Steve's Blog

Site moves to SSL only.

In protest of Telstra and their offensive strategy of recently sending all web browsing URLs to a third party in a different country, I have migrated ALL of the www.crc.id.au domain to use SSL encryption to keep spying eyes out of your data.

As Telcos have proven time and time again that they cannot be trusted to uphold the privacy of their customers, I shall be looking at migrating further sites as I get time.

After Telstra got busted doing this, a key quote from the CEO states: “We stopped the program immediately, as this was the right thing to do,” Mr Thodey said. I find it offensive that he only thinks that it is the right thing to do when they have been publicly exposed violating their customers privacy.

If you see any problems with my site (I’m pretty sure I have it all correct), please let me know!

Team Fortress 2 - Meet the Pyro

So I’ve been waiting for this video for a long, long time as rumour was it was going to be fantastic. You know what? Fantastic doesn’t describe it.

When I first saw this video, I couldn’t stop myself from laughing. In fact, I haven’t laughed at anything so hard in a long, long time.

Well done Valve. Well done.

Xen privilege escalation vulnerability on Intel CPU - CVE-2012-0217

I’ve just built and rolled out packages that have been patched against this.

If you are running Xen on a 64 bit machine, please make sure you update to 4.1.2-8 ASAP.

From the Xen-Announce post:

ISSUE DESCRIPTION

Rafal Wojtczuk has discovered a vulnerability which can allow a 64-bit PV guest kernel running on a 64-bit hypervisor to escalate privileges to that of the host by arranging for a system call to return via sysret to a non-canonical RIP. Intel CPUs deliver the resulting exception in an undesirable processor state.

IMPACT

Guest administrators can gain control of the host.

Depending on the particular guest kernel it is also possible that non-privileged guest user processes can also elevate their privileges to that of the host.

I’ve also patched for CVE-2012-2934 - although this probably won’t hit anyone…

Telstra prepaid mobile broadband

Its strange, I always thought that companies had their fingers on the pulse when it comes to internet connections. How surprised I was to find out recently how far off the ball Telstra is in some of their pricing.

I’m currently in Tasmania - which Telstra has a big advantage over the Optus network in coverage. To the point where I’ve only had odd spots of coverage with my Virgin Mobile device over the last two weeks. I went to the local Post Office and purchased one of the Telstra $99 Prepaid Mobile Broadband devices that came with a bundled 5Gb of data.

It does the job well - its quite snappy and 5Gb is more than enough for the couple of weeks we’re over here. The shock I did get is when I looked at the pricings for recharging the device. It seems Telstra class these devices in a world of their own - most of the time it is over 4 times more expensive to top up a mobile broadband plan than a similar iPad plan.

Do what do they offer? Look at this:

Recharge iPad Mobile Broadband
$20 1GB (30 days) 250Mb (21 days)
$30 3GB (30 days) 700Mb (30 days)
$40 N/A 1Gb (30 days)
$50 N/A 3Gb (30 days)
$60 6GB (30 days) N/A
$80 9GB (30 days) 4GB (60 days)
$100 12GB (30 days) 6GB (90 days)
$180 12GB (365 days) 12GB (365 days)

Yes, you saw it right. $30 will get you 3Gb of data on an iPad plan, but a tiny 700Mb on a mobile broadband device. To add insult to injury, it doesn’t seem like Telstra have reviewed their pricing for well over a year.

Interestingly, it seems most of Telstra’s competition are offering mobile broadband plans on almost the same rates as the Telstra iPad plans. I wonder why Telstra do not merge their MBB and iPad plans? Do they really get that much of a kickback from Apple to make these extreme differences in pricing feasible?