Showing posts with label Internet. Show all posts
Showing posts with label Internet. Show all posts

Wednesday, July 3, 2013

Exploiting Blogger For Passwords

Disclaimer: I do not recommend doing this, and I am not responsible for any trouble you get in for doing this. This post is for educational purposes only. ETC ETC

While working on my site I stumbled upon a way one could harvest Google account passwords from a simple blog account. By setting up a Blogger page, you have the option to include a Google Friend Connect "Join this site" button widget complete with profile pictures of other members who have joined the site.

Look familiar?

At first, I was hesitant to post this, because this site uses the Google Friend Connect widget. Then I realized that no one has used to feature in almost a year, and that the number of users using the service have dropped off, while traffic to the site remained steady. That doesn't mean one could do this with any other sort of connect feature websites often have (Facebook, Reddit, etc).  Pointing out such flaws will hopefully make such services much more secure in the future, as it will hopefully be corrected in some way.

Clicking on the blue button prompts the user to input a Google, Twitter, or Yahoo account login and password. By simply misdirecting the path of the follow URL, one could then spoof the login page so that the information entered follows through to  malicious site. All one has to do is replicate the Google service login popup. No URL is displayed during the whole process.

Such a method has been used before. Mistyping the Craigslist URL might bring you to a page notifying you that you need to update your version of Adobe Flash. Everything from the color scheme used, the font, and the installer are all reminiscent of what Adobe uses for their flash program.

uh oh...

Of course, the URL supersavings.glidehomes.com should be a giant red flag! Following through with the install will almost certainly lead to viruses/maleware/adware. Another approach of this technique is exploited by the torpig botnet. Which university researches were able to take control of. THey learned that the botnet was spoofing online banking logins for major banks on the infected computers, then sending the login information to whoever owned the botnet. Pretty scary stuff.

Did Bots in Quake 3 "Learn" Pacifism?


Anon supposedly recreated the ending of Wargames


No. A 4chan post has been circulating the Internet recently, claiming that after four years on a server full of bots in a Quake 3 death match game, the bots learned that the best strategy was not to kill each other. Huffington Post jumped on the story, although they later updated the page admitting the story was a hoax. However, they did not explain why the story was fake. A major news outlet jumping on an anonymous 4chan copypasta should be a reflection of the current state of news today. 

The original 4chan thread. Click for large.
A whole thesis was published by ID Software in 2001 detailing the build and intricacies of the bots. Furthermore, in 2005 the Quake 3 source code was released under the GNU license, meaning anyone with a compiler could dig through the code. This should give us the tools necessary to scrutinize these claims.
Let us first take a look first at the original post:

"Quake 3 bots were designed off an artificial neural network.
They would effectively "think" to figure out the best way to do things. 
They would see which tactics worked and which didn't.
The longer they played the more they would learn about you, figuring out your patterns, and this would apply to other bots aswell. For all intents and purposes they were one of the first learning AI in a game.

When I found out that I set up a Quake 3 arena server on my pirating server just to have 16 bots over and over just to see how good they would get. 
I set the server up 4 years ago, it's been running the entire time, I forgot about it until this thread. I'm gonna go check on them."
From page 13 of the thesis on Quake AI:
Although neural networks can be useful in several areas in bot AI they are not used for the Quake III Arena bot.
John Carmack even tweeted a response to the claims being made:


The bots are programmed to react to players given reaction time and accuracy constraints given the particular map. The bots DO have an internal representation of the each map given the "volume" of the map. They are not self learning, and they do not aggregate information for use later. "Learning" might not even be an appropriate context for what the bots do. Instead, having your bots standing around is much more consistent with having a bug in the code. For example, the files could have reached a max size limit, and just stopped.

If each of his bot logs are 256 megs each, and there are 16 bots, loading 8 gigs of ram on a 32-bit computer game is implausible in the first place. Even if this guy had over 8 gigs or ram in his computer, he simply could not load all of that bot data in the first place. While the data could be loaded as needed into the rom, the thesis specifically states that not being able to load such specific data in a fast paced game was a limitation of the game, and why a neural network could not be used. Once again, from page 13 of the thesis:
It is also possible to train a neural network during gameplay, which allows the bot to acquire all kinds of knowledge. However training of a neural network is often a time consuming process. The learning capabilities of the neural network will often have to be limited due to the time constraints in a real-time application like a game.
Finally there are other aspects of the story that are bizarre. Who has a server running for four years and forgets about it? During that time the game never crashed; the electricity never went out? No screenshots or video of this situation exists? The particular conditions should be replicable, and could possibly take much less time than4 years to replicate. I am not saying that such a situation of pacifism is implausible, but this story is clearly a hoax.

Quake has almost always been predominantly a multi-player game, with AI rarely being a focus in lieu of graphics, networking, and game-play elements. The bots could still do some pretty impressive things however. They were able to parse per-determined chat sentences given certain environmental characteristics (p.57).

ex. 1

if
environmental change
then
if
bot wants to
chat
then
choose initial chat
use random strings in chat message
replace synonyms in chat message to add variation
output chat message
endif
endif
 
 ex. 2

if
bot receives a message
then
replace synonyms in the message
interpret message using match templates
if
match is found
then
perform action
else
if
messages is a chat message from another player
then
if
bot wants
to reply to this message
then
find a reply chat
use random strings in chat message
replace synonyms in chat message to add variation
output chat message
endif
endif
endif
endif
As mentioned before, the bots DO react to players given reaction time and accuracy constraints and traverse "nodes" in relation to the current map. In this way, the bots do "think", but they do not "learn". AI programming is still being developed interdependently for contemporary first person shooters, and none of them have replicated anything like this. It is not to say that something like this could never happen. But one should keep in mind the disclaimer pasted across the top of some 4chan boards. "The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact."

Friday, November 30, 2012

Accessing Scholarly Journals

Many of the articles on this website would not have been possible without access to sholarly, peer reviewed journals. Being a university student makes journal access 1,000 times easier, as there are hundreds of walls set in place for sholarly journal access due to large bloodsucking publishing companies whom universities and colleges pay millions of dollars to a year. Open access can't come soon enough! In a year I'll be out on my ass, and my fortunate opportunity will have passed on by. I have compiled a short list of alternative ways to access scholarly journals without necessarily being a college student. Please comment if this proves helpful to you in any way, or if you know of an alternative method.

/r/scholar - is probably the easiest way to access whatever you're looking for. It is a community of redditors who have journal access, and will find for you whatever journal article you need. If you currently have journal access, consider "paying in" to the system with the hope that others will do it for you in the future. If you are going to post there, read the guidelines on the right of the page.


Get in touch with your nearest university library - My host institution has gratuitous requirements for obtaining a library card. This will grant you journal access in the library, and perhaps e-journal access. It may sometimes be possible to get journal access just by using the library's Internet to access the databases. This probably works best with public institutions.

Get in touch with your former university or college - Nazareth College was willing to set me up with my old .edu email address even though I transferred four years ago. Many schools will not let you keep your student email after graduation. I found that I was also able to use my library account. Although this may have been a fluke, it's worth the phone call.


Directory of Open Access Journals - requires no membership or fees.

Your local library - has a list of databases you can access with a library card there, once again just a phone call away. They may get you copies of journal articles through inter-library loan if you cannot access the digital version of the article.

Google Scholar - Provides a search of scholarly literature, although is very limited in that it may only pull up certain pages of the journal article you are trying to read.

arxiv - is
Cornell's open access archive of physics, mathematics, computer science, Biology, Finance and Statistics journal articles. 

Wednesday, August 17, 2011

German Links

Time is ticking away until I ship off to Germany. Recently most of the content on the site has been geared towards cognitive science, and not language. In order to prepare for the massive amount of immersion I am about to face, I figure it is time to change gears. In order to get us kicked off, here is a list of German learning websites and resources. If you can think of anything to include just leave a comment below and I'll be sure to add it.


Dictionaries

Canoo - German dictionary and grammer
Google Translate - The bane of language teachers. Better than Babel-fish because Google is always finding new ways of tweaking it. Still can often be grammatically wrong of course.
LEO - an open dictionary project that was started in the mid-nineties.
Rhyming Dictionary - Includes other languages

Forums - I actually do not think any of these forums are worthwhile, but they are here if you want to check them out.
About.com's German Forum - Might help you find other resources.
Krautchan - German image board. Adult material and bad taste, it's 4chan in German.
politik.de

News
Das Bild - tabloid
Der Tagesspiegel
Deutsche Welle - German news for German language learners. Includes easy to read news articles, and slow speaking newscasts. I highly recommend this.
Deutsche Welle Podcasts
Die Zeit
Goethe Institute - Information on the German-speaking world.
HR Online - news site based out of Hessen.

Wednesday, July 20, 2011

Who Controls The News

 This is article #1 of 5 for random week.

If you did not already think that Rupert Murdoch was a twat, then the recent news should have you thinking otherwise. Fox News, also owned by Murdoch, has been doing a lackluster job reporting on the issue; by simply not reporting on it. Recently, this aired on Fox News:



The problem with this article is that Murdoch's tabloid was doing the phone hacking! I remember in fifth grade when my teacher told us how lucky we were to live in America because we have freedom of press. How when the moon landing happened, in Russia there was no reporting on story because they didn't have freedom of press, and they were jealous. I'm sure.

Fox has done other misleading things too. When Ron Paul won in a poll against Mitt Romney, Fox News superimposed boos over the announcement of him winning. I am not even fucking kidding:



How long are we really going to put up with this bullshit?

I really hope it is apparent to all of us that all of our news sources are owned by companies. ABC is owned by Disney, NBC is owned by GE and Comcast, CBS by Westinghouse, etceteria. The finer points of this article can be summed up by this TV Funhouse clip from SNL:


How absurd is it when a cartoon pointing out media control, is owned by NBC. By the way, this video only aired once and was pulled for defaming GE  and alluding to Don Olhmeyer as the reason why Norm MacDonald was fired (Olhmeyer was a friend of O.J. Simpson and many of McDonald's jokes, especially on Weekend Update, lampooned the issue).

Coca-Cola created Fanta to sell
in Germany during the 1940s
The problem with this whole situation is apparent for reasons outside of our "news" being a shell of anything close to informative. Take for example The History Channel, which is owned by A&E, which in turn is owned by Disney, NBC (GE), and The Hearst Corporation. When you watch the History Channel, you are getting a revisionist view of history, which apparently only consists of the Romans, Nazi Germany, and UFOs. The reasons why these topics are constantly covered is due to the fact that they are noncontroversial. Nazis are universally bad,  nobody is going to protect them, and the Romans are ancient history. Have you ever seen anything objectively critical or controversial on the History channel about Disney?Will you ever? You certainly will never see a Howard Zinn special about how companies like GE or Coca-Cola sell their weapons and products to both sides during wars.

Incidentally there are other TV Funhouse episodes that have been pulled. They are even taken down from the Internet when they are posted, so there is little use in linking to them. One of them is called The Disney Vault and pokes fun of Disney's use of releasing terrible sequel after sequel as well as controversial things they have done in the past, and the other makes fun of the way Disney reinvents history with a fake ad about a new Titanic cartoon with an anthropomorphic boat and Anne Frank. Why would Saturday Night Live be afraid of these videos?

THIS is why the Internet is so important. It allows news from all over the world, from everybody to be shared with everyone else. Egyptians posting about the riots in the country, citizens filming the police, and just being able to access the "hive-mind" reactions of thousands of people in an area when something happens is quicker and more informative news than the fluff we get fed on a daily basis. Incidentally the chaotic flow of news from the Internet works better than any news company could hope.

Saturday, May 21, 2011

Political Rheoric

Steven Pinker is the man.

 
THE MAN

On top of being the man, he is also a professor of psychology at Harvard College, and a linguist. He has also been on The Colbert Report. Multiple times. I was going to hold off writing about him but I recently read an article Douglas Adams (author of The Hitchhiker's Guide to The Galaxy) wrote over ten years ago entitled How to Stop Worrying and Learn to Love The Internet. In the article, where he writes concerning people who thought the Internet was just a fad, he mentions Steven Pinker. Today it might be a bore to read because it is redundant about how the Internet has turned out.


"Another problem with the net is that it’s still ‘technology’, and ‘technology’, as the computer scientist Bran Ferren memorably defined it, is ‘stuff that doesn’t work yet.’ We no longer think of chairs as technology, we just think of them as chairs. But there was a time when we hadn’t worked out how many legs chairs should have, how tall they should be, and they would often ‘crash’ when we tried to use them. Before long, computers will be as trivial and plentiful as chairs (and a couple of decades or so after that, as sheets of paper or grains of sand) and we will cease to be aware of the things. In fact I’m sure we will look back on this last decade and wonder how we could ever have mistaken what we were doing with them for ‘productivity.’
But the biggest problem is that we are still the first generation of users, and for all that we may have invented the net, we still don’t really get it. In ‘The Language Instinct’, Stephen Pinker explains the generational difference between pidgin and creole languages. A pidgin language is what you get when you put together a bunch of people – typically slaves – who have already grown up with their own language but don’t know each others’. They manage to cobble together a rough and ready lingo made up of bits of each. It lets them get on with things, but has almost no grammatical structure at all.
However, the first generation of children born to the community takes these fractured lumps of language and transforms them into something new, with a rich and organic grammar and vocabulary, which is what we call a Creole. Grammar is just a natural function of children’s brains, and they apply it to whatever they find."

Douglas Adams Playing With Pink Floyd on His 42nd Birthday.

Why I'm writing about Dr. Pinker today is because I want to post one of my favorite videos of him. It is about how politicians use empty rhetoric in order to get their messages across because they do not want to tick anyone off. At the same time we the voters push the candidates into a corner because we don't want them to support anything we are against. Check out the video:

I for one blame the two party system. If you're at all interested in psycholinguistics, reading any book by Steven Pinker is a must, and used copies go for a few bucks.

(revised 11/25/2012)