<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>Drainbamage.nl</title>
	<link>http://drainbamage.nl</link>
	<description>blog of Christiaan Ottow</description>
	<lastBuildDate>Tue, 31 Aug 2010 08:56:27 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress/3.0.1" -->

	<item>
		<title>The ELF file format</title>
		<description><![CDATA[I recently wrote a tutorial on the ELF format. It's in Dutch, and can be found here: http://hacking.certifiedsecure.com/showthread.php?63-Introductie-op-het-ELF-binary-format It deals with the structure inside an ELF file, the use of sections in binaries, and goes to show how one can disssect the /bin/ls binary using the tools readelf and objdump. Tweet This Post]]></description>
		<link>http://drainbamage.nl/2010/08/the-elf-file-format/</link>
			</item>
	<item>
		<title>DNS cache poisoning</title>
		<description><![CDATA[I recently gave a short presentation on DNS and cache poisoning. The slides can be found here. Enjoy. Dns Cache Poisoning View more presentations from Christiaan Ottow. Tweet This Post]]></description>
		<link>http://drainbamage.nl/2010/03/dns-cache-poisoning/</link>
			</item>
	<item>
		<title>Pinta seems to be alive</title>
		<description><![CDATA[Last year, I wrote a tool called Pinta. It's an AMF debugging utility. One can use it the place calls to AMF (ActionScript Message Format) services, and observe the results. Normally, you'd need to create a Flash/Flex app to send these requests, but this is much quicker and easier for debugging your server-side service. I [...]]]></description>
		<link>http://drainbamage.nl/2010/03/pinta-seems-to-be-alive/</link>
			</item>
	<item>
		<title>Thumbnails too large with ImageMagick convert</title>
		<description><![CDATA[Just a quick fix for a problem I ran into today. When using the ImageMagick "convert" command, my thumbnails were way to large. When resizing a large image to create a thumbnail, the thumbnail would be 41k while it should be around 4k. The input image was 1600x1200, 300DPI, 594k. After searching for a while, [...]]]></description>
		<link>http://drainbamage.nl/2009/11/thumbnails-too-large-with-imagemagick-convert/</link>
			</item>
	<item>
		<title>Compiling for AIR 1.5</title>
		<description><![CDATA[When compiling an AIR application in Flex Builder for AIR 1.5, there are some pitfalls to reckon with. First, you need to install the Flex 3.3 SDK. If you're running an older Flex Builder, it will have 3.1 or 3.2 included. You can download the Flex SDK from Adobe here: http://www.adobe.com/cfusion/entitlement/index.cfm?e=flex3sdk. Be sure to also [...]]]></description>
		<link>http://drainbamage.nl/2009/08/compiling-for-air-15/</link>
			</item>
	<item>
		<title>Pinta &#8211; AMF debugger</title>
		<description><![CDATA[I'm working on an AIR project that uses an AMF-service to get its data from. Writing such a service isn't difficult, but testing the AMF service functions isn't very straightforward. The way to do so now is to partially implement the client, and make it spit out debugging info. For this project however, since it [...]]]></description>
		<link>http://drainbamage.nl/2009/07/pinta-amf-debugger/</link>
			</item>
	<item>
		<title>AS3 object serialization pitfalls</title>
		<description><![CDATA[I'm working on an AIR project now, and I wanted to save some user data locally. There are a few ways to do so, including SQLite, LSO, and plain file writing in the local datastore. I wanted to save an ArrayCollection containing connection profiles the user specified, and SQLite seemed like a bit of an [...]]]></description>
		<link>http://drainbamage.nl/2009/07/as3-object-serialization-pitfalls/</link>
			</item>
	<item>
		<title>Automatic uploading of SWF using FDT and Ant</title>
		<description><![CDATA[FDT and Flex Builder 3 both feature the Ant builder (Flex Builder only via an addon). Ant is a project by Apache (http://ant.apache.org/), which does for the Java and AS3 worlds kind of the same thing as make does for the C world. It takes a build file as input, and calls the correct compilers [...]]]></description>
		<link>http://drainbamage.nl/2009/06/automatic-uploading-of-swf-using-fdt-and-ant/</link>
			</item>
	<item>
		<title>First AS3/Flash project</title>
		<description><![CDATA[I started developing with AS3 and Flex some time ago. I really like AS3, Flex and AIR, but I decided it would be good for me to learn how to create Flash applications in AS3, without the Flex framework, and without the Flash CS3/4 authoring tool. So, I installed FDT, and set out to create [...]]]></description>
		<link>http://drainbamage.nl/2009/06/first-as3flash-project/</link>
			</item>
	<item>
		<title>Xen benchmark</title>
		<description><![CDATA[This post discusses the performance of Linux context switches under the Xen hypervisor. Presence of the Xen hypervisor has an impact on the context switching performance, as is shown by benchmarks. I was interested in these benchmarks since I had the feeling a Xen-enabled machine is in general running slower than a non-Xen machine. It's quite large, so click the 'read more' link to see the whole thing.]]></description>
		<link>http://drainbamage.nl/2009/04/xen-benchmark/</link>
			</item>
	<item>
		<title>iPhone tethering in OS 3.0</title>
		<description><![CDATA[Yesterday I decided I would try out the new OS 3.0 beta 1. I've been looking forward to having tethering in my iPhone very much, since I'm often traveling and working at the same time. Buying an extra device for laptop internet (like a UMTS USB dongle) doesn't seem right, since I'm already paying for [...]]]></description>
		<link>http://drainbamage.nl/2009/03/iphone-tethering-in-os-30/</link>
			</item>
	<item>
		<title>Visim &#8211; website visitor simulator</title>
		<description><![CDATA[Today I uploaded some code I wrote for my bachelor thesis to Google Code as an open source project. My bachelor thesis was about creating a scalable architecture for heavy-duty web apps. I created such an architecture, and validated it on a prototype. To see what effect changes to the system had on its capacity, [...]]]></description>
		<link>http://drainbamage.nl/2009/03/visim-website-visitor-simulator/</link>
			</item>
	<item>
		<title>nschaind updated</title>
		<description><![CDATA[In my previous post I wrote about my new tool, nschaind (http://code.google.com/p/nschaind). It detects if a querying dns resolver is vulnerable to cache poisoning according to VU#252735. It's now been updated to also include VU#927905, BIND 8 cache poisoning vulnerability. BIND 8 has the same kind of weakness in its PRNG, although it has a [...]]]></description>
		<link>http://drainbamage.nl/2009/03/nschaind-updated/</link>
			</item>
	<item>
		<title>Bind cache poisoning scanner</title>
		<description><![CDATA[As a part of my master on computer security, I've written a tool that detects if a certain resolver is vulnerable to cache poisoning according to CVE-2007-2926. This vulnerability report from 2007 describes a bad practice of bind, that wasn't fixed until July 2008, when Dan Kaminsky came out with his famous DNS vulnerability. It [...]]]></description>
		<link>http://drainbamage.nl/2009/03/bind-cache-poisoning-scanner/</link>
			</item>
	<item>
		<title>Server setup part 4: Networking</title>
		<description><![CDATA[This is part 4 of the series on my new server setup with Ubuntu and Xen. Part 1: Overview and OS Part 2: Disk setup (RAID, LVM) Part 3: Xen and domU setup Part 4: Networking setup Part 5: Intrusion Detection (IDS) setup (coming soon) Networking and Xen As for networking, this is a bit [...]]]></description>
		<link>http://drainbamage.nl/2009/03/server-setup-part-4-networking/</link>
			</item>
	<item>
		<title>Server setup part 3: Xen and DomU&#8217;s</title>
		<description><![CDATA[This part talks about how to setup Xen on Ubuntu Server, and how to create domU's on top of LVM volumes. We don't use the xen-create-image tool, but show how to install a domU manually.]]></description>
		<link>http://drainbamage.nl/2009/03/server-setup-part-3-xen-and-domus/</link>
			</item>
	<item>
		<title>Server setup part 2: RAID and LVM</title>
		<description><![CDATA[This is part 2 of the series on my new server setup with Ubuntu and Xen. Part 1: Overview and OS Part 2: Disk setup (RAID, LVM) Part 3: Xen and domU setup Part 4: Networking setup Part 5: Intrusion Detection (IDS) setup (coming soon) Disk allocation with RAID and LVM The system has 6 [...]]]></description>
		<link>http://drainbamage.nl/2009/03/server-setup-part-2-raid-and-lvm/</link>
			</item>
	<item>
		<title>Server setup part 1: Overview and OS</title>
		<description><![CDATA[I've recently bought a new server. That is, a new second-hand server. It's an IBM eServer x345 with two Xeon 2.4GHz CPUs, 4GB of ECC reg memory, 6 U320 hot-swap SCSI disks and 2 hot-swap PSUs. A very nice machine, for a decent price. The only drawback is the price of hardware expansion: SCSI disks [...]]]></description>
		<link>http://drainbamage.nl/2009/03/server-setup-part-1/</link>
			</item>
	<item>
		<title>Snort and OSSEC &#8211; UNIX intrusion detection</title>
		<description><![CDATA[Many of you have probably used snort for network intrusion detection. Snort is the most popular open-source NIDS, and features many detection plugins. For me, I haven't given much thought to what NIDS I'd use, and just installed snort on the system I maintain. The problem One problem with snort however is that it's only [...]]]></description>
		<link>http://drainbamage.nl/2009/02/snort-and-ossec-unix-intrusion-detection/</link>
			</item>
	<item>
		<title>Xen on Debian Lenny</title>
		<description><![CDATA[A few months ago, I tried to install Xen on Debian Lenny (testing). Xen is a hypervisor: it runs on the CPU in a lower ring than Linux, and regulates the resource access by virtual machines. These virtual machines aren't so virtual with Xen, as they have direct access to the CPU, memory, and any [...]]]></description>
		<link>http://drainbamage.nl/2009/02/xen-on-debian-lenny/</link>
			</item>
	<item>
		<title>Leopards extended file attributes (Time Machine and Quarantine)</title>
		<description><![CDATA[Recently, I discovered something interesting about the HFS+ filesystem features in Mac OS X 10.5 Leopard. I don't know whether these features were present in earlier versions of OS X, they weren't used in the way they are now however. I was wondering how Apple's new backup feature "Time Machine" works. When looking at a [...]]]></description>
		<link>http://drainbamage.nl/2008/01/leopards-extended-file-attributes-time-machine-and-quarantine/</link>
			</item>
	<item>
		<title>My first youtube post</title>
		<description><![CDATA[Recently I figured that I cannot be a true student of Telematics, semi-geek or internet professional without actively participating in the Web 2.0 thing. I'm already on last.fm, linkedin, 43things and plaxo, but I have never posted a film to youtube! Combined with this great new app I bought, iStopMotion, and an evening with a [...]]]></description>
		<link>http://drainbamage.nl/2008/01/my-first-youtube-post/</link>
			</item>
	<item>
		<title>Spamassassin statistics per user in SQL</title>
		<description><![CDATA[The last few days I've been busy reconfiguring my mailserver (postfix) and spamkiller (spamassasin). I wanted to have per-user controls over the spam filtering, and I wanted the spam to be placed in a spambox on the server (instead of clients having to filter and move spam). This was a bit difficult since I use [...]]]></description>
		<link>http://drainbamage.nl/2007/09/spamassassin-statistics-per-user-in-sql/</link>
			</item>
	<item>
		<title>JavaScript Object Detection</title>
		<description><![CDATA[Even though the times of the browser wars are gone, browser incompatibilities remain. New features are added with every new browser version. Some are copied by the other vendors in their next version, some aren't. And of course there is the battle between the W3C standards and the Microsoft way, particularly in Javascript event handling. [...]]]></description>
		<link>http://drainbamage.nl/2007/06/javascript-object-detection/</link>
			</item>
	<item>
		<title>Samsung D500 synchronization using iSync</title>
		<description><![CDATA[Yes, it's possible! Recently (as in 'yesterday'), I obtained a Samsung SGH-D500 cellphone. A very nice phone, 1.3 megapixel camera and 96MB of memory. I was fairly happy with my Sony Ericsson Z520i, but after it suddenly died I had to find a replacement. Getting it to synchronize my contacts and agenda using iSync was [...]]]></description>
		<link>http://drainbamage.nl/2007/05/samsung-d500-synchronization-using-isync/</link>
			</item>
</channel>
</rss>
