What I have dubbed Y2k7DST went off (almost) without a hitch. All the hundreds of patched machines seemed to roll over properly… for the most part.

The one thing that completely slipped my mind was ColdFusion. Maybe because I haven’t coded in it in so long or maybe it was because I assumed it got its time hooks from the OS.

I any case, ColdFusion MX 7 needs to have the JVM updated to accommodate the new (<sarcasm> and infinitely wise </sarcasm>) daylight savings time change.

The ‘details’ of this update can be found in Adobe TechNote: d2ab4470

The install instructions are bit scattered so, because I’m such a nice a guy, I have summarized them here for the lazy or uninitiated. These instructions are only what you need to get CFMX7 updated. Because of this you should read the accompanying instructions so you know what you are doing. And as always I take no responsibility if anything mucks up during this process.

ColdFusion MX 7 2007 DST Update Instructions for Linux:

1. SSH to your web server and pull up a root shell or sudo all of the following.
2. Download the TZupdater from java.sun.com
3. Create an account, login or use bugmenot.com to get the file.
4. Because the sunsite uses a special download application, you need to download the patch to your local workstation and scp/ftp the file to your server.
5. Change to the directory you downloaded the tzupdater-1.1.0-2007c.zip to.
6. unzip tzupdater-1.1.0-2007c.zip; cd tzupdater-1.1.0-2007c
7. /opt/coldfusionmx7/bin/coldfusion stop
8. /opt/coldfusionmx7/runtime/jre/bin/java -jar tzupdater.jar -u
9. /opt/coldfusionmx7/bin/coldfusion start

That should be it. Test it to be sure it worked.

I have migrated my site to wordpress. Blogg technology has moved on but the neBlog software that Drew and I wrote hasn’t. Neither he nor I have the time to hack away at it so I am moving on.

I am also in the process of moving away from coldfusion and into php. I feel that PHP has far more quality open source applications and I’m tired of writing everything as I need it. I don’t have time for the… “I need a blog, better get writing” …stuff anymore.

I was just informed of an interesting string on the webappsec list serve talking about a MySpace.com xss virus.

Now this is a new concept… viral code attached to a cross site scripting attack, and because it was used on such a hi profile community site it seems to have gotten a bit of attention. Read this link for more info.

http://fast.info/myspace/

http://www.bindshell.net/papers/xssv.html

Whats up people?! Wow its been a long time since I have posted to this site. I just looked at the logs and see that a TON of people are visiting for some reason; so I ‘m going to start posting all regular and stuff.

Man, a lot has happened since my last posts. I got a new gig as a linux administrator at an awesome local data center. The people I work with are amazingly cool, the environment is WAY laid back and the work is kinda fun.

My company, GuardianLogic, Inc. is doing some amazing stuff. I almost have metaguard (our login mechanism) ready to start selling. I have received a few emails asking about it already and the slowly growing traffic to the site is encouraging.

I just got published! ColdFusion Security Best Practices just ran in this months issue of ColdFusion Developers Journal. I have a few follow up articles that will be released on different cf news sites as well as a maillist and rss feed on ColdFusion and web application security. Check out guardianlogic.com for that (in a couple weeks).

Welp, after about a month and half of searching I managed to get myself a job at SiteObjects. I am VERY excited as I have wanted to work there for a long time. I will be doing support and development.

I will update everyone Monday (my first day) on how things are.

My new gig at SiteObjects is a blast! Its pretty much what I have been doing for Sigil this whole time only now I ‘m getting paid a regular, decent amount for it.

I have finaly made CFMX work on linux. For those of you who have tride and are still running CF5 here is what you have to do…

1. Remove CF5 wile backing up all of your dsn ‘s and stuff.
2. Install CFMX
3. Pretend you dont care that it doesnt work.
4. Install the CFMX 6.1 Upgrade.
5. Jump up and down because CFMX finaly works on linux.

Aside from that not much is up cept for the fact that I am sick as dog.

Every year at about this time I get the exact same illness. My throte is all tore up, I cough, my nose is plugged and my ears close up. This is only my second week at my new job and I had to stay home sick today in hope of getting better. Man it sucks.

I think I ‘m leaning twords FreeBSD as my new distro of choice. I know, its not Linux, but its stable, supported, secure, easy to use and install and fun. I got ColdFusion5 to work on it the other day by tweaking the hell out of the /opt/coldfusion/bin/start script. I have some semaphore issues in the registry to fix now. Not sure whats up with that. I still plan on installing a Debian box and seeing if that goes any better. I havent realy used Debian all that much because the install turned me off big time. The software package selection part takes too freaken long.

This weekend (I refer to the rest of today as ‘this weekend ‘) I will be working on making the PHP class file for our product at work. Its almost done only I have a few problems to work out trying to get vars from a function. Weird stuff.
I realized the other day that all I have been talking about in my blog in techie stuff so I ‘m going to try and start talking more about other stuff.

I plan on getting a new cell phone tomorrow (or today). WaHoo! Pics will follow.

Speaking of pics.. I should update my home cam. I havnt touched it since before Halloween.