{"id":1109,"date":"2012-05-29T19:27:27","date_gmt":"2012-05-30T00:27:27","guid":{"rendered":"http:\/\/rud.is\/b\/?p=1109"},"modified":"2012-05-29T19:27:27","modified_gmt":"2012-05-30T00:27:27","slug":"an-homage-to-flame","status":"publish","type":"post","link":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/","title":{"rendered":"An Homage To Flame"},"content":{"rendered":"

(Sing to the tune of “Fame \u2013 Remember My name” \u2026
\nHere’s some YouTube background music<\/a>)<\/i><\/p>\n

They’ve been lookin’ at me, but they never did see\u2014
\nno, no trace of me did they detect;
\nGave me time to collect all the data at rest.
\nI’ve got so much in me: LUA, zlib & sqlite3\u2013
\nI can infect the USB in your hand. Don’t you know who I am?
\nRemember my name [FLAME]<\/p>\n

I’ve been around forever. Capturing packets on the fly. [HIGH]
\nMy botnet is comin’ together. When researchers see me they’ll cry. [FLAME]
\nI even infected Lebanon. Lit up the Middle East with my FLAME. [FLAME]
\nI’ve been around forever. They will remember my name.<\/p>\n

[REMEMBER, REMEMBER, REMEMBER, REMEMBER, REMEMBER, ]<\/p>\n

I’m not packed up too tight (I take up 20 megabytes).
\nWith no kill date, I’ll never stop.
\nGive me your mic and I’ll take all you’ve got to give.
\nFinding me will be tough. Too much (you’ll say ‘enough’!)
\nI can ride your net but not break (it). Yeah, I got what it takes.<\/p>\n

FLAME!<\/p>\n

I’ve been around forever. Capturing packets on the fly. [HIGH]
\nMy botnet is comin’ together. When researchers see me they’ll cry. [FLAME]
\nI even infected Lebanon. Lit up the Middle East with my FLAME. [FLAME]
\nI’ve been around forever. They will remember my name.<\/p>\n

[REMEMBER, REMEMBER, REMEMBER, REMEMBER, REMEMBER, REMEMBER]<\/p>\n

FLAME!…<\/p>\n","protected":false},"excerpt":{"rendered":"

(Sing to the tune of “Fame \u2013 Remember My name” \u2026 Here’s some YouTube background music) They’ve been lookin’ at me, but they never did see\u2014 no, no trace of me did they detect; Gave me time to collect all the data at rest. I’ve got so much in me: LUA, zlib & sqlite3\u2013 I […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"activitypub_content_warning":"","activitypub_content_visibility":"","activitypub_max_image_attachments":3,"activitypub_interaction_policy_quote":"anyone","activitypub_status":"","footnotes":""},"categories":[76],"tags":[],"class_list":["post-1109","post","type-post","status-publish","format-standard","hentry","category-malware"],"yoast_head":"\nAn Homage To Flame - rud.is<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"An Homage To Flame - rud.is\" \/>\n<meta property=\"og:description\" content=\"(Sing to the tune of “Fame \u2013 Remember My name” \u2026 Here’s some YouTube background music) They’ve been lookin’ at me, but they never did see\u2014 no, no trace of me did they detect; Gave me time to collect all the data at rest. I’ve got so much in me: LUA, zlib & sqlite3\u2013 I […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\" \/>\n<meta property=\"og:site_name\" content=\"rud.is\" \/>\n<meta property=\"article:published_time\" content=\"2012-05-30T00:27:27+00:00\" \/>\n<meta name=\"author\" content=\"hrbrmstr\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"hrbrmstr\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\"},\"author\":{\"name\":\"hrbrmstr\",\"@id\":\"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886\"},\"headline\":\"An Homage To Flame\",\"datePublished\":\"2012-05-30T00:27:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\"},\"wordCount\":243,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886\"},\"articleSection\":[\"Malware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\",\"url\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\",\"name\":\"An Homage To Flame - rud.is\",\"isPartOf\":{\"@id\":\"https:\/\/rud.is\/b\/#website\"},\"datePublished\":\"2012-05-30T00:27:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/rud.is\/b\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"An Homage To Flame\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/rud.is\/b\/#website\",\"url\":\"https:\/\/rud.is\/b\/\",\"name\":\"rud.is\",\"description\":\""In God we trust. All others must bring data"\",\"publisher\":{\"@id\":\"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/rud.is\/b\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886\",\"name\":\"hrbrmstr\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1\",\"url\":\"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1\",\"width\":460,\"height\":460,\"caption\":\"hrbrmstr\"},\"logo\":{\"@id\":\"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1\"},\"description\":\"Don't look at me\u2026I do what he does \u2014 just slower. #rstats avuncular \u2022 ?Resistance Fighter \u2022 Cook \u2022 Christian \u2022 [Master] Chef des Donn\u00e9es de S\u00e9curit\u00e9 @ @rapid7\",\"sameAs\":[\"http:\/\/rud.is\"],\"url\":\"https:\/\/rud.is\/b\/author\/hrbrmstr\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"An Homage To Flame - rud.is","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/","og_locale":"en_US","og_type":"article","og_title":"An Homage To Flame - rud.is","og_description":"(Sing to the tune of “Fame \u2013 Remember My name” \u2026 Here’s some YouTube background music) They’ve been lookin’ at me, but they never did see\u2014 no, no trace of me did they detect; Gave me time to collect all the data at rest. I’ve got so much in me: LUA, zlib & sqlite3\u2013 I […]","og_url":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/","og_site_name":"rud.is","article_published_time":"2012-05-30T00:27:27+00:00","author":"hrbrmstr","twitter_card":"summary_large_image","twitter_misc":{"Written by":"hrbrmstr","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#article","isPartOf":{"@id":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/"},"author":{"name":"hrbrmstr","@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886"},"headline":"An Homage To Flame","datePublished":"2012-05-30T00:27:27+00:00","mainEntityOfPage":{"@id":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/"},"wordCount":243,"commentCount":0,"publisher":{"@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886"},"articleSection":["Malware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/","url":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/","name":"An Homage To Flame - rud.is","isPartOf":{"@id":"https:\/\/rud.is\/b\/#website"},"datePublished":"2012-05-30T00:27:27+00:00","breadcrumb":{"@id":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/rud.is\/b\/2012\/05\/29\/an-homage-to-flame\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/rud.is\/b\/"},{"@type":"ListItem","position":2,"name":"An Homage To Flame"}]},{"@type":"WebSite","@id":"https:\/\/rud.is\/b\/#website","url":"https:\/\/rud.is\/b\/","name":"rud.is","description":""In God we trust. All others must bring data"","publisher":{"@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/rud.is\/b\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886","name":"hrbrmstr","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1","url":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1","contentUrl":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1","width":460,"height":460,"caption":"hrbrmstr"},"logo":{"@id":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1"},"description":"Don't look at me\u2026I do what he does \u2014 just slower. #rstats avuncular \u2022 ?Resistance Fighter \u2022 Cook \u2022 Christian \u2022 [Master] Chef des Donn\u00e9es de S\u00e9curit\u00e9 @ @rapid7","sameAs":["http:\/\/rud.is"],"url":"https:\/\/rud.is\/b\/author\/hrbrmstr\/"}]}},"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p23idr-hT","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":13432,"url":"https:\/\/rud.is\/b\/2022\/05\/15\/escaping-groundhog-day\/","url_meta":{"origin":1109,"position":0},"title":"Escaping Groundhog Day","author":"hrbrmstr","date":"2022-05-15","format":false,"excerpt":"Before digging into this post, I need to set some context. Friday, May 13, 2022 was my last day at my, now, former employer of nearly seven years. I'm not mentioning the company name1 because this post is not about them2. This post is about burnout and the importance of\u2026","rel":"","context":"In "Commentary"","block_context":{"text":"Commentary","link":"https:\/\/rud.is\/b\/category\/commentary\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2448,"url":"https:\/\/rud.is\/b\/2013\/04\/13\/pc-maker-slopegraph-more-functional-table-one-last-time\/","url_meta":{"origin":1109,"position":1},"title":"PC Maker Slopegraph + More Functional Table (One Last Time)","author":"hrbrmstr","date":"2013-04-13","format":false,"excerpt":"Now that I'm back in the US and relaxing, I can take time for one final blather on the [PC Maker Slopegraph](http:\/\/rud.is\/b\/2013\/04\/11\/ugly-tables-vs-slopegraphs-pc-maker-shipments-marketshare\/) post from earlier in the week. Slopegraphs can be quite long depending on the increment between discrete entries (as I've [pointed out before](http:\/\/rud.is\/b\/2012\/06\/07\/slopegraphs-in-python-exploring-binningrounding\/)). You either need to do\u2026","rel":"","context":"In "Charts & Graphs"","block_context":{"text":"Charts & Graphs","link":"https:\/\/rud.is\/b\/category\/charts-graphs\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":803,"url":"https:\/\/rud.is\/b\/2012\/01\/23\/an-infosec-hippocratic-oath\/","url_meta":{"origin":1109,"position":2},"title":"An Infosec Hippocratic Oath","author":"hrbrmstr","date":"2012-01-23","format":false,"excerpt":"I swear to fulfill, to the best of my ability and judgment, this covenant: I will respect the hard-fought empirical gains of those practitioners in whose steps I walk, and gladly share such knowledge as is mine with those who are to follow. I will apply, for the benefit of\u2026","rel":"","context":"In "Information Security"","block_context":{"text":"Information Security","link":"https:\/\/rud.is\/b\/category\/information-security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":11070,"url":"https:\/\/rud.is\/b\/2018\/07\/14\/alleviating-aws-athena-aggravation-with-asynchronous-assistance\/","url_meta":{"origin":1109,"position":3},"title":"Alleviating AWS Athena Aggravation with Asynchronous Assistance","author":"hrbrmstr","date":"2018-07-14","format":false,"excerpt":"I've blogged about how to use Amazon Athena with R before and if you are a regular Athena user, you've likely run into a situation where you prepare a dplyr chain, fire off a collect() and then wait. And, wait. And, wait. And, wait. Queries that take significant processing time\u2026","rel":"","context":"In "athena"","block_context":{"text":"athena","link":"https:\/\/rud.is\/b\/category\/athena\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4590,"url":"https:\/\/rud.is\/b\/2016\/08\/02\/new-codewords-for-age-family-discrimination\/","url_meta":{"origin":1109,"position":4},"title":"New codewords for “age & family discrimination”","author":"hrbrmstr","date":"2016-08-02","format":"aside","excerpt":"From: [Why Corporate America Is Leaving the Suburbs for the City](http:\/\/nyti.ms\/2adP5Rn): >_We wanted energy, vibrancy and diversity, and to accelerate a change in our culture by moving downtown._ translation: >_We want to begin a process of strategically removing more highly paid, legacy employees who can't commit 12 hours a day\u2026","rel":"","context":"In "Commentary"","block_context":{"text":"Commentary","link":"https:\/\/rud.is\/b\/category\/commentary\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":13005,"url":"https:\/\/rud.is\/b\/2021\/03\/30\/help-your-mac-stand-between-the-darkness-and-the-light-with-greywatch\/","url_meta":{"origin":1109,"position":5},"title":"Help Your Mac Stand Between The Darkness And The Light with GreyWatch","author":"hrbrmstr","date":"2021-03-30","format":false,"excerpt":"Greynoise helps security teams focus on potential threats by reducing the noise from logs, alerts, and SIEMs. They constantly watch for badly behaving internet hosts, keep track of the benign ones, and use this research to classify IP addresses. Teams can use these classifications to only focus on things that\u2026","rel":"","context":"In "Cybersecurity"","block_context":{"text":"Cybersecurity","link":"https:\/\/rud.is\/b\/category\/cybersecurity\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/posts\/1109","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/comments?post=1109"}],"version-history":[{"count":0,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/posts\/1109\/revisions"}],"wp:attachment":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/media?parent=1109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/categories?post=1109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/tags?post=1109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}