ConvolutedTheory

Jakalope: Evolution

Derek — Tue, 09 Mar 2010 03:10:35 +0000

Since I'm feeling very "General" category heavy lately, I thought I'd write a little piece on a band that I've liked for quite a long time. Jakalope has recently gone through a bit of a transformation, with lead singer Katie B. leaving for her own solo career, and Dave Ogilvie finding Chrystal Leigh hiding somewhere to replace her. This is the part of the post where my mind is going to turn all mushy, because I actually like both incarnations of Jakalope as they are. Here, see for yourself.

This is Jakalope, circa 2004, with Katie B. as the lead singer. "Pretty Life"

And here is the new lead singer, Chrystal Leigh, with "aka Cupcake".

I don't know. I like the way Jakalope is going, but I also like the older Katie stuff.

Anyway. Just a post to fill some DB space.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

Testing Amazon showcase…

Derek — Wed, 03 Mar 2010 04:49:02 +0000

What I'm reading right now.

The Looking Glass Wars

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

/me sighs at Twitter.

Derek — Wed, 03 Mar 2010 04:36:14 +0000

Ugh. The tag #unotfromthehoodif could be the dumbest thing I've ever seen. I wonder how many people that use it actually lived in a 'hood. (Not being a jerk here, I actually did live in the 'hood.) No related posts. Related posts brought to you by Yet Another Related Posts Plugin. No related posts. Related posts brought to you by Yet Another Related Posts Plugin.

Good times

Derek — Wed, 03 Mar 2010 04:05:34 +0000

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

I find it difficult…

Derek — Tue, 02 Mar 2010 05:10:05 +0000

Maybe this shouldn't be the case, but I find it difficult to rant on my blog. And I know that these are supposed to be an outlet for peoples emotions, but for some reason I harbor this deep-seated concern that someone may misconstrue my rantings as unhappy rantings. I'm far from unhappy, just a little stressed out.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

Drupal and mod_security : Part 2

Derek — Sat, 27 Feb 2010 23:29:06 +0000

Hi all,

I've gotten quite a few emails regarding my last post about Drupal and mod_security, and what those rules I'm removing actually do. Well, I'll explain.

First Rule: 960010
SecRule REQUEST_METHOD "!^(?:get|head|propfind|options)$" \
"chain, t:lowercase, deny,log,auditlog,status:401,msg:'Request content type
is not allowed by policy',,id:'960010',severity:'4'"
SecRule REQUEST_HEADERS:Content-Type "!(?:^(?:application\/x-www-form-urlencoded
(?:;(?:\s?charset\s?=\s?[\w\d\-]{1,18})?)??$|multipart/form-data;)|text/xml)"

This rule basically only allows certain content-type headers to be passed with the request methods listed in REQUEST_METHOD. Apparently, Drupal doesn't respect this rule in posts.

Next, 960015
SecRule &REQUEST_HEADERS:Accept "@eq 0" \
"chain,skip:1,log,auditlog,msg:'Request Missing an Accept Header', severity:'2',,id:'960015',"
SecRule REQUEST_METHOD "!^OPTIONS$" "t:none"
SecRule REQUEST_HEADERS:Accept "^$" \
"chain,log,auditlog,msg:'Request Missing an Accept Header', severity:'2',,id:'960015',"
SecRule REQUEST_METHOD "!^OPTIONS$" "t:none"

This basically says, any request other than an OPTIONS request, *must* have an Accept header sent with it.

Next, 960032:
SecRule REQUEST_METHOD "!^((?:(?:POS|GE)T|OPTIONS|HEAD))$" \
"phase:2,log,auditlog,status:401,msg:'Method is not allowed by policy', severity:'2',,id:'960032',"

This says any methods other than POST, GET, OPTIONS or HEAD aren't allowed. While generally this is true, and I don't know why Drupal will occasionally hit this rule, I just remove it out of completeness.

And Lastly,

Rule 950107:
SecRule REQUEST_FILENAME|ARGS|ARGS_NAMES|REQUEST_HEADERS|XML:/*|!REQUEST_HEADERS:Referer "@validateUrlEncoding" \
"chain, deny,log,auditlog,status:400,msg:'URL Encoding Abuse Attack Attempt',,id:'950107',severity:'4'"
SecRule REQUEST_FILENAME|ARGS|ARGS_NAMES|REQUEST_HEADERS|XML:/*|!REQUEST_HEADERS:Referer "\%(?!$|\W|[0-9a-fA-F]{2}|u[0-9a-fA-F]{4})"

This rule merely checks the URL encoding on a URL. I say merely, but this rule is also matched almost _all of the time_.

I haven't actually run through the Drupal code and figured out why these are completely necessary, however I do know that they've fixed quite a few peoples problems.

Anyway, hope that clarifies some things for people.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

Dantes Inferno: ++

Derek — Sun, 14 Feb 2010 23:16:14 +0000

Well, last week I got Dante's Inferno for the PS3 (the game, I've had the poem for years), and I have to say it's a pretty good game overall. It chronicles a soldier of the crusade fighting through hell as described by Dante Alighieri to try to win back the soul of the woman he loves. Later, we find out Dante wasn't such a good guy while he was slaughtering thousands of people, but you probably guessed that already.

Oh, and he didn't know he was dead? Fighting Death and stealing his scythe didn't give that away? What? A few little plot holes aside. It was awesome. Any other difficulty higher than Hellish is damn near impossible even with a decked out set of gear (It's probably because I suck at it, though).

And it has King Minos! Everyone loves King Minos! Remember that show? with his wife Deborah?

...

Wait.

The 4400: Revisited Well, I started rewatching the entire series of The 4400...

Related posts brought to you by Yet Another Related Posts Plugin.

Stuff I care about, but Delicious is being a pain in the ass.

Derek — Tue, 09 Feb 2010 05:30:07 +0000

USB VGA Adapters that work in Linux
nload
NSLU2 Ideas
Changing windows key in server 2008

What’s that on my shoe? oh, its my jejunum. Link dump time. A UNIX poem. A cool little post...

Related posts brought to you by Yet Another Related Posts Plugin.

Yay, paranoia!

Derek — Thu, 04 Feb 2010 01:34:04 +0000

Maybe because I've got this head cold, but I am oddly paranoid about random things in general as of late. One sentence posts aren't usually my style, but short posts are better than no posts. No related posts. Related posts brought to you by Yet Another Related Posts Plugin. No related posts. Related posts brought to you by Yet Another Related Posts Plugin.

Wow. Not the warcraft kind.

Derek — Wed, 03 Feb 2010 15:27:41 +0000

Wow, it has been a long time since I posted something. You'd think I could find something to rant about. Anything.

So, I'll just post randomness.

The car chase scene from Mr. and Mrs. Smith? Awesome. Hilarity.

My Job? Not to brag, but I have quite possibly the most awesome job that has ever existed. Anywhere.

I'm making a remarkable attempt to get back into photography. Some of the photos from my last jaunt in this art are over on my deviantart page. It's in the sidebar.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.