/dev/null

If somebody ever said, there is no memory leak in Firefox, here’s the proof:

It can’t be, that a browser with 4 open tabs requires about 600 MB of memory. That’s 150 MB per Web site, which seems a bit too much

Safari, by the way, requires 128 MB for 5 open tabs.

If you find that Firefox’s memory usage continues to grow after long periods of being open, you may want to consider periodically restarting Firefox to bring the memory usage back to reasonable levels.

http://kb.mozillazine.org/Memory_Leak

Hi,

We would like to let you know that we have updated our report to include the omitted details. You can read it at: http://ece.uprm.edu/~andre/insert/gmail.html

Also we have made our proof of concept available at: http://ece.uprm.edu/~andre/insert/gmail.tar.gz

Best Regards,

Pablo Ximenes

I love short mails with a clear message

“Google’s chronic silence on all abuse reports makes it impossible to tell whether they’ve taken any action on the problem, whether the problem reports have even made it to the operational staff responsible for the mailservers, or whether they simply don’t care. I’m sure you can all make your own snarky comments re ‘Do no evil’.” (BugTraq)

Don’t forget: Google offers a fast paced and dynamic work environment *rofl*

I know that mail logs are not the most interesting thing on earth, but I’m not used to get spam from Google Mail… from Yahoo and MSN maybe, but not from Google… never ever… so I try to understand this:

May 20 21:43:16 mail postfix/smtpd[30948]: connect from qb-out-0506.google.com[72.14.204.235]
May 20 21:43:17 mail postfix/policyd-weight[2754]: weighted check: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .gmail. - helo: .qb-out-0506.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2 <client=72.14.204.235> <helo=qb-out-0506.google.com> <from=alexandrearw7@gmail.com> <to=michael@liquidbytes.net>, rate: -8.5
May 20 21:43:17 mail postfix/policyd-weight[2754]: decided action=PREPEND X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .gmail. - helo: .qb-out-0506.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2 <client=72.14.204.235> <helo=qb-out-0506.google.com> <from=alexandrearw7@gmail.com> <to=michael@liquidbytes.net>, rate: -8.5; delay: 0s
May 20 21:43:18 mail postfix/smtpd[30948]: 09CFB196802E: client=qb-out-0506.google.com[72.14.204.235]
May 20 21:43:49 mail postfix/smtpd[30948]: disconnect from qb-out-0506.google.com[72.14.204.235]

Yes, these servers belong to…

OrgName:    Google Inc.
OrgID:      GOGL
Address:    1600 Amphitheatre Parkway
City:       Mountain View
StateProv:  CA
PostalCode: 94043
Country:    US
NetRange:   72.14.192.0 - 72.14.255.255
CIDR:       72.14.192.0/18
NetName:    GOOGLE

Other people are getting tons of spam from Google as well as it seems.

See also: Exploiting Google MX servers as Open SMTP Relays

So why is that? Mmmh… because the cool and smart engineers at Google can’t handle their job:

We would like to clarify to the security community that we have contacted Google about the issue more than a week ago and no response was provided despite our clear intent of cooperation regarding this matter.
We have plans to submit a paper about our work on the trust hierarchy of email providers to the SBSEG’2008 over this weekend. Since the paper will necessarily include full details about the flaw, we see no point on withholding the full disclosure of our self-censored report.
We are still waiting to hear from Google and we sincerely hope that this flaw can be fixed before the full details about the problem are released. (Source)

This was 8 days ago. Hello? Somebody there!? I’m 99.99% sure that Google won’t answer to my spam report. They can’t even write a small mail to the team that found out how to use Google as open mail relay. Other large providers like T-Online are far more cooperative and they actually answer to your requests.

“We are Google. Resistance is a good idea, because: You will be spammed. We will add our spam mail to your mailbox. Your culture will have to learn how to adapt its spam filters.”

Now, you can share your sensitive information about the following with Google (I got the list from the authorization agreement on google.com):

• HIV or AIDS
• Mental illness or any mental health condition
• Alcohol or substance abuse
• Sexually transmitted diseases
• Pregnancy
• Abortion or other family planning
• Genetic tests or genetic diseases

Isn’t that exactly what we’re all after? I think I will add Alcohol, HIV and Pregnancy to my profile and see what happens *lol*

Maybe I can combine Google Health with Google Analytics and see if the visitors to my blog share the same “health condition”…

See also:

http://www.nowpublic.com/tech-biz/google-wants-your-medical-records-and-more

As people start asking me about that ODBTP adapter for Zend Framework, I will publish it as attachment to this post now. It should work with the latest version of Zend Framework (as reported by a developer). If you want to use it, just copy the files to your include path (make sure the path comes before the ZF path). Of course, you need to install ODBTP as well and add extension=php_odbtp_mssql.dll to your php.ini.

Download here

<div class="header">
  <h1>This is a subheading</h1>
</div>

This is how NOT to define a subheading in HTML.

Hehe, I like bashing successful companies, but not this time: Google has done a great job in adapting their Web site (at least search and news) to the iPhone. Google Doctype was an excellent idea as well. Thanks a lot!

I wrote so many scripts the last couple of years that I can’t remember anymore… anyways, I was working on my mail server config today and found this little PHP script that exports users from the DBMail database to a Postfix lookup table, so that unknown users can be rejected upfront by postfix (thus reducing the load on the mail server). It also outputs a list of domains.

#!/usr/local/bin/php
<?php
$mysqli = new mysqli("localhost", "dbmail", "yourpassword", "dbmail");
/* check connection */
if (mysqli_connect_errno()) {
printf("Connect failed: %s\n", mysqli_connect_error());
exit();
}
$q = $mysqli->query("SELECT DISTINCT alias FROM dbmail_aliases");
$content = '';
$domains = array();
while($r=$q->fetch_assoc()) {
$content .= $r['alias'].” OK\n”;
$parts = explode(’@', $r['alias']);
if(!in_array($parts[1], $domains)) {
$domains[] = $parts[1];
}
}
file_put_contents(’myusers’, $content);
file_put_contents(’mydomains’, join(”\n”, $domains));
exec(’postmap myusers’);
$mysqli->close();
?>

Maybe it is of some use for anybody out there… the config in /etc/postfix/main.cf should look like:

mydestination = /etc/postfix/mydomains localhost
local_recipient_maps = hash:/etc/postfix/myusers $alias_maps

This is my own colorful work environment. The food is not free, but the Thai next to my home is very good

At least that’s what I was told on the Google Developers Day last year. Now I find headlines like Mass Attack JavaScript injection. Bugzilla also lists about 20 possibly exploitable bugs in the Firefox JavaScript engine for the last 12 months. But hey, don’t block JavaScript! You would miss the wunderful AdSense and Content Match ads