Author Archives: Chris Samuel

Reflections On Apollo

Posted on by

A video screen telecasting Buzz Aldrin reflected in the helmet of a spacesuit in Washington (ABC News) It’s been 40 years since Apollo 11, something that I’ve known about for as long as I can remember as I was born not that long before it and, apparently, screamed all the way through the landing televised at the hospital. Sorry about that! 🙂

The fact that the Apollo programme ended so soon after Apollo 11 (Apollo 17 was the last mission, and the only one to carry a scientist, geologist Harrison Schmitt) was already foreshadowed in budget cuts in 1967, which to me seems a great shame given the fact that we were for the first time looking at leaving the cradle of the earth – something that humanity will have to do eventually before the sun dies (assuming we can survive the current issues facing us). I wonder what we would have found on the lunar surface if further Apollo missions had taken more scientists to the moon ? Would we have already explored the craters nearer the poles where we now look for water ice ? Would we have have a permanent base there ? Few people know that NASA had already planned, prior to Armstrong, Aldrin and Collins, longer stays, a lunar flyer to let astronauts visit other areas on the surface and even a base on the moon as part of the Apollo Applications Program, though sadly only Skylab survived the axe to make it into space.

After Apollo 17 it took another 6 years for NASA to get back into space with STS-1, the first shuttle space flight, and we’ve still not been out of earth orbit since 1972, 37 years ago. It would be tragic if we ended up like the original settlers of Easter Island who used up all the resources needed for long distance travel and effectively stranded themselves.

Firefox 3.5.1 Vulnerability

Posted on by

Oh no, not again..

Various analysts and sites have recently confirmed a vulnerability is present in FireFox 3.5.1 that has had exploit PoC released. When exploited, the vulnerability can lead to system compromise or induce a DOS. No Patch is available.

Interestingly the SecurityFocus BID for this says it’s FF 3.5, but the ISC SANS post above does say 3.5.1 (and they do know what they’re talking about). There is also a CVE number allocated to it, but I’m having problems reaching that at present to check what it says. One possible explanation is that Mozilla pushed out 3.5.1 to fix the 3.5 0day that appeared recently, but this bug was found beforehand and Mozilla weren’t aware of it prior to releasing 3.5.1 (or they thought it was more important to get the other fix out whilst they worked on this).

Apollo From Orbit – Images from LRO

Posted on by

NASA’s Lunar Reconnaissance Orbiter (LRO) has returned some initial images from a number of the Apollo landing sites on the moons surface, namely Apollo 11, 14, 15, 16 & 17. My favourite has to be the Apollo 14 image which includes the trails of the astronauts footprints from the LM to a set of scientific instruments.

Apollo 14 landing site taken by LRO

In case you can’t spot the details, here’s the annotated image.

Annoted image of Apollo 14 landing site image by LRO

Don’t forget these images were taken during the commissioning phase of LRO whilst it is in a highly elliptical orbit, NASA believe that once its in its science orbit (roughly 50 miles altitude above the lunar service) the resolution will by around four times greater!

(Via Emily Lakdawalla)

Tsunami Warning for South East Australia (updated – no impact)

Posted on by

Just got back from a talk Donna was doing to find that the BoM has issued a tsunami warning for Victoria after a large earthquake near New Zealand.

An undersea earthquake of magnitude 7.9 has occurred at 07:22 PM EST on Wednesday 15 July 2009 at 45.960S , 166.470E off W. COAST OF S. ISLAND, N.Z. Sea level observations have confirmed a tsunami has been generated.

ABC News says:

The weather bureau says there is a potential tsunami threat to New South Wales, Tasmania, Victoria, Norfolk Island and Lord Howe Island.

No risk to us, being well inland, but hopefully those nearer the coast will be OK.

Update: Well it was tiny – 774melbourne (ABC local radio) on Twitter reported:

774melbourne Correction: TV NZ reports the NZ wave was around 17cm.
774melbourne Observations of a very small Tsunami in Tas. No major land impact expected.

Firefox 3.5 0day Vulnerability

Posted on by

Oh joy, within 24 hours of the MS IE/ActiveX exploit we have a remote vulnerability against Firefox 3.5.

The vulnerability is caused due to an error when processing JavaScript code handling e.g. “font” HTML tags and can be exploited to cause a memory corruption. Successful exploitation allows execution of arbitrary code. The vulnerability is confirmed in version 3.5. Other versions may also be affected.

Currently Mozilla have no “known vulnerability” page for Firefox 3.5 security issues, I presume once it’s created it’ll be here.

There is a sample exploit available already, so it’ll be in the wild soon if not already. 🙁

Yet Another ActiveX/Internet Explorer Exploit Being Exploited

Posted on by

For those people who have to care about Windows systems SANS ISC has info on a scary new ActiveX remote exploit doing the rounds that allows an attacker to run code on a Windows box rendering HTML via Internet Exploder or (presumably) Outlook, etc if you have virtually any version of MS Office installed..

This vulnerability exists in the ActiveX control used by IE to display Excel spreadsheets. The CVE entry for the vulnerability is CVE-2009-1136. Microsoft mentions that they are aware of active exploits against this vulnerability

There is no fix at present, though a workaround is available to disable those ActiveX controls. Attackers are actively targeting people with this too:

A highly targeted attack against an organization earlier today who received a Microsoft Office document with embedded HTML. This one was particularly nasty, it was specifically crafted for the target – with the document being tailored with appropriate contact information and subject matter that were specific to the targeted recipient. Analysis of the document and secondary payload found the attacker used a firewall on the malicious server so that all IP traffic outside of the targeted victim’s domain/IP range would not reach with the server.

Remember Microsoft isn’t the answer, Microsoft is the question. “No” is the answer.

Linux Based Open-PC Project Launched

Posted on by

The KDE News website has the announcement of a new Open-PC project to create a PC shipped with Linux and other FOSS software. Why another ? Well, as they say:

The project was initiated in response to the lack of quality in the Free Software-based hardware solutions currently on the market. As many reviewers and end-users have stated, the pre-installed software used by hardware vendors generated a bad image for Free Software with potentially interested end-users. Much of the software was buggy and not widely tested and device drivers were often unstable, non-free or not available at all.

There’s a lot of questions to answer yet – what form factor, what software, etc – so they are running a survey to try and gauge peoples thoughts. The site says there is a second survey planned for a later date, presumably focusing in on options once they’ve got general ideas. The other interesting thing is that they’ve apparently already got a major PC manufacturer lined up and they are aiming to be shipping by late 2009 with part of the profits going to funding FOSS projects.

There is more information in Frank Karlitschek’s presentation (PDF) from the Desktop Summit in Gran Canaria.