鼎's profile曲鼎BlogLists Tools Help
by 
June 20

支持布什同志的决定,朝鲜人民真可怜。

Bush: Iran must stop uranium enrichment

Monday, June 19, 2006; Posted: 11:09 a.m. EDT (15:09 GMT)

KINGS POINT, New York (AP) -- President Bush said Monday the United States will not waver in demanding that Tehran suspend all uranium enrichment-related activity before America would join international talks to resolve the nuclear standoff.

"Nuclear weapons in the hands of this regime would be a grave threat to people everywhere," Bush said on the eve of a trip to Europe.

Bush said the United States, Britain, France, Germany, China and Russia have adopted a unified approach to resolve the impasse with Iran diplomatically. He said that Iran must "fully and verifiably suspend its uranium enrichment and reprocessing activities" before the United States will join in negotiations with Iran.

"Iran's leaders have a clear choice: We hope they will accept our offer and voluntarily suspend these activities so we can work out an agreement that will bring Iran real benefits," the president said. "If Iran's leaders reject our offer, it will result in action before the Security Council, further isolation from the world and progressively stronger political and economic sanctions."

Bush spoke at the commencement ceremonies of the U.S. Merchant Marine Academy.

On Sunday, Iran accused the United States of steering Europe away from a possible compromise on Tehran's disputed nuclear program. Iran's Foreign Ministry said the U.S. insistence on conditional negotiations over a Western package of incentives has narrowed the scope of possible talks and made it tougher for all parties to reach a solution.

The incentives are meant to persuade Iran to stop enriching uranium, a process that can make nuclear fuel for a power plant or fissile material for an atomic bomb. Iran says enriching uranium is its country's unalienable right, and that it is reviewing the package and will propose amendments to the deal.

"I have a message for the Iranian regime," Bush said. "America and our partners are united. We have presented a reasonable offer. Iran's leaders should see our proposal for what it is: an historic opportunity to set their country on a better course. If Iran's leaders want peace and prosperity and a more hopeful future for their future, they should accept our offer.

"Abandon any ambitions to obtain nuclear weapons and come into compliance with their international obligations," he said.

Copyright 2006 The Associated Press. All rights reserved.This material may not be published, broadcast, rewritten, or redistributed

June 07

房子,正在撼动这个国家的根基

在中国,房子问题已远超出寻常的经济问题。事实上,居者有其屋原本就是政治问题。曾记得过去揭露国民党统治的黑暗,就是控诉那个时代令贫苦百姓“上无片瓦,下无扎锥之地”。<BR><BR>  当前,房价高,高得老百姓受不了。在一些城市,每平米房价超过万元。而形成对比的是如今刚毕业的普通大学生月工资才一二千元。一套住宅大中城市动辄上百万元,一般中小城市也要三五十万元。而中国工薪阶层的平均工资才多少?如果没有银行房贷,中国的楼市再怎么牛也红不起来。可是,工薪阶层一不小心通过房贷供楼了,又会掉进一个可怕的陷阱。供楼二十年左右,每月一二千至三五千元的银行债务和小区管理费及某些莫名其妙的折腾费,让他们变成了所谓的“房奴”。这一生,除了对付房子,别的事就没指望啦。<BR><BR>  在商品经济时代,房地产愿意卖多高的价钱本是他们自己的事。正常的商品房市场,一定会中、高、低房价并存。可不知为什么,只要是商品房,价格就一定必须高得离谱。哪怕那种“假冒伪劣”房子,开盘的时候也一定售价不菲。比如有的小区被吹是天花乱坠,说有多少绿化面积,可大伙一住进去,原先的绿化区又被一栋新建筑干掉了。这便让老百姓不舒服了。房子,我们的房子怎弄成这样子呢?<BR><BR>  另一个让人不舒服的是凡是搞房地产的,很容易就变成超级富翁。瞧他们,几年前或十几年前,还只不过一个穷小子。而今,他们的财产少的上亿元,多的几十、几百亿元。有人就搞了几个楼盘,便一夜暴富。而真正替他们盖房的建筑工人,月工资也就一二千元甚至几百元。我认识一个房地产朋友,私下告诉我,他才玩了一年,就赚了1亿多。<BR><BR>  事实上,当前商品房造价,除地价外,每平方米也就平均一二千元。有些地方还低些,每平方米不到千元也能把房子盖起来。房子无非水泥、砖头、钢筋堆起来的,这些东西的价格大家都一清二楚。然后就是设计、人工、建筑管理、销售之类的费用。不管一个楼盘多么“高档”,它们的建造成本就是这些。<BR><BR>  房价高,在正常的经济环境可能是供给不足所致。房源少,自然价高。可在我们当前的中国,又不是这么回事。据公开资料,全国商品房空置面积达1亿多平方米,平均空置率达26%以上。这意味着有上百万套商品房根本卖不出去。在国外,商品房空置率达到20%就非常危险。危险意味着什么?房价到了临界点之后突然掉头向下,而且跌得很快,跌得疯狂,令无数供楼者一夜之间账面资产大量“缩水”。香港楼市漰盘时,不少白领正在通过银行供楼的房子有些曾贬值超过50%以上。房子不值钱了,银行却按照原先的房价与你算债务。你的账面资产“资不抵债”,银行便要求你以其他资产抵押。没有其他资产,那么,银行便用更狠的手段对付你,反正你的产权证被银行捏在手中。于是,好几年,香港一批“负资产”的“房奴”怨声载道,恨天恨地。(香港的楼市漰盘,导致其整体经济至今仍然没有完全恢复过来。如果不是祖国大陆为香港输血,那么如今的香港恐怕又变成令人生畏的“臭港”了。)<BR><BR>&nbsp;&nbsp;&nbsp; <IMG src="http://www.comment-cn.net/data/uploadfile/200606/20060605023624794.gif"><BR><BR>  从业内揭露的情况来看,中国当前的房地产商在销售中还有一个奇怪的做法,这就是并不急于完成销售。明明房子没有卖出去,销售人员却告诉你“已售”。有的楼盘声称剩余商品房不多,尚有若干套待售。既然卖得这么好,售楼部很快应该撤掉了。然而过了三五年,仍然是尚有若干套待售。原来,不少房地产商不管自己囤积了多少空房,却一定只拿出少量房子出售。是他们人为控制销售数量,制造畅销假象。如此操作,就算房价每平方米炒到千万元,房地产商也能做到。<BR><BR>  这就不难理解为何有房子供应不存在问题,却又能制造房价虚高的状态。但是,问题又产生了,为何房地产能这样做呢?他们似乎不在乎卖房子,他们的资金又从哪里来?利润又从哪里来?<BR><BR>  这又与我们可爱的银行有莫大的关系。房地产开发需要大量资金。只要不是印钞机,一个人或一个集团无法凭空弄出那么多钱来。然而,有人就有办法弄钱。以前,谁只要拿到一个土地批文,银行就大把给钱了。后来虽然银行收紧了控制,但基本原则未变。变化的是手段。单凭土地批文不能贷款了,那么塞红包、送回扣、送女人,玩虚假抵押等等。只要敢想敢干,没有从银行套不到钱的道理。<BR><BR>  银行贷款的利息和在贷款过程的开销大得惊人,这笔花费总得赚回来。自然而然,购房者得当冤大头。可是房价高了,没人买怎么办?那就找媒体吹牛,找政府帮忙。<BR><BR>  于是,一些昧着良心的媒体及记者成为某些房地产商的座上客。凭心而论,房地产商并不真正尊重媒体与记者。但金钱的诱惑,总能把他们拉到一块。这样,某楼盘“供不应求”啊,某楼盘房价“过万元”啊,某楼盘“尊贵高尚”啊之类的信息,便传到老百姓的耳朵里。老百姓是经不起诱惑的。有人在媒体上看到相关信息,以为再不买就是终生遗憾。跑去楼盘,再被售楼小姐的花言巧语一阵糊弄,若不买会每个晚上都睡不着觉。以前的大亚湾、海南之类的烂房子,就是如此炒作而使许多人上当受骗的。近两年,上海楼市成为又一个陷阱,也是同样的操作方式。这法子没什么诀窍,但总是管用。上海的楼市开始烂了,那么就又到广州、深圳这些地方重复。<BR><BR>  政府所起的作用有两个方面。一是某些政府中的贪官本来就喜欢官商勾结,一是政府中的书呆子、庸官被房地产商欺骗。官商勾结是不正当的,干什么坏事不必多说了。倒是书呆子、庸官被房地产商欺骗,值得我们研究。为何政府新出台了的房地产政策,房价不降而升?根源就在此。如今的房地产商多是雄辩大师,贼精。与此同时,房地产商们又通过所谓经济学家(地球上最不不争气的经济学败类)替他们发言,当炮筒子。因此,政府的房地产政策,便不能不被房地产商所左右。由于政府新政策不管用,那么就只好弃之不用,或走走过场。这样,咱们的房地产商就更可以为所欲为了。<BR><BR>  银行、政府和房地产商之间,就这样形成了铁三角关系。但房地产商总得把房子卖出去啊。要不然,如何收摊?其实,他们不在乎卖房子是假的,他们真正目的是卖到超高价,谋取暴利。<BR><BR>  第一个做法是将需要购房的人逼到绝境。房价无论如何都不降反升,爱买不买。这就像时下一些名贵店,客人一个月没几个,却赚得厉害。他们一个月只要卖上几件东西,就能吃一年半载。基本做法是房地产商们在某些政府帮助有意无意地帮助下控制房子的售卖数量。每年总有那么多人要结婚,要这样那样,他们必须要有房子。大家看见房价总是降不下来,就只好闭着眼睛往购房陷阱中跳。有些人经济条件好,尚能承受;有些人经济条件不好,那就只能从此过上紧巴巴的苦日子。<BR><BR>  第二个做法是进行“策划”。几乎无一例外,每个楼盘都有强有力的“策划”部。这种部门的主要目的,就是煽动老百姓的购房情绪。他们借助媒体、名人、官员,竭尽所能把房子说成是天仙楼台,物超所值。<BR><BR>  第三个做法是与炒楼团勾结起来。有的房地产商一边卖房子,一边暗中买房子,制造楼盘热销的假象。这和炒股差不多,房地产商和炒楼团都是幕后庄家。只要将散户骗进来了,他们就立即脱手,溜之大吉。<BR><BR>  第四个做法是阻止廉价房、自建房的出现。这需要某些政府机关的主动或被动的密切配合。我们的一些政府在廉价房行动中不作为,正好让房地产商心中窃喜。有人想组织起来自建房,那么政府必定层层设房,土地、规划很难通过,然后又动员水电之类的垄断部门予以卡压。<BR><BR>  第五个做法是混淆视听,颠倒黑白。由于房地产商有了控制的能力,使得有些老百姓被他们忽悠了。这时代,社会公理被人肆无忌惮地践踏,真理的标准没了。<BR><BR>  当前,中国的房地产已成为这个国家最大的吸钱机之一。一方面从银行输钱,一方面从老百姓身上刮钱。土地、钱路来得不那么正当,房地产商的心态也变得令人担忧。在社会上,他们一些人成了惹不起的风云人物。在税务上,他们中至少相当一部分成了最难自觉纳税的一群坏分子,这有政府公开的税务资料及相关分析报告为证。在信用上,他们中很多人的词典里很难找到诚信二字。在德行上,他们中一些人变得极为苛刻,不但将建设工人工资压得极低,而且还通过自己的物业公司与广大已购房的业主过不去。有些房地产大佬赚了太多钱,享受到太多的做奢华,变得行为怪异,需要依靠极限运动一类的刺激来拯救自己。<BR><BR>  尽管某些房地产商用尽卑鄙手段,但销售并不能达到预期目的。按理说,银行贷款有一定期限,到期总得还款。可他们却可以高枕无忧。原来,房地产商上与银行之间还有一个公开的秘密,那就是可以无限续贷。银行的贷款额越大,房地产商越可以轻松。有的房地产商早就是严重负资产,却仍然可以夜夜笙歌,花天酒地,手上有花不完的钱。这是因为银行不敢与其清算。若清算了,银行账面资产顿成负数。不清算,房地产商不破产,表面上还有楼盘在那儿抵押着。如今,究竟银行有多少这样恶账,谁也搞不清楚。商品房需要虚高的房价,在某种意义上也是银行的需要。房地产商和某些银行当家人已成为灰色经济的利益共同体。房价降了,银行的账不好做了,那岂不天下大乱?<BR><BR>  可是,这样的情况能维持多久?现在下狠招,采取有效的措施也许还来得及。时间长了,癌症扩散了全国经济的各个细胞,谁能预料将来会发生什么样的事?<BR><BR>  另一方面,许多老百姓穷,特别是白领阶层,穷其一生将血汗钱送进了房地产商的口袋,那么中国的其他经济领域如何能正常、健康地发展?<BR><BR>  再者,这种房地产经济形成的民怨不断扩大,难道不是制造社会动乱的种子吗?<BR><BR>  如果一个国家的未来被房子毁了,那岂不是天大的笑话?
June 03

Fighting EPO Viruses

Fighting EPO Viruses
Piotr Bania 2005-06-29

This short article describes the so-called Entry-Point Obscuring (EPO) virus coding technique, primarily through a direct analysis of the Win32.CTX.Phage virus. The reader should know the basics of IA-32 assembly and the main elements of the Portable Executable (PE) file structure to fully understand this article. The author also advises the reader to review the Win32.CTX.Phage description written by Peter Szor and Wason Han , since this article does not cover all the features of the virus.

Why EPO and Win32.CTX.Phage

Entry-point obscuring viruses are very interesting because of the very difficult nature of its detection, disinfection and removal. Nowadays the EPO technique is used in many different ways, however Win32.CTX.Phage has been chosen for this article because it was written by the same author of other such infamous viruses as Win9x.Margburg (one of the first Windows9x polymorphic virus, which first appeared in the wildlist) and Win9x.HPS. The author of these viruses is known for his difficult-to-detect and difficult-to-disinfect creations. CTX.Phage in particular involves many techniques that make the disinfection process highly difficult, even after the virus is fully understood.

Understanding the Entry-Point Obscuring (EPO) technique

When a virus infects a file, it must find some way to attain control and be executed. Most of the PE file infectors use the most common way of doing this -- they simply change the entry-point of the infected application and make it point to the virus body. An example is shown below.

Original EXE Infected EXE
Entry-point: 0x1000 (.code section) Entry-point: 0x6000 (.reloc section)

Such virus activity is very easy to detect, as it usually results in files whose entry-point resides outside the code section, and are therefore marked as suspicious by a virus scanner. Here is some example code, which detects this type of infection:

(checks if the 'entry-point section' is the last section):
// --- snip of scanner code ------------------------------------------------
...(snip)...
sections = pPE->FileHeader.NumberOfSections;
pSH = (PIMAGE_SECTION_HEADER)((DWORD)mymap+pMZ->e_lfanew + sizeof(IMAGE_NT_HEADERS));
    
    
    while (sections != 0) {
        if (IsBadReadPtr(&pSH,sizeof(PIMAGE_SECTION_HEADER)) == TRUE) 
              {
            printf("[-] Error: Bad PE file\n");
            goto error_mode4;
        }

        char *secname=(char *) pSH->Name;
        if (secname == NULL) strcpy(secname,"NONAME");

        startrange=(DWORD) pSH->VirtualAddress + pPE->OptionalHeader.ImageBase;
        endrange=(DWORD) startrange + pSH->Misc.VirtualSize;

        ...(snip)...

        if (pSH->VirtualAddress <= pPE->OptionalHeader.AddressOfEntryPoint && \ 
                   pPE->OptionalHeader.AddressOfEntryPoint < pSH->VirtualAddress + 
				       pSH->Misc.VirtualSize) 
                  {
            
                      printf("[+] Checking call/jump requests from %s section (EP)\n",
					      secname);
            pSHC = pSH;
        }

    
        pSH++;
        sections--;
    }

    pSH--;
    
    if (pSHC == NULL) 
       {
        printf("[-] Error: invalid entrypoint\n");
        goto error_mode4;
    }


    printf("[+] Starting heuristics scan on %s section...\n\n",pSHC->Name);

    if (pSHC == pSH) 
       {
        printf("[!] Alert: Entrypoint points to last section (%s) -> 0x%.08x\n", 
			pSH->Name,pPE->OptionalHeader.AddressOfEntryPoint + 
			    pPE->OptionalHeader.ImageBase);

        printf("[!] Alert: The file may be infected!\n");
        printf("[+] No deep-scan action was performed\n");
        goto error_mode4;
    }


...(snip)...
// --- snip of scanner code ------------------------------------------------

The very reason why the EPO technique was developed was to avoid virus scanner detection. An entry- point obscuring virus is a virus that doesn't get control from the host program directly. Typically, the virus patches the host program with a jump/call routine, and receives control that way. While there are many variations of the EPO technique, in this article we will look at one of them in detail.

 

May 30

一半是火焰,一半是海水

铜、黄金、石油暴涨意味着什么




南方周末    2006-05-25 16:23:53



  ■每周财经评论    
  □时卫干
  
  一场席卷全球的价格暴涨正在来临,更可怕的是,这一轮价格上涨并没有结束的征兆。对正在遭遇楼价上涨困扰的中国经济来说,这是一重更直接和严峻的考验
  
  近期以来,由铜、石油、黄金等领衔,全球范围内掀起一股大宗商品价格暴涨狂潮。尽管近期价格略有回调,但截止到5月19日收盘日,国际期铜价格仍维持在7600美元/吨的价格水平之上,黄金价格报收于659美元/盎司,石油价格则一直维持在75美元/桶的高位之上。仅在一个月之前,这三类商品的价格还仅仅为6000美元/吨、600美元/盎司和70美元/桶,而“国储铜”事件之时普遍认为畸高的5000美元/吨的价格更是恍然如梦。
  目前,路透社CRB指数是应用最为广泛的衡量全球商品价格变动的指标,它汇集了全球最重要的7大商品交易所的19种商品的期货合约,涵盖了能源(如原油、燃料油等)、工业金属(铜、铝、锌、铅、锡等)、贵金属(黄金、白银等)、谷物、畜产品和软性产品等主要的商品期货,是全球商品价格波动的指标。截止到5月22日,CRB指数已经在342点高位附近持续运行,创出CRB指数1980年以后的历史新高。CRB指数的变化明白无误地告诉我们,一场席卷全球的价格暴涨正在来临。更可怕的是,这一轮价格上涨并没有结束的征兆,近期铜、黄金等价格的回调只是对前期过度投机的正常反应而已,并不会改变上涨的根本走势。
  近期以来,在全球范围内流动性过剩、资本过剩的大背景之下,大宗商品与房地产、股票等一起成为国际上最受欢迎的投资品种。全球经济增长特别是以中国、印度为代表的新兴市场国家持续增长所带来的巨额能源需求,是这轮商品牛市的基础性支撑力量。以中国、印度、巴西、俄罗斯为代表的“金砖四国”(巴西、俄罗斯、印度、中国英文的第一个字母,与英文“brick”———砖头发音相同)经济持续高增长,在基本面上保证了大宗商品大牛市的出现。同时,国际上对冲基金对大宗商品的大规模投机性追逐则直接导致2001年以来大宗商品牛市的形成,从铜、锌到橙汁、白糖等大宗金属、能源和部分农产品的大宗商品价格均创出历史高位。
  回到中国的经济现实中来。当前对中国经济的整体判断依然存在较大争议,但部分行业通胀与部分行业紧缩同时存在亦是不争的事实,而这与国际范围内的价格暴涨潮有直接关联。
  众所周知,尽管中国已经实现经济持续增长20多年,但中国经济依然严重依赖于政府投资与出口,粗放式投资所衍生出的投资效率不高问题导致对能源、铁矿石、农产品等各种商品的需求暴涨。中国本身的资源存量无法支撑其需求,许多商品都必须通过国际市场进口。
  而全球范围内大宗商品价格暴涨,对中国经济将会产生一个极其严重的后果:通胀将可能会与通缩并存。一方面,由于农产品、能源、矿石等均属于基础原料,大宗商品价格暴涨,会通过其中下游各种产业链传递,从而对中国经济形成非常大的通货膨胀压力。另一方面,部分产能过剩、在产业链条上不占优势的产业,其因原材料涨价而增加的成本无法转嫁给消费者,有可能给中国经济带来紧缩威胁。
  中国经济正在遭受房地产价格暴涨所带来的痛苦,而国际大宗商品价格变动对中国经济的影响比过去任何时候都更直接更猛烈。通货膨胀压力与行业紧缩压力并存是近忧,而国际大宗商品价格暴涨还可能会使中国的产业结构出现失衡、进一步加剧就业难题则是由此而生的远虑。
  近期,央行温和加息、国务院提出调控房地产的6大措施,是对近期中国宏观经济作出的审慎反应。但是,面对全球大宗商品价格的暴涨,恐怕单纯的经济政策已是不够,有关部门在协同的基础上尽快推出应对政策组合方是明智之举。
  “一半是火焰,一半是海水”。全球范围内大宗商品价格暴涨,需要我们做准备。
  (作者单位:中国农业银行机构业务部)(P1163352)
May 29

Helicopter Force Takes Measure Of Two Wars

Helicopter Force Takes Measure Of Two Wars

From Above, Afghan and Iraqi Disparities Come Into Focus

Washington Post Foreign Service
Monday, May 29, 2006; Page A01

KANDAHAR, Afghanistan -- Military helicopter crews over Afghanistan and Iraq know better than most what the wars in those countries have in common: There's more below than meets the eye. They also have an unmatched view of what makes the conflicts different.

A Black Hawk helicopter crew in Afghanistan skims along above the desert as the crew watches for signs of the enemy below. For miles, the land is empty. Then someone spots a mud compound with a dozen men around it but not a single sheep or goat in sight. Is it a farm or an insurgent hideout?

In Iraq, the field of battle is often a densely packed neighborhood, where a crew on a sweep might see nothing but rooftops and alleyways. But then, out of nowhere, "someone can shoot at you from any direction, blend in and be gone," said Sgt. Rodney Kitchen, 27, a crew chief from Baltimore. "Here, there are few people in the open desert. They're not going to take potshots at you because they know four choppers will be chasing them."

Pilots and crew members of Task Force Knighthawk, a U.S.-led helicopter unit based in Kandahar, know the combat environment in Afghanistan intimately. Many of its members have also served in Iraq, and they say there are great disparities between the two combat theaters. Lessons learned in one don't necessarily carry over to the other.

Afghanistan is rugged, poor and sparsely populated.

The Iraq combat theater is for the most part flat, comparatively developed and urban.

In Afghanistan, "our biggest threat is not Taliban or al-Qaeda shooting at us. It's the weather and the terrain," said Army Lt. Col. Mark Patterson, who commands Task Force Knighthawk. "It's a rugged, unpredictable environment that an agile, adaptable enemy can exploit."

Patterson's fleet of Chinook and Black Hawk helicopters, with their teams of 55 pilots and crew members, perform the heavy lifting of the Afghan war -- ferrying the troops, evacuating the wounded, conducting reconnaissance missions and supporting ground assaults across southern Afghanistan.

The region, which includes Kandahar and three neighboring provinces, has been swept by violence in recent weeks, with a death toll since mid-May that could exceed 300. Anti-government insurgents have assaulted civilian and military targets in a dozen locations, and U.S. airstrikes have reportedly killed more than 100 Taliban fighters and at least 15 civilians.

There is danger in both theaters, the team members said, but it comes in distinct forms, degrees and disguises. Iraq's developed infrastructure includes power lines that can block low flight paths for helicopters, apartment complexes that can hide snipers, and long, paved highways that can be booby-trapped with remote-control explosives.

"Here we are always flying, looking down and scanning the ground. In Iraq, I went in my first road convoy, and suddenly there I was in a truck with my rifle pointing out, wondering what to do if we got hit," said Sgt. Richard Staggs, 25, a Black Hawk crew chief from Las Vegas. Staggs said a close friend was killed in another convoy in Iraq when three anti-tank mines exploded under his vehicle.

Afghanistan's trackless deserts and hillside villages mean troops and supplies must often be delivered to forward bases in Taliban territory by helicopter, exposing crews to rocket attacks as well as mercurial flying conditions. But it is easier to spot insurgent hideouts in the open desert, team members said, and the enemy's weapons here tend to be older, less powerful and far less accurate than those wielded by Iraqi insurgents.

Kitchen said the Knighthawk teams had learned to spot the telltale signs of Taliban presence, such as farm compounds devoid of livestock or field workers, but also to recognize as benign certain sights that might seem suspicious at first glance.

"In the mountains, you always look for animals," he said. "If you see shepherds with no sheep, or farmers who are not plowing, it means there are possible insurgents." On the other hand, he said, a man walking alone across inhospitable desert at night could be a nomad or innocent villager rather than a fugitive fighter.