<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Fix on</title><link>https://dawning.ca/tags/fix/</link><description>Recent content in Fix on</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>Copyright © James Snell</copyright><lastBuildDate>Thu, 19 Dec 2019 01:21:00 +0000</lastBuildDate><atom:link href="https://dawning.ca/tags/fix/index.xml" rel="self" type="application/rss+xml"/><item><title>Fix INACCESSIBLE_BOOT_DEVICE with Boot Camp Windows Systems</title><link>https://dawning.ca/posts/fix-inaccessible_boot_device-with-boot-camp-windows-systems/</link><pubDate>Thu, 19 Dec 2019 01:21:00 +0000</pubDate><guid>https://dawning.ca/posts/fix-inaccessible_boot_device-with-boot-camp-windows-systems/</guid><description>
&lt;p>Like any self-respecting computer geek, I like everything. I typically run-up Windows on my Macs by installing it via Boot Camp, and then booting it as a VM. This lets me run everything in parallel, but also go full native mode when needed.&lt;/p>
&lt;p>Recently, I found I couldn&amp;rsquo;t boot my Windows natively any more, though it would still work fine in my VMware Fusion. When booting natively, my Windows install with BSOD on an INACCESSIBLE_BOOT_DEVICE exception. After a bit of googling, I found that this was likely related to storage drivers. I ultimately managed to fix my Windows environment (without a reinstall), here are the steps:&lt;/p></description></item><item><title>Battle against injected PHP</title><link>https://dawning.ca/posts/battle-against-injected-php/</link><pubDate>Sun, 13 Nov 2016 14:18:51 +0000</pubDate><guid>https://dawning.ca/posts/battle-against-injected-php/</guid><description>
&lt;p>My main personal web server became infected with some effin malware that was injected it very nearly every single .php script on the server. The injected code was basically:&lt;/p>
&lt;p>//###=CACHE START=###
@error_reporting(E_ALL);
@ini_set(&amp;ldquo;error_log&amp;rdquo;,NULL);
&amp;hellip;etc&lt;/p>
&lt;p>$strings = &amp;ldquo;as&amp;rdquo;; $strings .= &amp;ldquo;se&amp;rdquo;; $strings .= &amp;ldquo;rt&amp;rdquo;; $strings2 = &amp;ldquo;st&amp;rdquo;; $strings2 .= &amp;ldquo;r_r&amp;rdquo;; $strings2 .= &amp;ldquo;ot13&amp;rdquo;; $gbz = &amp;ldquo;riny(&amp;rdquo;.$strings2(&amp;ldquo;base64_decode&amp;rdquo;);
$light = $strings2($gbz.&amp;rsquo;(&amp;ldquo;nJLtX&amp;hellip;.&amp;rdquo;));&amp;rsquo;); $strings($light);
//###=CACHE END=###&lt;/p>
&lt;p>This is kind of beautiful to me, it took me a little while to figure out what it does. In effect it causes basic system info for anyone browsing sites on that server to be sent off to some other php script on another server. At first I altered the server and my network to prevent any traffic from reaching the intended target. Instead I captured the traffic so I could get a look at the volume of it. Here&amp;rsquo;s an example apache log message generated by someone browsing an infected site:&lt;/p></description></item><item><title>AirPlay Through pfsense Bridge</title><link>https://dawning.ca/posts/airplay-through-pfsense-bridge/</link><pubDate>Thu, 23 Dec 2010 19:27:48 +0000</pubDate><guid>https://dawning.ca/posts/airplay-through-pfsense-bridge/</guid><description>
&lt;p>&lt;a href="https://dawning.ca/uploads/external/WiresharkOnAirTunes_a3fe1ae5.png">&lt;figure>
&lt;picture>
&lt;img
loading="lazy"
decoding="async"
alt=""
class="image_figure image_internal image_unprocessed"
src="https://dawning.ca/uploads/external/WiresharkOnAirTunes_a3fe1ae5.png"
/>
&lt;/picture>
&lt;/figure>
&lt;/a>Howdy all, geek-mode enabled.&lt;/p>
&lt;p>So I&amp;rsquo;ve been fighting somewhat to get my &lt;a href="http://en.wikipedia.org/wiki/Airtunes">AirPlay &lt;/a>enabled device (&lt;a href="http://en.wikipedia.org/wiki/Appletv">Apple TV&lt;/a>) to function perfectly. I use &lt;a href="http://en.wikipedia.org/wiki/Pfsense">pfsense&lt;/a> to run my router and in so doing I&amp;rsquo;ve got a Wireless and Wired network that are &lt;a href="http://en.wikipedia.org/wiki/Network_bridge">bridged together&lt;/a>. I found with the &lt;a href="http://en.wikipedia.org/wiki/Appletv">AppleTV&lt;/a> that only devices on the same physical media could stream to it, though all devices could &amp;ldquo;see&amp;rdquo; it.&lt;/p>
&lt;p>After submitting a feature request to Apple over this, I decided I wanted it solved for me anyway and I felt close to the solution. Since I had no logs to go by, I decided to bust out &lt;a href="http://en.wikipedia.org/wiki/Wireshark">Wireshark&lt;/a> to sniff all the involved network traffic. Suffice to say, I was rather entertained to find that when using AirPlay the payloads are flying around in &lt;a href="http://en.wikipedia.org/wiki/Ipv6">IPv6&lt;/a>, not &lt;a href="http://en.wikipedia.org/wiki/Ipv4">IPv4&lt;/a>. Just look at the caption in this post. All those teal packets is iTunes streaming audio to my AppleTV via AirPlay. It&amp;rsquo;s &lt;a href="http://en.wikipedia.org/wiki/User_Datagram_Protocol">UDP&lt;/a> over IPv6. Neato.&lt;/p></description></item><item><title>Ubuntu 9.10 remote mounts via sshfs</title><link>https://dawning.ca/posts/ubuntu-sshfs/</link><pubDate>Sun, 07 Feb 2010 17:30:34 +0000</pubDate><guid>https://dawning.ca/posts/ubuntu-sshfs/</guid><description>
&lt;p>Hey just a fast post here.. I&amp;rsquo;ve been using sshfs on Ubuntu (meh, linux in general) for awhile as a means of securely remotely accessing my files. I&amp;rsquo;ve taken some steps to add a line to my /etc/fstab file to make this run smoothly&amp;hellip;&lt;/p>
&lt;p>Though today I ran in to a really weird situation. I found that despite having a &lt;code>uid=xxxx&lt;/code> line, the appropriate user wasn&amp;rsquo;t getting ownership of the mount. In fact, when that user would look at the permissions for the mount, it returned something like &amp;ldquo;d???? ? ? ?&amp;rdquo;. Whisky Tango Foxtrot.&lt;/p></description></item></channel></rss>