Not your regular bot driven UDP flood

After weeks of battling Joomla/JCE sites that insist on running evil code and spewing denial of service traffic, we had a machine today sending UDP floods. This, it turns out, is not a hacked machine sending spews of botnet traffic – although it seems to be — UDP sent without port numbers, tons of it — maybe it’s some kind of raw packet driver running as LOCAL_SYSTEM – but it turns out not to be:

11:21:15.948103 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948105 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp

It’s SNMP – simple network management protocol – sending a particularly large response to a tiny query string.  The complete dump starts with a tiny request for a large SNMP mib.  For 79 bytes sent, the attacker gets 64kb or so delivered to his target:

11:21:15.917383 ethertype IPv4 (0x0800), length 79: 82.157.102.178.80 > 10.0.40.133.161:  GetBulk(22)  N=0 M=2250 .1.3.6.1
11:21:15.948093 ethertype IPv4 (0x0800), length 1514: 10.0.40.133.161 > 82.157.102.178.80:  [len1468<asnlen51916] 11:21:15.948096 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948100 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948102 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948103 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948105 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948110 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948111 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948112 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948112 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948113 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948114 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948285 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948289 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948290 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948291 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948294 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948295 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948353 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948355 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948513 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948516 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948517 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948519 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948520 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948521 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp
11:21:15.948522 ethertype IPv4 (0x0800), length 1514: 10.0.40.133 > 82.157.102.178: udp

Notice that the fragments (which are the bulk of the response) are not labelled with the port number, so it’s pretty hard to identify what they are about.

This amplification is so much better than

dig @10.0.40.133 any isc.org

The particularly stupid part about this is that the SNMP request only arrived at the box because the upstream firewall rules changed (a hardware upgrade that stupidly involved unintentional configuration changes).

Posted in Stuff | Tagged , , , , | Comments Off on Not your regular bot driven UDP flood

Compiling Netgear Firmware

Having ranted about Netgear’s terrible support for their old stuff, I have finally managed after many moons to recompile the software they provide, so that I can brick my router.  The trick is to do the compiling as root on an old system – and lacking an old system, a virtual machine, installed with old software.

Netgear made supplied source code for a stack of their firmware for download in terms of the GPL – link.  Compiling this proved to be difficult, nay, impossible on my system, since the compiler and build environment have moved on, and now detect buffer overflows in the source code.

Here’s how it’s done:

  1. Download a copy of CentOS 4 – http://vault.centos.org/4.9/isos/i386/ – the i386 DVD works – YMMV with others.  You might be able to do this on Debian 4, but I could not obtain a copy of Debian 4 – there’s a torrent, but it’s mostly unseeded, and there’s an archive, but it’s empty in a few important parts.
  2. Run virt-manager, and create a new machine with the installation DVD.  Configure the virtual machine with 1Gb of RAM, 8GB of disk (although if you’re sloppy and install too much junk, then you won’t have space for the build system).
  3. For the software selection, select “Workstation” so that you get the software development tools, and deselect Gnome and Office so that your virtual disk is not filled with junk.

Once you have a working virtual machine, you have support for gcc-3.4.6 and some relatively ancient version of make that the Netgear developers used.

Since this is a virtual machine, you can do junk as root, and only cry a little if it breaks. Here’s how to download a particular firmware image:

wget http://www.downloads.netgear.com/files/GPL/DGN1000_V1.1.00.45_WW_src.tar.bz2.zip
unzip DGN1000_V1.1.00.45_WW_src.tar.bz2.zip
tar -xjf DGN1000_V1.1.00.45_WW_src.tar.bz2

And to rebuild the toolchain and firmware without modifications:

NETGEAR=/root/DGN1000_V1.1.00.45_WW_src
cd $NETGEAR
tar -zxf bootloader_src.tgz
tar -zxf toolchain_uclibc_src.tgz
tar -zxf target.tgz
cd $NETGEAR/Toolchain/uclibc_toolchain/ifx-lxdb26-1.0.2
./setup.sh all redo
cd $NETGEAR/Toolchain/uclibc_toolchain/ifx-lxdb26-1.0.2/source/hostutils/sqlzma/sq3.2-r2-lzma443
make ;
./build.sh ../../../../hostutils
cd $NETGEAR/uclibc_toolchain_src/buildroot
cp config .config &&
make oldconfig
make
cd $NETGEAR/
make

That gives you newimage.img which is hopefully 4Mb large, or something supported by your device’s hardware. If it’s bigger, you have a problem, which you fix.  Wish me yuck as I download it to my ECONNREFUSED: no route to host

Posted in Stuff | Tagged , , , , , | Comments Off on Compiling Netgear Firmware

The butler did it

The South African Police Service (SAPS) hold as common knowledge that by far the majority of murders are committed by family members and occasionally by known associates.  When Ani Dewani was murdered in Cape Town, the police immediately suspected her husband of the crime, because they know that most murders are committed by family, and he was family, even if only for a short while.  Oscar has the same problem – the police know that he’s guilty, because of the family tie (somewhat tenuous and ill-advised as that tie may be).

When our house was burgled, our neighbours told us that they believe the gardener dunnit, because, from what they hear from the police, that’s the normal thing.  Gardeners do things like that.

In other news, drivers that have dashboard cameras tend to be involved in more traffic accidents – have a look on youtube: dashboard cameras are involved in the majority of accidents recorded.  Duh.  Perhaps the truth is that because it’s easier to catch the family member, the gardener  and the butler, we know that the butler did it.

The take away message from today’s rant is that if you want to knock someone off, or take their stuff, make sure that there are no family or work ties between you and your victim, since that’s the kind of tie the police know about.  If you’re a crime tourist, don’t come to South Africa to have your family done in.  (Rather go to a country where murdering your family is your unassailable right as a matter of “honour”.)  Our police might not be the best ever, but they do know how to wrap up that one special case.

Posted in Stuff | Tagged , , , | Comments Off on The butler did it

When the indicator does not flash, the vehicle may be turning

I spoke to a man driving a nice big white 15-seater bus and trailer for Ilios travel – http://www.ilios.co.za/ this morning in the traffic, to let him know that the lights on his trailer don’t work.  That was cool.  I told him.  Problem averted.  Road safety rulz ok.

What happened next is the reason you should avoid travelling with this business: he drove on, without checking the vehicle in any way.  4km down the road the lights were still not working on the trailer – no brake lights, no left signal, no right signal.  Either the trailer was not roadworthy to begin with, and he knew it, or Ilios Travel have employed a man to drive who does not think that the state of the vehicle he is driving his is problem.

Update: Fast forward from April 2013 to May 2015: I saw an Ilios Toyota Quantum today towing a trailer DP28KHGP or similar displaying only one rear light.  Clearly checking and changing light bulbs is still not a priority.  Rear lights?  Who needs them?

Posted in Stuff | Tagged , , , | Comments Off on When the indicator does not flash, the vehicle may be turning

Collapse of the justice system in South Africa

On 20 February 2013, Johan Kriegler on Classic Business on Classic FM radio, discussing the legal practice bill, said the following words:

A case is only as good as the argument that is presented.

Just after this, he said the legacy of the bar over the last 20 years is:

… brilliant lawyers who argued the case beautifully. That is .. the purpose of the bar.

Think about it.  Pick one:

  • Your case is only as good as the evidence
  • Your case is only as good as your testimony
  • Your case is only as good as it is true
  • Your case is only as good as it is right

No, it’s only as good as your argument.  This is strange, but it is true of the South African legal system: a system run by lawyers, for lawyers, in which beautiful arguments are used. Never mind the evidence – some other rather important things are also entirely secondary in court:

  • Justice
  • Fairness
  • Efficiency
  • Morality
  • Righteousness
  • Truth

This means that if you approach the courts in South Africa armed only with a simple claim to justice, fairness, efficiency, morality, righteousness or truth, you can expect to be slapped around by lawyers who will find that the judge fully supports their eloquent arguments.

I’m pretty sure that the judge believes that being supported by justice, fairness, efficiency, morality and truth is a part of the quality of your argument, but in practice it is the person with the most money who can most effectively string the legal process along to his own ends.

In the case of Oscar Pistorius applying for bail, it was interesting how the simple matter of letting a killer go, or confining him until his trial was turned out into a circus of three days (or was it four days?).  How did this happen?  How could they not get to the point any sooner?  Well, getting to the point is not the point of the justice system.  It’s not a justice system: it’s a legal system.

Recently eight policemen from Daveyton meted out a form of justice to a taxi driver parked illegally and resisting arrest, dragging him behind their vehicle (it seems he didn’t want to get into the van) – he died.  This act demonstrates a total lack of confidence in the legal system: officers of the law know that merely arresting the man for a clear violation of law will lead to no effective justice for him, so they try to substitute a little justice of their own.  (A small point of interest is that their actions demonstrate that they do not believe that the criminal can be reformed – they display no confidence in the work of Jesus Christ – you don’t carelessly break things if you really believe they can become useful later.)

I don’t know why the legal system is so specially broken in South Africa – supposing that justice is merely a technical matter is not confined to South African practitioners.  Perhaps it is because we are being ruled by a criminal class, who have a history of struggle against the law, and little insight into the benefit of a society that is firstly just and fair.  However, it could be just the lawyers.

On the same programme, Rudi van Rooyen said:

When it comes to judges, you don’t interfere with their function, and that is the rule of law.

It’s wrong: if a judge is unjust someone must interfere with his function, and that would be the rule of law.  It would be, if the law had any interest in justice, but the corrupt law we have has no great interest in actual justice.

Lawyers also,

accept the brief whether they like the client or not

and say

this is my client, I will defend his interests to the best of my ability.

The client’s interest is to stay out of jail and away from punishment.  In civil cases, the client’s interest is to force his will against the other party.  His lawyer believes his duty is to bend the truth and repeat those of his client’s lies that will lead to this happy outcome.

And after all their beautiful arguments, what is the outcome?

So justice is driven back, and righteousness stands at a distance; truth has stumbled in the streets, honesty cannot enter.

Posted in Stuff | Tagged , , , , | Comments Off on Collapse of the justice system in South Africa

Those Literal Cleaners

Saw this in “The Star” this morning.  A wife is taking her husband to the cleaners – literally:

Omphitlhetse Mooki, omphitlhetsse.mooki@inl.co.zaThe scorned wife of a senior cabinet minister is taking him to the cleaners - <strong>literally</strong>.  She wants a house worth no less than R70 million; R3m to furnish it; a new car worth no less than R1m ...

To the cleaners, From the Star, 2013-02-08

The amazing thing about this report is that the rest of the report has very little to say about this trip to the cleaners, and instead flies off at a tangential examination of the divorce.  This leaves many questions:

  • What have the cleaners got to do with the story?
  • What is the name of their cleaning business? Where do they operate?
  • What do these cleaners clean?
  • Considering the signs of acrimony between the wife and her husband, will the husband be willing to be taken to these cleaners?
  • Who will fund this trip to the cleaners?
  • Who will pay the cleaning bill?
  • Will cleaning things up help the matter

This reminds me that bad grammar and sloppy reporting is not the reason I do not buy the Star.  I don’t buy the Star because it consistently pushes some weird agenda which insists on calling evil good, and occasionally calls good evil. They prefer to publish the voices of evil and insanity and give scant coverage to the voices of reason and wisdom. Being evil makes you stupid.

Posted in Stuff | Tagged , , , | Comments Off on Those Literal Cleaners

We are not alone

We are not alone.  We are being watched.  We are being watched by aliens.  We have certain proof of it.

Waiting for his sister to finish work ... at 6:30pm .. on Sunday

Waiting for his sister to finish work … at 6:30pm .. on Sunday

Waiting in the wrong place for her work at 9:00 AM ... at 9:07 AM.

Waiting in the wrong place for her work at 9:00 AM … at 9:07 AM.

They are not locals – they crumple up econet sim cards on the pavement. That’s how we know they’re aliens. They sit and play games on their phones while they wait for a chance to do whatever it is that they do.

Coincidentally this started recently after some young men managed to burgle a perfectly good HP 4530s laptop from us (with a broken left hand USB port – the plastic thing in the port came adrift).  I think they want to come back for the television – except that we have never had a television.

Update: here are the phone numbers from the sim card:

Index Name Number
1 “Ishumael” “+27732366942”
3 “Ba Connie” “+27748247391”
5 “Madz Innocent” “0791959375”
6 “Mai Malisa” “0849598932”
7 “Alice” “00263912910552”
8 “Madz Spelogene” “0742462145”
9 “Mai Tee” “+27842871695”
10 “Mai Shantel” “+27844191867”
11 “Sekuru Tau
12 “Nyasha 2” “+27749283025”
13 “Tanaka” “00263733790823”
14 “Mai sharon” “0734282451”
15 “Philip” “+27846294591”
16 “Madz vigie” “+27748080101”
17 “Any” “+27845776444”
19 “Fred” “+263773610741”
20 “Mai Denmore” “+263773395661”
22 “Mai Tiny” “00263772251730”
23 “Naomi” “+27748432417”
24 “Accume” “0826726077”
25 “Ba Revigio” “00263774062351”
27 “Nyasha” “+27848193828”
28 “Mainini praise” “+27746138548”
29 “Joseph madz” “+27842784032”
30 “Brian” “00263775938821”
31 “Mai Rejoh” “+27833355414”
32 “MA REJO” “0743083045”
33 “Spatnence” “+27744071362”
36 “Mai Garakara” “00263772804307”
37 “Ma Nono “ “0827486763”
38 “Ma Vin” “00263772774579”
39 “MA Nyasha” “00263772458114”
40 “Spelogin” “+27793376700”
41 “Ba Gracuance” “+27745646082”
42 “Ba Naomi” “+27829273947”
43 “Mildret” “+27849467608”
44 “TETE” “0749657499”
45 “Ba Cremio” “+27827502935”
46 “Ma Raviro” “+27737622115”
47 “MOM” “+263712079607”
48 “MBUYA VIMBI” “+27846806340”
49 “Greatman” “+27784411772”
50 “E Garakara” “+27846119304”
52 “Mai Veremu” “0711142240”
53 “Mai Danai” “0710300639”
54 “Makarichi” “0847256715”
56 “Mai Shaun” “+27736773039”
58 “Temba” “0710425477”
59 “Shantel” “+27747429041”
60 “Ba Nelly” “00263774224602”
61 “MagreT” “+27796292741”
62 “Phiri” “0835434117”
64 “Oswald” “00263778472109”
65 “Mai Matida” “+27842139569”
67 “Marcy” “+27731900448”
68 “Spatness” “+27787129503”
69 “Mai Edmore” “+27749234143”
70 “Mai Taropafadz” “+27748329713”
71 “Madzibaba” “+27797725925”
72 “Mai Ishumael” “0747607144”
73 “Tafadzwa Nyabo” “+263772954350”
74 “P Matanga” “0848499560”
75 “Pricilla” “+27781031737”
77 “Ma Muku” “+27837581528”
79 “Maggie” “0745623497”
80 “Mashirt” “+27780602572”
86 “Mai Trinity” “+27749035183”
87 “Diver” “00263733707927”
88 “Trinity” “0789726700”
89 “MaTrgnit” “+27747067420”
90 “Veremu” “+27844707866”
91 “Mai muna” “0765490452”
93 “Onicians” “+27784919241”
94 “Elish”
96 “Mai RYN” “+27848442828”
97 “Mai Esenia” “0783287206”
99 “Esnath” “0789579560”
100 “Masnage” “0731900448”
103 “Natasha Nyamud” “00263735127186”
Posted in Stuff | Tagged , , , | Comments Off on We are not alone

The Universe’s Real Time Clock

In Einstein’s general theory of relativity, a lot of attention is given to the concept of clocks that measure time (not to actual clocks made by people who have families, hopes, fears and dreams mind you, mainly the concept).  A clock, to a physicist, is a thing that changes in a regular and predictable manner.  A wall clock changes in the kind of regular way anticipated by physics, and is therefore grudgingly accepted as a special case of a clock.

Einstein’s thought experiments by which he supported the theory of relativity have clocks travelling on space ships at various fractions of the speed of light, their observers eager to observe differences and non-differences in synchronisation under various circumstances.

What is time?  A clock is the means by which a physicist knows that time has passed – a hand that ticks away the seconds, the oscillation of a crystal or atoms in an atomic clock, or the simple movement of matter from here to there.  Each stage of its movement or change of state demonstrates the passing of time.

Suppose that, for some reason, there was no change – no movement, no discernible difference between the way things are and the way things are again.  Well, that would mean that time was not passing.  You may believe that it was passing, but if nothing changed and the clock did not even begin to tick, then for all intents and purposes, there was no time.  Suppose that from this state things did move to another state: as a matter of observation, the change demonstrates the passing of time.

Suppose that you have a state where matter is absent.  When would that be?  Well, it’s hard to say.  If matter is absent, everything that can tell time is also absent.  If you had a clock there, then you would know, but if there’s nothing, then there’s no time to tell.  And even if there was, you wouldn’t be able to say anything about how long that time was, if it was even time.

Suppose you observed that where there had been nothing, there was now something.  What would that mean?  This is a change!  Something happened!  What do we call this change?  The best name is “The beginning”.  If you were writing a book about this change of state from nothingness to somethingness, you would typically start it like this:

In the beginning …

Now if your book had a slightly scientific bent, you would point out a physical clock to demarcate the changes of state and the order in which they were done.   If the stuff populating your space was interesting enough to be described in some detail, you would note the ticks of your clock between your descriptions of the changes.  You could use language like this between the descriptions of the states:

There was evening and there was morning, one day.

And just to rub it in, you could repeat it, like this:

There was evening and there was morning, a second day.

There was evening and there was morning, a third day.

There was evening and there was morning, a fourth day.

There was evening and there was morning, a fifth day.

There was evening and there was morning, the sixth day.

So, here’s the thing:

  • Time as we experience it begins at the beginning.  There is no better place for it to start.
  • The proper clock by which we measure time is an evening and morning.
  • The thing by which we currently measure an evening and morning is the sun.

The  sun is not the thing that makes the time – it’s just there to reflect the evening and morning which began ticking slowly in the beginning.  Like any good clock, the sun is just a signal by which you may properly know the time.  For good measure, the sun and moon were only put there for our benefit on the fourth day.  Time was fine without them:

God said, “Let there be lights in the expanse of sky to divide the day from the night; and let them be for signs, and for seasons, and for days and years …”

There you have it: you can use the sun as a clock.  What?  You do already?  Good for you!  It was placed there for this very purpose!  The cool thing is that by simple arithmetic and observation, it will signal to you seasons and years as well.

How do we know that the day is the clock for the universe, and not just a clock for the earth?  Well, it turns out once the clock had been a-ticking for three whole days already, God made the stars.  The stars are not the overwhelming cosmos that gave birth to our world, they are there for good measure, because the universe needs a decent screen saver:

He also made the stars.

If you don’t like the universe that God made you may be tempted to invent your own.  You are going to run into trouble, however, if you conflate an imaginary universe with its imaginary history of time, with the real universe with its real history of time.  Even if the real universe is a mathematical subset of your fake universe, that will not make your fake universe spring into existence.  It’s stupid to ignore the real world’s real time clock in favour of the clock of a fake mathematical world.  The fake mathematical world with its fake time of billions of years has been around for just 82 years.  The real world has been around for well under 3 million days.

If you want some of this and more, but set out in a more concise manner (and provided you don’t mind bad layout) you can read this article: God’s Clock.

Posted in Stuff | Tagged , , , , | Comments Off on The Universe’s Real Time Clock

The Mayan Grinch

There’s a small stormy teacup about the Mayan calendar coming to an end – a civilisation that used rope to keep track of time and came to an end themselves before they ran out of rope.  It seems that the wisdom of the moment is that the Mayans had some secret insight into how much rope was required to reach the end of the world.  (The Mayan rope runs out on the solstice, just in time to steal Christmas this year.)

Think about it: an ancient civilisation that left cryptic records is credited with having knowledge that we don’t.  Is this credible?  Maybe a little.  We don’t know what they knew.  It is possible that they knew something we don’t.  If they wrote about it, then we should pay attention to their writings.  Of course, if they only left some rope, we are limited to paying attention to their rope.

There are other ancient writings containing forgotten knowledge that are not as popular, and yet have more credibility and interesting detail.  I have in my book shelf a document recording a recent origin of the world, and a global catastrophe that wiped out the entire population.  The same book that states this as history also promises a more permanent cataclysm to sort out the entire created order – the end of the world.

While people are briefly taking the Mayans seriously, not a word is being said about the real end of the world, and few are making preparations of the appropriate sort.

Posted in Stuff | Tagged , , , , | Comments Off on The Mayan Grinch

Hidden treasure in a field

The wise and all knowing government of the republic of South Africa has given themselves sole and unassailable custodianship of the mineral rights of the country, including the salt on the sea shore.  They have gone too far.

The President, in explaining the way things are, says that the UN says it’s the only way to go:

The 1998 White Paper on Minerals and Mining enunciated the international norm of vesting custodianship of mineral right to State as articulated in Article (2)(1) of the United Nations (UN) Charter of Economic Rights and Duties of States, granting states full permanent sovereignty, including possession and disposal over all its natural resources. This position is further supported by the Constitution of South Africa (SA) in terms of which the state is bound to take legislative and other measures to enable citizens to gain equitable access to rights in land.

The Mineral and Petroleum Resources Development Act 2002 (MPRDA), as promulgated in May 2004, gives effect to the notion of state custodianship of mineral rights.

Lisa Chamberlain of Wits says it’s taking away:

“The new law (which takes mineral rights away from landowners and puts them under the minister’s care) is the product of an extensive process of consultation to end the discriminatory system related to mineral rights that are in private hands. The old system was characteristic of the apartheid mining industry.”

This all is in conflict with the words of Jesus, who allocates the rights to the land owner:

The kingdom of heaven is like treasure hidden in a field, which a man found and covered up. Then in his joy he goes and sells all that he has and buys that field.

Imagine that parable adapted for modern notions of law:

The kingdom of heaven is like a treasure hidden in a field, which a man found, and covered up.  Then, in his joy, he sold all he had, an bought that field, and applied for mining rights, but these rights were granted to someone with government connections.  That someone came with a bit of paper signed by a government official and took the treasure from the owner, and threw him into the outer darkness of the big hole they left, saying “fill it in yourself”.

It ain’t right.

Posted in Stuff | Tagged , , , , , , | Comments Off on Hidden treasure in a field