Skip to main content

Posts

Memory Usage in Java

Memory management in Java is not a thing to worry about, the Java Virtual Machine and the garbage collector handle it. However, when dealing with obfuscated codes, being aware of where things are stored in the memory is an advantage. There are two logical places in the memory, the stack and the heap. Local variables, local reference variables and method invocations reside in the stack while instance variables, instance reference variables and objects reside in the heap. Local variables as the name suggests are defined inside a method or as parameters of a method. Local reference variables on the other hand are those that refer to an object. These are defined inside a method or as parameters of a method. Method calls are pushed on to the stack. Instance variables are primitive variables defined inside a class but outside of any method. Instance reference variables are those that refer to objects and are defined inside a class but outside of any method. Objects are representations ...

Restarting blog

Being able to document things is a sign of maturity. So in order to convince my self that I am growing somehow, I will dedicate a fraction of my precious time for documenting the things I burn-in each day as well as those that I have already burned.

Legacy systems

When an identifier becomes a keyword in the later versions of the language, boom! It’s time to Find and Replace All ! When a subprogram implements spaghetti, move your ass engineer! When a language becomes more strict in the later versions and the current code review metrics extends it, again, move your ass engineer!

Soundskool

Soundskool - an inter-school battle of the band competition released teaser videos for this upcoming event, and the “announcement” of a link, going to this particular site ( http://www.handakanabangsumikat.ph/ ). [Download MP4s] [Download Reports] Fellow musicians, join now and help me spread the good news!

Focused Group Discussion on FOSS

A research group from Ateneo de Manila University invited developers in a Focused Group Discussion(FGD) on FOSS development at BCD Pinpoint, 4th Floor Bloomingdale Building, 205 Salcedo Street, Legazpi Village, Makati. The FGD was divided into two, the first had it on Feb. 26 and the second on Feb. 28, which targeted freelancers and employees respectively. The topics were: 1. Software / Deployment stack usage 2. FOSS advocacy 3. FOSS community Technical discussions were already going on before the formal one started. Michael Cole, an I.T. Manager, who was one of the speakers during Software Freedom Day 2007, gave a lot of his insights regarding the use of FOSS on the desktop space. He also revealed some of FOSS’s limitations at its current state. Re Alvarez, a system administrator, laid out some of his plans for FOSS usage on the company that he is working with. He gave out a lot of tips for newbies. Archie Cortes, a FOSS advocate and a full-time user since 1998, clarified t...

Removing virus services.exe and fservice.exe

The virus consists of the following. C:\Windows\system32\fservice.exe and C:\Windows\services.exe The virus is a key logger. It sends an email message every time a connection to the internet is made. It blocks the Windows XP Protect Shield and System Restore services. Removing the virus: 1. Kill fservice.exe - Use TASKKILL /F /IM fservice.exe - If it doesn’t work on the first attempt, use NTSD -P [PID of fservice.exe] then quit the debugger to kill the task. 2. Kill services.exe - Kill the bogus one not the genuine services.exe - Follow procedure in number 1. 3. Delete all occurrences of fservice.exe and the fake services.exe - Do not delete the real services.exe found in C:\Windows\system32 4. Clean the registry for entries containing fservice.exe and the fake services.exe

Removing jaymyka worm

Today is Gat Andres Bonifacio’s day. No work, no pressure, so I took the advantage of going to my aunt’s workplace to remove the so-called Jaymyka worm. All the computers were infected. Worm: Jaymyka Threat Level: Low Target Victims: Users viewing adult sites (Geez! Who did that in the office?) Description: It creates an autorun.inf file per drive with the following contents, [autorun] open=jay.exe ;shell\open=Open(&O) shell\open\Command=jay.exe shell\open\Default=1 ;shell\explore=Manager(&X) shell\explore\Command=jay.exe The autorun.inf file is paired with jay.exe. The jay.exe file handles the annoying duplication of files and some resource-hogging tasks leading to DoS attack. If this worm is able to infect the target device successfully, it attaches a file named mveo.exe at startup. This mveo.exe is responsible for the worm’s capability of regeneration. [Diagnosis] 1. Kill mveo.exe and jay.exe TASKKILL /F /IM mveo.exe /IM jay.exe 2. Delete...

Turn off error-causing ads from Yahoo! Messenger 8

Most users complain about the error pop-ups rooted from the ads attached to their Yahoo! IM clients. Turning off from the registry is the best way shun them. In the registry, [HKEY_CURRENT_USER\Software\Yahoo\Pager\YUrl] Set or add these values, Messenger Ad = * Webcam Upload Ad = * Webcam Viewer Ad = * Webcam Viewer Ad Medium = * Webcam Viewer Ad Big = * Change Room Banner = * Conf Adurl = * Chat Adurl = * Edit the file \Program Files\Yahoo!\Messenger\Cache\urls.xml, erase all the contents and leave 2 double quotes (” “), save it then mark as read-only.

CLI & Registry User Administration in Windows XP

This is a simple user administration in Windows XP. There are lots of hidden gems here. Adding a new user, net user somename somepassword /add Deleting a user, net user somename somepassword /delete Making a user an administrator, net localgroup Administrators somename /add Removing user administrator rights, net localgroup Administrators somename /delete Hiding a user from the login screen, REG ADD \\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\ SpecialAccounts\\UserList\\" /f /v somename /t REG_DWORD /d 0 Showing a user on the login screen, REG ADD \\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\ SpecialAccounts\\UserList\\" /f /v somename /t REG_DWORD /d 1

Java bytecode disassembly

In every programmer’s journey, the legendary “Hello World!” program excuses no one. So I wrote, compiled, then disassembled it. public class Hello { public static void main(String[] args) { System.out.println("Hello World!"); } } I fired up a hex editor to analyze the bytecode’s disassembly. This part contains the headers, class name and the superclass being extended . This is how a JDK 1.5-compiled bytecode looks. .bytecode 49.0 .source "Hello.java" .class public Hello .super java/lang/Object By default, a constructor is generated. Check that it constructs itself as an object of type ‘Object’ naturally because Java classes extend the ‘Object’ class. Here we have shown that a constructor is just a method. .method public ()V .limit stack 1 .limit locals 1 .line 1 aload_0 ; met001_slot000 invokespecial java/lang/Object. ()V return .end method Here’s the main method. .method...

Today I turned 0x15

31st of May 2007 minus 0x15, marked the day of Eradicus’ existence. It was with divine intervention that fate has chosen Santa Maria Health Center as his birthplace. .-----------------TTTT_-----_______ /''''''''''(______O] ----------____ \______/]_ __...---'\"\"\"\_ --'' Q ___________@ |''' ._ _______________=---------\"\"\"\"\"\"\" | ..--''| l L |_l | | ..--'' . /-___j ' ' | ..--'' / , ' ' |--'' / ` \ L__' \ - - '-. '. / '-./ Automatic Kalashnikov 47, can someone...

Evading Yahoo! Messenger worms

Dealing with worm-infected Yahoo! Messengers in Windows XP is fun. Just apply the fix. Do not reformat because it is the lazy way of fixing things! In file fix.reg REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=dword:00000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=dword:00000000 [HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_buzz] "content url"=- [HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast] "content url"=- [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = "http://eradicus.blogsome.com" [-HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\Homepage] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur...