[blog.rayfoo] » TODO

Visualizing Data (using Processing)

ray — Sun, 07 Nov 2010 14:05:42 +0000

Visualizing Data, by Ben Fry (O'Reilly)
[Amazon] [Google Books] [O'Reilly] [Google Search]

One of my interests has always been in data visualization (makes data more understandable, and is one step towards easier interaction with it). Chanced upon this book at the library today, certainly one thing I'd like to look into in more detail at a later point in time.

Why this book caught my interest was the fact that there was another book on such a topic in itself. Other than Applied Security Visualization by Raffael Marty, I've yet to chance upon anything else.

A quick browse of the book showed that it's very possible to use Processing (yet another good reason to take up this book: simple programming!) to implement many of the data visualization concepts. Though many people would say that this is "raw" and "slow" as compared to having a tool to do this simply and quickly, I'd say that doing it this way would certainly give the user a great understanding of the data visualization process itself. Furthermore, who's to say that Processing's not the tool itself! Also, the author has helpfully made the source code examples available online at his blog too.

Will keep this book in mind to look at later. Have other books to go through first... :}

Interesting scanner

ray — Sat, 17 Jul 2010 16:26:26 +0000

I know I'm probably the only one in this island that thinks this as interesting, but nevertheless...

It's normal for the web server to get scanned by other "inquisitive" people/machines/bots, but this tool looks pretty interesting... Will dig deeper into this later.

The scanners typically try to detect whether I'm running certain vulnerable versions of web apps for them to exploit. So when the web app does not exist, guess what happens?

This particular scan was interesting, because of the user agent field. Check it out:

200.6.121.56 - - [17/Jul/2010:14:51:06 +0800] "GET /roundcubemail-0.1//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:06 +0800] "GET /bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:06 +0800] "GET /wm//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:06 +0800] "GET /webmail//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:06 +0800] "GET /webmail2//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:05 +0800] "GET /rms//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:05 +0800] "GET /roundcubemail//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:05 +0800] "GET /mail2//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:05 +0800] "GET /mail//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:04 +0800] "GET /mss2//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"
200.6.121.56 - - [17/Jul/2010:14:51:04 +0800] "GET /rc//bin/msgimport HTTP/1.1" 404 136 "-" "Toata dragostea mea pentru diavola"

If anyone knows more about this particular scanner, feel free to comment and share!

Edit (19 Jul): it seems that I've joined the ranks of those who've been scanned one way or another. Apparently it is in Romanian, meaning "All my love for the devil".

More automation needed

ray — Wed, 14 Jul 2010 15:25:04 +0000

Although I've managed to configure the server such that there's a fair amount of automation for appropriate tasks (phone homes, automated monitoring and basic defenses), the time needed daily to monitor/maintain it still adds up...and is unreasonable collectively.

Looks like I'll have to look into further automating some of the tasks...