Archive for December, 2008

sql injection … it happens

Last night I went to Woodbury High School’s web page to check the schedule, to see if my high school friends had the day off today. Well they didn’t, but that doesn’t matter for now. What I found instead was weird javascript code inserted into the schedule. It slowed down the page load so much, that I decided to investigate.

Viewing the source of the page [image] [zip], I discovered that the root domain, nuclear3.com had a very odd looking whois record [Archived - DNS | Contacts] [Current]. I then checked out the whois record on the IPv4 address for the www A record [archived] [current]. Well the www A record is hosted by Ecommerce Inc [trace], but the A record for e.nuclear3.com is apparently part of the Chinese school system [nslookup] [apnic.net whois record] [trace]. How ironic!

getting DirecTV2PC(TM) working

For those of you who don’t know about DirecTV2PC … check it out! It’s pretty awesome (if you have a Windows PC and a DirecTV DVR).

Here is what I did to get DirecTV2PC working in my Local Area Network with two HR20 set top boxes.

  1. Go to http://www.directv.com/directv2pc and click the Download Beta button on the right side of the page
  2. When the pop-up comes up, click Continue to Beta download
  3. Click Download Now to download the DirecTV PC Playback Advisor application to see if you pc is up to running the DirecTV2PC application.  Once you finish the download run the installation and then run the application. The application sometimes falsely identifies your system specs. As long as your PC is running Windows XP with Service Pack 2 or Windows Vista with Service Pack 1, a 2Ghz processor, and 512MB ram you should be good to go.
  4. If you PC passes the application or you believe it should be able to handle the application according to the rules of thumb  I laid out in the previous step, then enter your name and email on the page and click the Submit button. The DirecTV2PC application download will then start. It is a 32 MB file, but it may take awhile to download. The average speed I rolled for the download was 20kb/sec. It took about 30 minutes to download … atrocious! Once your download completes, you will be sent an activation code to the email you provided earlier. Edit (1/22/2009): You only have to start the download, then you will be emailed an activation code. I put the application up on my data server, and you can download the DirecTV2PC app here. You will get a better download speed than 20kb/sec!
  5. Run the installer and fill out the various fields.
  6. Now run the application, for the application to properly activate you will need to:
    • be connected to the Internet
    • open TCP port 443 (incoming and outgoing) on your router’s firewall
    • open your PC’s firewall for the DirecTV2PC application (you should be automatically prompted by Windows)
  7. If the application still does not activate properly, that means that your ISP’s DNS servers have not updated Cyberlink’s new IPv4 address for the A record activation.cyberlink.com. (Or Cyberlink is jerking around with their IPv4 addresses again … bah!)
    Here is what you do:
    add exactly what is in quotes: “203.73.94.101 activation.cyberlink.com”
    to the file “c:/windows/system32/drivers/etc/hosts” (if your main hard disk drive is lettered “c”)
  8. Enjoy your DVR’s movies!

Return top