Friday, December 25, 2009

Batch MS DOS ASCII to Web Converter Script

A little script that converts MS DOS ASCII files, such as NFO's  or FILE_ID.DIZ text files (Code Page 437, USA) to Unicode  and HTML encoded files that can be used to display the ASCII art, specifically the "High ASCII" or block ASCII art on a web site. The script is written in VBScript, but the release package also includes a Windows executable, which is the VBScript converted via VBSEdit by Adersoft.

I used the same script to prepare the ASCIIs in my text art galleries on my web site, such as:

just to name a few.

NOTE: An Updated Version of the Script is also available now!

You can download the script here:   ROY-BATCHCONVERT-ASCII2WEB.ZIP (555 KB)

For example the top logo of this NFO file, which is in DOS ASCII Format and looks like this:


───────── ▄ ▄▄▄▄ ▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄ ▄ ▄▄▄ ▄ ▄▄▄ ▄▄▄▄▄ ▄ ─────────
·R·E·L·.· ▄ ▄▄▄▄ ▀▀▀▀▀▀███ ▀▀▀▀▀▀▀▀███ █ ███ ▀ ███ ▄▄▄▄ ▄ ·2·0·0·9·
─────────── ▄ ▄▄▄ ███ ▄▄██▀ █ ███ █ ███ █▄ ▀▀▀▀▀███ ▄▄▄ ▄ ───────────
▄▄ ███ ▄ ███ █ ███▄▄▄▄▄▄▄▄ ▄▄▄▄▄███ ▄▄
▀▀▀ ███ ▀ ▀▀▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀▀


would be converted to the following;

───────── ▄ ▄▄▄▄ ▄▄▄▄▄▄▄▄▄   ▄▄▄▄▄▄▄▄▄  ▄ ▄▄▄ ▄ ▄▄▄ ▄▄▄▄▄ ▄ ─────────
·R·E·L·.·  ▄ ▄▄▄▄ ▀▀▀▀▀▀███ ▀▀▀▀▀▀▀▀███ █ ███ ▀ ███ ▄▄▄▄ ▄  ·2·0·0·9·
─────────── ▄ ▄▄▄ ███ ▄▄██▀ █ ███ █ ███ █▄ ▀▀▀▀▀███ ▄▄▄ ▄ ───────────
               ▄▄ ███ ▄ ███ █ ███▄▄▄▄▄▄▄▄  ▄▄▄▄▄███ ▄▄
                  ▀▀▀   ███ ▀  ▀▀▀▀▀▀▀▀▀  ▀▀▀▀▀▀▀▀

Note: I included the release ZIP archive are the files roy.asc and roy.web as examples also.

It would look just like the ASCII above the blue code, if you use it properly in your HTML page.

The Web encoded ASCII does not include <BR> Tags for the line-breaks. You have to add those manually or do what I do on my web site and enclose the code in <PRE> </PRE> tags, which preserves the line-breaks within the enclosed text.

Since the result is Unicode and not DOS ASCII anymore, you can use any mono-space font to display the ASCII somewhat correctly. You won't get a 100% accurate result anyway, because the old MS DOS font set is not part of Windows anymore. What you can get is only a close approximation. I use on my web site the font "Lucida Console", which seems to be installed on many machines. If the Windows of the user who visits your page with the ASCII for example does not have that font installed, Windows will automatically pick another font that comes close. I use the following CSS formatting for the PRE tags where I show ASCIIs. 

 


   1: pre {
   2:    background-color:#000;
   3:    color:#FFF;
   4:    display:block;
   5:    font-family:"Lucida Console", monospace;
   6:    font-size:9pt;
   7:    line-height:12px;
   8:    padding:10px;
   9:    text-align:left;
  10:  } 

If the PRE Tag is also used for something else on your web site then you can also define it for a specific class selector like


   1: pre.asciiart {
   2: ...
   3: } 

You would then also have to extend the PRE HTML tag like this:


   1: <PRE class=asciiart>
   2: ...
   3: </PRE> 

The script is designed to convert all files with a specified extension (.ASC by default) to web ready files with a new extension (.WEB by default, but you could also make it .HTML or whatever).

There are two additional options, where I recommend to use the defaults (which is "yes").

The first one is "Sanitize?"


What that does, is removing ASCII characters with an ASCII code smaller than 32, which are special control characters that cannot be printed anyway, with 3 exceptions, chr(10) = line-feed, chr(13) = carriage-return and chr(9) = tab. LF and CR remain unchanged. Tab characters will be converted to 8 spaces, which is the default MS DOS tab-stop.


The second option is "HTML Encode?", which means that all non-US-ASCII characters (the 7 bit ASCII codes) will be converted to HTML codes like &#XXX;. Also standard ASCII characters that could be misinterpreted by HTML or DHTML and XML are also encoded, like the " becomes &quot;, & becomes &amp;, < becomes &lt; and > becomes &gt; etc.


Part of this package is the image "Batch-ASCII-2-Web-Steps.jpg", which shows screenshots of all the steps where the script goes through.

You can download the script here:   ROY-BATCHCONVERT-ASCII2WEB.ZIP (555 KB)

Batch-ASCII-2-Web-Steps

You can download the script here:   ROY-BATCHCONVERT-ASCII2WEB.ZIP (555 KB)

Enjoy!
Carsten aka Roy/SAC

PS. This script is freeware. Do with it whatever you like, except selling it. You can use it free, copy it, share it, even modify it if you like to. You are using it at your own risk. You cannot make me liable for any damage or loss of data that might results directly or indirectly because of the use of my script.

Batch-ASCII-2-Web-BeforeAfter

Monday, December 14, 2009

Malware Threat Warning! Scam via Online Video!

This is not a prank! I Just stumbled across this when videos by the YouTube user  Kaleigh421112Trang suddenly showed up in my subscriptions (based on Keywords) for my CirqueDuSoleilGuru account.

I made the URLs that are not hyperlinked this way on purpose, to prevent any accidental harm to the readers. You can copy and paste the URLs into your browsers address bar, if you know what you are doing at your own risk. Don’t say that I did not warn you!

The user account in question was just created on 12/13/2009

By now this user has already 190 virtually identical videos uploaded that don't show much, except a message that the video cannot be watched on YouTube due to length limitation. See description for link to full video. etc. Here is a screen shot of it.

YouTubeScam01

E.g. Circus Circus Part 1/13 Online*:  http://www.youtube.com/watch?v=l5kYgqUX0rE

*This video was actually already taken down by YouTube, maybe because I flagged it as Spam from an established YouTube account with almost 2000 subscribers. But most of the other videos are still up as I am writing this. For example this one http://www.youtube.com/watch?v=hJj-PkdLqac  (which I also reported so it is probably being removed shortly as well)

YouTubeScam05

The videos that are still up all include a short description and a obscured link with tracking code embed via the redirection service TinyURL.com. In the example video that I mentioned before and reported to YouTube already the URL was: http://tinyurl.com/ycksuwy&499420166

Here Comes The Scammy Part

That URL redirects to: http://www.onlinemoviedb.info/watch.php?vid=Dreaming_in_Circus

The page states that a plug-in must be downloaded to watch the video. It includes multiple links where you are supposed to download the needed plug-in from, such as this one (Warning! Do not Download and Execute)!

http://preview.licenseacquisition.org/48/1056428137.51143/vlc-1.0.1-win32.exe

The referred to EXE “vlcsetup.exe” is 328,984 bytes in size. The file name is implying that the plug-in is related to the freeware VideoLan Video Player, what it is not.

YouTubeScam02

I downloaded the executable without starting it. I then scanned it with McAfee Viruscan, which did not detect anything yet. So I uploaded it to VirusTotal.com, an online on-demand virus and malware scanner, which scans files using over 50 different scanners such as McAfee, F-Secure, Bitdefender, Kaspersky, Panda, PC-Tools, Sophos, TrendMicro and others.

I wasn’t the first one who checked the file obviously, because a report was already available*, which gives it a 37% probability that it is infected. It is probably new and I bet the probability will increase as I write this (as do the uploads of virtually identical videos with the same purpose to YouTube).

Here is the link to the report from VirusTotal.com.

 

* VirusTotal.com knows that it is the same file as somebody else already submit based on the file size and file name, because that could be faked easily. It uses so called checksums that are generated from the entire content of the file. The Checksums for this file are for example:

MD5   : bead2d46d08ff080ac4a6d0908922230
SHA1  : 0697fe4257419efc39921c9da71c8339cde3f463
SHA256: 6e62e219e38c90562a59851b72f2929000b599a6ddd0f2482c7b1acda0a8ce9d

More Hints and Scale of the Problem

YouTubeScam04Here are more accounts on YouTube. Just to name a few (Each with hundreds of videos each):

http://www.youtube.com/user/Moon230377Arletta
http://www.youtube.com/user/Dirk891479Pasty
http://www.youtube.com/user/Kathy664276Dominica

There are most certainly a lot more, but they should be easily be detected. Look for new users that have hundred+ videos of 9:58 minutes length and a TinyURL.com link in the video description.

All of those Users always have video listing disabled (does not show anything on the user’s home page)

The target website itself lists tons of copyrighted movies on its homepage.

Also suspicious, the detail page of every movie has the same comments to give the impression that people watched the movie etc. 

Here are the fake comments

Looploop
3rd link worked perfectly and fast mirror. I liked it. Thanks for the upload! 

Hotjamz
Yep that was a good one 5/5 

Monstersb
didn't think it was all that,but it was good.7/10.great qualit tho 

DazedNConfused
How do I watch this video? 

DazedNConfused
Never mind. I just downloaded the plugin and the video worked flawlessly! 

This Is Just The Beginning

The uploads are done on a large scale and with sophisticated scripts to dynamically create typical titles with matching descriptions in YouTube. YouTube also has a dupe checker that identical videos cannot be uploaded by the same account (at least used to be it that way). But changing a single byte is already enough to get around it. That’s probably all these guys did, because the videos appear to the human viewer identical. They also show all the same Thumbnail, which should raise suspicion by any user of YouTube with some working brain cells left (That is how I got suspicious). The hackers are obviously not sophisticated enough though, because they did not seem to have taken into account the problem with identical thumbnails that will appear in the box with “more videos by …” but also in the “related video box” where I got the other user names from. Because the videos are similar in some fashion, YouTube thinks that they are related.

It is very very hard to produce identical thumbnails for videos that are not identical. In the early days YouTube used frames that could be predicted in advance (and was used for manipulations by users). This isn’t possible today anymore.

I would not be surprised, if similar scams will pop-up in the future more and more, also on other smaller social networks and video sharing sites. Those scams will also get more and more sophisticated and users will be vulnerable until their Antivirus/Antispyware software will be updated to detect those new threats that will emerge and then disappear again quickly.

The only real protection is up to the user himself

NEVER download and install a plug-in where you don’t know and trust the source. Installing a malicious plug-in is like unlocking the door, disabling the alarm and then open it to invite the burglar in to have a look around and take whatever he likes.  Almost all video sharing sites use FLASH for the video playback. The Flash plug-in should only be downloaded from the Adobe.com web site (and not from anywhere else).

http://www.adobe.com/go/getflashplayer

Some apps might use the Shockwave plug-in, also from Adobe, which can be downloaded and installed via

http://www.adobe.com/go/getshockwave

Although I have not seen used with online video yet, web applications might also use JAVA by SUN, which can also be downloaded absolutely free of charge (like the FLASH and SHOCKWAVE plug-ins) from the web site that was created by SUN just for this. The URL is: http://www.java.com/download

Be Careful, without getting paranoid. Use common sense and caution where appropriate. Unfortunately not everybody on the Internet has the safety and happiness of the users in mind.

Be Safe!

Cheers!

Carsten aka Roy/SAC

Tuesday, December 01, 2009

Extortion and Trickery Practices of American Banks Exposed

Note: I only write about social and political issues at my personal blog, if I think that I must. This article qualifies as such. It also seems to be an issue that only applies to Americans and not other western or developed countries as far as I know. Correct me on that one, if I should be wrong about this assumption.

I recently watched the 56 minutes long episode “The Card Game” of the PBS documentary series “FRONTLINE”, which premiered on American television on 11/24/2009, investigates the massive US consumer loan and credit card industry and its abusive behaviors in the past and present in an unregulated marketplace where anything goes. The video recording of this documentary can be watched online at the PBS.ORG web site.

I was aware of many of the aspects of the American loan industry and surprised that such predatorily behavior that was demonstrated by all US Banks and other private enterprises was perfectly legal in this country. I was initially shocked when I learned about those realities and still disgusted by it and by anybody who argues that this is okay and perfectly normal in a free and market driven economy, especially if those individuals claim that the those cases which might be considered excessive are only exceptions and not created intentionally for profiteering by those companies and banks that cause them. banking-abuse

Some of the facts from the documentary were even new to me and disgusted me only more and at the same time aware of the fact that there is a pressing need for change, especially in times like these. I highly recommend watching this video. I decided to write this post to extend on that and also raise the awareness that most other free countries in the world already did something about the problem hundreds of years ago.

Some people describe the industry as the “Wild West”, but the Wild West was never that wild in comparison. The only thing I can think of to compare it to is defined as “organized crime” and generally known as criminal acts committed by a “Mafia”. Many members of the Mafia served and serve prison sentences for crimes that dwarf the, for the average JOE indistinguishable from each other, but perfectly legal practices (under U.S. laws) committed by the banks. There is no doubt that those practices are considered “immoral” and worse by the vast majority of people in the United States and are outright illegal in most other western countries, including Great Britain and my own native country of Germany.

These practices have a specific word to describe them in the German language, called “Wucher”. I did not know if there existed a word in the English language for this as well and only learned about it recently also. The word “Usury” seems to be that word. The Britannica Concise Encyclopedia defines “usury” as:

Usury

In law, the crime of charging an unlawfully high rate of interest.
In Old English law, the taking of any compensation whatsoever was termed usury. With the expansion of trade in the 13th century, the demand for credit increased, necessitating a modification in the definition of the term. In 1545 England fixed a legal maximum interest, a practice later followed by other Western nations (with the exception of the United States*).

*added by author

The Concise Oxford English Dictionary defines usury as:

English: usury = lending money at exorbitant interest rates. archaic interest at such rates.

Those definitions are in my opinion too short and also too narrow to capture the full meaning of the German word “Wucher”. So I will try my best for my own definition to describe it to you.

Usury describes the offering of a service and demanding in return for a clearly excessive compensation, exploiting a situation when the party this service is being offered to is the most vulnerable and typically left without another choice with the exception of extreme and typically immediate destructive ones. It could also be an offer where the actual compensation the party that became victim of usury agreed to was well hidden in the agreement itself. The victim would have been unaware of it during the time when the agreement was made, not consent with the fulfillment of its obligation when it becomes apparent, and never had knowingly agreed to those terms when the contact was sealed.

Usury is a legal exception to a free economy that is in general market driven without government interference for an exceptional situation that is clearly located outside of the typical free market environment. Usury could be described as the financial world equivalent of extortion, fraudulent deception or trickery committed in the real world.

Contractual agreements imposed by one party on another that could be described as Usury are also often the attempt by one party to “lock in” the other one in a vicious and destructive cycle to extort the maximum amount of profit from the party that fell victim of a usury (typically exceeding the value of the original services that was provided by the first party many times over) and in many cases leading to a point where the victim becomes unable to fulfill the obligations demanded by the agreement.

The setting of a maximum interest rate for a loan transaction is one method to prevent usury, but not the only or even best option, because it would not protect against usury committed outside of loan transactions, but the same premise and outcome.

German business law as it is defined within paragraph 2 of § 138 (article 138) with the BGB “Bürgerliches Gesetzbuch” (German Civil Code) describes “usury” as follows:

durch das jemand unter Ausbeutung der Zwangslage, der Unerfahrenheit, des Mangels an Urteilsvermögen oder der erheblichen Willensschwäche eines anderen sich oder einem Dritten für eine Leistung Vermögensvorteile versprechen oder gewähren lässt, die in einem auffälligen Missverhältnis zu der Leistung stehen.

Quote taken from the German Language Wikipedia entry for “Wucher

It roughly translates to English (which wasn’t easy to do):

“that someone through the exploitation of the position of constraint, the inexperience, the lack of judgment or the considerable lack of will-power of somebody, takes advantage for one selves  or a third  party  intending or not preventing to gain material advantages for a  reward or  financial promises that are strikingly disproportionate to the value of the provided service .”

Mutual agreements or contracts that qualify as usury are automatically void and never considered valid or binding from the start, even if they were signed by both parties. Since the definition does not include any specific figure or exact definition of what is “disproportionate” in return for any given service, courts normally have to decide that on a case by case basis, evaluating all objective and subjective arguments from both sides, but the general “rule of thumb” is that in virtually any case a usury is committed, if the required compensation for a service is in excess of twice the value of the original service provided by the usurer.

A $30 “overdraft fee” that is charged for a transaction that exceeds a person’s account balance by $15 or less and covered by the “overdraft protection service” provided by the bank is a clear case of usury. As stated already, it is irrelevant if the person agreed to the terms of this service or not. Making the customer aware of the fee alone is not enough, because the customer is typically unaware of all the facts required to be able to predict the invocation of the service due to the lack of transparency of the underlying transactions that trigger it. Unexpected freezing of funds for some reason, delayed processing of transactions unfavorable to the customer or expedited processing of transactions favorable to the bank, non-chronological booking order are often the cause for the unintended activation of service by the customer thus preventing the customer from avoiding it in the first place.

Usurers could even face civil and criminal charges in Germany, risking imprisonment, depending on the amount of damage that was caused to the other party as a direct or indirect consequence from the usury.

By German law, ALL CEO’s of US Banks would most likely have to spend long prison terms for all the damage caused to people as a direct consequence of the usuries committed by their banks. The practice of so called “payday loans” (short term cash advances offered for a high fee) is beyond doubt usury and thus illegal in Germany by definition already, even though the fees are much lower than twice the amount loaned when only looked at the nominal values of those transactions. However, the transaction is for the average person indistinguishable from a “loan transaction” as defined by US laws, even though it does not qualify as such in the US legal system. The standard terms for the calculation of due return payments of loans are defined by the annual interest rate applied to the loaned amount. In the case of payday loans, this annual interest rate is typically over 400%, which is far beyond 200% of the “thumb rule”.

The PBS documentary shows that recent legislation made by the Obama administration was incapable to really address the issue, changing virtually nothing and certainly not the behavior, not to mention the attitude, of the American banks to protect the free economy from such predatory behavior.

If you ask a criminal who was sent to jail for committing crimes like extortion or trickery, they will most certainly claim their innocence, trying to convince you that their victim had either a choice (in the case of extortion) or they should not have been blamed for the lack of comprehension, knowledge or intelligence in the case of the victims of their trickery and deceptions. Compare this to arguments made by PR (Public Relations) agents and lobbyists for the banking industry and you might find them to be striking similar to each other with only one major difference. In the first case they come out of the mouth of a convicted criminal wearing a “striped” prison uniform and in the other out of the mouth of a well groomed person wearing business attire.

A law that protects honest people and businesses from usury is just as bad in a free market economy (or necessary) as criminal laws that protect the same honest people and businesses against extortion and trickery, and what is wrong about those? Are they limiting your personal liberties and freedom? The criminal who was sent to prison because of them probably would agree, but do you?

Cheers!

Carsten Cumbrowski

Feel free to comment or express your own opinion about this subject via the comments section below. You can do this anonymously, if you don’t want to state your name. I will publish any comment unless it is nothing more than a personal attack of any other person (including myself)  without any factual proof to backup any defamation attempts, off topic spam or stuff that is illegal and could create any legal issues.