Pitfalls of New IP Space

With the almost complete allocation of previously available IP4 addresses, ICANN released IP address block from previously reserved ranges to private ISPs. Unfortunately for these ISPs and their customers (one in particular), in the past these IP blocks were heavily used by malicious individuals who spoofed their IP addresses. This resulted in many servers that simply refuse connections to the entire block. What block is this? It’s the 173.x.x.x block.

For a year now, Mediacom has assigned IPs under the 173.18.x.x block. Thanks to that, one’s IP address is in this range. There are sites one literally can not visit due to having a legitimate IP address in the 173.x.x.x range, instead one gets a nice “network timeout error”. In the past it was the Weblogs.us forums (now down for everyone as phpBB committed suicide), now it’s other sites. Sure one can use a webproxy, and have, but that is more trouble than it’s worth. It would be nice if these servers would at least keep current with their IP block blacklists. Even better, new blacklists not containing known to be good IP blocks because of their prior illegitimate use would be a welcomed change.

-John Havlik

[end of transmission, stay tuned]

Windows 7 and PunkBuster

When you resort to tactics within the realm malice, are your actions still benevolent? Even Balance should consider this question while working on PunkBuster. While hackers/cheaters are an annoying, when the tools that keep them out operate maliciously the tool maker has gone too far. PunkBuster’s behavior is absolutely uncalled for.

There is absolutely no reason for a legitimate piece of software to download itself from a remote site and reinstall/restart every 15 seconds to 5 minutes. This is how PunkBuster works right now with its PnkBstrA.exe and PnkBstrB.exe services. PnkBstrA.exe will redownload, reinstall, and restart PnkBsterB.exe periodically while in a game “protected” by PunkBuster. If anything goes wrong PnkBstrA.exe will kick the user from a server and give a error in the 13xxxxxx range. PnkBstrB.exe is what actually looks for hackers/cheaters and kicks them. PunkBuster also looks for unknown APIs and will kick you if it finds any, this is the issue it has with Windows 7.

“Why are you playing games on a beta OS?” What’s the point of a beta OS? To test things, that’s the point of beta releases. By playing, or rather try to play, a game I’m testing Windows 7. Since I built a new (for me) computer that is running Windows 7 (64bit), there really is no going back to XP (I do not have Win XP 64bit edition). My gaming is limited to offline games, any Valve title, or Test Drive Unlimited. Basically, anything that doesn’t depend on the horribly broken PunkBuster.

The real shame is that Even Balance has not made any visible effort towards supporting Windows 7. The beta is very solid, a release candidate should be out soon, and at that time the Windows 7 “API” will be “locked” and Punk Buster should be able to be updated to work with Windows 7. If, upon public release of Windows 7, PunkBuster still does not work properly, I’d like to see a someone bring a class action lawsuit against Even Balance for negligence (yes, PunkBuster has angered me to that point).

-John Havlik

[end of transmission, stay tuned]

Sammy’s Banished

Sammy Kamkar, the one who over a year ago unleashed an exploit on MySpace that caused anyone who viewed his profile, or his friends’ profiles to automatically request to be his friend. MySpace filed a civil suit against Kamkar, who plead guilty and is now banished from the Internet for a classified amount of time. The plaintiffs claimed that they are “committed to protecting our community from any abusive misuse of the site.”

Frankly, after reviewing the code and reading the explanation of his method, the hack only worked for IE and certain versions of Safari. In reality the exploit was of both the browsers and MySpace, his code should never have executed in the browsers. News Corp. should go after Microsoft as they are equally responsible for this exploit. Regardless, it’ll be interesting to see how they will go about keeping him off the Internet.

In other news, Boston needs to get a brain. Overreacting to the ten or so PCBs with LEDs attached and a black plastic bag protecting the batteries was idiocy. If the police can’t tell the difference between a bomb and a LED sign, how are they supposed to do their job? Seriously the media needs to stop spreading misinformation and disinformation before the people revolt against them, oh wait that’s already about to happen (the Internet, YouTube, p2p, etc).

-John Havlik

[end of transmission, stay tuned]