{"id":59,"date":"2013-06-09T23:11:04","date_gmt":"2013-06-09T23:11:04","guid":{"rendered":"https:\/\/unclogged.rl-imaging.com\/?p=59"},"modified":"2013-06-17T05:54:51","modified_gmt":"2013-06-17T05:54:51","slug":"the-following-s01e04-mad-love","status":"publish","type":"post","link":"https:\/\/unclogged.rl-imaging.com\/?p=59","title":{"rendered":"The Following &#8211; S01E04 &#8211; Mad Love"},"content":{"rendered":"<p><a href=\"https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-02-11-at-23.36.24-.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-37\" alt=\"Screen Shot 2013-02-11 at 23.36.24\" src=\"https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-02-11-at-23.36.24--1024x576.png\" width=\"625\" height=\"351\" srcset=\"https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-02-11-at-23.36.24--1024x576.png 1024w, https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-02-11-at-23.36.24--300x168.png 300w, https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-02-11-at-23.36.24--624x351.png 624w, https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-02-11-at-23.36.24-.png 1280w\" sizes=\"auto, (max-width: 625px) 100vw, 625px\" \/><\/a><\/p>\n<p>There are so many things wrong with this.<\/p>\n<ul>\n<li>Once again, the window on the left is source code, because we always have source code up.\u00a0 The code is unp.h from <a href=\"http:\/\/socketprogrammer.blogspot.com\/2009\/04\/unix-network-programming.html\" target=\"_blank\">http:\/\/socketprogrammer.blogspot.com\/2009\/04\/unix-network-programming.html<\/a>\n<pre>\/* OSF\/1 actually disables recv() and send() in &lt;sys\/socket.h&gt; *\/\r\n#ifdef\t__osf__\r\n#undef\trecv\r\n#undef\tsend\r\n#define\trecv(a,b,c,d)\trecvfrom(a,b,c,d,0,0)\r\n#define\tsend(a,b,c,d)\tsendto(a,b,c,d,0,0)\r\n#endif<\/pre>\n<\/li>\n<li>North Korea does not have a gigabit uplink to the rest of the world.<\/li>\n<li>While none of the IP addresses are (understandably) valid (all have one octet &gt; 255), the last few hops are multicast addresses which are not traceable.\u00a0 See <a title=\"Wikipedia - Multicast address\" href=\"http:\/\/en.wikipedia.org\/wiki\/Multicast_address\" target=\"_blank\">Wikipedia &#8211; Multicast address<\/a>.<\/li>\n<li>The real command is &#8220;traceroute&#8221; (or &#8220;tracert&#8221; in Windows land) and it shows you the path from the computer you are running it on to another IP address.\u00a0 You can trace back to a mail\/web\/ftp\/etc. server (cpanengine.com if it actually existed), but not to an email address.\u00a0 Some mail servers add a header line that shows the client IP, which you can trace back to.<\/li>\n<li>If the recipient of the message was at Host A (126.55.341.66), and the sender was Host B (cpanengine.com), an investigator at Host C (shown above) cannot run a traceroute to see how Host A would talk to Host B.<\/li>\n<li>The hop times are simply replicated, 160ms\/240ms 174ms\/436ms alternating.<\/li>\n<li>The normal traceroute does not show the type of device, ie., wifi router, satellite, etc.\u00a0 It is possible to determine the type of device from its MAC address, but only the next\/previous hop sees the MAC address, and it is not passed along.<\/li>\n<li>Traffic going through a satellite would be layer 1 (the satellite does not have an IP on the customer traffic side) and thus the satellite would not show up as a hop.\u00a0 This article is from 2008 but still valid &#8211; <a href=\"http:\/\/www.tolaris.com\/2008\/10\/09\/identifying-undersea-fibre-and-satellite-links-with-traceroute\/\">Identifying undersea fibre and satellite links with traceroute<\/a>.<\/li>\n<li>Why would traffic bounce through 10 satellites?<\/li>\n<li>traceroute does not show the local computer&#8217;s network card as the first hop.<\/li>\n<li>Why would every window have a WiFi menu?<\/li>\n<\/ul>\n<p>A real traceroute looks like this:<\/p>\n<p><a href=\"https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-06-09-at-16.04.25-.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-60\" alt=\"Screen Shot 2013-06-09 at 16.04.25\" src=\"https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-06-09-at-16.04.25-.png\" width=\"557\" height=\"149\" srcset=\"https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-06-09-at-16.04.25-.png 557w, https:\/\/unclogged.rl-imaging.com\/wp-content\/uploads\/2013\/06\/Screen-Shot-2013-06-09-at-16.04.25--300x80.png 300w\" sizes=\"auto, (max-width: 557px) 100vw, 557px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>There are so many things wrong with this. Once again, the window on the left is source code, because we always have source code up.\u00a0 The code is unp.h from http:\/\/socketprogrammer.blogspot.com\/2009\/04\/unix-network-programming.html \/* OSF\/1 actually disables recv() and send() in &lt;sys\/socket.h&gt; *\/ #ifdef __osf__ #undef recv #undef send #define recv(a,b,c,d) recvfrom(a,b,c,d,0,0) #define send(a,b,c,d) sendto(a,b,c,d,0,0) #endif North [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[11,17,18,10],"class_list":["post-59","post","type-post","status-publish","format-standard","hentry","category-images","tag-code","tag-computer","tag-network","tag-tv"],"_links":{"self":[{"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=\/wp\/v2\/posts\/59","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=59"}],"version-history":[{"count":10,"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=\/wp\/v2\/posts\/59\/revisions"}],"predecessor-version":[{"id":334,"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=\/wp\/v2\/posts\/59\/revisions\/334"}],"wp:attachment":[{"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=59"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=59"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/unclogged.rl-imaging.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=59"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}