aFormMail php script

I downloaded a php script and used it extensively through my website. It looked like this is a php version of FormMail, a Perl (CGI) script. I removed it as it proved to be problematic.

FormMail is a "open" script that is called by a Web Form and contains the code that processes the mail command on the web server. It takes the Input Fields from the Web Form, both hidden and visible, and passes the data to the mail command.

The main reason why this is potentially unsafe is that the hidden fields often contain information that you do not want revealed to the outside world. This can include passwords and email addresses that are on an internal distribution list.

In addition, the form can be compromised and the script have data injected into it by a hacker. Using such a form with this type of processing is generally a bad idea for a website and it will found relatively easily by hackers and you will see mail being sent (spam) from your server.

Other posts on this blog relating to aFormMail.php

• An example of a mailer script gone bad
• Form Injection 

Applications that require vt-d

This was the exposure that I was presented with w.r.t. VT-d (directed I/O) - it seemed that this was a requirement for the operation of the remote assistance software from Citrix.

In most cases the owners of computer equipment do not need the remote capabilities of hardware that feature vt-d or directed I/O

--------------------------------------------------------

• Citrix Systems - Virtualization, Networking and Cloud. Virtual Computing, Simplified.

Zemana

Zemana - Anti-Key logging software.

The Canadian agent for Zimana is the same as for The TAC Shop - I am not sure what the connection to private militia equipment and Anti Key Logging. 

• The location for Zimana

Protecting yourself from LizaMoon

If you are searching for torrents to download using p2p you are better off using a dedicated machine or one with Firefox using NoScript add-on.

the script:

<script src=hxxp://lizamoon.com/ur.php></script>

could be returned in the SERP and you would be none the wiser

Surestreamer looks like just a surge protector by any other name

The post has been re-posted on this link

Other posts on this blog related to the Echo Dream Scam:

• Is Echo Dream Venture a scam?
• The re-post again
• My definition of a scam
• Homegroup Networking and the Surestreamer product - using a PL Network adapters

The posts relating to Power Line Network adapters need to be reviewed from that I had posted on www.tempusfugit.ca (my website), along with the review of how the Surestreamer product is supposed to work.

There are diagrams and an explanation of what is going on here.