Con Dao

A protected Marine Nature Reserve, the Con Dao Islands (of which Con Son is the largest and where you are likely to be staying) can be difficult to get to, with irregular flights from Ho Chi Minh City or an overnight ferry from Vung Tau.. but my goodness, it's worth it!

I must confess, the highlight of any travelling around Vietnam for me is usually the food, yet the lack of any real eating options outside of the main hotels didn't still manage to disappoint, as the scenery around Con Dao is so spectacular you'll want to stay forever. I think of all the places I visited in Vietnam Con Dao was possibly one of the most beautiful I've seen.

The islands of Con Dao have a tragic history - they lay completely unoccupied until the French occupied Vietnam and used the island as one large prison complex, where prisoners were shackled, starved and beaten, forced into hard labour and subjected to some particularly cruel and unusual punishment. Sadly when the Americans arrived to 'save' Vietnam from Communism they kept the prisons running, and made good use of one of the most barbaric elements, the 'Tiger Cages'; even once their horrific nature had been exposed in the US media they simply built another set deeper in the jungle so the journalists wouldn't find them.

Today the prisons serve as a stark reminder of the horrors of war, and many of the islands residents are ex-convicts who decided to stay on the islands rather than return to the mainland. These days the main industries are fishing and shipping, and life on the island is very simple and undeveloped, though there are plans to encourage more tourism to the islands in the future.

The entire area is protected by law, so much of the islands are covered by thick forest. A visit to the rangers' station will explain a great deal about the wildlife living on the island, and they are very happy to arrange tours around the jungle or out to the other islands, to see endangered species and to go snorkelling and diving. There are also a number of diving schools on the island, particularly Rainbow Divers.

On our visit we hired a motorbike to explore the roads around the island, and went for hikes through the forest and swam on completely deserted beaches, as well as visiting the prisons and museums. It was a true escape from Saigon, a complete contrast to the concrete, traffic and noise, and one we'll remember forever.

One of the key organisations protecting the local habitat in Con Dao - as well as in many other national parks across Vietnam - is WWF. If you'd like to help support conservation efforts in Vietnam and preservation of the many endangered species there, we strongly suggest becoming a member - it doesn't cost a lot and while in Vietnam you can see for yourself the difference they are making.

Getting to Con Dao

If you want to go by boat there is a hydrofoil service from Vung Tau to Con Dao twice a week at 350,000 VND each way, and also one departing from Tra Vinh in the Mekong Delta which is run by Greenlines. The fares and timetable are no longer advertised on the Vietnamese language version of their website though, so it is worth checking before making the trip to Vung Tau.

Flights are run by VASCO but are unfortunately not bookable online.

An alternative may be to book online with Isango who are currently advertising an all inclusive two day tour to the island including flights which departs from Ho Chi Minh City. Feedback on this service would be appreciated.

Can Tho

Can Tho is the biggest and most prosperous of the cities in the Mekong Delta; its central location has made it a major trading post in the region, attracting farmers from across the delta to come and sell their crops or trade for supplies.

The rivers and waterways of the delta have long acted as canals enabling farmers to cover long distances to get a better price for their produce, and in turn Can Tho has become a relatively wealthy city, with clean, smart streets and a good number of shops.

Nowadays Can Tho is a great place to experience a Vietnamese floating market, as every morning at 5am boats arrive from around the provinces to sell the fruits of their labour. Some boats are houseboats - merchants who buy in one place and sell in another - while others are simple crafts who will have left home long before dawn to trade directly and get a better price for their goods.

Every day the traders will be different and so some mornings the market will be much busier than others . The floating market is some way out of town, but trips to visit it can be organised with any of the ladies who approach you while walking alongside the river in the main town of Can Tho.

This waterfront is a great place to pass the time with a sweet little park by the side of the river, and a number of great restaurants in old villas and shopfronts. There is also a beautiful pagoda built by the
Chinese merchantmen who have long lived in the city.

Can Tho can be reached by bus from Ho Chi Minh City (around 4hrs) or by speedboat - around 2hrs, with one departure a day. Victoria Hotels also offer upmarket speedboat services through the area, though you may pay a premium to do so. Due to its central location connections from Can Tho are great, with buses and boats heading to most destinations around the Mekong Delta.

Night Markets in Saigon

While they may not be as bright and shiny as malls or supermarkets, night markets have their own character and are popular destinations for local people and travellers alike. For many travellers the day is just too hot to spend shopping, and the cooler night air offers an ideal opportunity to grab some souvenirs, while for locals the evening is an ideal time to meet and gather outside and share a meal or a drink under the stars.

There is an enormous variety of goods on offer including clothes, footwear, hats. hair clips, jewellery, watches..etc The prices are normally cheaper than day markets or supermarkets as the sellers pay less for the rent, so there are some great bargains to be had. As well as the choice in souvenirs there's also a great range of food, with many street vendors setting up shop to take advantage of the passing trade.

Some night markets specialise in cheap goods for students and workers, and are located out of town near universities and textile factories, such as the huge Ky Hoa night market on Cao Thang in District 10, where many student live. In these markets the prices are often cheaper than in town and less bargaining is necessary; many people also come to these markets and buy wholesale to stock their shops in town.

The food in Ky Hoa is delicious and surprisingly cheap, just $1 for a bowl of noodles or a plate of broken-rice with grilled pork and fried egg, plus a glass of sugar cane juice on the side. You will find a similar atmosphere at Binh Tay / Cho Lon, Hoa Hung and Ba Chieu night markets.

Museums in Saigon

Vietnam has a fascinating 2,000 year history and there is plenty to learn about the country's past and how it affects life today. Sadly, however, while there are some excellent museums in Vietnam not all live up to the same standard - many are lengthy photo galleries with few English translations of the contexts or history behind the photos, leaving the visitor bewildered even if they have some prior knowledge of the subject.

That being said, if you choose the right museums on your trip you can learn a great deal and begin to appreciate more the rich history of this country.

The Museum of Vietnam's History
(Inside the gates of the HCMC Zoo/Botanical Gardens, Le Duan, District 1)
Possibly one of the best museums we've seen in Vietnam, the natural history museum of Ho Chi Minh City manages to chart the country's history from prehistoric times and 10,000 year old artifacts to the wars with China and the numerous dynasties that have shaped the development of the Vietnamese nation over time. There are some fantastic examples of sculpture and art from the Cham and Oc Eo civilizations, statues of Buddhas from across the region, collections of porcelain and art from various historical periods and a even a mummy found preserved in Saigon. The narratives on the walls throughout the museum also go some way to helping the visitor understand the many periods of Vietnamese history, with only a few gaps. Highly recommended.

Destination Guide

Destination Guide
Photos



While living in Vietnam I found there frequently wasn't much information or decent photos of places to visit off the beaten track available on the internet - it may be easy to find information on towns on the Sinh Cafe routes but beyond that places were often something of a mystery.

It also seemed that many of the guides I came across didn't express the sheer beauty of the country, with dry descriptions and little information beyond where to sleep. I want to try and correct that with this blog and travel guide - although it is still early days - and plan to cover plenty of the hidden locations that make Vietnam so special.

Still, I'm not a fountain of all knowlege by any means, and I would welcome anyone who is so inclined to send in their own stories, tips and advice to the website to help it grow into an authoritative guide on travel in Vietnam. Similarly if you have questions about your upcoming visit please make contact and I'll do my best to offer any tips I can think of.

In the meantime, start reading about the wonderful destinations we do cover!

Magic-PS-Final (Hack yahoo Messenger)

MagicPS is a software trojan to steal Yahoo! Messenger passwords are very common and popular. Many people have become victims of MagicPS. Most of them do not know the password has been lost. The rest is known to have lost their password by the MPS, but do not know who steal passwords hidden aspects of who you are ..

Currently, MagicPS 1.5 will have a life, support for password theft with Yahoo! Messenger latest version - Yahoo! Messgenger 6. You can use the NAV scan it, but not that bad guys trick your stomach drop MagicPS is he who ...

Here is the analysis of SE MagicPS May 1, learn how to store information, encrypted ... the MPS, to the word, get Yahoo! ID of the assembly center who has stolen your password by MPS. And end all is a small tool, help you discover your attacker.

First, using MPS creator, create a file Sender.exe. Thug select the Send Y! Mess Pass and Auto Startup. Create MPS India.

MPS will create a file creator Sender.exe. We chose the run, MPS will become regsvr.exe file. Password of Y! Mess will be sent to Yahoo ID: mothafuckin_attacker.

http://vxervn.com/src/cmpsyid-src/creator.JPG

Olly used to load this file Sender.exe. Oooops, look at the code view window of Olly, in his experience, Thug realized this was definitely Sender.exe MPS packed, encrypted.

http://vxervn.com/src/cmpsyid-src/1.JPG

Load PEiD see what it is packed with packer, UPX-Scrambler RC1.x -> ® ol © Ont. Oopps not know what is more ... The strings behind are not identified what, Thug must unpack mò so ...

http://vxervn.com/src/cmpsyid-src/2.JPG

Typically, the packer usually have to unpack in many closed loop, then, the work done unpacking, decoding, EIP will point to the truth of the Entry Point EXE file is packed by the packer through the command JMP or CALL. JMP or CALL command is custom packer that can "willow road" or are sunk in the garbage code generated by the packer. Here, have this experience, press PageDown Thug 3 times, and met at opcode offset:
CODE 0040FADF: .- E9 D452FFFF JMP Sender.00404DB8.


http://vxervn.com/src/cmpsyid-src/3.JPG

Here then, orders can JMP to jump to 99.99% is real entry point. Put a break point in this 0040FADF offset, press F9. Press F7 once more, Thug landed here:

http://vxervn.com/src/cmpsyid-src/4.JPG

Experience, as seen in prolog 404DB9 offset 404DB8 and this is the real entry point of the file is then packed. He3, try MagicPS yahooID the attacker can save plain text not in any .. Press Alt + M, in turn choose the section of Sender.exe then search string "mothafuckin_attacker":

http://vxervn.com/src/cmpsyid-src/5a.JPG

Results: The string is not in any section, including stack. So, make sure the string has been encrypted or hidden MPS file Sender.exe.

Encryption capability yahooID MPS is higher than it looks (spiritual feel ), So start checking Thug MPS generator, is to file to create the file Sender.exe. Why check MPS generator? Thug judgments because that MPS generator will encode the string "mothafuckin_attacker" for the file then Sender.exe. Sender.exe will be available in a decoder to decode this string. Repeat as before, load the file into the MPS-15-SE.exe Olly. File MPS-15 is also packed SE.exe then.

Okie, after the dump is complete MPS-15-SE dumb.exe the file, load Thug dumb.exe to Olly. At this point, our job is to find the code to encrypt the string "mothafuckin_attacker," from which to find the byte has been encoded by this string.

Experience to get text from text box value, Delphi coder will use imported API: API GetWindowTextA Since it is imported to JMP API should address this section are generally the code is being executed. Therefore, press PgUp a few times, Thug find the following address:


CODE 00402538-FF25 BC114100 JMP DWORD PTR DS: [<& user32.GetWindowText>; USER32.GetWindowTextA



Put a Breakpoint here. Press F9. Left-create a file Sender.exe different options as at first:

http://vxervn.com/src/cmpsyid-src/1.JPG

Create button MPS. Control is returned to Olly. Press F8 to run it through this API, press F7 a few times more, Thug gradually be offset on the following:


CODE FF 00408E55 8D4430 LEA EAX, DWORD PTR DS: [EAX + ESI-1]



http://vxervn.com/src/cmpsyid-src/catch_yid.JPG

Here, we see EAX and EDX points to the string "MPS: Magic_h2001. Press F7 to F8 with the Thug realize this is the starting point of encryption. Seems strings in turn is encrypted here, the beginning of this coding is offset 00408E55. What we need is the process of encoding the string "mothafukin_attacker, should continue to press F9 again to a number of times through the rapid encoding of strings such as" regsvr.exe "or" Error code ... ", we have to string of concern:

http://vxervn.com/src/cmpsyid-src/catch_yid2.JPG

He3, which, continued analyze string "mothafuckin_attacker" will be encoded into something. Next we need to find the offset that yahooID encrypted Where is contained. Press F8 a few times, Thug here.

http://vxervn.com/src/cmpsyid-src/enc_1.JPG

Thus, character "m" has been converted into the encoding byte 0Dh. Byte 0Dh is located just before the string "othafuckin_attacker. Since then, the character encoding will be saved at offset contains characters not encoded earlier. So, in this case will yahooID located at offset 00169338h.

Press Alt + M, dump memory starting at offset 00140000. Scroll the mouse down, we need to find that string in the memory:

http://vxervn.com/src/cmpsyid-src/memory.JPG

India consecutive F8 several times more. We had a string encoded as follows:

http://vxervn.com/src/cmpsyid-src/memory2.JPG

Done and Why? I was waiting, missed where MPS is encoded strings on the two stars? Still more carefully, Thug put a Breakpoint on write at offset 00169338h - offset start of the string. Press F9, Olly stop. Observations on the first byte encoding other, Thug Now that it continues to be encrypted again (carefully spreads out, he3 ). As this case, as you can see, 0Dh byte encryption on encrypted into a byte 0BFh. And the results are:

http://vxervn.com/src/cmpsyid-src/memory3.JPG

Are you to doubt: "Encryption is the 3rd copy?. He3, but the Left F9 to do (remember that we still to Breakpoint on write start offset in this yahooID). But, how happy, MPS is encoded only two times ...

Okie, done then. MPS generator to run. I get Sender.exe file. Completion of the first. (Note that the file was created Sender.exe new Sender.exe did not the first article)

Open file Sender.exe just created, repeat the previous steps has to unpack the files from memory. Thug eagerly ran to look for newly encoded string above in the section, for the purpose set Breakpoint on access in yahooID offset contains the encrypted, then decrypt the code that was ...

Find the hex byte follows (the byte string of our encrypted two times):

CODE BF C4 C6 C1 B7 C1 D1 BA C9 FA CC C2 BF D3 D2 C4 C9 D0 CD D7



But, many real life cheating, do not find the BYTE THIS SECTION IN ANY KIND. E hem, so, MPS set out in section yahooID encryption and data encryption is (probably is common with many other secret data is encrypted) is not in memory map. Author MPS quite high hand. But, if so, MPS must ensure that data read from the file . He3, so is not out 2 API: SetFilePointer and Readfile then. Okie, this is an imported APIz, so press Ctrl + Home, Thug in the JMP address this, set Breakpoint here. Press F9 to run Sender.exe.

Olly stop at the point just set Breakpoint. Here, we are interested in data on the stack:

http://vxervn.com/src/cmpsyid-src/stack.JPG

From the stack is found, move the cursor files from FILE_BEGIN, move to 3800h (14,336 bytes). On the other hand, we know that MPS will create permanent file regsvr.exe running in memory. Find the file in your computer, Thug find file: c: \ WINDOWS \ REGSVR.EXE. Press Ctrl + Alt + Del, that in the process is running REGSVR.EXE. So, MPS can read data from this file REGSVR.EXE. (Later, when checking, Thug in MPS file when run will copy the file Sender.exe REGSVR.EXE and Tapi32init.exe file located in% systemroot%. Last reboot, the file will automatically run Tapi32init.exe Win at boot). Check the file in bytes long, Thug has file size: 14.728 bytes. Size is larger file offset pointer points to. Therefore, the MPS reading a data from offset 3800h since the start file on, the MPS data length 188h bytes (392 bytes). And, can (can) in the data contains both encrypted yahooID of us.

Continue to press F8 when returned to the main program. Left Alt + M, observing all the mind see the change. In the program box (Alt + C), I press F8 row. Found that the memory starting from about 00143930h constantly changing and appears in plain text never appears. Continue to press F8 and consecutive observations on the memory. Have:

http://vxervn.com/src/cmpsyid-src/yidplain.JPG

He3, from which we abstract the offset is offset 0040512Dh where MPS start decoding yahooID. Completion of the 2nd.

As above, we see yahooID was decoded after passing through MPS 0040512Dh offset, meaning the data was encrypted MPS load somewhere in memory. Therefore, Thug press Ctrl + B to find the byte encoding in all the memory. Yes!! There it is:

http://vxervn.com/src//cmpsyid-sr...d_in_memory.JPG

Note that before the first byte on a byte offset 16h = 22 (the length of the string "mothafuckin_attacker" + 2). After a series of byte 2 byte encoding 0B2h 60h. Remember this. Why? Your attention nhé, the data seems to be something related to each other. First, the byte 16h is separated from the data before it is 2 byte 00h. Monday, 16h Left of the length of our string plus 2 bytes. Therefore, judged that two adjacent byte last byte yahooID encryption related encryption ...

Press Alt + C, back window code. Press F8 repeatedly, Thug have found that the code used to decrypt the MPS. You remember that MPS encoding 2 times right? Here, we also found two code to decode ... paragraph 1: from 0040293Dh to 0040298Ah. Paragraph 2: 0040298Ch to 004029D0h. Because the process of analyzing this a bit lengthy, so Thug wrote the following to your comment as for reference.

http://vxervn.com/src/cmpsyid-src/decrypt_code.JPG

Completion of the 3rd.

Then, to test his hypothesis type, Thug Sender.exe rebuild the file structure of yahooID true that encryption of data stored in the following format:


CODE CC DD AA BBBB ... BBBBBBBBB

.

With a length AA + yahooID 2. CC and DD is the second key to decrypt yahooID. Offset of yahooID encrypted file located in the MPS (filesize - 392) + 0B2h. Is fixed offset offset - offset fixed (You can check by Hiew). Have calculated the number dĩ Thug MPS file size because the function of binder to pair them with a trojan exe file pe-healthy MPS file size should be changed.

Completion of the 4th.

Finally, Thug CoverYID writing programs, to find out who's yahooID attacked, install MPS on the victim's computer, yahooID that the victim's password to be sent. This program will scan the process is running, to disable the "Disable Taskmgr" of the MPS. After the MPS process to run hidden, CoverYID yahooID automatically decode the attacker from MPS process and inform you. Looking at the console of CoverYID, you will find the full path of the MPS file is running. MPS simultaneously CoverYID will patch process, the purpose of running, it will automatically jump to the command ExitProcess;) This is just extra features, Thug written for fun, because you can use the anti-virus - trojan as NAV to destroy it. Points of interest here is You know who you are attackers, Then from there, depending on your imagination, but as of retaliatory attacks (For example, pretending to send a mail from the MPS, pretend as mail-sender automated MPS , With great content type: "Because one of your victims used a firewall to protect his computer, so to complete MagicPS feature, you should download this file attached in this mail and run it normally. Your victims' firewall will be disabled. And password'll be sent successfully. MagicPS mail-sender "- Translation:" As one of the victims of the firewall you use to protect your computer, so to complete all of the features of MagicPS, you should download the attachment and run it normally. Victim's firewall will be disabled. Password will be sent a smooth way. MagicPS mail-sender "). He3, of course attached file is a trojan then children, sometimes using both MagicPS then again ... more or he3. Get fat it fried it. The kind like, knowing where your enemy what you think will sell greed + + incredibly yahooID you his, and so is ... Or simply step into YM, send mess to name a few bad stomach question # & ^ #$%$@#% something This depends on your ability to imagine

Note: CoverYID running on WinNT - fully tested 100% work on Win2k, Win2k3, WinXP SP 1 and Win9x is Thug ... lazy and partly because there is no computer at home should not support the OS Win9x this. Hope your sympathy: P

Introduce more then, this is the link you can download CoverYID:
Link: http://vxervn.com/src/cmpsyid-src/coveryid.exe


Screenshot:
http://vxervn.com/src/cmpsyid-src/coveryid.JPG
http://vxervn.com/src/cmpsyid-src/screenshot2.JPG

If anyone would like to quote this in mind, the complete add author:
"(c) Thug4Lif3 - HVA forum" not a thief in their own right.: diablo:
__________________

"Hacker dangerous in the world" lost in the war legal

(TT & VH) -- During two years, Gary McKinnon, an unemployed British armed with only a few cans of beer, a computer and internet intruders has low speed, stick the new computer system at the U.S. Army before when British police arrested. Since action on, Gary was the U.S. government as "the world's most dangerous hacker". On 30/7 past, simple leaves against extradition to the U.S. Gary has been denied, making him at risk of long-term exploitation calendar notorious Guantanamo prison in the United States.

"The biggest attack" ...

The world's most dangerous hacker Gary McKinnon

Gary McKinnon was born in Glasgow in 1966. Operating computer networks penetrate the U.S. military was conducting him during the period from 2001 - 2002, in the bedroom of his girlfriend. Gary spent a day out to 8 hours just to try to penetrate the U.S. military computer networks.

After address some machines in parts of the climate for the U.S. Army, Gary took advantage of security holes to penetrate these machines. Once successful control of machines, he installed the software drivers, remote administration called RemotelyAnywhere, and use this software to find information nose.

From parts logistics, Gary continues to penetrate other important parts of the U.S. military computer networks. According to authorities, Gary has successfully penetrated into 53 computer Army, including the server for security operations and defensive national computer 26 Navy, including your responsible provide ammunition, necessities for the Atlantic fleet. He was also accused of computer intrusion 16 aerospace agency NASA, a computer in the Department of Defense.

Gary was the total for the probe was 73,000 U.S. government computers, stealing 950 passwords, delete important files in multiple management stations Earle naval weapons, the state of New Jersey. There was Gary stopped operating the entire computer network of the military in Washington in 24 hours, making it the capital of the United States is not protected throughout the day.

The damage caused by Gary estimated at more than $ 1 million. The U.S. regarded the attack of his is calculated to threaten the U.S. government. At the time we announced the accusations with Gary, the U.S. prosecutor Paul McNulty reviews he has caused "the attack was the largest military machine in history.

Derived from UFO ...

All the above is the damage derived from curiosity about the unknown flying objects (UFO) of Gary. He had joined Bufora - UFO Research Association of England, at the age of 15. After the WarGames, the movie is about a teenager nearly caused World War when held in hand the secrets of the Department of Defense, Gary began to be obsessed about the U.S. military is secretly hide related to UFOs and the desire to break the U.S. military computer network to find this information is hidden.


The computer in the Johnson Space Center
Gary has been with the NASA visit

In an interview with sheets Guardian in 2005, Gary said that efforts were meeting house, he saw things looking for. It is a document entitled Disclosure Project (Project exposed bare truth) with the testimony of 400 witnesses different UFO. Gary also downloaded a picture resolution of a low character look cigars and cigarettes are not built by humans.

In one attempt to download the image a UFO, Gary has been detected. Later he acknowledged that the zone should forget the control computer is controlled and the owner of it is still working. In 2002, Gary was arrested at his girlfriend while surfing the internet. They have to investigate that some commercial software he used for intrusion purchased by e-mail account of this basic.

"Dan in" about a hacker?

With extradited to the U.S., Gary will likely was sentenced to prison very seriously, up to 70 years, and sanctioned financial hundreds of thousands of dollars. He may be considered "enemies of the United States" and was taken to custody as thought in Guantanamo Bay. Some experts believe that Gary has become a "scapegoat" by the U.S. authorities, through the processing by him heavily, Washington broadcast message is clear: "Do not joke with security and the U.S..

Gary also said that the main judgments for themselves is not fair. He pointed out that U.S. computer networks ever suffer much more serious attacks such as feedback in May 2001, when a series of hackers breaking into a server containing the software control of U.S. satellite. Although the perpetrators were identified as Sweden, no arrests are carried out. Or as feedback in 2007, three Israeli hackers were arrested for offenses into the system server Pentagon. Instead of being extradited to the U.S. as Gary, they have only local court hearing the case with gently. Gary is currently considering plans to protest plans to the European Court of Human Rights. Americans will surely follow closely one of the oldest and Gary will not be easy to ignore all the talk when he is not punished anything