who wont talk unless theyre paid, McBride said.

"If we all drew a line again, maybe we could stop this," Friedman said. "But thats probably hopelessly naive. Its out of the bottle."
___
On the Net:
http://www.gawker.com

Available link for download

Not Your Fathers BMX Oh Wait Yes It Is

Available link for download

Network complexity intrusions youre not on top of things as much as you think

Available link for download

not your average white top

Available link for download

Not quite dead

Available link for download

not a morning person

Available link for download

Not Doing Taxes

Available link for download

Not Dead or Dying

Worried about you, EA?. Give us a sign if you have a chance.

Available link for download

Not So Random Numbers Take Two

George Argyros and Aggelos Kiayias have published recently an awesome research concerning attacks on pseudo random generator in PHP. However, it lacked practical tools implementing this attack. That is why we conducted our own research which led to the creation of a program to perform the bruteforce of PHPSESSID.

How can we get mt_rand seed via PHPSESSID?

PHPSESSID is generated this way:

md5( client IP . timestamp . microseconds1 . php_combined_lcg() )

• client IP is known to the attacker;
• timestamp is known through Date HTTP-header;
• microseconds1 – a value from 0 to 1000000;
• php_combined_lcg() – an example value is 0.12345678.

To generate php_combined_lcg(), two seeds are used:

S1 = timestamp XOR (microseconds2 << 11)
S2 = pid XOR (microseconds3 << 11)

• timestamp is the same;
• microseconds2 is greater than microseconds1 (when the first time measurement was made) by 0–3;
• pid is the id of the current process (0–32768, 1024–32768 on Unix);
• microseconds3 is greater than microseconds2 by 1–4.

The greatest entropy is contained in microseconds1, however with the use of two techniques it can be substantially reduced.

Adversarial Time Synchronization

The technique is aimed at sending pairs of requests so that to determine the moment when the second in the Date HTTP header changes.

HTTP/1.1 200 OK
Date: Wed, 08 Aug 2012 06:05:14 GMT
…
HTTP/1.1 200 OK
Date: Wed, 08 Aug 2012 06:05:15 GMT

If it happened, the microseconds between our requests zeroed. By sending requests with dynamic delays it is possible to synchronize local value of microseconds with the server one.

Request Twins

The principle of this technique is simple. The attacker needs to send two requests: the first one — to reset their own password and the second one — to reset that of an administrator. The gap between microseconds will be minimal.

To sum up, an MD5 PHPSESSID hash is bruteforced for microseconds, the deltas of subsequent time measurements, and pid. As for pid, the authors have not mentioned such a great helper as Apache server-status which reveals among other information the pids of the processes which serve the requests.

To realize the bruteforce, a module for the popular program PasswordsPro has been initially created. However, this solution made it impossible to take into account the positive linear correlation between deltas of microseconds, so it bruteforced the full range of values. The speed was about 12 million hashes per second.

That is why we created our own GUI application for this task.

The speed is about 16 million hashes per second, seed calculation takes less than an hour on 3.2 GHz Quad Core i5.

Having pid and php_combined_lcg one can compute the seed used in mt_rand. It is generated this way:

(timestamp x pid) XOR (106 x php_combined_lcg())

Besides, php_combined_lcg is used as additional entropy for the uniqid function (if it is called with the second argument being true).

So, if a web application uses standard PHP sessions, it is possible to obtain the random numbers generated via mt_rand(), rand(), and uniqid().

How can we get mt_rand seed through one of the random numbers leakage?

The seed used for mt_rand is an unsigned integer 2^32. If a random number leaked, it is possible to get the seed using PHP itself and rainbow tables. It takes less than 10 minutes.
The scripts to generate rainbow tables, search the seed, and ready-made tables are available here: http://www.gat3way.eu/poc/mtrt/

What to look for in the code?

All the mt_rand(), rand(), uniqid(), shuffle(), lcg_value(), etc. The only secure function is openssl_random_pseudo_bytes(), but it is rarely used in web applications. The main ways of defense against such attacks are the following:

• MySQL function RAND() — it can be also predicted though.
• Suhosin patch — does not patch mt_srand, srand. The Suhosin extension should also be installed.
• /dev/urandom — the securest way.

Arseny Reutov
Timur Yunusov
Dmitry Nagibin

Available link for download

Not So Functional 90s Fashion Trends

This may not be the authentic product, but its the best Google Images has to offer. Plus, doesnt it make you want to get some for your next 80s/90s Halloween costume? Those things are sparkly to the max...and apparently "80s to the max" too

Available link for download

Not A Baby

This weekend, during a long car ride, I found myself lost in thought about this little boy of mine.

"Id be so heartbroken if he was our last baby instead of our first" I thought. As he becomes more and more of a toddler each day I think about the baby he never was. Baby Fix-It was born alert. Wide eyed. Curious. Passionate. Expressive. Independent. I love him for all these things. I marvel at his determination.

Each time he acquires a new skill he is so proud of himself. Each time he catches someones attention he bursts with happiness. He waves. Hes been on a mission to walk since he was 7 months old. He marvels at older kids. A pacifier? Never. Cuddles? No time for that. Crawling? Psssssh. I walk, remember?

Its taken me until now to figure out why this little boy of mine was so miserable during his first few months in the world: he simply didnt like being a baby.

Im so glad youre my first born, little boy. You can lead the pack. But take your time. That great big world will be waiting for you even if you want to slow down a little.

Available link for download

Not Your Average Sloppy Joe

Available link for download

Not Quite My Last Day At Kualoa Ranch

We are only renting space here.

The real owners of the ranch

are the cows.

So watch your step. Even at lunch.

Available link for download

NASA Not Man Behind Arctic Sea Ice decline

A submarine in open ice-free water in 1960. I caption this picture The implications are obvious

Arctic Sea Ice summer minimas since 1979 (according to the NSIDC). Note they leave off the Submarine Warming Period (SWP)

Why do they start in 1979? Well putting my blog science skills to good use, I navigated a browser client through their website and found a secret folder link named

Available link for download

No Im not back back I just wanna tell you about this Citi Bike post

Available link for download