VectorWorks portscans on port 30999

/

While testing Symantec Client Security for possible use on our network, I noticed two machines tripping the portscan IDS signature on port 30999. A quick Google search revealed that this was port was primarily used as a back door by the Kuang2 trojan, so we disabled the network ports of the two workstations and sent some techs to check it out. They couldn't find any malware on the machines, but since no one could tell me what was portscanning our subnet on 30999 from them, I told them to wipe them anyhow. As one of the techs was setting the machine back up, it tripped my firewall again, and I immediately called him and asked him what he was doing. He said he's just installed VectorWorks, so I asked him to run it, and sure enough, that's when the machine portscans on 30999.

I searched Google, the manufacturer's web site, and their support forum, and none of them mention that port, so I e-mailed their tech support and got this response:

Dear Nemetschek North America Customer:

Thank you for your inquiry.

VectorWorks does do a network check to see if any serial numbers are duplicated and are used at the same time. It can not be prevented since it is hard coded into the software.

If you have any other questions, comments, or suggestions, please feel free to contact us at (410) 290-5114 (tel) or (410) 290-8050 (fax) or tech@nemetschek.net (e-mail).

Respectfully, Technical Support

So, it's legitimate (annoying) behavior. The kicker is SCS will disable all communication with the "attacking" machine for 30 minutes by default. So, you can launch VectorWorks, then find that all the machines on your subnet running Symantec Client Security refuse to talk to you for half an hour. Congratulations, you've DoSed yourself!

Obviously, the best solution here is to run a firewall that filters your outgoing packets, and deny VectorWorks the ability to talk on your network, or better yet, configure your managed switch network to not allow all port 30999 communications. Or, even better yet, stop using VectorWorks until they decide to trust you as a customer.

Finger Food

/

More finger foods in the news:

Stowers, who did not immediately return calls Monday from The Associated Press, told the station: "I thought it was candy because they put candy in your ice cream ... to make it a treat. So I said, 'OK, well, I'll just put it in my mouth and get the ice cream off of it and see what it is.'"

Stowers said he spit the object out, but still couldn't identify it. So he went to his kitchen, rinsed it off with water -- and "just started screaming."

At least this one appears to be legitimate, since there's an employee missing the finger. Though it begs the question, what kind of idiot loses his finger in the food processor but still adds the ingredients to the mix?

Gizmo

/

We've named our new cat, here's a picture: Gizmo

For the record, my wife made that cheesy thing, not me. He's a blotched tabby that we got from the Humane Society.

He's in that awkward kitten phase where his limbs are longer than he is, and he's also aggressively affectionate. He purrs for hours on end and can't stand to not be in physical contact with a human for more than 30 seconds. That sounds great, but at night the only thing exposed is your head and he wants to lick you and nuzzle you with his wet nose, it's not endearing.