Useful color palette brainstorming for you webmaster types.

Excellent. I am horrible at figuring out what colors go with what other colors, what are good highs and lows, accents, etc. Take the work out of finding a palette.

ColorMatch Remix

] Dude, Check This Out! is an entirely new application for
] finding, storing, and retrieving all the great stuff that
] you find on the Web. The Dude is the easiest way to share
] that stuff with your friends and other contacts, and
] it's also a great way to meet people who think like
] you.

If I were to release a WIN32 worm, I would totally use the above paragraph as the hook.

Dude, Check This Out!

Generator for 2-dimensional barcodes that are popular in Japan.
Awesome!

QR Barcode Generator

XMMS's Shuffle feature totally sucks. I think they keep using the same seed for the random number generator or something, because out of 155+ hours of music, I keep hearing the same set of songs every time I run the program.

Any one else notice this?

] Great job on Stripe Snoop! When are you going to go to the
] next level - like wiping unnecessary but private data like SS
] #?

This is an interesting question. Stripe Snoop's original purpose was to simply be a program to let people see what was on a magstripe. I then add features and other tools to allow people to modify and validate those modifcation to the magstripe data. Ultimately I'd like to get to the point of writing that modified data back to a card. All while keeping the code OSS, the hardware designs free, and the

As for wiping the card, it really would depend. I might have an insurance card, that has a magstipe with my SSN, and other stuff. Assuming that I never actually use this magstripe, nor do my doctors, and assuming that the info you want to eliminate isn't simply printed on the car. You could safely remove the information.

This might be a nice feature of Stripe Snoop database. To tell you not only what personal information is stored on the card, but also whether or not, but whether the card will still be operable if that data is removed.

Magstripes: wiping private data

Decius wrote:
] ] Acidus writes "While researching for an embedded systems
] ] project (a magstripe enabled Coke machine), I was shocked
] ] by the lack of magstripe information: Programs/code that
] ] would run on a modern OS were all but nonexistant,
] ] articles that were 6-10 years old, etc.
]
] Acidus is on Slashdot today.

I'm just glad I'm on Slashdot and I'm not getting sued for something.

Thanks to Decius who pointed out a lot of spelling/typos late last night that I fixed, so I wouldn't look like a dumbass.

RE: Slashdot | Unlocking The Power Of the Magstripe

Stripe Snoop parses and analyzes data from magstripe cards, displays their contents, and then tries to identify the card using a database of known card types, providing meaning to an otherwise raw character dump. Magstripe data can be captured through a variety of methods and interfaces, including stdin. Release 1.5 has doubled the size of the card database Stripe Snoop uses. The interface was been polished a good bit as well, and more information is returned about card types from the database. Also, card types with unknown elements are brought to the users attention, so they know when they have information that the projects needs. By making it easier to contribute, the program should receive new blood. 1.5 also comes with even more sample bitstreams of different card types to experiement with.

Linux and Windows Builds are supported

Full Change Log:

Version 1.5 (8-8-2004)

- Force Parse (-F) will now parse characters that don't pass parity
- Added formatting function to make Account numbers follow the format on the card.
- Streamlined the Database Lookup process
- Added Card Notes to Database Entries
- Filled in all the missing comments and prototypes in source
- Formatted tabs to line up with printing report
- Added entry of unknowns about each card type, to get people
to submit data and help out

Cards Added

American Express Blue Card
Barnes & Noble Reader's Advantage Card
British Petroleum (BP) Gasoline Card
Delta Crown Room Club Card
Home Depot Consumer Credit Card
Neiman Marcus Charge Card
Radisson Gold Rewards Card
COSTCO Business Membership Card
US Air Frequent Traveler Card
Walden Books Reader Card
AAMVA Compliant North American Driver's License

Stripe Snoop 1.5 Released

] This is the Developer's Mailing List for Stripe Snoop.
]
] This list will focus on current and future development of
] Stripe Snoop, such as:
] -Development of the current codebase
] -Porting to other Operating Systems
] -Design of new Hardware Interfaces
] -Support for existing readers (serial, Parallel, USB)
] -Card database design and maintenance.

Stripesnoop-Developer Mailing List Up

Stripe Snoop parses and analyzes data from magstripe cards, displays their contents, and then tries to identify the card using a database of known card types, refining its output by printing data inside specific fields. Release 1.4 adds support for reading magstripes from keyboard based magstripe readers (such as Cherry POS keyboards), from gameport based readers, or from stdin. The database has been expanded to identify more card types. Several sample bitstreams of different card types are included to experiement with.

Linux and Windows Builds are supported

Full Change Log:

- Added Force Parse (-F) which try to parse a bitstream as
long as it has at least a start character
- Limited Cherry Keyboard (and other readers that connect
through the keyboard) support added. Works best with cards
containing only 1 track.
- Added more Issuing Bank names for Visa
- Code simplification: Lookup tables, single line ifs with ?'s
- bitgen ignores ";" and "?"
- Track 1 and Track 2 Support with Cherry Keyboards, though only
Track 2 will be parsed.
- mod10 will generate Luhn compliant account numbers of any
length

Cards Added

American Express Credit Card
Barnes & Noble Gift Card
Generic ATM Cards
Georgia Institute of Technology Parking or Temporary Card

Stripe Snoop 1.4 Released

] We have found that by sending specially crafted packets
] to the client during the authentication process, an
] attacker is able to compromise and execute arbitrary code
] on the machine running PuTTY or PSCP.

CoreLabs: Vulnerability in PuTTY