Ehsan Nourbakhsh’s Blog

Short HOWTO:

Put contents of this zip file in the directory you want to be protected. Read the files and change what seems necessary. On your web pages, where you are going to have media content in, change the source path and add this in the head section:

   <script src="/path/to/hotlinkp.js" type='text/javascript'>
   </script>
 

Anywhere you want an embed object added, just add this:

   <script>
       make_link("458","Anathema: A Simple Mistake<BR>");
   </script>
 

It can be modified easily to do whatever you need. Leave me a comment if you need help on it.
NOTE: I intended to add more features, but didn’t find neither the time nor a reason to do so, and then release it. If someone needs something of it, I’ll be glad to add features.
To read the full step by step creation of these, Read the rest of this entry »

Today I received two Yahoo messenger messages with very similar text, some thing like this:

Toi di lang thang lan trong bong toi buot gia, ve dau khi da mat em roi? Ve dau khi bao nhieu mo mong gio da vo tan… Ve dau toi biet di ve dau? http://chendang.net—-/nguyen/

I don’t know what does it mean, and take no responsibility if it means something nasty. Also I’ve added some dashes to it. Anyway, the URL in this message points to a web page with only these sentences on it:

Sao chẳng có gì để xem thế này hả trời !!!!!
Emperor cũng làm được như mấy thằng kia thôi ^_^ keke !!!

Tất cả bây giờ chỉ là con số KHÔNG

It is a worm which spreads itself using Yahoo! messenger, and infects unpatched IE users upon access to the www.chendnag.net website. You can find more information on its symptoms and removal on F-secure’s page and McAfee’s page.

Read the rest of this entry »