Home Private Messages Search
   Toggle Content Content Menu

 Clenched Fist Hall of Honor
 Guild Policy
 Time Converter

   Toggle Content CPG Main Menu
 Home Guild Forums News Search Projects Community Members options Web

   Toggle Content User Info

Welcome Anonymous

User Name

Latest: Honore1
New Today: 0
New Yesterday: 0
Overall: 132

People Online:
Members: 0
Visitors: 88
Total: 88
Who Is Where:
01: Calendar
02: Calendar
03: Calendar
04: Calendar
05: Calendar
06: Calendar
07: Calendar
08: Calendar
09: Calendar
10: Calendar
11: Calendar
12: Calendar
13: Calendar
14: Calendar
15: Calendar
16: Calendar
17: Calendar
18: Calendar
19: Calendar
20: Calendar
21: Calendar
22: Calendar
23: Calendar
24: Calendar
25: Calendar
26: Calendar
27: Calendar
28: Calendar
29: Calendar
30: Calendar
31: Calendar
32: Calendar
33: Calendar
34: Calendar
35: Calendar
36: Calendar
37: Calendar
38: Calendar
39: Calendar
40: Calendar
41: Calendar
42: Calendar
43: Calendar
44: Calendar
45: Calendar
46: Calendar
47: Calendar
48: Calendar
49: Calendar
50: Calendar
51: Calendar
52: Calendar
53: Calendar
54: Calendar
55: Calendar
56: Calendar
57: Calendar
58: Calendar
59: Calendar
60: Calendar
61: Calendar
62: Calendar
63: Calendar
64: Calendar
65: Calendar
66: Calendar
67: Calendar
68: Calendar
69: Calendar
70: Calendar
71: Calendar
72: Home
73: Calendar
74: Calendar
75: Calendar
76: Calendar
77: Calendar
78: Calendar
79: Calendar
80: Calendar
81: Calendar
82: Calendar
83: Calendar
84: Calendar
85: Calendar
86: Calendar
87: Calendar
88: News

Staff Online:

No staff members are online!


1 2 3 ... 10 11 12 ... 15 16 17
 Windows WMF Vulnerability

Security A serious new remotely exploitable vulnerability has been discovered in Microsoft Windows' image processing code.


This exploit can be triggered by a malicious Windows Metafile (WMF) image, regardless of the image extension (e.g. .gif, .jpg, .png etc) in any program (e.g. Firefox, Opera, MSN Messenger, IrfanView, MS Office, previewing the image in Windows, indexing by Google Desktop - everything is affected).

All versions of Windows from Windows 98 through ME, NT, 2000, XP, and 2003 are known to be vulnerable, and a large and rapidly growing number of malicious exploits (57 at last count) are already circulating in the wild. They are being actively used to install malware and Trojans into user's machines. Viruses and worms are expected to appear shortly.

Although NOT a complete solution, Microsoft has recommended temporarily disabling the automatic display of some images by the operating system and web browser. This can be done, as detailed below, by "unregistering" the "SHIMGVW.DLL" Windows DLL. THIS IS NOT A COMPLETE SOLUTION, but it significantly lowers the risk from this vulnerability from web surfing.

Steve Gibson has provided additional details and a fix on his security blog at www.grc.com/sn/notes-020.htm. Note that Ilfak Guilfanov's WMF patch has been superceeded by the release of the official Microsoft patch via Windows Update on January 5th (ahead of the scheduled date of January 10th).

There is a Microsoft Security Advisory, Slashdot Article, and an article on Google News discussing the vulnerability.

UPDATE: Currently no patch is available for Windows 95, 98, and ME; however, GRC has committed to providing a solution for those users should Microsoft fail to provide one. Users of those operating systems should check Steve Gibson's blog at the link provided above.

UPDATE2: Two new Metafile bugs have been found, just a week after the patching of previous critical WMF issues. These bugs are not addressed by MS06-001. Microsoft is currently classing the new problems as "performance issues" and that they do not allow an attacker to run code or crash the operating system (but may cause the WMF application to crash).
Printer Friendly PageScore: 0
Posted by Tessil Wednesday, January 04, 2006 (14:45:02)

 EQ2: Kingdom of Sky Announced

EverQuest II News SAN DIEGO, CA – January 4, 2006 – Sony Online Entertainment Inc. (SOE), a global leader in the online games industry, today announced that the second expansion for EverQuest® II, entitled Kingdom of Sky™, is schedule to be available at retail and for download on Feb. 21. The retail SKU of Kingdom of Sky a recommended price of $29.99 and will contain the full version of the base EverQuest II game, the new expansion and a special in-game item. The digital version will contain the new expansion for $26.99.

"Kingdom of Sky offers something for all of our EverQuest II players," said Laura Naviaux, senior brand marketing manager, Sony Online Entertainment. "For the seasoned EQII player, Kingdom of Sky increases the amount of high level content in a world filled with intrigue and the potential destruction of Norrath by the evil dragon lords. The second expansion pack brings the excitement of dragon battles and is timed to coincide with the newly-added Player vs. Player (PvP) action."
Read More... (4.31 KB) | Printer Friendly PageScore: 0
Posted by Tessil Wednesday, January 04, 2006 (14:05:49)

 Roster Master for Dragonfly v5 Released

Dragonfly Version 5 of Roster Master for Dragonfly is out!

This adds a number of important bugfixes and feature enhancements, but most of all, it adds the huge improvements to the UI, the dynamic signature generator, and introduces the access quest tracker.

  • Re-fixed "Guild Summary: $field was..." in logfile problem.
  • Added administration command to purge the log. If log is empty, an appropriate message is displayed when the log is viewed.
  • Fixed "Data array mismatch." error when editing Heritage Quest claims, reported by Belin. eqiiforums.station.son...893#M18893
  • Re-fixed error in the way that Roster Master handles timestamps that introduced a serious error in the way that Signature Master handled the signature block cache.
  • NEW FEATURE: Added the first version of the Access Quest Tracker (Key Master) in response to a request by Kevlin. eqiiforums.station.son...840#M18840
  • DATABASE SCHEMA CHANGE: Heritage Quests moved to their own table. Added lastname column to roster_master_users table. Added roster_master_keys table.
  • CONFIG CHANGE: Added configuration section for the Access Quest Tracker. Renamed configuration variables for the Heritage Quest Tracker. Added $config['show_lastname'] variable to Roster Feature Options.
  • STRUCTURE CHANGE: In accordance with the Dragonfly coding standards, the language file have been moved from the original location at "modules/Roster_Master/language/lang-english.php" to "language/english/roster_master.php". Those upgrading should remove the previous directory before installing the upgrade. Bonus feature - there is no need to make additional copies of the language file(s) when using the automatic instantiation feature.
  • Improved response in returning a signature image by specifying the HTTP connection closes immediately.
  • Reorganized Signature Master's options to group the appearance options for the signature block image in response to feedback from Erladdin. Changing the block still requires editing the sigmaster.inc file. Improved comments to assist customization. eqiiforums.station.son...844#M18844
  • Renamed internal functions to be more consistent with the component (Roster Master, Heritage Master, Key Master, Signature Master) they belong to.
  • Rewrote the claims management user interface. It is now possible to edit a claim, rather than only delete it. Added the ability to add a last name to a character claim.
  • Improved some error-handling functions and logic.
  • Moved Heritage/Key Master sort menu to the left to improve the UI.

Read the Roster Master development thread on EQ2Players to learn more about Roster Master's progress!
Printer Friendly PageScore: 0
Posted by Tessil Saturday, December 17, 2005 (00:47:39)

 Cat 5.11 OmegaDrivers Available

Omega Drivers The newest OmegaDrivers ATI Radeon drivers based on Catalyst 5.11 have been released.

From the OmegaDrivers News Page:

Ok, it took me a little while cause I was beta testing something new for this release and I wanted to make sure it worked. Now all the work is done and my new Omega Drivers based on the Cat 5.11 are ready for public release!

Go to the ATI Radeon section and take a look at the Readme while downloading so you know the latest changes, additions to this set and some important notes or warnings.


Unfortunately, for quite some time now, drivers after Cat 5.2 up to and including the 5.11 drivers (whether it be the stock ATI or modified OmegaDrivers version) do NOT resolve the blackscreens/lockups in Everquest II reported by players in this thread and yet another thread. Cat 5.2 is still the recommended driver version.
Read More... (602 Bytes) | Printer Friendly PageScore: 0
Posted by Tessil Monday, December 05, 2005 (18:40:29)

 Chinese Gamer Suicide Wasn't A WoW Player

Gaming News Earlier this week, GamePolitics and numerous other news sites reported on a suit filed by the parents of a 13-year-old Chinese boy who committed suicide in 2004. According to news reports out of China, the grieving parents blamed the death on their son's addiction to World of Warcraft.

Although Xinhua reported the game involved was the MMORPG World of Warcraft, Pacific Epoch said the suit blamed Blizzard's Warcraft game, a real-time strategy game. World of Warcraft had not reached China by the time of the boy's death in December 2004, according to the researchers.

If these new details are correct, WoW is getting a bad rap in relation to the boy's suicide. Red Herring has more on this topic today.
Printer Friendly PageScore: 0
Posted by Tessil Monday, November 28, 2005 (15:31:41)

 Sony DRM Rootkit: More Sordid Details

Security a Finnish researcher named Muzzy noticed a vulnerability in the web-based uninstaller that Sony offers to users who want to remove the First4Internet XCP copy protection software. For affected users, this represents a far greater security risk than even the original Sony rootkit.

The consequences of the flaw are severe. It allows any web page you visit to download, install, and run any code it likes on your computer. Any web page can seize control of your computer; then it can do anything it likes. That's about as serious as a security flaw can get.

The root of the problem is a serious design flaw in Sony's web-based uninstaller. When you first fill out Sony's form to request a copy of the uninstaller, the request form downloads and installs a program - an ActiveX control created by the DRM vendor, First4Internet - called CodeSupport. CodeSupport remains on your system after you leave Sony's site, and it is marked as safe for scripting, so any web page can ask CodeSupport to do things. One thing CodeSupport can be told to do is download and install code from an Internet site. Unfortunately, CodeSupport doesn't verify that the downloaded code actually came from Sony or First4Internet. This means any web page can make CodeSupport download and install code from any URL without asking the user's permission.

USA Today reports that Sony will recall the affected CDs. Discs in the supply chain will not be sold, and customers who have already bought discs will be able to exchange them.
Printer Friendly PageScore: 0
Posted by Tessil Monday, November 21, 2005 (13:33:29)

 Roster Master for Dragonfly v4 Released

Dragonfly Version 4 of Roster Master for Dragonfly is out!

This adds a number of bugfixes and feature enhancements, but most of all, it adds the first iteration of the dynamic signature generator. The signature block generator uses a pretty unique and innovative caching method:

  • Registers a shutdown function to destory GD image resources.
  • Gets the Character_ID from the server environment and casts it to integer.
  • Gets the record matching the Character_ID from the roster, validating that it exists at the same time.
  • Checks the server environment to see if a forced refresh has been requested by a CMS user, if it has, skip the caching logic.
  • The caching logic starts by seeing if a signature block file already exists, gets the last modified time of the file, and checks that the file is at least as new as the latest information for that character in the roster. (The roster is configured by default to check Sony's data on the next roster or heritage quest tracker access after six hours.)
  • It then checks to see if the file modification time is greater than the If-Modified-Since header sent by the client. If it is, it pushes the cached file and exits. If it is not, it sends a 304 response and exits.
  • If the caching logic has been skipped or exited, the module creates the image file, saves it to the cache directory, pushes it to the client, and exits.
Right now, the signature block feature is still pretty nacent, future feature will probably include some customization and better handling of font sizes.

Read the Roster Master development thread on EQ2Players to learn more about Roster Master's progress!
Printer Friendly PageScore: 0
Posted by Tessil Monday, November 21, 2005 (13:24:01)

 Happy Birthday EQII!

EverQuest II News EverQuest II celebrates its 1st birthday on November 9, 2005. As part of the celebration, special in-game items are being offered to the players. Your reward is based on the number of days that you've been an active EQII subscriber.

However, the most extraordinary gift is the option for US and European players to use unique Asian-styled characters that were only previously available for the EverQuest II East project created by SOGA, an SOE joint-venture development studio based in Taiwan.
Printer Friendly PageScore: 0
Posted by Tessil Tuesday, November 08, 2005 (12:08:02)

 AT&T To Provide Managed Hosting Services To Microsoft Game Studios

Gaming News AT&T announced today it has won a $9.5 million, three-year managed hosting contract from Microsoft Game Studios (MGS) to support various online experiences and the infrastructure for massively multiplayer online role-playing games. The online games include the latest for both Windows and the Xbox 360 video game and entertainment system from Microsoft.

Multiplayer online games, where tens of thousands of users play simultaneously from points around the globe, have emerged as one of the most sophisticated, bandwidth-intensive applications on the Internet. Multiplayer games have stringent requirements for real-time communication, dynamic applications and near-100 percent availability and reliability.
Printer Friendly PageScore: 0
Posted by Tessil Monday, November 07, 2005 (02:13:27)

 Sony BMG - Too Little, Too Late...

Security Sony has offered a sort of "fix" for the DRM rootkit that was discovered by Mark Russinovich over at Sysinternals on his recently-purchased Get Right with the Man (the name is ironic under the circumstances) CD by the Van Zant brothers. The new DRM scheme has been widely reported on Slashdot, C|Net, PC Pro, The Inquirier, The Register, and The Washington Post.

Leo Laporte also interviewed Steve Gibson from GRC.com details and consequences of Sony Corporation's alarming "Rootkit" DRM (digital rights management) copy protection scheme.

"November 2, 2005 - This Service Pack removes the cloaking technology component that has been recently discussed in a number of articles published regarding the XCP Technology used on SONY BMG content protected CDs. This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers."

The updates site initially prompts the user to install an ActiveX control which detects if there is an XCP - Aurora installation and then selects the most appropriate update. To remove this activeX control simply open the folder "%SYSTEMROOT%\downloaded program files" (On a windows XP computer with a default installation the %SYSTEMROOT% folder will be "C:\Windows") and delete the file "codesupport.ocx".

When the activeX control has been installed the Updates Site will display one of two screens. The updates site will either inform you that it cannot find an XCP installation or it will offer the download of Service Pack 2. [Ed: Note that in this case Service Pack 2 refers to XCP, it's not related to the Microsoft Service Packs.] In addition to removing the cloaking, Service Pack 2 includes all fixes from the earlier Service Pack 1 update. "In order to ensure a secure installation," Service Pack 2 includes the newest version of all DRM components.

Be warned, the patch does not remove the DRM software, it merely updates it and removes the cloaking feature.

Instead of using the "uninstaller" (which uninstalls nothing), users can perform a safe decloaking by opening the Run dialog from the Start menu, entering "sc delete $sys$aries", and then rebooting. This sequence deletes the driver from the Windows Registry so that even though its image is still present on disk, the I/O system will not load it during subsequent boots.
Printer Friendly PageScore: 0
Posted by Tessil Thursday, November 03, 2005 (12:45:47)

   Toggle Content Guild Wall of Fame
Guild Name:
 Clenched Fist
Guild Level: 350
Total Characters: 76
Average Adv. Level: 71
Average Art. Level: 33

Date Formed:
 Wed, 12 Jan 2005 21:31:00
Average Quests Completed: 704
Total Rares Harvested: 16,440
Total Items Crafted: 700,077

Highest Guild Status Contributor:
 Tulvarus (156,997,011)
Most Quests Complete:
 Tulvarus (6,792)
Most Collections Complete:
 Toukai (1,392)
Highest Max Melee Hit:
 Tulvarus (6,305,528,905,549)
Highest Max Magic Hit:
 Tulvarus (940,935,642,680)
Most rares collected:
 Tulvarus (10,290)
Most items crafted:
 Tulvarus (556,133)
Longest Time Played:
 Tulvarus (2 years 7 months 1 week 2 days 4 hours)

Class Breakdown:
  • Fighter: 18
    • Berserker: 5
    • Guardian: 3
    • Bruiser: 2
    • Monk: 3
    • Paladin: 5
    • Shadow Knight: 0
  • Priest: 17
    • Templar: 2
    • Inquisitor: 3
    • Warden: 2
    • Fury: 2
    • Defiler: 1
    • Mystic: 4
    • Channeler: 3
  • Mage: 19
    • Warlock: 3
    • Wizard: 4
    • Illusionist: 3
    • Coercer: 3
    • Necromancer: 3
    • Conjuror: 3
  • Scout: 19
    • Brigand: 2
    • Swashbuckler: 2
    • Dirge: 2
    • Troubador: 4
    • Assassin: 2
    • Ranger: 3
    • Beastlord: 4

Trades Breakdown:
  • Craftsman: 10
    • Craftsman: 0
    • Provisioner: 4
    • Woodworker: 2
    • Carpenter: 4
  • Outfitter: 6
    • Outfitter: 1
    • Armorer: 2
    • Weaponsmith: 2
    • Tailor: 1
  • Scholar: 11
    • Scholar: 0
    • Jeweler: 6
    • Sage: 1
    • Alchemist: 4

   Toggle Content Today in History
One day like today...
Newton's Principia is published. Math classes now more difficult with the introduction of this new fangled calculus stuff.

   Toggle Content Forums Last Posts
Last 10 Forum Messages
Last post by Tulvarus in The Forum on Dec 19, 2018 at 05:54:44

 MC Lars - "Dragon Blood"
Last post by Tessil in The Forum on Sep 17, 2015 at 21:46:44

 [Workaround] Double/Ghost Image in Tranquil Sea
Last post by Tessil in The Forum on Nov 24, 2014 at 00:07:53

 Everquest2 VS Cat
Last post by Diatomic in The Forum on Mar 31, 2014 at 22:31:49

 TOV Armor comparison
Last post by bordorg in The Forum on Feb 23, 2014 at 22:05:55

 SOE LIVE 2013 Tulvarus
Last post by Tulvarus in The Forum on Jul 29, 2013 at 22:15:58

 LON Packs February 2013
Last post by Tulvarus in The Forum on Feb 02, 2013 at 23:20:27

 SOE LIVE 2013
Last post by Tulvarus in The Forum on Feb 02, 2013 at 23:18:47

 Moving in to a House
Last post by Tessil in The Forum on Aug 12, 2012 at 03:03:06

 Computer Opinion
Last post by Tulvarus in The Forum on Dec 02, 2011 at 21:01:05

   Toggle Content Coming Events
There are no events scheduled in the next 10 days.

   Toggle Content Useful Links
The Dragons Armory - Character analysis
The EQ2 Wire - Breaking News and Commentary
EQ2i - The EverQuest II Wiki
EQ2U - Live Game and Character Data
EQ2Interface - User Interface Mods and Add-ins

Adornment Calculator
Guide to Velious Armor

EQ2 Decorators
EQ2 Traders
Everseek - Furniture and House Items

   Toggle Content Information

CPG Dragonfly CMS

Powered by GNU

Powered by Apache

Powered by PHP

Protected by Suhosin

Powered by MySQL



Valid CSS! Valid XHTML 1.0!
The logos and trademarks used on this site are the property of their respective owners.
We are not responsible for content posted by our users, the individual user assumes full responsibilty.
You can syndicate our news using the file news.php (RSS 0.91), or news2.php (RSS 2.0).

Interactive software released under GNU GPL, Code Credits, Privacy Policy