My Grey Cells Burning

Friday, May 25, 2007
It's all just a simple hack and exploit Part II


image source: somewhere from google image

Exploiting KTMB commuter compartment stop-position to get access (own3d) to any empty seat during peak hours

Well, I discovered this while working with a reputable company which based their core business in FOSS industry in KL and used most of the time public transport in KL after drive from home to the Commuter station nearby (I hate traffic jam.. hate so much).

For those people who are dependent on KTMB commuter train will know how busy it is during the morning when the people want to go to work and coming back home from work. We call that peak hours. And in Malaysia, there will be push and shove among peoples (men and woman) trying to get into the door first beating anyone else to own3d an empty seat, including me.

Well, that make me mad. Especially the first few months after just start to work when the feets starting to get sore from hard leather shoes, sweats running from many parts of my body.. and from others too (yuck!), scared of someone snatching my wallet or opening my bag from the back, peoples bullshit behavior in getting their self-interest fulfilled by any means necessary without regards of any logic of GOOD reasons.. and worst, have to stand up for nearly an hour to reach my destination crowded in stinky passengers.

It's time to get the sleepy grey cell working and bypass all these problem.

Now I found out that the commuter train that are coming from other stations always stop at roughly the same position every time and everyday (Well that condition is true at the KTMB station where I conduct the experiments. I don't know about any other stations but you can try determine it and mark the positions using concepts I will predefined below). Unlike LRTs, KTMB commuter waiting platform does not have any door indicator, makes people does not really know or can guess wrongly on where the train will stop, hence don't know where the door will be located precisely.


Now for the experiments:

1. Choose 1 wagon from the commuter train to experiment with the stop-position of the commuter train, hence the commuter compartment stop-position and after that we can determine where the door precise location.

In my experiment, I always stand under the waiting platform L.E.D display clock and time and destination for the train to arrive and depart and choose the second compartment from behind. The L.E.D clock will indicate the position of where the 2nd-from-behind-compartment for the commuter train will stop. Now I only have to find where the precise location of the door for that chosen compartment will open.


Warning!!
This act will increase your pattern visibility if your image scanned and recorded by any scattered CCTV lying around. But this advise only goes to the paranoid mind. Disguise or change your character in public if you guys paranoid enough, I don't give any damn at all. We're not doing anything illegal here.


2. Determine position of where the door will open to passenger.

To be able to know the location for the door to open, we also need to know that there are two types of compartment being used by KTMB for their commuter services nationwide. I do not know their specific compartments types name rather than using their own door characteristics to remember their types.

i- One types of compartment positioned their door in the middle.
ii- Another types of compartment positioned their door right at each end of the compartment.

Two types of door position will gives two static position of where the door will open, hence two position of the door that can be determine, pinpoint, mark and remembered.

Experiment those 2 step shown above for several days until you had experienced those two types of compartments said above. When you had experienced those 2 types of compartments, hence 2 types of door position, get the feel of it and can roughly estimate the door position every time the commuter stop, then you can continue to the next step.


3. Pinpoint and mark the 2 types of door position.

When you know roughly where the door will be positioned (according to the chosen commuter compartment stop-location position), mark the positions (for 2 types of compartment door from the chosen compartment) using any visible mark readily available on the stone slab i.e. the yellow warning sign on the stone slab, any defect/color/lights on the stone slab or anything else that your mind can use to mark the compartment door position.

In my experiment, for the commuter station where the experiment were conducted, I used the yellow mind-the-gap warning sign for the number ii types door mark and counted 3-4 stone slabs to the right to mark for the number i types door positions.

To get back home from KL Sentral, I used the darkened black color stone slab (the dark color are much intense compared to other black stone slab) for the number ii types door and the-middle-position between that darkened black stone slab and 1 floor lights as mark for number i types door.

As I said, any readily available signs that can be used as pinpoint marks.

Now that you know where the door position itself when the commuter stop, follow the next step shown below.


4. Be the first in the front when the commuter nearly arrives (importantly before anyone else, otherwise the exploit wont work) to the station.

In my experiments, when I saw the train coming from afar, I position myself in the middle between two position marked for the chosen door compartment position as close to the mind-the-gap line as possible before anyone else start position themselves.

when the commuter arrive and the 1st or 2nd compartments from front passed by, you can see and determine which types of door the commuter used by now and quickly positioned yourself to your mark according to what types of compartment the commuter used. I always cross the mind-the-gap lines during this moment and stand near to the commuter compartment wall to block any hijack attempt from any potential rude passenger who think to own3d the empty seat before I do. Well.. you can't. ;o)

And when the commuter stop, you will find yourself right in front of the door that you had predicted earlier, the door open, and you will be the first to own3d an empty seat for yourself.

Note: This exploit will not work if the chosen compartments are already run out of empty seat or if the commuter driver start behaving unpredictably. This is so far the only risk involved with this exploit.

Hey!! I listen to:

Labels:

posted by zarxcky @ 5/25/2007 05:26:00 AM   0 comments
Sunday, May 06, 2007
It's all just a simple hack and exploit..



Source image: somewhere from google image search.

First begin with my bloody firefox on old i686 machine had started the netstat bug zombie process greppable by ps -ef chain of command after upgrading to 7.04 Feisty. I hate zombie. They stupid and eat a lot of cpu cycle rendering slowness to my machine.

Fix with firefox --sync -a (got it from some Ubuntuforums) did help me.. well for a while. After quote some time, the zombie had returned and haunts the other apps which running concurrently sharing the cpu cycle and theres a fat zombie eating a lot oif cpu cycle, things that they had shared together. "Fuck the zombie", said the Xorg. "I should be the one who should eat a lot than you guys. I served you guys (xmms, bittorrent, gaim etc..) to be clicked and manipulated and serve the one who are typing this crazy essay right now. Yes, it's you damn it!! Fix it you &*^%$#$@%", said the Xorg to me.

And I am astounded as to the puzzled mind searching for good reason to explain how the hell that damn application is cursing me. I should filed this bug to Xorg developer right now to explain to me how the hell their application is cursing me. They should teach their app some manners. But then I still got something else to do first.

Well. Now that the Xorg had challenged me, I will teach that bastard. Whipped up terminal, ps -ef | grep Xorg && sudo kill -9 4637; exit.

Oo.. wrong move. you ass.

(After reboot...)

Ok. be sane. whipped up a joint.. err.. terminal, click on firefox, waiting for the firefox to start......ok.

Still got the netstat zombie. You bastard.

Typing firefox --help will list:

zarxcky@penguin:~$ firefox --help
Usage: /usr/lib/firefox/firefox-bin [ options ... ] [URL]
where options include:

X11 options
--display=DISPLAY X display to use
--sync Make X calls synchronous
--no-xshm Don't use X shared memory extension
--xim-preedit=STYLE
--xim-status=STYLE
--g-fatal-warnings Make all warnings fatal

Mozilla options
-height Set height of startup window to .
-h or -help Print this message.
-width Set width of startup window to .
-v or -version Print Firefox version.
-P Start with .
-ProfileManager Start with Profile Manager.
-UILocale Start with resources as UI Locale.
-contentLocale Start with resources as content Locale.
-safe-mode Disables extensions and themes for this session.
-jsconsole Open the Error console.
-browser Open a browser window.
-inspector Open the DOM inspector.
Usage: firefox [-flags] []

Ok. lets try add -browser to the previous command so that it look like this:

firefox --sync -browser -a &

# sudo killall firefox
# firefox --sync -browser -a &

Voila! No more zombies. Now open a firefox with 15 colourful tabs doing many streaming tasks on 1Mpbs Streamyx line and process maintains around 60-70% from top output and much much more important is.. there are no more zombie.

top - 05:18:01 up 9:20, 6 users, load average: 1.28, 1.36, 1.35
Tasks: 94 total, 2 running, 92 sleeping, 0 stopped, 0 zombie
Cpu(s): 34.6%us, 4.8%sy, 1.5%ni, 57.9%id, 0.9%wa, 0.0%hi, 0.2%si, 0.0%st
Mem: 516156k total, 506004k used, 10152k free, 5388k buffers
Swap: 1212408k total, 138676k used, 1073732k free, 185248k cached

5129 zarxcky 25 0 407m 149m 29m R 53.7 29.7 59:56.99 firefox-bin
4637 root 15 0 306m 93m 8040 S 10.7 18.5 100:14.34 Xorg
5161 zarxcky 15 0 129m 36m 10m R 1.8 7.3 16:55.28 /usr/bin/gnome-
1 root 18 0 2912 448 448 S 0.0 0.1 0:01.71 init


Take that Xorg!! hehehe...

Now back to build the hardened LAMP...

Hey! I listen to :

Labels:

posted by zarxcky @ 5/06/2007 04:11:00 AM   2 comments
About Me
Previous Post
Archives
Links
Comrades
Syndicates