Thursday, March 25, 2010

Facebook Scam keeps reappearing

As a followup to the last post, here is the text to a Facebook scam email that was sent from somewhere in Asia from this IP address:
123.236.12.47
------------------
Dear user of facebook,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook.
------------------

And they include a zip file that they hope you'll open. Opening it runs a program that trieds to contact the server of the malware writers so that your system can become a slave to do whatever they wish. The program may or may not try to steal the credentials on your system possibly giving them access to your bank.



Monday, March 22, 2010

You are the Accessory in Online Crime

It used to be that viruses and trojans were highly sophisticated programs that took advantage of obscure weaknesses in software. That is still true, but the emphasis has changed. The level of sophistication is there, but it's different, and in a way much less intimidating (to me).

The art of the grifter is alive and well on the internet and has turned into very profitable business model for criminal organizations in Russia and the Ukraine. The level of organization is now where the sophistication is. What I find interesting is that China doesn't come up in the dialog. China is still relying on sophistication instead of conning.

The entire operation hangs on "Social Engineering" fooling you into allowing some sort of rogue software to be installed on your system. This is actually a lot easier than you would imagine as people often list themselves as the administrator of the system instead of running as a limited privilege user and logging in explicitly as administrator when you need to do system work. Once you have allowed such an installation, you have likely been recruited into an army of computers called a Bot Net.

The take away message is clear. If you get a message that you are not expecting, asking you to click on a link. Don't touch it. If it's your bank, initiate the log in yourself. Places like Facebook are not going to suddenly change your password and send the new password in a like (that's going around today and has been before.)

Some of you may have been harrassed by an "Anti Virus" program. I cleaned a different one off my Mother in Law's computer. Here is one that someone detailed:
Analysis of a Rogue (Fake) AV Program
http://www.secureworks.com/research/threats/rogue-antivirus-part-1/?threat=rogue-antivirus-part-1

Those who are hooked on Criminal Conspiracy TV shows may find this fascinating
Pay Per Install model of Malware Distribution (You only need to read the first 3 pages to get the idea.)
http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/pay_per_install.pdf

Understanding Social Engineering
http://www.net-security.org/article.php?id=1403

The Zeus Bot Net
http://us.trendmicro.com/imperia/md/content/us/trendwatch/researchandanalysis/zeusapersistentcriminalenterprise.pdf

Thursday, March 18, 2010

Blogger Giving Me Grief

For years blogger has allowed you to keep your blog on your own web site via FTP. If you have your own site that makes sense. Now because of support issues (apparently we suck up too many resources - FTP is going away and I have to either give them a part of my url that will redirect to them or just have a blogspot url. Neither is probably horrible but i'm pouting as I like having everything stored on my own web site since I do pay for the stupid thing after all.

I've just learned that Word Press is available on my own site so I've installed it and of course i'm completely lost. I also don't know how to import years of other blogging to it. I have all of April to decide but I do need to start getting a little more serious about it.

I hate it when I'm given this great thing and then I get used to it and then it gets taken away. :(

So I see that Word Press has an import option. Cool. Except for one leetle thing.
They won't work on the older style FTP blogs. I have to upgrade the blog to the new style and then I can import it. Gee thanks for saving me all that work. Hmphf.

Wednesday, March 17, 2010

Dryer DIY Just Barely

I have been led down the primrose path by the internet and survived to tell about it. Not only that, but the dryer that I set out to fix (yes, this is my boondoggle though Terri got me out of it) is now fixed.

Our dryer had over the past few months developed a horrible squeaking/squealing sound and I innocently googled it and found a whole lot of squeaky dryers out there, but I also came across this page: http://www.askmehelpdesk.com/advice/t-20960.html
which has someone correctly diagnosing the problem as worn out "rear drum bearing" and he then continues on to explain in some detail how to fix it. What follows is many posts telling him thank you and that it wasn't all that bad and if you have two people it takes about an hour to do. This made me brave and even though our dryer is a little different I went ahead and ordered a "rear drum bearing" kit.

One hour turned into a week in our case.

Dryers are conceptually pretty simple beasts. They are basically a heated barrel that spins around on a post. This post or bearing had worn scores in it and was now howling. So knowing that and knowing that everyone else said it was doable even though it involved pulling that barrel/drum out completely, emboldened me. Such is how such misadventures start. What no one warned us about because our 15 year old dryer is likely just a little different that everyone else's is that while we could pull it all the way apart and replace the part and even find the little E-clip that went flying off when we pulled it off (**) (and of course was the one thing that wasn't included in the replacement kit), putting it all back together was well, just hell. One person said without any detail that putting their's back together was tricky, No one said anything about having to line 4 layers up blind. One of those layers, a disk of metal about 6 inches in diameter, would fall down at the smallest provocation and we learned later all the layers would only go back together in one orientation.

This is a photo of the dryer just before we pulled the drum out.



I don't have a photo of the drum out of the dryer. Too bad as it was pretty funny looking to be rolling around this drum outside of the dryer.

Once the drum was out you could see the bearing here:
It's hard to see but the mishapen disk thing is actually the bearing.




Here are a couple of photos of the older one where you can see it better. You can actually see the scoring on the shaft which is what was causing all the screaming.




The nearly impossible part was that the dryer drum had to bolt back into those little holes on the disk of the bearing (you can see them on the left photo.) If it had just been a matter of lining up the drum with the bearing that might have worked fine but the other layers involved that you couldn't touch while trying to get them lined up made me give up twice. Terri saved the day/week (not a joke). She figured out that you needed something to insert into the holes and then place the drum so that what you have inserted keeps everything lined up. We first tried dowels which weren't sturdy enough so she figure out that a bolt big enough to stay in the bearing holes would go through all the other holes, but she asked: if only I could get a bolt without a head on it.

This is one way our skills dovetail nicely. I am something of a dremel queen. Cut the head off a bolt? No problem, me and my dremel's cut off wheel only need about 5 minutes.

Then it was a matter of getting brave and trying to get the drum to line up with these three little bolts. I was the one who had been doing the lifting, but it was actually Terri who got it miraculously lined up and then I got to do the honors of one at a time pulling out the headless bolt and getting the actual bolt in there. It felt so strange to be able to accomplish something that you had given up on two days ago. I had even picked out what shop I was going to call and say "Hi, we can't get our dryer back together. No we don't need it fixed, we did that, but we can't get all the pieces lined up correctly." And each one one lined up perfectly as Terri who can be quite methodical when it's important, had taken the time to figure out exactly which orientation was the only one that would work and to carefully mark it. I'm very impressed and it's not something I would have thought of on my own.

Then we couldn't quite reach the belt to get it back on the pulley. I couldn't visualize how it was supposed to work, but we found an internet diagram and then Terri was able to draw it out for me. The only problem was that I was still having a lot of difficulty actually reaching the belt and after struggling with it for a while I finally realized that there had to be another way since my hands are smaller than 90% of appliance repair people and sure enough there was a way to it from the back of the dryer which made life much easier.

Of course when we finally finished we had to face the possibility that it might not work so with much trepidation we turned it one and No More Squeak! Ahhh. Of course we have parts left over but that's because the shaft wasn't an exact replacement so we had a couple of washers we had to omit but it's happily drying away right now and I'm hoping we'll get a few more years out of it before having to give up on it.

All in all it was worth it since it save us having to (a) buy a new dryer or (b) pay to have it fixed. The kit was about $25 with shipping. Having it repaired would likely have been over $100. But that said it was pretty high on the home improvement adventure scale and whether it is worth it to any one particular couple (2 people are required, domestic relationship optional) can only be answered by them. And if you don't have a solid relationship before you start you may not have one after it. At least it didn't involve water (washer's are way more complicated and I'm not sure I want to mess with one) and while we had most of the dryer in pieces, we never had to mess with the gas line going into the dryer, nor anything to do with the heating portion.

So we all survived and my laundry is getting done.



** And what sadist invented E clips? It took over an hour to figure out what it was called. Clamp? Nope. Cotter Pin? Nope. Got frustrated and took the dog on a walk. Came back and tried: "C clip" while not correct that got us far enough to be able to spot a picture of ours and then we were able to figure out it was called an "E clip" which given its shape makes sense.

Then we had to figure out how to get it off and the one internet person's idea of inserting needle nose pilers into the open end and then gradually opening the pilers worked. Their idea of using a plastic bag to then catch it when it releases and goes flying didn't work, and I found myself taking apart a whole 'nuther section of the dryer apart and sifting through a decade of lint, but I finally found it. In retrospect what would have likely worked is the always essential duct tape. Tape the part of the clip that you're not working on and anchor it to the dryer.

----

This whole experience was a whole series of unplanned side steps and in home improvement you just have to anticipate that at best things are going to go in a circuitous path. it didn't end that night, but continued this morning when Terri asked if the hot water heater was on. It wasn't as I had turned it off momentarily by accident last night and that killed the pilot. So this morning was about finding the long mechnical match and then remembering how to relight it even though the instructions were covered up by the insulating jacket (turn the dial to "pilot" and hold the red button down while placing the lit match onto what you hope is where the pilot light goes, then when the pilot lights, move the knob over to "on." My first time I got it lit then carefully moved the knob to "off." D'oh. It all finally worked out and I actually had a hot shower this morning to go along with my clean clothes.

---------
Later
After less than a month it started to squeak again.
Apparently there is a front support that we could replace also.
After the last go round we decided it was curtains for the dryer and we replaced it with a used one from a local dealer. Much better.

Thursday, March 11, 2010

Unplanned Weight Loss is Disconcerting

I've been trying to lose another 5 pounds and i'm suddenly getting my wish and I'm not sure I'm at all happy about it. I'm having one of those GI related problems (actually not the big D), and even though it's not particularly painful, the anxiety it causes has made me lose my appetite and I forget to eat. I fortunately can eat and do when I remember to but I don't snack inbetween meals much and suddenly I'm 3 now 4 pounds lighter. It's actually a little disturbing I find.

Fortunately, even if I were to lose another 10 pounds (I hope not) I'd still be ok.

I'm just really glad I have health insurance.

[later]
I am doing better and am now back to the weight I would expect to be (2 pounds heavier - probably had lost a bunch of water then).

Monday, March 01, 2010

Getting off the Value Pak junk mail list

In my continuing quest to get off of junk mail lists.

Valpak puts the removal instructions in the smallest type possible on their envelope.
but the number they post 1-800-676-6878
actually encourages you to use their website.

Both methods are a complete pain, but seem to work.

Entering the numbers listed after the phone number will get you to the removal part of the phone tree:
1-800-676-6878, #, 2, 2, 1
Then leave your address and spell out anything even slightly odd.

The website was a tough one too, but I finally found it:

http://www.coxtarget.com/mailsuppression/s/DisplayMailSuppressionForm

You can give them your email address which they swear is just for confirmation only, but I declined to.

Removal is for only 2 years which is annoying as I was removed and just the time I got off the other one this one started up again.

Though given that you used to have to mail then the label for them to remove you this is miles easier which is probably why they make it hard to find.