- Your Botnet is My Botnet (PDF) — 2008 USENIX Security paper analysing >70G of data gathered when security researchers hijacked the Torpig botnet. A major limitation of analyzing a botnet from the inside is the limited view. Most current botnets use stripped-down IRC or HTTP servers as their command and control channels, and it is not possible to make reliable statements about other bots. In particular, it is difﬁcult to determine the size of the botnet or the amount and nature of the sensitive data that is stolen. One way to overcome this limitation is to “hijack” the entire botnet, typically by seizing control of the C&C channel. [...] As a result, whenever a bot resolves a domain (or URL) to connect to its C&C server, the connection is redirected or sinkholed. This provides the defender with a complete view of all IPs that attempt to connect to the C&C server as well as interesting information that the bots might send..
- cartographer.js — build thematic maps using Google Maps. To be precise, you can build a choropleth, which is my word of the day. (via Simon Willison)
- Scamville: The Social Gaming Ecosystem of Hell (TechCrunch) — many of those games on Facebook that your friends play are evil. To get in-game money or objects, they’ll let you take a survey but at the end you’re signed up for crap you never wanted. Related: this article on monetizing social networks which talks about social gaming’s business model.
ENTRIES TAGGED "google maps"
Last week Google launched Latitude for the iPhone as a web app. They were held back from releasing a native app by Apple’s overbearing application approval process. However, this doesn’t matter that much as all location apps are currently hamstrung by Apple’s lack of background location updates. Luckily for iPhone customers there are developers out there trying to solve this problem.
- Ignite OSCON — 56m of video from Ignite OSCON. They’re all great, but Dan Meyer remains the highlight for me.
- gheat — a maptile server in Python, delivering heatmaps to be superimposed on Google Maps. Handy for visualization fiends.
- CaDNAno — open source software for design of 3-dimensional DNA origami. One of George Church’s projects. I love the combination of math, biology, and whimsy in open-source giftwrap. (via timoreilly on Twitter)
- CommentPress — an open source theme for the WordPress blogging engine that allows readers to comment paragraph by paragraph in the margins of a text. Annotate, gloss, workshop, debate: with CommentPress you can do all of these things on a finer-grained level, turning a document into a conversation. It can be applied to a fixed document (paper/essay/book etc.) or to a running blog. I’m taking a greater interest in tools that channel and focus participation rather than simply providing “edit this page”. (via gov2.net.au’s issues paper)