30
Jan

New MS Word Zero-day Exploit in the Wild

A new Microsoft Word 2000 zero-day exploit has been found. Microsoft has released a security advisory about this vulnerability, and a patch may be issued this coming February Patch Tuesday.

This vulnerability is present on Word 2000. When opened, a malicious .DOC file may corrupt system memory, allowing a remote user to execute arbitrary code on the affected system. This vulnerability does not affect any other Word versions.

The exploit code is detected by Trend Micro as TROJ_MDROPPER.EQ, and Symantec detects this as Trojan.Mdropper.W.

The usual precautions apply. Do not open email attachments from unknown sources. Update your antivirus apps. Patch your system when patches are available.

29
Jan

Batista v. Undertaker at Wrestlemania 23?

By winning the WWE’s 2007 Royal Rumble, The Undertaker earns the right to challenge Smackdown‘s World Heavyweight Champion at Wrestlemania 23. And that, at the moment, is Fil-Greek Batista.

Unless:

1. The Undertaker moves to Raw, and challenges the WWE Champion (which is John Cena at the moment) or the ECW Champion (Lashley at the moment)
2. Batista loses the title at No Way Out this February
3. Kennedy challenges Taker (at No Way Out?) for the right to fight for the World Heavyweight title

I hate face v. face battles in WWE. I’d rather have Batista v. anybody else, or Taker v. Raw champion. Heck, Cena is also face. But it will be Batista v. Undertaker.

26
Jan

For when dreams exceed one’s grasp

Today’s column by Atty. Raul Pangalangan ended this way:

I know a young boy from a poor family who, to my delight, qualified as a Physics major in University of the Philippines. But he eventually dropped out, and when I asked his father why, apparently the boy had some difficulty in his sophomore year, lost his scholarship and, in order to re-enroll, was required to refund his earlier subsidies, a legal way of saying, “Get lost.” Last I heard, he was working in a factory, possibly a future Filipino J. Robert Oppenheimer sentenced to the assembly line.

It reminds me of Antoine de Saint Exupery‘s book, Wind, Sand, and Stars. The second to the last paragraph goes this way:

I went back to my sleeping car. I said to myself: Their fate causes these people no suffering. It is not an impulse to charity that has upset me like this. I am not weeping over an eternally open wound. Those who carry the wound do not feel it. It is the human race and not the individual that is wounded here, is outraged here. I do not believe in pity. What torments me tonight is the gardener’s point of view. What torments me is not this poverty to which after all a man can accustom himself as easily as to sloth. Generations of Orientals live in filth and love it. What torments me is not the humps nor hollows nor the ugliness. It is the sight, a little bit in all these men, of Mozart murdered.

Indeed. As a former educator, I should know. I saw a lot of young people missing their true vocations, of parents imposing upon their children their dreams and frustrations, of parents not guiding their children in choosing careers, of young people whose dreams are crushed by poverty.

The NCAE is great, but in the end, it will be just like the old NCEE.

Tech/voc education is OK for me; I know that not everyone is suited for university studies. Besides, not everyone can be a lawyer or a doctor; we need technicians and people who will drive the industries. But if what we offer welders and lathe machine operators are minimum wages that can only feed one person, I cannot blame people if they would rather get a college degree.

It is a sad story that seems to have no ending. Mr. Willy Prilles laments that we always shoot ourselves in the foot, and that maddens him. Can’t blame him, because it really makes your blood boil. Read that blog post and weep.

25
Jan

Tips to UNO

1. Present issues and platform.
2. Debate on issues and ideas.
3. Go easy on turncoats; as John Marzan had said, they can be good Trojan horse.

Care to add more?

24
Jan

Daytime Hijacking

What Jove Francisco calls The Great Raid I call simply as Hijacking in broad daylight.

Or maybe not. Remember Mike Defensor’s unity ticket? Then you hear about the Third Force, and now this. Heck, we might just wake up one of these days to find that there are two slates remaining – UNO and the third force that is effectively hijacked by the administration.

Or maybe that’s the game plan after all.

Here’s what have happened so far:

1. Defensor calls for a ticket of unity and reconciliation, composed of admin and opposition candidates
2. Some people clamoring for a third force
3. Pangilinan, Recto and Villar confirms talk on third force idea
4. Then, this Raid – Defensor, Zubiri, and Singson on the third force slate

Conclusion?

23
Jan

CME-711 on the Loose

The Storm worm and its Trojan cohorts had a wonderful run during the weekends, and the fun continues.

The recent variant, Small.DAM (F-Secure, Radar Alert 2) or TROJ_SMALL.EDW (Trend Micro, Medium overall risk rating) or CME-711 or Downloader-BAI!M711 (McAfee) or Trojan.Peacomm (Symantec, Category 3), is usually spammed or dropped by another malware. The subject of the spam emails that carry this Trojan are usually related to recent or current events.

When executed, this Trojan drops several files, one of which is a rootkit , which enables this Trojan to hide its files and processes.

It also connects to several IP addresses using port 4000 (F-Secure data; Trend Micro lists several UDP ports).

Elimination of this Trojan is difficult because of the rootkit. Delete the following files if you have found them on your system:

* peers.ini
* wincom32.sys
* wincom32.ini

If you believe your system is infected but cannot find the said files, use rootkit detectors; here are some of them:

* Trend Micro RootkitBuster (free)
* Microsoft Rootkit Revealer

Note that these are technical in nature and thus not for average users. I suggest you use the documentation (if any) that is provided by the software maker.

For a detailed cleaning solution, read the one from Trend Micro.

Your antivirus can remove this malware automatically, as long as its detection is updated.

22
Jan

Third Force and EDSA 2

William Esposo continues his attempt to justify the viability of a Third Force. Every time he uses history as base of his arguments, the more he loses my respect.

While it is true that both the Liberal and Nacionalista Parties have a glorious political tradition, the truth is that this fact is no longer relevant to the issue. Besides, these parties are good as forgotten, what with the tendency of our people to forget.

Second, these parties are historically contrapelo. The Liberal Party was formed as an offshoot of the Nacionalista Party, being its liberal wing. And now that the two will coalesce smacks of something that Esposo accuses that of UNO and the administration slate.

Esposo should instead base his arguments on the realities of the day, not on what has gone before and is largely forgotten.

On the other hand, Katrina Legarda scoffs at all slates. It seems she will not vote this year. Or maybe she’d go for admin, since she spared the admin slate from words that Legarda used to describe the UNO and the Third Force.

As of now, the Third Force is more of a feeler slate more than anything else, nothing but speculations, like the latest from Senator Ralph Recto, who this time named names. Of course, until the certificates of candidacies are filed, take his words with a ton of salt.

John Marzan suggests a name change for UNO: Unity Coalition. Of course, the parameters for such unity MUST be defined first.

ExpectoRANTS has a reaction to MLQ3’s column in the PDI about EDSA 2. While I was at EDSA on 19th January 2001, I believe that the proper conclusion was for Erap to resign. A confession: I was then working for a defunct technical school, and we were “asked” by the boss to be there “for marketing purposes”. He even gave an order to make sure that the school banner could be seen by TV cameras. So not everyone there are really well-meaning folks, Resty.

Aside from that, if there was travesty of justice, it happened when the prosecutors of the impeachment walked out of the proceedings, effectively hijacking the process. If there was travesty of justice, it happened when the presiding officers of the Impeachment Court did not even dared hailing these hijackers to return. Heck, they were not even cited in contempt.

And the greatest injustice happened when well-meaning people were unwittingly used by people who planned all of these all along.

And the greatest injustice still happens, when the user remains free and wielding power.

19
Jan

A Short, Sorry Remembrance – Jan. 19, 2001

I love this script:

DILG: Let’s do this together!
CHR: No thanks!

Now, if only I could draw….

Anyway, ABS-CBN’s Halalan 2007 is now up. It seems my Monday speculation was partially wrong. It is “Boto Mo, I-Patrol Mo”, and it is a citizen reporting scheme via MMS/3G.

And, something’s up at EDSA Shrine right now. Exactly six years ago today, the 1987 Constitution suffered from a vacuum, a new President was sworn in when the incumbent was neither dead, nor resigned, nor permanently incapacitated, nor convicted in an impeachment trial. And look where we are now.

Is preventing violence worth the destruction of our institutions, the rape of our values? MLQ3 is right, history will judge us, and it will be harsh.

18
Jan

The Dilemma of 2007 Elections

The debate about the Third Flank or Force continues.

William Esposo’s column is a rather strongly-worded argument for a Third Flank. Willy Prilles hopes there will be a Third Force if the current trend (the names being floated as UNO candidates) goes.

MLQ3 pragmatically believes that such a force will lead to a disaster and will benefit Gloria Arroyo. John Marzan agrees and further adds that the idea is probably concocted by someone in the Fortress by the Pasig.

Esposo’s column is like a long exposition of a dilemma presenting several horns, all unacceptable:

* The United Opposition, composed of remnants of Marcos and Estrada regimes, already rejected by voters
* The administration, generating so much stink
* The Communist Left
* The Military Right

There is another horn to this dilemma, which is unacceptable to others but acceptable to Esposo and Patricia Evangelista – the third force.

The UNO is unacceptable because Esposo believes it carries the Estrada banner. In short, the UNO wants this election to be a continuation of EDSA 2. For Evangelista, she cannot accept it out of principle; after all, these are the people why EDSA 2 had to happen.

To attack this horn, read this post by DJB.

The administration is unacceptable because it has put us where we are right now, and electing its slate means virtual acceptance of the current situation.

To attack this horn, read Belinda Cunanan and Alex Magno.

The military right is unacceptable, so is the communist left, for historical reasons.

And the last horn, the third force. To attack this horn, I leave you to MLQ3 and John Marzan. And this comment by Manuel Buencamino in MLQ3’s blog:

Now a third force, which some people propose as the way out of the evil of choosing between two lessers, looks tempting but we must bear in mind whether we want to take the risk of allowing the greater evil to win because our forces became divided.

There’s actually another horn, equally unacceptable: do not vote at all.

William Esposo made a bad medical analogy, as what MLQ3 had said. He made another one, that of World War I. That war did end monarchies in Europe, but it had also left a lot of unfinished business and more problems, that another war was needed to resolve them.

Or maybe he meant it that way. 2007 will probably lead to the administration losing the battle but not the war, and 2010 will be another battle.

17
Jan

Framed

If there’s one convincing argument against the issue of a Third Flank (I should have used this word as opposed to Plank), it is Manuel Buencamino’s Business Mirror column for this week.

However, the fact remains: the opposition will turn off some people if its slate turns out to be as how the administration “frames” it. The question now is this: how many of them will either vote for the administration slate or not vote at all? In either case, the administration benefits.

How big is this chunk of voters that might be alienated by the opposition slate due to framing? Regardless of the size, the opposition should exert effort to prove the framing wrong. It has already committed that error in 2004; it cannot afford to commit the same mistakes again.

The opposition must present a very credible slate. The administration only has to present an acceptable one.

Here’s what I think the opposition should do:

1. Turn the tables by making its own frame.
2. Deal on issues. Deal about the lies, not about the liars. Do not limit itself with pro-impeachment issues; think of a post-Arroyo platform.
3. Present a credible and understandable platform that is clearly different with the administration.
4. Convince the people that they have a choice and that the opposition is the better choice.
5. Present a VERY CREDIBLE senatorial AND local ticket. The war will be won if the local battles are won. Get at least 100 House seats, or more.

And address what MLQ3 thinks is a three-pronged strategy by the administration:

1. Bog down enemies by suspending them; pay back supporters who demand payback for past support by going along with such suspensions;
2. Bog down otherwise credible officials by having them attend to trouble areas;
3. Provide a smokescreen for cheating, intimidation, etc. by saying there are anti-insurgency operations underway.