>nmap -p 1-65535 -O -v 192.168.1.72

and the results…

Starting Nmap 5.21 ( http://nmap.org ) at 2010-07-13 22:53 GTB Daylight Time
Initiating ARP Ping Scan at 22:53
Scanning 192.168.1.72 [1 port]
Completed ARP Ping Scan at 22:53, 0.49s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 22:53
Completed Parallel DNS resolution of 1 host. at 22:53, 0.00s elapsed
Initiating SYN Stealth Scan at 22:53
Scanning iPhone.lan (192.168.1.72) [65535 ports]
Increasing send delay for 192.168.1.72 from 0 to 5 due to max_successful_tryno increase to 4
SYN Stealth Scan Timing: About 6.15% done; ETC: 23:02
SYN Stealth Scan Timing: About 12.01% done; ETC: 23:02
SYN Stealth Scan Timing: About 17.88% done; ETC: 23:02
SYN Stealth Scan Timing: About 23.78% done; ETC: 23:02
SYN Stealth Scan Timing: About 29.61% done; ETC: 23:02
SYN Stealth Scan Timing: About 35.48% done; ETC: 23:02
SYN Stealth Scan Timing: About 41.27% done; ETC: 23:02
Discovered open port 62078/tcp on 192.168.1.72
SYN Stealth Scan Timing: About 47.06% done; ETC: 23:02
SYN Stealth Scan Timing: About 52.80% done; ETC: 23:02
SYN Stealth Scan Timing: About 58.76% done; ETC: 23:02
SYN Stealth Scan Timing: About 64.57% done; ETC: 23:02
SYN Stealth Scan Timing: About 70.38% done; ETC: 23:02
SYN Stealth Scan Timing: About 76.13% done; ETC: 23:02
SYN Stealth Scan Timing: About 81.92% done; ETC: 23:02
SYN Stealth Scan Timing: About 87.75% done; ETC: 23:02
SYN Stealth Scan Timing: About 93.70% done; ETC: 23:02
Increasing send delay for 192.168.1.72 from 5 to 10 due to max_successful_tryno increase to 5
Completed SYN Stealth Scan at 23:02, 530.95s elapsed (65535 total ports)
Initiating OS detection (try #1) against iPhone.lan (192.168.1.72)
Nmap scan report for iPhone.lan (192.168.1.72)
Host is up (0.058s latency).
Not shown: 65534 closed ports
PORT      STATE SERVICE
62078/tcp open  iphone-sync
MAC Address: **:**:**:**:**:** (Apple)
Device type: general purpose
Running: Apple Mac OS X 10.5.X
OS details: Apple Mac OS X 10.5 - 10.6 (Leopard - Snow Leopard) (Darwin 9.0.0b5 - 10.0.0)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=259 (Good luck!)
IP ID Sequence Generation: Randomized

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 534.46 seconds
Raw packets sent: 69952 (3.079MB) | Rcvd: 65587 (2.624MB)

PORT STATE SERVICE
62078/tcp open  iphone-sync

Not shown: 65534 closed ports

Shouldn’t be filtered instead?!

Random Posts

• 28/03/2009 -- Firefox 3.0.8 (0)
• 22/10/2009 -- Microsoft Tech-Ed Europe 2009 | 9-13 November 2009, Berlin, Germany (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 07/03/2009 -- SQL Injection Cheat Sheet by ferruh mavituna (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 24/05/2009 -- Giorgos Zabetas (0)
• 06/08/2009 -- Fixed in Firefox 3.5.2 (security issues) (0)
• 12/02/2010 -- PHP UK Conference 2010 (0)

read also...

• 27/06/2010 -- Amsterdam, piki piki ram (the photos)! (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)
• 19/05/2009 -- Masai Mara - Giraffe trying to give birth (1)
• 24/03/2009 -- Around the world (1)

After reading these two articles I had the idea to start a FizzBuzz coding section just for fun (CfF - Coding for Fun).
So today’s FizzBuzz question is…

Write a program that prints the numbers from 1 to 100. But for multiples of three print “Fizz” instead of the number and for the multiples of five print “Buzz”. For numbers which are multiples of both three and five print “FizzBuzz”.

Below is my solution written in php.

<?php
echo '<h2>Coding For Fun</h2>';
$three = 3;
$five = 5;
$fifteen =15;

for ($i=1; $i<=100; $i++){
	if (($i%$three === 0) && ($i%$five === 0)) {
		echo 'FizzBuzz<br />';
	} elseif ($i%$three === 0) {
		echo 'Fizz<br />';
	} elseif ($i%$five === 0) {
		echo 'Buzz<br />';
	} else {
		echo $i . '<br />';
	}
}

echo '<br />==============<br /><br />';

for ($i=1; $i<=100; $i++){
	if ($i%$fifteen === 0) {
		echo 'FizzBuzz<br />';
	} elseif ($i%$three === 0) {
		echo 'Fizz<br />';
	} elseif ($i%$five === 0) {
		echo 'Buzz<br />';
	} else {
		echo $i . '<br />';
	}
}
?>

Yes… it took me 10 minutes
Can i stand up?!

read also...

• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)
• 12/02/2010 -- PHP UK Conference 2010 (0)

During the Dutch PHP Conference 2010, I had the time to walk around the city of Amsterdam.

See some photos as a slide-show in Flickr.com or subscribe to the set “Amsterdam”.

read also...

• 04/07/2010 -- Amsterdam, Tram-4 (From Spui to Amsterdam RAI) (0)
• 18/04/2010 -- BRING THEM BACK! (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 21/05/2009 -- Masai Mara - Hippopotamus fighting (0)

A few days off and… we are in Nafplion.

Nafplion is located on the Argolic Gulf in the northeast Peloponnese. Most of the old town is on a peninsula jutting into the gulf; this peninsula forms a naturally protected bay that is enhanced by the addition of man-made moles.

See some photos slide-show in Flickr.com.

It feels so good when you are relaxed! I think I must do that more often!

Thanks F.

read also...

• 07/11/2009 -- Panorama - Jordan (0)
• 18/04/2010 -- BRING THEM BACK! (0)
• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 04/01/2010 -- Panorama - Switzerland (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 21/04/2009 -- Ελλήνων Πάσχα (1)
• 24/03/2009 -- Around the world (1)

Reunite Them! “BRING THEM BACK!”
Thousands of pieces of Greek antiquities are hosted in the British Museum. Our campaign does not ask for the return of those.
We ask for the return of the Parthenon Marbles in Greece and the Reunification of the Monument.
We, the users of the Internet obtain power and we are able to mobilize the international public opinion. Our goal can be achieved this way.
Do you believe this is fair? If yes, help this goal come true.
Say your own “BRING THEM BACK!”

www.bringthemback.org

read also...

• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 27/06/2010 -- Amsterdam, piki piki ram (the photos)! (0)
• 09/05/2010 -- Relaxing in Nafplion (1)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 04/01/2010 -- Panorama - Switzerland (0)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 21/04/2009 -- Ελλήνων Πάσχα (1)
• 14/03/2009 -- Will that be our… Sixth Sense? (2)

<?php
// Set your Cholesterol Level before executing the script!
// Uncomment the next line.
// $Cholesterol = 240;

if (!isset($Cholesterol) || $Cholesterol=='') {
	echo 'This is good!';
} else {
	if ($Cholesterol<200) {
		echo 'Desirable level. Low risk for coronary heart disease.';
	} elseif ($Cholesterol>=200 && $Cholesterol<240) {
		echo 'Borderline high!';
	} else {
		echo '<strong>DANGER!</strong> High blood cholesterol!';
	}
}
?>

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 21/04/2009 -- Ελλήνων Πάσχα (1)
• 02/07/2010 -- FizzBuzz questions & coding for fun! (0)
• 18/04/2010 -- BRING THEM BACK! (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)

Learn from the experts in the PHP community!
Ibuildings is proud to organize the fourth Dutch PHP Conference on June 11 and 12. Plus a pre-conference tutorial day on June 10. Both programs will be completely in English so the only Dutch thing about it is the location.

Keywords for these days: Know-how, Technology, Best Practices, Networking, Tips & Tricks.

See the schedule.
Register here…
Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 02/07/2010 -- FizzBuzz questions & coding for fun! (0)
• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)
• 27/06/2010 -- Amsterdam, piki piki ram (the photos)! (0)

Added horizontal menu (Track My Weather, Invite Friends, Fan Box).
Fixed a height issue with some browsers.

Track My Weather is a Facebook Application with which you can find weather forecasts for cities all over the world.
Data are provided by AccuWeather.

Our goal is to create an application that is easy to use and no need for facebook users to worry about their privacy!

So, Track My Weather will be under development for some time…

You can add the application…
http://apps.facebook.com/track-my-weather/

Become a Fan…
http://www.facebook.com/apps/application.php?id=111035455558

We can use all the feedback we can get!

read also...

• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 02/07/2010 -- FizzBuzz questions & coding for fun! (0)
• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 10/03/2009 -- PHP 5.2.9 Released! (0)
• 12/02/2010 -- PHP UK Conference 2010 (0)

PHP UK Conference 2010 is PHP London’s fifth annual conference.

When: Friday 26th February 2010
Where: Business Design Centre, London
Talks about:

- AntiPHPatterns

- Best practices for web service design- Database optimisation

- Hidden features - from core to PECL

- ‘In search of…’  integrating local search systems

- Living with legacy code

- PHP 5.3 in practice

- PHP code audits

- PHP on the D-BUS

- RDBMS in the social networks age

- Regex-fu

- The lost art of simplicity

- Would you like docs with that?

Attending: ?!?!

read also...

• 02/07/2010 -- FizzBuzz questions & coding for fun! (0)
• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 09/05/2009 -- Do you know where to find me? (0)

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 04/01/2010 -- Panorama - Switzerland (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 04/07/2010 -- Amsterdam, Tram-4 (From Spui to Amsterdam RAI) (0)
• 27/06/2010 -- Amsterdam, piki piki ram (the photos)! (0)
• 18/04/2010 -- BRING THEM BACK! (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)

read also...

• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 07/11/2009 -- Panorama - Jordan (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 04/07/2010 -- Amsterdam, Tram-4 (From Spui to Amsterdam RAI) (0)
• 27/06/2010 -- Amsterdam, piki piki ram (the photos)! (0)
• 09/05/2010 -- Relaxing in Nafplion (1)
• 18/04/2010 -- BRING THEM BACK! (0)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)

1. Display custom errors pages.

2. Remove unwanted files and folders.

3. Remove backup, unused or obsolete files (.bak, .inc, .old etc). For include files, carefully choose the suffix to prevent information disclosure.

4. Remove default document files (default.aspx, index.php, index.asp, main.jsp etc).

5. Validate properly all parameters against expected data length, data type, data format (dd-mm-yyyy etc) and data range (10-79 etc).

6. Use SANITIZE functions (custom made).

7. Disable directory browsing. If this is required, make sure the listed files does not induce risks.

8. Remove the private IP address from the HTTP response body. For comments, use jsp/asp comment instead of HTML/javascript comment which can be seen by client browsers.

9. For secure content, put session ID in cookie ,use a combination of cookie and URL rewrite, bind the Session ID to the IP address of the client who owns the session and put timeout mechanisms for the Session IDs against Replay Attacks.

10. Turn off AUTOCOMPLETE attribute in form or individual input elements containing password by using AUTOCOMPLETE=’OFF’.

11. Secure page can be cached in browser. Cache control is not set in HTTP header nor HTML header. Sensitive content can be recovered from browser storage. The best way is to set HTTP header with: ‘Pragma: No-cache’ and ‘Cache-control: No-cache’. Alternatively, this can be set in the HTML header but some browsers may have problem using this method.

12. Do not trust client side input and enforce tight check in the server side. Disable server side include. Use least privilege to run your web server or application server. For Apache, disable the following:

Options Indexes FollowSymLinks Includes
AddType application/x-httpd-cgi .cgi
AddType text/x-server-parsed-html .html

13. Do not trust client side input even if there is client side validation. In general,

• If the input string is numeric, type check it.
• If the application used JDBC, use Prepared Statement or Callable Statement with parameters passed by ?
• If the application used ASP, use ADO Command Objects with strong type checking and parameterized query.
• If stored procedure or bind variables can be used, use it for parameter passing into query. Do not just concatenate string into query in the stored procedure!
• Do not create dynamic SQL query by simple string concatenation.
• Use minimum database user privilege for the application. This does not eliminate SQL injection but minimize its damage. E.g. if the application requires reading one table only, grant such access to the application. Avoid using sa or db-owner or root.

14. Do not try to work with invalid data. Display custom error page when data does not pass validation.

15. Use white list validation wherever possible!

Looking forward for your comments…

read also...

• 15/12/2009 -- Athens StartUp Weekend 2 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 22/10/2009 -- Microsoft Tech-Ed Europe 2009 | 9-13 November 2009, Berlin, Germany (0)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 06/05/2009 -- Joomla/Mambo - PDF Indexer Module (5)
• 02/07/2010 -- FizzBuzz questions & coding for fun! (0)
• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)

P.S
I had a great time…

read also...

• 20/12/2009 -- 15 Rules to follow for safer web applications (2)
• 07/03/2010 -- Dutch PHP Conference 2010 (0)
• 15/02/2010 -- Track My Weather v.0.5 - Facebook Application (1)
• 29/07/2009 -- Track My Weather v.0.1 - Facebook Application (0)
• 06/05/2009 -- Joomla/Mambo - PDF Indexer Module (5)
• 02/07/2010 -- FizzBuzz questions & coding for fun! (0)
• 07/04/2010 -- Cholesterol Levels 2010 (= Greek Easter) (1)
• 01/07/2009 -- PHP 5.3.0 Released! (0)
• 20/06/2009 -- PHP 5.2.10 Released! (0)
• 01/05/2009 -- Hotlinking, Bandwidth Theft and mod_rewrite (0)

Note: There is a rating embedded within this post, please visit this post to rate it.

read also...

• 09/05/2010 -- Relaxing in Nafplion (1)
• 04/01/2010 -- Panorama - Switzerland (0)
• 24/08/2009 -- Wild Life in Sri Lanka (0)
• 24/03/2009 -- Around the world (1)
• 04/07/2010 -- Amsterdam, Tram-4 (From Spui to Amsterdam RAI) (0)
• 27/06/2010 -- Amsterdam, piki piki ram (the photos)! (0)
• 25/01/2010 -- Ausfahrt –> Switzerland (0)
• 13/09/2009 -- Landscapes, temples & tastes of Sri Lanka (0)
• 05/09/2009 -- Panorama - Sri Lanka (0)
• 27/08/2009 -- Ayubowan - Sri Lanka (0)