Unstatsppd: Your Beers Statistics Distribution by Day of Week

As I had some free time on my hands this week-end, and that I wanted to know on which day of the week I most enjoy beer drinking, I fired up my favorite text editor and started unstatsppd.py.

No rocket science whatsoever but an easy mean to gather those statistics and display them using the Google Charts Tools API.

Code is available here: https://github.com/xsa/unstatsppd

Prerequisites:

•  Python Google Chart: http://pygooglechart.slowchop.com/
•  Python Untappd API wrapper: https://github.com/xsa/PyUntappd

Here's an output example with my data:

HTC Incredible S, Android, Linux, and udev(7)

So it all started because I wanted to take screen captures of my HTC Incredible S (I will not explain how to do that here as you'll find plenty of good tutorials on the interwebs).

One of the steps involved the Dalvik Debug Monitor Server (DDMS) which provides all kind of things you could expect from a debugging tool, including a screen capture feature.Unfortunately, I quickly noticed that it wasn't really working as expected with my new HTC Incredible S device on my Linux laptop (running RHEL):

$ pwd

/full/path/to/android-sdk-linux_x86/tools

$ ./ddms

(ddms:15838): Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate widget with width -5 and height 16

(ddms:15838): Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate widget with width -5 and height 16
09:01:27 E/DDMS: insufficient permissions for device
com.android.ddmlib.AdbCommandRejectedException: insufficient permissions for device
    at com.android.ddmlib.AdbHelper.setDevice(AdbHelper.java:736)
    at com.android.ddmlib.AdbHelper.executeRemoteCommand(AdbHelper.java:373)
    at com.android.ddmlib.Device.executeShellCommand(Device.java:276)
    at com.android.ddmuilib.SysinfoPanel.loadFromDevice(SysinfoPanel.java:159)
    at com.android.ddmuilib.SysinfoPanel.deviceSelected(SysinfoPanel.java:126)
    at com.android.ddmuilib.SelectionDependentPanel.deviceSelected(SelectionDependentPanel.java:52)
    at com.android.ddms.UIThread.selectionChanged(UIThread.java:1684)
    at com.android.ddmuilib.DevicePanel.notifyListeners(DevicePanel.java:752)
    at com.android.ddmuilib.DevicePanel.notifyListeners(DevicePanel.java:740)
    at com.android.ddmuilib.DevicePanel.access$1100(DevicePanel.java:56)
    at com.android.ddmuilib.DevicePanel$1.widgetSelected(DevicePanel.java:357)
    at org.eclipse.swt.widgets.TypedListener.handleEvent(Unknown Source)
    at org.eclipse.swt.widgets.EventTable.sendEvent(Unknown Source)
    at org.eclipse.swt.widgets.Widget.sendEvent(Unknown Source)
    at org.eclipse.swt.widgets.Display.runDeferredEvents(Unknown Source)
    at org.eclipse.swt.widgets.Display.readAndDispatch(Unknown Source)
    at com.android.ddms.UIThread.runUI(UIThread.java:492)
    at com.android.ddms.Main.main(Main.java:103)

09:01:32 W/ddms: Unable to get frame buffer: insufficient permissions for device

Not what I expected, but nothing that cannot be fixed. So after googling/fiddling/ranting a bit, udev(7) came to the rescue. Pretty much, it seems I needed another rule to be added. So here's how I did it:

Look at the information that pertain to my HTC Incredible S:

$ lsusb
Bus 002 Device 006: ID 1267:0210 Logic3 / SpectraVideo plc
Bus 002 Device 002: ID 8087:0020 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 009: ID 0bb4:0cac High Tech Computer Corp.
Bus 001 Device 005: ID 0a5c:217f Broadcom Corp. Bluetooth Controller
Bus 001 Device 003: ID 17ef:480f Lenovo Integrated Webcam [R5U877]
Bus 001 Device 002: ID 8087:0020 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub



Create a specific android.rules file in custom rules directory /etc/udev (Note that it is one single line in the .rules file below)

$ id
uid=500(xsa) gid=500(xsa) groups=500(xsa),496(desktop_admin_r)
$ sudo -s

# cat > /etc/udev/android.rules

SUBSYSTEMS=="usb", ATTRS{idVendor} =="0bb4", ATTRS{idProduct} =="0cac", MODE="0660", OWNER="root", GROUP="desktop_admin_r"

^D

# ln -s ../android.rules /etc/udev/rules.d/90-android.rules

Reload the udev(7) rules and then launch again DDMS and you should be all set.

# /etc/init.d/udev-post reload

[...]

# exit

$ cd /full/path/to/android-sdk-linux_x86/tools

$ ./ddms

Daily links for 04/21/2011

• ModSecurity Advanced Topic of the Week: Integrating IDS Signatures - SpiderLabs Anterior
  "You may be familiar with the Emerging Threats project. They have a few Snort rules files related to known web application vulnerabilities and attacks: * emerging-web_server.rules * emerging-web_specific_apps.rules"
  tags: modsecurity security infosec web ids snort
• Oracle gives up on OpenOffice after community forks the project
  "In a statement issued on Friday, Oracle announced that it intends to discontinue commercial development of the OpenOffice.org (OOo) office suite. The move comes several months after key members of the OOo community and a number of major corporate contributors forked OOo to create a vendor-neutral alternative."
  tags: oracle openoffice opensource software
• BSidesLondon Wrap Up « /dev/random
  "It was a long but wonderful day! I woke up very early to catch my train from Brussels to London and arrived just in time. The room was already full of security guys, some well known faces and new ones. Let’s grab some coffee, some muffins and my bag full of goodies. Ready for the talks! The venue is nice, there is a good Wi-Fi coverage."
  tags: infosec security bsideslondon conferences
• SIEM: Out of the shadows and into the light - SC Magazine UK
  "Being a property owner can be a massive headache. You end up spending thousands to protect what's yours – securing doors, windows, and every other feasible point of entry. Yet all a criminal needs is one shot – a misplaced key, say – and he is in."
  tags: security infosec siem log management

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/20/2011

• BSidesLondon: Jedi mind tricks for building application security programs « Cатсн²² (in)sесuяitу / ChrisJohnRiley
  "Most developers actually want to write secure code"
  tags: infosec security bsideslondon appsec apps software development
• Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly Radar
  "Today at Where 2.0 Pete Warden and I will announce the discovery that your iPhone, and your 3G iPad, is regularly recording the position of your device into a hidden file. Ever since iOS 4 arrived, your device has been storing a long list of locations and time stamps. We're not sure why Apple is gathering this data, but it's clearly intentional, as the database is being restored across backups, and even device migrations. "
  tags: apple iphone ipad ios privacy geolocation
• BSidesLondon: How not to get hired for a security job « Cатсн²² (in)sесuяitу / ChrisJohnRiley
  "Why people fail in the hiring process… by doing stupid things! Some things that I tell you NOT to do, might be what your future employer wants… it’s not easy to define."
  tags: infosec security jobs bsideslondon

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/19/2011

• State of Software Security, Volume 3
  "It’s here! Data junkies rejoice! Today we’re proud to release the third volume of our semi-annual State of Software Security report. This edition incorporates data from 4,835 applications analyzed via our cloud-based platform over the past 18 months."
  tags: infosec security veracode report xss apps software
• Anton Chuvakin Blog - "Security Warrior": Verizon DBIR 2011 is OUT!
  "OMG, today is The Breach Day, an official security holiday. Verizon Business has just released their super-famous “2011 Data Breach Investigations Report”"
  tags: infosec security verizon report vulnerability dbir
• Six Months, Six Providers and IPv6 | Security to the Core | Arbor Networks Security
  "This winter, the Internet passed a major milestone in its twenty-year-old wunderkind evolution from a small, experimental research network to one of the technical foundations of modern society. In a brief Miami hotel conference room ceremony, ICANN allocated the last five IPv4 address blocks on February 3 — the long anticipated endgame towards eventual Internet address space exhaustion was officially underway [1]."
  tags: internet ipv6 networking

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/18/2011

• The Tangled Web
  "The Tangled Web is my second book, and a lovingly crafted guide to the world of browser security. This is an overcrowded market, but there are two reasons why you may want to care. "
  tags: books security web webapps infosec

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/14/2011

• cvechecker | A local CVE checker tool
  "Welcome to the cvechecker tool homepage. The goal of cvechecker is to report about possible vulnerabilities on your system, by scanning the installed software and matching the results with the CVE database."
  tags: cvechecker softwares tools security infosec
• TechCrunch Review: RIM’s BlackBerry PlayBook Enters The Tablet Wars
  "In the tablet world right now, there’s the iPad and then there’s everyone else. Sorry, Xoom, despite your hype, you just don’t cut it yet. But a new challenger is just about to take the stage and it comes from a somewhat unlikely player: RIM."
  tags: hardware tablets rim

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/13/2011

• WordPress.com hack exposes confidential code • The Register
  "The company that maintains the WordPress.com blogging platform said hackers gained root access to its servers and made off with sensitive code belonging to it and its partners."
  tags: security hack wordpress privacy
• ModSecurity Advanced Topic of the Week: Integrating Content Security Policy (CSP) - SpiderLabs Anterior
  "Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware."
  tags: mozilla web csp security xss browser
• TippingPoint | DVLabs | Cloud Security: Amazon's EC2 serves up 'certified pre-owned' server images
  "Cloud computing has quickly evolved from a hot industry buzz word into a multi-billion dollar emerging market, with all the big names striving to grab a piece of the pie. Amazon, with its Amazon Elastic Computer Cloud (EC2), is arguably the dominant leader of the cloud services market."
  tags: amazon ec2 cloud security infosec hacking

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/12/2011

• Commodore 64 viruses – time for a comeback? | Naked Security
  "I can't be the only nostalgic nerd to feel a flutter of excitement at the news that a home computer from yesteryear is making a comeback."
  tags: hardware history c64
• Official Google Blog: Pagination comes to Google Docs
  "Exactly one year ago, we launched a new version of the Google document editor, created from the ground up to take advantage of the latest capabilities in modern web browsers like Chrome. In particular, we baked in a way of supporting text features that aren’t natively included with browsers—for example, we added a ruler for controlling the margins, text that wraps around images to create eye-catching docs and discussions for a more collaborative editing experience."
  tags: google web cloud apps
• Lenny Zeltser on Information Security — The Random Information Security Job Title Generator
  "There is a surprising number of title variations among people who work in the field that I call “information security.” I browsed through various job-search sites to get a feel for the more frequently-seen titles and created a random information security job title generator. "
  tags: infosec security jobs fun

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/11/2011

• sqlmap: automatic SQL injection and database takeover tool
  "sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. "
  tags: sqlmap security infosec pentesting tools
• Android App Admins gets three new Android tools | Android Development Talk
  "Google has announced recently three new updates to Android’s enterprise management capabilities. This is specially developed around security and connecting with colleagues and will be available to business and education Android Applications."
  tags: google android mobile apps enterprise

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/08/2011

• IBM jumps into cloud, customers tip-toe behind - Computerworld
  "In announcing its cloud computing services on Thursday, IBM stressed repeatedly that private clouds -- or those that exist behind the corporate firewall -- are as important to its strategy as those in the public realm. "
  tags: ibm cloud
• Shodan HTTP Header Survey « Cатсн²² (in)sесuяitу / ChrisJohnRiley
  "After a few months of back and forth, the first stage of our HTTP Header research is now live on the Shodan website."
  tags: security web shodan browsers xss
• Linkedin App for Android Devices now available in Android Market | Android Development Talk
  "LinkedIn, the professional social network, has finally launched its Android App."
  tags: mobile android linkedin apps social media

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/07/2011

• Content Updates
  "IBM Internet Security Systems (ISS) provides security content updates for supported products through the X-Press Update feature. IBM ISS recommends installing the latest update to ensure your products are current and your protection is maximized. "
  tags: ibm x-force ids ips signatures security
• Flaw in ISC’s dhclient could allow remote code execution | Naked Security
  "The Internet Systems Consortium (ISC), a non-profit company which develops BIND and dhcpd/dhclient, has announced a new remote code execution vulnerability present in its dhclient software."
  tags: security dhcp isc bugs vulnerability

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/06/2011

• ModSecurity Advanced Topic of the Week: Malware Link Removal - SpiderLabs Anterior
  "This is a follow-up post to ModSecurity Advanced Topic of the Week: Malware Link Detection in which we will highlight a new capability within ModSecurity v2.6 that allows for removal of data within response bodies."
  tags: infosec security malware modsecurity web
• SLAAC Attack – 0day Windows Network Interception Configuration Vulnerability |  InfoSec Resources
  "As anyone who has watched the reimagined Battlestar Galactica will tell you, Sixes are trouble. They are undoubtedly alluring, but all the while they are working covertly, following The Plan, right under the noses of their targets. Nobody realizes the true nature of the threat until it’s too late."
  tags: infosec security networking ipv6
• Mobile Apps Invading Your Privacy
  "An article in the Wall Street Journal, dated April 5, 2011, disclosed that Federal prosecutors in New Jersey are investigating numerous smart phone application manufacturers for allegedly, illegally obtaining and distributing personal private information to third party advertisement groups."
  tags: infosec security mobile softwares privacy

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/05/2011

• Analysis of LizaMoon: Stored XSS via SQL Injection - SpiderLabs Anterior
  "More and more of today's web application attacks are leveraging multiple weaknesses, vulnerabilities and attack methods in order to achieve a desired exploitation outcome. It is becoming more and more difficult to neatly place an attack into one specific container (such as XSS, SQL Injection, etc...). These are blended attacks."
  tags: infosec security lizamoon sql injection malware
• Tenable Network Security: Preventing & Detecting Malware: A Multi-Facetted Approach
  "Successful Attacks from Automated Malware"
  tags: infosec security networking lizamoon malware monitoring nessus
• IBM: Watson Could Boost Confidence of Financial Industry - PCWorld
  "The software that helped IBM's Watson computer reign victorious on the Jeopardy game show in February could also help the financial industry assess risk more effectively, a pair of IBM executives stated on Monday at a high-performance computing conference. "
  tags: ibm watson research

Posted from Diigo. The rest of my favorite links are here.

Daily links for 04/01/2011

• Frequency X Blog
  Over the last few days we have been tracking a mass SQL injection attack that was first blogged by Websense On March 29th, These types of threats are nothing new to us in IBM Managed Security Services as we’ve been tracking similar attacks for years.
  tags: ibm security sql injection
• Hacker Group Changes Millions of Passwords to "password"; Only 38% of Users Notice - F-Secure Weblog : News from the Lab
  Passwords from over 3,000,000 user accounts were apparently set to "password" late last night in a wide-spread hack that affected hundreds of news, retail and web 2.0 sites. Most affected users are completely unaware of the attack.
  tags: infosec security privacy passwords

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/31/2011

• IBM X-Force Report: 2010 Marked a Year of Sophisticated, Targeted Security Attacks
  IBM today released results from its annual X-Force 2010 Trend and Risk Report, highlighting that public and private organizations around the world faced increasingly sophisticated, customized IT security threats in 2010.
  tags: ibm x-force infosec security malware spam virus
• droidwall - DroidWall - Android Firewall - Google Project Hosting
  DroidWall - Android Firewall is a front-end application for the powerful iptables Linux firewall. It allows you to restrict which applications are permitted to access your data networks (2G/3G and/or Wi-Fi).
  tags: google android mobile firewall droidwall iptables security

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/30/2011

• SQL Injection attack hits nearly 50,000 domains - Security
  A massive SQL Injection campaign, similar to ones seen in the past, has hit nearly 50,000 domains across the Web, including a handful of iTunes URLs. The attacking domain, lizamoon.com, is currently offline but the server hosting it remains active. Before it disappeared, the injected domain was pointing users to Rogue anti-Virus applications.
  tags: infosec security vulnerability sql injection

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/29/2011

• Mobile Malware Statistics | Fortinet Security Blog
  We often have requests on mobile malware statistics and although statistics are only an imperfect representation of reality, this is what we can share.
  tags: infosec security malware mobile statistics
• McAfee has its own website vulnerable to attacks | Blog do Pablo Ximenes
  Today, as every ordinary Monday, I went to my e-mail box and checked messages from the security community in Full-Disclosure. As usual I came across an advisory pointing out some web security vulnerabilities that differently from usual certainly had my attention.
  tags: mcafee infosec security xss vulnerability
• Get Better Battery Life on Your Rooted Android Phone by Wiping Its Battery Stats
  Some users, when flashing new ROMs, have noticed that their battery life goes down a little bit. With just a simple wipe of the battery stats file, though, you can get your battery back up and running to its full capacity.
  tags: android mobile hardware
• Java inventor James Gosling joins Google - CXOtoday.com
  Google (NASDAQ:GOOG) has snapped up James Gosling who invented the Java programming language while at Sun Microsystems.
  tags: google java
• Color App Hack Lets You Spy On Anyone’s Photos Anywhere - Andy Greenberg - The Firewall - Forbes
  For anyone sketched out by the privacy implications of Color, the highly hyped, highly funded, and highly public iOS and Android social media app that launched last week, now would be a good time to ratchet your creep-o-meter up another notch or two.
  tags: infosec security social media lbs geolocation
• Microsoft Hunting Rustock Controllers — Krebs on Security
  Who controlled the Rustock botnet? The question remains unanswered: Microsoft’s recent takedown of the world’s largest spam engine offered tantalizing new clues to the identity and earnings of the Rustock botmasters.
  tags: infosec security microsoft botnet rustock

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/28/2011

• Holy Crap – AB to buy Goose Island for $38 Mil | Ladies of Craft Beer
  Please excuse my profanity, but I could think of nothing else to title this article.  According to Adam Nason of BeerNews.org, Anheuser-Busch, Inc. will buy Goose Island Beer Company and brewmaster Greg Hall is stepping down.
  tags: beers news
• Protect the privacy of your Android phone
  Privacy Blocker is an Android application that stops other installed applications from gathering your personal information.
  tags: google android mobile privacy softwares
• MySQL.com and Sun hacked through SQL injection | Naked Security
  Proving that no website is ever truly secure, it is being reported that MySQL.com has succumbed to a SQL injection attack.
  tags: security web sql sql injection mysql

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/25/2011

• How to Practice Your Web Application Testing Skill... - HP Software Solutions Community online forum
  For those who are learning web application security testing (or just trying to stay sharp) it's often difficult to find quality websites to test one's skills. There are a few scattered around the Internet (see the link in the notes section below) but it would be nice to have a solid collection of test sites all in one place.
  tags: pentesting security
• IBM Introduces New Social Media Metrics And Tracking Tools « Turbotodd
  If you interact with the social media world at all, you know what an immense opportunity there is to gather, analyze, and act on all the great data floating around.
  tags: ibm social media
• Firefox joins Chrome in supporting HTTP Strict Transport Security (HSTS) | Naked Security
  Although the Firefox team has an entire page on the mozilla.com website dedicated to the new security features in Firefox 4, they seem to have forgotten to mention HTTP Strict Transport Security (HSTS).
  tags: browser mozilla firefox chrome web hsts
• GWEB - Web Application Security Certification
  GIAC is launching a new certification for developers and application security professionals involved in defending web applications.
  tags: infosec security web webapps certifications
• Google Holds Honeycomb Tight - BusinessWeek
  In the great mobile-device wars, Google (GOOG) has portrayed itself as the open-source crusader doing battle against the leaders in proprietary software—Apple (AAPL), Microsoft (MSFT), and Research In Motion (RIM:CN).
  tags: google android tablets opensource development
• Nobody Needs a Tablet. So Why Are We Gobbling Them Up? | Gadget Lab | Wired.com
  Apple’s iPad is just one year old, and more than 15 million customers have voted with their wallets. The tablet is officially mainstream.
  tags: apple ipad tablets

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/24/2011

• Pastenum – Pastebin/pastie enumeration tool | Corelan Team
  When conducting a pen-test, the process typically starts with the reconnaissance phase, the process of gathering information about your target(s) system, organization or person. Today, we want to present a tool that can be added to your reconnaissance toolkit.
  tags: infosec security pentesting softwares
• Is the new HP just an IBM clone? - Big Tech - Fortune Tech
  Behold the new HP. After a series of scandals, a change in CEOs and a rebuilding of its board, the tech giant revealed the new HP to the world: It's still very much a company that wants to be another company -- IBM.
  tags: ibm hp
• Android Developers Blog: Memory Analysis for Android Applications
  The Dalvik runtime may be garbage-collected, but that doesn't mean you can ignore memory management. You should be especially mindful of memory usage on mobile devices, where memory is more constrained.
  tags: google android softwares development
• Is the iPad 2 Old Tech Already?
  This morning at CTIA 2011, Samsung brought us a revised Galaxy Tab 10.1″ that has beat out the iPad 2 in its thinness and light weight specs. This of course brings to question how long does your tech stay current these days?
  tags: apple ipad tablets samsung android google multimedia

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/23/2011

• BlackBerry Playbook: A More Secure Tablet?
  Today, RIM began taking advance orders on its new tablet. The first Playbook will connect to the internet via Wi-Fi and, at $499, will compete on price with the iPad.
  tags: rim tablets playbook ipad
• Securosis Blog | McAfee Acquires Sentrigo
  McAfee announced this morning its intention to acquire Sentrigo, a Database Activity Monitoring company. McAfee has had a partnership with Sentrigo for a couple years, and both companies have cooperatively sold the Sentrigo solution and developed high-level integration with McAfee’s security management software.
  tags: mcafee acquisition sentrigo database infosec

Posted from Diigo. The rest of my favorite links are here.

Daily links for 03/22/2011

• E L S U A ~ A KM Blog Thinking Outside The Inbox by Luis Suarez » Staying Healthy – 11 Ergonomic Tips for Avoiding RSI
  One of the biggest challenges we, knowledge (Web) workers, keep facing over the course of time, as we get more and more heavily involved with knowledge work being carried out through both traditional and emergent collaboration and knowledge sharing tools out there on the Social Web, is the fact that, now more than ever, we need to stay healthy
  tags: ergonomic health
• HD Moore Reveals His Process for Security Research |  InfoSec Resources
  In our ongoing series of interviews, we got HD Moore to answer a few questions and pull back the curtain a bit on the methods, tools and motivation for the research he does discovering security exploits.
  tags: infosec security rapid7 metasploit people interview
• CIO CITY
  CIOnet is Europe's leading Network for CIO's and IT Directors, operating in the UK, Spain, France, Italy, Norway, The Netherlands and Belgium.
  tags: it cio europe
• Frequency X Blog
  Last week there was widespread media coverage of a successful effort by Microsoft and US Marshals to take down the command and control capabilities of the Rustock botnet.
  tags: infosec security botnet spam microsoft rustock

Posted from Diigo. The rest of my favorite links are here.