QQ2013协议分析（三）0825 touch 1
1.1 0825 touch 1（0825）
有时候在抓包工具里可以看到两组本地4000端口发往服务器8000端口的数据，那是因为重定向的原因，不过貌似并非那么肯定，有时候重定向并非必须的，所以直接进入第二个包。
1.1.1
[2013/6/6 11:01:16:524] 发送
02
32 59//版本号
08 25//命令
5B 31//包序号
QQ号//892
Aggregator
QQ2013协议分析（二）TCPF
11 years 5 months ago
我们尝试把QQ的协议进行分类
文字聊天协议族（TCPF, Text Chatting Protocol Family)：它主要支持与其它QQ客户端进行文字聊天。TCPF是建立在UDP协议之上。UDP数据包中的第一个字符02为这个协议族的标识。TCPF的服务器使用8000号端口，腾讯的QQ客户端软件一般从4000号端口开始尝试使用，但实际上，对客户端使用的端口号并没有限制。目前的研究集中在TCPF
CWangChao
QQ2013协议分析（一）准备工作
11 years 5 months ago
腾讯QQ（统一简称“QQ”）是腾讯公司开发的一款基于Internet的即时通信（IM）软件。腾讯QQ支持在线聊天、视频电话、点对点断点续传文件、共享文件、网络硬盘、自定义面板、QQ邮箱等多种功能，并可与移动通讯终端等多种通讯方式相连。1999年2月，腾讯正式推出第一个即时通信软件——“腾讯QQ”，QQ在线用户由1999年的2人（2人指马化腾和张志东）到现在已经发展到上亿用户，在线人数超过一亿，是中
CWangChao
IGIS finds no GCSB breaches, but law not clear
11 years 5 months ago
The Inspector-General of Intelligence and Security has completed an inquiry into potential breaches of the Government Communications Security Bureau Act (2003).
环境变量管理工具
11 years 5 months ago
职业coder是经常要修改系统的环境变量的，而我们的机器往往装的程序比较多，环境变量自然也多的不便于修改，比如下图中我机器的path变量，windows自带的实在太难用，于是开发了这么一个小软件，代码量也比较少，使用几年比较稳定，代码拿出来分享一下，省的同猿们重复造轮子，源码及程序下载见博文底部。
关键源码如下：
Environment.cs
using Microsoft.Win
CWangChao
Cyber planning course for key NZ infrastructure organisations
11 years 6 months ago
NCSC is offering spaces on a one day course for Government departments and critical infrastructure operators on how to respond to cyber attacks.
通用下载组件
11 years 6 months ago
两年前开始业余做一个产品，产品中一重要的模块就是下载，搜索互联网已经有很多人在做，但是大多都是GPL协议的，而我的产品是要商业化的，作为一个职业的coder，我想还是要尊重同行，有一个高的职业道德和职业修养更为重要，于是这两年一直在写一个下载组件，这个下载组件支持HTTP、FTP、BT等各种下载方式。
与其说是开发不如说是在集成，大致思路如下：
1.集成CURL，使其支持ftp
CWangChao
セキュリティ インテリジェンス レポート第 14 版 ～特集: リアルタイム保護の効果を知る～
11 years 6 months ago
インターネット ユーザーがマルウェアからコンピューターを守り、安全に Web ブラウズを行うには、充実したセキ
セキュリティ インテリジェンス レポート第 14 版 ～特集: リアルタイム保護の効果を知る～
11 years 6 months ago
インターネット ユーザーがマルウェアからコンピューターを守り、安全に Web ブラウズを行うには、充実したセキ
fcitx 输入法管理器
11 years 6 months ago
听说scim和ibus都弱爆了，fcitx不错，今天也换了试试，更换方式很简单，几句命令搞定。
sudo apt-get remove ibus
sudo apt-get remove scimsudo apt-get install fcitx fcitx-tools fcitx-sunpinyin
CWangChao
Out with the old, in with the April 2013 security updates
11 years 6 months ago
Windows XP was originally released on August 24, 2001. Since that time, high-speed Internet connections and wireless networking have gone from being a rarity to the norm, and Internet usage has grown from 360 million to almost two-and-a-half billion users. Thanks to programs like Skype, we now make video calls with regularity, and social media has grown from a curiosity to a part of our everyday lives.
Out with the old, in with the April 2013 security updates
11 years 6 months ago
Windows XP was originally released on August 24, 2001. Since that time, high-speed Internet connections and wireless networking have gone from being a rarity to the norm, and Internet usage has grown from 360 million to almost two-and-a-half billion users. Thanks to programs like Skype, we now make video calls with regularity, and social media has grown from a curiosity to a part of our everyday lives.
GCSB Response to Review of Compliance
11 years 6 months ago
GCSB Director Ian Fletcher says that he accepts all of the recommendations about the GCSB in the Compliance Review by Rebecca Kitteridge.
PM releases report into GCSB compliance
11 years 6 months ago
Prime Minister John Key today released the report of Rebecca Kitteridge into compliance at the Government Communications Security Bureau.
Openfire 3.8.1源码部署
11 years 6 months ago
mark一下，关心的人留言吧，需要的人多我就发一下。
CWangChao
Cyber security good for the bottom line, says GCSB Director
11 years 7 months ago
Speech given by the GCSB Director Ian Fletcher at the Gallagher Security conference held in Hamilton on 11 March 2013.
Key NZ infrastructure operators take a lead in cyber security
11 years 8 months ago
A group of NZ CI organisations have established the NZ Cyber Security Voluntary Standards for Industrial Control Systems Systems with the support of the NCSC.
More cyber threats reported in NZ
11 years 9 months ago
NCSC has reported an increase in the number of reported attacks against government agencies, critical national infrastructure,and private sector organisations.
January 2013 Out-of-Band Security Bulletin Webcast, Q&A, and Slide Deck
11 years 9 months ago
Today we’re publishing the January 2013 Out-of-Band Security Bulletin Webcast Questions & Answers page. During the webcast, we fielded 17 questions focusing on Security Update MS13-088, and SecurityAdvisory 2794220 which was deprecated by this update release. All questions and answers are included in the transcript.
We invite our customers to join us for the next scheduled webcast on Wednesday, February 13th at 11 a.
January 2013 Out-of-Band Security Bulletin Webcast, Q&A, and Slide Deck
11 years 9 months ago
Today we’re publishing the January 2013 Out-of-Band Security Bulletin Webcast Questions & Answers page. During the webcast, we fielded 17 questions focusing on Security Update MS13-088, and SecurityAdvisory 2794220 which was deprecated by this update release. All questions and answers are included in the transcript.
We invite our customers to join us for the next scheduled webcast on Wednesday, February 13th at 11 a.