Bios Password

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg
Showing posts with label Windows 7. Show all posts
Showing posts with label Windows 7. Show all posts

Saturday, November 2, 2013

New Software Updates + VMware Tools Update fix

Posted on 11:19 AM by Unknown

The Valca household has survived last week’s torrential rain event. Unfortunately both our vehicles took a hit.

No…no cars were flooded due to poor driving decisions…they stayed high-and-dry…but they did suffer some incidental damage.

My beloved Saturn Ion apparently had material in the catalytic converter come loose and cause a blockage in the exhaust system.  That led to a significant power-loss -- I was only able to nurse it up to 55-60 MPH on the freeway. That’s a life-threatening highway speed here in Texas. I found a new local repair shop that was able to diagnose it (and +1 point for my dad who also guessed that would be the issue). So it awaits a new cat-converter install…and for good measure I’m having the front struts replaced as well as they are OEM and the front suspension is all clunky over road bumps and RR tracks. With almost 200,000 miles on it, I guess it is time.

Meanwhile, I got in Lavie’s car yesterday to borrow it while mine is in the shop. She doesn’t drive it much. It is a 2001 Nissan Altima with barely 43,000 miles on it. All was well until I went to unplug and toss her cell-phone charger on the passenger side foot-well floorboard…and found it full with 1.5” of standing water. Gasp!  Luckily I hadn’t put the car in reverse yet to slosh it out. Bother.  After some extensive wet/dry vac work it was only damp and between a few sunny dry days and some well placed Damp Rid containers I think we will be good. The windshield has some cracks in it that might cause it to not pass this month’s due vehicle safety inspection so the decision was made to schedule a windscreen replacement…which will result in all new weather seals.  The rest of the car was bone-dry so I really don’t think it was a seal that failed. My guess is the torrential rains (appx 3.5 inches in 24 hours) cascading down the windshield may have poured into the fresh-air intake vent under the hood which ran down into the passenger side foot well.  Not sure why it was just that side and not the driver’s as well. Thoughts?

So with one car finishing the air-out process and the other in the shop, it has been a bit stressful. Fortunately family and friends and Boss have been supportive and encouraging…and our older but beloved (and paid for) vehicles will continue to drive on a while longer.

Anyway…enough boring personal stuff…here is small collection of updated software you might want to check out as well as a fix for an aggravating VMware Player problem I ran into this morning after updating the main VMware Player application.

VMware Player Plus - Now updated to version 6.0.1. Note that VMware Player Plus is the $ version for commercial license usage. The free for personal use VMware Player is still around, but you just have to confirm that option during the setup. I prefer to use this VM software platform for my Windows guest clients and VirtualBox for my Linux-based ones.

  • Download VMware Player 6.0
  • VMware Player 6.0.1 Release Notes

One curious thing about this most recent version that I hadn’t encountered until now.

I had just upgraded to this latest VMware Player (host) software on Windows 7 and then launched an XP client so I could update the VMware Tools as well.

Strangely the Windows XP guest I started up reported it was stuck downloading the tools. On boot up of the VM guest, it offered me the upgrade tools option at the bottom of the window, and when I selected that action button, it popped a dialog window that said "VMware Tools installation cannot be started until the current download finishes." If I go to the VMware host’s menu, it says "Downloading VMware Tools" where it should say Upgrade/Reinstall VMware Tools.

I took matters into my own hands and was able to map the virtual CD ROM in my virtual XP client to the VMWare Tools ISO file for Windows at "C:\Program Files (x86)\VMware\VMware Player\windows.iso" figuring that it was the latest version and came down for the ride when I updated the host client software.

Once "mounted" it auto-started the VMWare Tools setup wizard in the XP guest session which I ran though and installed with no issues. A reboot and it was current in the XP VM.

However....on reboot VMware Player host software still was reporting the upgrade tools option at the bottom of the window, and when I selected that again, it said "VMware Tools installation cannot be started until the current download finishes."

Here's how I cleared it in VMWare Player (based on this forum thread I found and solution offered by John Swanagon).

    • Launch VMware Player.
    • Click "Player"
    • Click "File"
    • Click “Player Preferences”.
    • Under "Software updates” section.
    • Click “Connection Settings”.
    • In the “Connection Settings” window, change the proxy from “No proxy” to “Windows proxy settings”.
    • Click OK.
    • Click OK.
    • Open Internet Explorer. (note these IE steps may vary based on your IE version)
    • Click "Tools" then select “Internet Options”.
    • Click the “Connections” tab.
    • Click the “LAN settings” button.
    • Confirm/Select the “Automatically detect settings” option.
    • Click “OK”.
    • Click “OK”.
    • Close Internet Explorer.
    • Exit VMware Player.
    • Run VMware Player as an Administrator.
    • Click "Player"
    • Click "File"
    • Click “Player Preferences”.
    • Under "Software updates” section.
    • Click “Edit” -> “Preferences”.
    • Click “Download All Components Now”.

Additional components for other guest OS systems downloaded and when done, and VMware player re-launched, the message at the bottom of the screen finally was cleared!

Updates: PsExec v2.0, RAMMap v1.3, Sigcheck v2.0  - Sysinternals Site Discussion Blog

Updates: RAMMap v1.32, Sigcheck v2.01 - Sysinternals Site Discussion Blog

New Utility - QuickHash - Foolish IT LLC

OSFMount - updated 10-22-13 - version 1.5.1014.

  • Fixed issue with detecting partitions for ImageUSB images
  • Windows dynamic disks are now supported
  • Fixed issue with mounting via OSFMount command line with "-o rw" option
  • Fixed issue with mounting multiple partitions in an image file as writable due to file sharing permissions
  • Fixed issue with mounting multiple partitions in an image file from command line
  • Drive letters 'A' and 'B' can now be used
  • Propagated changes from Imdisk v1.7.5 including some key fixes:
    • Disks with "lost" drive letters can now be removed
    • Notifications hanging on drive creation and removal

I personally prefer to use Olof Lagerkvist’s ImDisk Virtual Disk Driver, also recently updated on 10-25-13 to build version 1.7.6.

Why do I mention that? well the OSFMount utility is based on Olof’s ImDisk software. That’s all.

mozdev.org - newsfox: installation - My favorite Firefox RSS reader is updated to 1.0.8.4.4.  Release notes

Speaking of Mozilla, Firefox was updated to version 25.0 and Thunderbird was updated to 24.1.0

Also, I’ve gone to a 3-monitor setup at home with my laptop. My desk is quite full!

I’m running my primary display from the attached Dell Studio 15 HD laptop display. It is super-sharp and has great resolution.

My secondary display is one of a pair of older Samsung SyncMaster 930B-A displays I got a long time ago as a gift from my brother. Maximum resolution is just 1280x1024 so it looks a bit under-scaled with the other displays but it seems to work great for text which is fine when I am pounding out blog posts. No OEM Win7 x64 bit hardware drivers exist for it either so it’s running the standard Microsoft PnP display driver just fine. The 4:3 ratio (the others are wide-screen format) also makes composing text documents more comfortable.

Since (like most Dell laptops) the laptop can only drive a maximum of two display outputs natively, I’m running this display with a StarTech USB 3.0 to DVI Adapter. I didn’t have any issues getting the drivers installed and the system up and running. It’s a must-have hardware accessory if you are running multiple monitors with a laptop and can’t toss in another hardware card internally.

My third display is a HP Pavilion 22bw 21.5-inch Diagonal IPS LED Backlit Monitor(C4D29AA) that I picked up some time ago on sale at a big-box outlet. Not a lot to say. It is HD and I am running it off the HDMI port on my laptop. Overall it is decent, but I am disappointed in the text-clarity of the display. Watching a video on it is fine, but for extended text-composition on it, it just isn’t as clear as I would prefer.

In good news, under Windows 7 (at least) you can set the ClearType text on a per-monitor basis!

5jle4vuv.ji2

That has helped a bit but the text still doesn’t compare with my primary laptop display.

Cheers!

Claus Valca.

Read More
Posted in Firefox, hardware, Link Fest, Microsoft, troubleshooting, utilities, virtualization, Windows 7 | No comments

Saturday, September 14, 2013

What an MS Update Cycle This Month + others as well

Posted on 1:56 PM by Unknown

n0fusp3j.4gt

Is it just me? Or has this been a super-challenging MS Update cycle this time ‘round?

At home on our Windows 7/8 systems I must have had scan for updates, install updates, reboot, re-scan for updates, install more updates, reboot, re-scan for updates, install final round of updates a few more times than I can previously recall.

Lots and lots of updates (though that may be partially my fault for leaving Office 2007 on when I installed Office 2010).  I do that for trouble-shooting support as not all my peeps are are on the same version of Office that I would like to be on.

And at work on our XP systems, for some reason we got bit with the MS bug where we successfully install KB2760411 and KB2760588 but after reboot, Windows Update says they still need to be installed! Wow.

Here is more linkage than  you need regarding Microsoft and third-party app updating this month.

First Up: Microsoft Patching Information

Microsoft fixes bad patch detection - ZDNet Zero Day blog

Why all the errors in Microsoft updates lately? - ZDNet Zero Day blog

Update for Outlook 2013 breaks folder pane - ZDNet Zero Day blog

Microsoft botches still more patches in latest Automatic Update - Microsoft windows - InfoWorld

Outlook 2013 Folder Pane Disappears After Installing September 2013 Public Update - Office Sustained Engineering - TechNet Blogs

I’ve actually been holding off running my monthly WSUS Offline Update build until word comes out that these have been resolved.

Microsoft Patch Tuesday, September 2013 - SpiderLabs Anterior - Amusing and helpful patch summary

Lovely tokens and the September 2013 security updates - MSRC blog - details with pretty graphs

Assessing risk for the September 2013 security update - Security Research & Defense blog

Microsoft September 2013 Black Tuesday Overview - ISC Diary post

Next in Line: Adobe (Flash, Shockwave, Air)

Adobe September 2013 Black Tuesday Overview - ISC Diary post

Update Flash, Shockwave ASAP! Adobe also patches Acrobat and Reader - ZDNet Zero Day blog

Adobe, Microsoft Push Critical Security Fixes - Krebs on Security

Chrome Releases: Flash Player Update - Chrome Releases blog

On the Tail End: Oracle’s Java

It's about time: Java update includes tool for blocking drive-by exploits - The Register

Oracle Updates Java - Threatpost

Oracle finally adds whitelisting capabilities to Java - Computerworld

Security of Java takes a dangerous turn for the worse, experts say - Ars Technica

New features aim to shore up Java’s flagging security - Ars Technica

Go Get ‘Em Cowboy!

Hopefully your system is already set to download and process your Microsoft Updates. If not, stop, drop, and roll and get them on now manually if you must.

Adobe Flash may do an auto-updating or not, depending on your installation and settings.  I've not seen Air or Shockwave self-update ever.

Java might offer the update to you…or not.

If in doubt, you should be able to find direct downloads here.

  • Adobe Flash Player Distribution - Adobe
  • Shockwave Player Distribution Downloads - Adobe
  • Archived Adobe AIR SDK version - Adobe
  • Java Downloads for All Operating Systems - Oracle

Finally, if you have any doubt at all regarding your update level for these particular applications try one of these options; or even better, run both.

  • Qualys BrowserCheck - be sure to hit this link in all browsers that you use on your system!
  • The Secunia Software Inspector - Online Software Inspector (OSI) - they have a PSI installable version as well worth checking out.

They are really nice and pretty and are often overlooked…like the proverbial girl next door.

However they will hold your hand just as warmly and the kisses are just as sweet!

Stay patched, my friends.

Cheers!

--Claus Valca

Read More
Posted in Link Fest, Microsoft, security, troubleshooting, Windows 7, Windows 8, XP | No comments

Sunday, August 11, 2013

Some Notes for a Certain Project

Posted on 6:21 PM by Unknown

Just some scratch notes for a special project I am working on.

Nothing of interest for most other folks.

Remote Desktop and Automatic Login - Microsoft Visual Studio Forum

try using this
   mstsc /admin /v:ComputerName

or these
   mstsc /console /v:ComputerName

Be sure to “Log Off” rather than click the “X” to leave the session running if you aren’t coming back. Kinda like your mom telling you to shut the door behind you on the way out of the house when you were a kid. Heard it all the time…

Generally it seems you cannot use Microsoft’s Remote Desktop Connection service to establish an interactive remote control session with the logged in/active user’s desktop (session 0 ?)  unless you do it with the appropriate above arguments. However doing so may make a mess of things depending on how you exit…at least this appears to be my current understanding.

  • Use command line parameters with Remote Desktop Connection - Microsoft Windows.
  • Access Remote Desktop Via Commandline - TechNet Articles - TechNet Wiki
  • Mstsc - Microsoft TechNet - Windows Server
  • MSTSC - RDP / Terminal Server Connection - SS64.com

Just because you can doesn’t mean you should, and if you don’t log off properly…like I said you can make a mess for others coming behind you. If you find just such a mess, these tips might help clean things up.

  • How to Remotely Terminate and Disconnect Remote Desktop (Terminal Services) Connections or Sessions -My Digital Life
  • How to logoff remote desktop sessions via command line tools? - ..:::: Anand ::::..
  • Kill a remote user session remotely - Kode’s thoughts

In the end, RDC/RDP might be great or it might be messy.

If you are fortunate to be able to run UltraVNC services on some of your systems, you have some more options…especially if you are making a “headless” server box on a desktop OS platform. I’m personally more of a TightVNC guy myself but hey, close enough.

One of the problems might be that you want it to be a secure (AD/Domain) authenticated connection, but you don’t want someone to have to click “Allow/Disallow” on the headless system to approve that connection.

Fortunately there are options!

  • Can you disable the "Accept - Reject" window? - UltraVNC Forum - Yes, yes you can..
  • Install - UltraVNC
  • UltraVnc Configuration - UltraVNC
  • First Server Run - UltraVNC
  • Rolling out UltraVNC - pre configure VNC Password - UltraVNC Forum
  • ultravnc.ini - UltraVNC

And then…

  • Deploying UltraVNC within an Active Directory environment using Group Policy - Virtually Impossible
  • How do I setup MS Logon I or II? - UltraVNC Forum

User Redge wrote:

configure and set MS Logon I or II required only at VNC server.
a) following the doc...
http://www.uvnc.com/features/authentication.html
b) no if the UltraVNC setup was followed and exactly.
http://www.uvnc.com/install/installation.html
c) MS Logon I = Require MS Logon
http://www.uvnc.com/features/authentica ... l#mslogon1
d) MS Logon II = New MS Logon
http://www.uvnc.com/features/authentica ... l#mslogon2
Should set and required only at vnc server.
Important:
do not set vnc server as New MS Logon II on XP Home, won't work at all.

MSLogon can work, require turn OFF simple file sharing
windows XP

Open an Explorer window>Tools>Folder Options>View>The bottom check box

Headless systems are a pain…even if a modern BIOS can support booting without keyboard/mouse attached, and even if you can admin-pw lock the BIOS settings to prevent the USB ports from being active and used. Your system still may not boot if the NTLDR doesn’t see a proper video driver.

Headless System (Windows Embedded Standard 2009)  - Microsoft Developer Network post

  • Creating headless systems - Windows Embedded Blog

In Windows Embedded Standard 2009 the support for headless devices starts with the availability of null-drivers for the standard MMI devices. Of course, the BIOS needs to support this kind of configuration, as well, but this should not be a problem on recent systems. The generic keyboard and mouse drivers in Standard are still present as well, when no hardware is connected, but the null driver for the VGA adapter needs to be added to the configuration. This requires the following components:

VGA Save could be left out, if there really is no VGA compatible chip on the board. This will create a dependency error, which in this case can be disregarded. Nevertheless, the benefit of having VGA Save in the image is that any time a graphics adapter card is plugged into the system VGA Save gets loaded instead of the Headless VGA driver. This enables screen output e.g. for field personnel troubleshooting the device. The VGA Boot Driver is required by NTLDR at boot time.

  • Making the Server Appliance Headless - Microsoft Developer Network post
  • Headless VGA Driver - Microsoft Developer Network post
  • Headless Device Video Driver Processing - Microsoft Developer Network post
  • Adding Support for a Headless System to your Configuration ... - Microsoft Developer Network post
  • Headless VGA driver - Setting display resolution - Windows XP ... - RealGeek

One last element,

The BIOS should be configured to “re-spawn” like a good digital soldier in the event that the power is lost (even a UPS dies if power is off too long) or if someone hits the Power-off button perchance.

Likewise, if the Windows system is NOT on an AD Domain, and logging into a local workstation/workgroup account profile, then you lock it down pretty well (to the bare minimums to function, and enable the auto-login to the set profile: Tip: Auto-Login Your Windows 7 User Account | Cool Stuff | Channel 9. Pretty easy stuff for the auto-login.

The challenge comes up if you want to add it to the AD Domain and use a domain-based account for security/auditing purposes.

There are a number of ways to do this, each with their nuances. Some work better than others. Some are more secure than others. Consider the risk carefully before choosing grasshopper!

[SOLVED] Windows 7 - Auto Logon With Domain Computer - Mockbox.net post.  Easy enough with this registry-based solution BUT the user account and password are stored in the registry in clear-text.  You can roll your own .REG files for deployment with this method. However this could be a big security risk!

WindowsAutoLogin - freeware - IntelliAdmin. One nice feature of this application is that you can also control the number of times it allows an auto-login to occur and then after that “X” number of logins specified, it becomes disabled. That could be handy for some unattended (but brief) service events that require multiple reboots.

Autologon - Microsoft Sysinternals - Much better and easy enough to use. Per this post Safely setting autologon for Windows from the “Confessions of a Microsoft Consultant” TechNet Blog, we learn that AutoLogin saves the account/password string in the registry as a LSA secret.  That’s better than storing it in the Registry in plain-text, but it still is “easy enough” to penetrate and capture:

  • LSASecretsDump - Dump LSA secrets from the Registry - NirSoft utility
  • Use PowerShell to Decrypt LSA Secrets from the Registry - Hey, Scripting Guy! Blog - Why not since we are trying to learn PowerShell here too!
  • Dump Windows password hashes efficiently - Part 1 - Bernardo Damele A.G. weblog
  • Dump Windows password hashes efficiently - Part 2 - Bernardo Damele A.G. weblog
  • Dump Windows password hashes efficiently - Part 3 - Bernardo Damele A.G. weblog - LSA Secrets info is here.
  • Dump Windows password hashes efficiently - Part 4 - Bernardo Damele A.G. weblog
  • Dump Windows password hashes efficiently - Part 5 - Bernardo Damele A.G. weblog
  • Late night thoughts on security: LSA Secrets - ins3cure blog “Late night thoughts on security”
  • LSA Secrets - WindowsNetworking.com
  • Microsoft Windows Security Fundamentals: For Windows 2003 SP1 and R2 - Page 41 - Google Books Result

Autologon - commercial product from LogonExpert . I haven’t tried this product but it says it stores the logon information encrypted in AES 256, interacting directly with the WinLogon service to ensure nothing can grab the data. It has some really, really neat features.  The author has an overview of Free Solutions like what I have outlined above, as well as a Learn More about the product. There is an active download link from the page but I’m not sure if it is a limited-trial version or what. This may be a product that can provide both the “setup” features to enable AD-based auto-login and the security-needed for implementation. I’m really intrigued by this particular product.

Use this information wisely!

--Claus Valca

Read More
Posted in Active Directory, hacks, Microsoft, PowerShell, Remote Support, Scripting, security, tutorials, utilities, Windows 7, Windows 8, XP | No comments

Regarding the Modern.IE Tester VM’s

Posted on 5:08 PM by Unknown

I’ve spend much of the weekend building and tweaking the various Internet Explorer | modern.IE Virtual Machine builds. I went with the VMware Player versions as I tend to use that platform for Windows systems while using VirtualBox for Linux machines.

Anyway, this wasn’t for kicks and grins. Rather I needed to do some platform testing of different remote-control access and these seemed perfect, after some modifications.

Again, carefully read Rey Bango’s blog post and the comments to get a good sense of these systems; Making Internet Explorer Testing Easier with new IE VMs

Time Limits on the VMs

All of the VMs have a time limit 90 days of total time from the moment you first use the VM. Basically it’s 30 days usage with two 30-day rearms. To rearm, go into a command prompt with Administrator privileges and type in “slmgr –rearm”

At the end of the 90 days, you’ll be able to use the VM for an hour before it shuts down. At this point, you’ll need to decide if that’s okay or if you’d like to recreate the VM and use it for another 90 days. Remember, you can reuse the same files you originally downloaded to recreate the VM so don’t delete them (unless you just love downloading big files).

After I enabled Remote Desktop access to the first system (Windows 7 Enterprise) and then started trying to use mstsc.exe (Remote Desktop Connection), it would connect…then instantly through an error and disconnect. Remote Desktop Access is disabled on these VM’s by default. I assume you know how to enable them but if not…Enabling Remote Desktop Connections in Windows 7 | 7 Tutorials

Took me awhile to figure it out, but the system was also configured with the single profile account and to automatically log into the account. Once I connected to the account with remote desktop, it logged the running account off, then that caused it to force the relogin of the same account, knocking me off!

This then required me to disable the “auto-login” feature for the accounts. Again, I’m sure all my dear readers know how to do that but if not…Tip: Auto-Login Your Windows 7 User Account | Cool Stuff | Channel 9 except in this case after first running “control userpasswords2”, for step 4 you want to “Check the option “User must enter a user name and password to use this computer.”  Now you won’t get kicked off when you use Windows Remote Desktop Connection to reach it.

Of course, if you do that, you will now need to enter the default password for these systems.  You do know the default user account password for the VM’s right? No?

I found it clearly documented in this provided PDF: Modern.IE VM Notes - 6-24-2013. The PDF is interesting as the file name says 06-27-2013 but the internal document date is 06-24-2013. Oh well. Here is another earlier version as well: Modern.IE VM Notes. Rey Bango actually references the first one in his post if you can find it in the last sentence of the last paragraph of his “Installing the VMs” section.

What else…Oh…as I was setting these up in VMWare Player, for one of them I somehow configured it to use Home Groups. Oopsie.  It ended up creating a non-delete-able HomeGroup icon on my host desktop. Hmmm. Followed this tip from “reminore reminore” to get it cleared off: Unable to remove Homegroup Icon - Microsoft Community. There are a couple of techniques in the post but this did it simply for me.

This worked for me win 7 - 64 bit home premium
1) Drive to "Folder Options"
2) Click "View"
3) Scroll down to "Use Sharing Wizard (Recommended)" it must be checked
4) Un-Check  the Check -box
5) Click "Apply"......the Icon will be removed from your desktop
6) Re-Check the Check-box .....the icon will not be back

HomeGroup Desktop Icon - Add or Remove - Windows 7 Help Forums has some additional pre-packaged .REG file fixes if that is your thing, or the above doesn’t work.

One last tip. Once I finished tweaking the user-account/settings and adding some core files/portable apps to it in the profile folder, to make future rebuilding of these systems super-easy, I just ran the Easy Transfer Wizard on one of them to build an “myaccount.mig" file and off-loaded it back to my host system. Then after I set up the Win 7 system I could semi-clone that profile setup to the rest of them with much less setup time than the first one, and when I have to rebuild them after the 90-day period ends. How to Use Easy Transfer in Windows 7 - For Dummies

--Cheers.

Claus Valca.

Read More
Posted in Internet Explorer, Microsoft, troubleshooting, tutorials, virtualization, Windows 7, Windows 8 | No comments

Sunday, July 28, 2013

Personal Whole Disk Encryption

Posted on 12:59 PM by Unknown

So about two or three weeks ago I decided to bite the bullet and install a whole-disk-encryption solution to my personal laptop.

We use whole disk encryption (WDE) at work on all our systems for security and data-loss prevention so the whole concept is well covered here and I’ve done a number of posts on PGP WDE in particular, when combined with WinPE solutions.

But PGP is a commercial solution, and like some other commercial WDE products, is pretty costly and not a practical solution for most home users.

The whole concept of whole disk encryption is that even if someone physically steals your computer/laptop/portable-drive, they cannot access the data in a readable format without the use of an encryption key. In many ways, I think this is one of the very last bastions of standard computing security practice that hasn’t made it down to the average consumer level…and sadly…many companies and small businesses.  I always shudder when I see computers in small mom-and-pop businesses sitting out in the open near windows and wonder if their customer data is really safe at rest on them.

Anyway, it was time to lock-down the Valca laptops.

There were a small number of free/$$ consumer products out there for whole disk encryption I could have gone with. The two major factors I was particularly concerned with were 1) would system/disk performance be negatively impacted and 2) would recovery options to off-line mount the encrypted disk be available for me to use under a WinPE platform?

Advances in standard desktop hardware performance pretty much rendered the first one not a concern, and I have been using the portable version of TrueCrypt off USB drives and in WinPE for quite a while.

In the end I went with TrueCrypt and haven’t been disappointed.

The whole process is very easy to go through and I’ve seen absolutely no performance issues. In fact, I did all my recent HD video editing exercise with nary a performance blip shortly after my system was running the TrueCrypt whole disk encryption.

  • TrueCrypt - System Encryption
  • TrueCrypt - FAQ (answers to frequently asked questions)
  • Step-by-step guide to installing TrueCrypt and encrypting Windows XP system partition - Security Beacon

You might want to consider some of the points that Michael Pietroforte raised last week over at 4SysOps

  • Is TrueCrypt trustworthy? - 4sysops. I think he does make some valid points, but regardless, my primary concern is data loss prevention from robbery/burglary/my-own-stupidity and not from possible back-door exploits from shadowy gobernment data-collection operations run against the citizenry. Anyway, I thought Michael provided a great and often unconsidered perspective.

Alternative whole disk encryption solutions worth considering for home users

CE-Infosys - Free CompuSec PC Security Suite - I first stumbled across this German based software solution back when I was seeing how WDE might protect against KON-BOOT. It is completely free for both personal and professional use.

DiskCryptor - Open Source disk partition encryption program. I am not as familiar with this program but it has been kicking around now for a very long time. In addition it also supports Windows LiveCD integration.

Microsoft BitLocker/TPM - Note you need to be running Windows 7 Enterprise or Ultimate (or other Vista/Win 8 supported editions). Windows 7/8 Home editions don’t support it. A system board with TPM chip is not required, but recommended.

  • Help protect your files using BitLocker Drive Encryption - Windows.
  • BitLocker Drive Encryption Overview - Microsoft TechNet
  • What is BitLocker? What does it do? What does it not do? - US SMB&D TS2 Team Blog

For commercial products, this article may be helpful:

Buyer's Guide to Full Disk Encryption - eSecurity Planet

Cheers and stay secure,

Claus Valca

Read More
Posted in boot-cd's, Microsoft, security, Windows 7, Windows 8, XP | No comments

PowerShell Reference Post: The Train Cometh Near…

Posted on 9:30 AM by Unknown

Ever have that experience when you wake up and realize that event, or project, or whatever that you have been working hard at avoiding or denying is “Upon You”?

Very, very soon down in the coal mine, the opportunity to have Windows PowerShell natively installed on all our Windows desktop system will be realized.

I’ve been doing some old-school “BAT” files and even some very light VBS scripts for a while now to help automate some IT sysadmin functions from the CLI to avoid use of EXE based third-party tools and utilities where possible. Sometimes this has proved wildly successful. Other-times, not so much.

What I probably need to do is hunker down and pound my head into the desk and keyboard and learnz me some Ruby or Perl or Python.

However, for whatever reason, those still seem super-overwhelming to try to figure out how to tackle.

Instead (for now), what I think I really need to do is take the big-boy step of getting some basic familiarity and comfort with PowerShell usage under my belt.

Since the base PowerShell should be on all our deploying Windows 7 systems (and upgradable to what, PS 4.0 now?) that would present a great opportunity to extend system and network administration tasks and increase efficiency.  And since I’m fairly comfortable with the Windows BAT file writing/debugging process, this jump may be a bit easier to make.

So anyway, this is just a list of initial PowerShell references I’m dumping so that I can start my learning process.

If my dear readers have any additional recommendations -- books, URL’s, on-line videos, blogs, etc. -- for helping someone get up to speed with learning PowerShell and its support for system and network administration tasks, please drop your tips into the comment jar.

Windows PowerShell - TechNet Script Center Introduction - Windows PowerShell 2.0, Windows PowerShell 3.0, Windows PowerShell 4.0

Getting Started with PowerShell 3.0 | Channel 9 - A nine-part Microsoft video series - “This Jump Start is designed to teach the busy IT Professionals about this powerful management tool. Learn how PowerShell works and how to make PowerShell work for you from the experts Jeffrey Snover, the inventor of PowerShell, together with Jason Helmick, Senior Technologist at Concentrated Technology. IT Professionals, Admins, and Help Desk persons learn how to improve your management capabilities, automate redundant tasks and manage your environment in scale.”

Advanced Tools and Scripting with PowerShell 3.0 - Windows Virtualization Team Blog - Coming August 1st - Free Microsoft Virtual Academy online presentation training event -- “Find out how to turn your real time management and automation scripts into useful reusable tools and cmdlets. You’ll learn the best patterns and practices for building and maintaining tools and you’ll pick up some special tips and tricks along the way.” I expect it will also be up on Channel 9 a week or so later.

PowerShell Script to Manage Java Browser Plug-In and Java Security Level - SANS Windows Security Blog

Download Windows PowerShell Quick Reference - Microsoft Download Center - “Quick-reference guide to commonly-used Windows PowerShell commands.”

Download Windows PowerShell 3.0 Step By Step Guide - Microsoft Download Center - “Microsoft by default has decided to display Windows PowerShell in the Windows 8.1 WinX Power Menu, although you can change it back to Command Prompt, if you wish. But for those of you who’d like to try you hand at learning Windows PowerShell 3.0, you can download these step by step guides released by Microsoft.”

The Windows PowerShell Toolbox - TechNet Script Center - Loads of links and references for using Windows PowerShell

Scripting with Windows PowerShell - TechNet Script Center - Webcast series links and references, scripts, download sources and usage guides.

Discover the Easy Way to Begin Learning Windows PowerShell - Hey, Scripting Guy! Blog

Windows PowerShell Team Blog

Download Windows Management Framework 3.0 - Microsoft Download Center - Contains Windows PowerShell 3.0 among other bits.

Download Windows Management Framework 4.0 Preview - Microsoft Download Center - Not yet ready for production release, this contains the bits for the next generation of Windows PowerShell.  Consider carefully before deployment as some big system incompatibilities haven’t yet been resolved.

Windows PowerShell 4.0 Preview - Rick Barber's Blog. From Rick’s brief summary post…

“You should note that the supported operating systems do not include Windows 8 or anything earlier than Windows 7 SP1.  Sources tell me that PowerShell 4.0 will be included with Windows 8.1 when it is released as well as Windows Server 2012 R2.

“Pay close attention to the link above as the Management Framework 4.0 Preview is not compatible with some Microsoft Server applications including all versions of Exchange server, SharePoint server, and other applications.  You really shouldn’t be installing a preview in a production environment, anyway, but rather using it locally on your workstation or laptop for testing and familiarization.“

PowerGUI.org - Free Windows Powershell Community. When we did a big rollover from Novell to Active Directory, the AD pros who were brought in had PowerGUI prominently displayed on their secondary monitor as they powered through the transitional operations.

PowerShell Pro! - website with tons of on-line tutorials for Windows PowerShell. It doesn’t look like it has been updated for a number of years, but if you are just getting started from the ground up, most of the material here should still be valuable, especially considering the rich illustrations and screen captures that accompany the primary guide texts.

PowerShell Analyzer - (now free) GUI tool to manage PowerShell scripting. Old TechNet Mag review here: Toolbox: New Products for IT Pros

PowerShell.com – PowerShell Scripts, Tips, Forums, and Resources. Community website.

learn windows powershell - YouTube search results on the terms

learn windows powershell - DuckDuckGo search results on the terms.

Cheers!

Claus Valca

Read More
Posted in cheat sheets, Learning, Microsoft, PowerShell, Scripting, software, tutorials, video, Windows 7, Windows 8 | No comments

Sunday, June 30, 2013

Microsoft’s EMET v 4.0 Released … in case you missed it

Posted on 3:01 PM by Unknown

Microsoft’s Enhanced Mitigation Experience Toolkit 4.0 - EMET - just got released about two weeks ago.

It really hasn’t made that big a splash in the security news pond; maybe getting lost in all the waves from coverage on our domestic network digital data gathering, leaks in the SS Minnow, and that whole Facebook Shadow Profile data collection fiasco.

Oh, then there is that whole breaking story in the food world that has everyone shocked and a-twitter--How Cronuts Are Driving New York City Crazy.

So it’s not surprising that news of the release of a Windows-specific security tool to prevent advanced malware attacks got little notice.

So here you go.  Little rock toss into a big pond.

a0n12tap.xsg

I’ve got it running on all our home systems as well as all my Windows virtual machines. I’ve seen no performance issues at all and it is super-quiet; no chatter at all. Accordingly, I would recommend it to all my friends/family-members, especially those who insist on using Internet Explorer and do a lot of work in MS Office applications and documents. It is not a solution to replace any existing anti-virus/anti-malware security software you have, but rather it works to supplement and harden it.  I’m running it aside Microsoft Security Essentials (Win 7 systems), Windows Defender (Win 8 systems), and Bitdefender Antivirus Free (Win 8 systems). It works great.

  • Nuclear Scientists, Pandas and EMET Keeping Me Honest - SANS ISC Diary - great post from Johannes Ullrich detailing just how deployment and use of EMET (v3.5) could have prevented a recent “watering-hole” attack. It’s a great introduction on how the EMET software works. Version 4.0 is better.
  • EMET 4.0 is now available for download - SANS ISC Diary notice/followup.
  • EMET 4.0 now available for download - Microsoft Security Research & Defense blog. Great overview of the tool and all the new features and capabilities. Read this next before considering deployment
  • Enhanced Mitigation Experience Toolkit 4.0 - Official Microsoft Download Center source. It runs on everything from XP SP3 to Windows 8 platforms, as well as all related Server OS’s as well.
  • Enhanced Mitigation Experience Toolkit 4.0 - bink.nu - quick recap summary scraped from the product details of the official download site.
  • Microsoft’s EMET 4 adds even more malware-blocking power - Betanews overview of the tool.
  • Microsoft releases Enhanced Mitigation Experience Toolkit 4.0 - Help Net Security announcement of the tool.
  • Enhanced Mitigation Experience Toolkit 4.0 final is out - Ghacks.net - Nice review and overview of the EMET 4.0 features.

Not impressed enough yet to download?

Well, did I mention it has “skins” so you can change the theme to some pretty snazzy color schemes?

Seriously, if you spend any time on the Web (particularly in IE) and run a Windows system, then you really should consider deployment of this tool. Just take the default configuration settings to get started, then you can tweak away and add additional protection coverage after you read the manual.

Cheers!

Claus Valca.

Read More
Posted in anti-virus software, browsers, Internet Explorer, malware tools, Microsoft, networking, security, viruses, Windows 7, Windows 8, XP | No comments

Sunday, March 17, 2013

God Made a SysAdmin…and a linkfest to feed them

Posted on 10:19 PM by Unknown

One of the best 2013 ads I saw so far this year was this one during a small little scratch football game.

It worked for me on several levels.

However, soon a "parody” of sorts soon followed. First the words were developed by Chester Gifford and -- inspired - Matt Simmons of the great Standalone Sysadmin blog tossed together some images, and finally Drew Stemen contributed the voice-over.  The whole story is here; God Made a SysAdmin | Standalone Sysadmin

Full text at website God Made a Sysadmin

Brilliant!  I want to personally thank all those who appeared in the piece as well as the creative work and toil from Chester, Matt, and Drew. Who knows how much extra un-recorded time went into this project’s success? Well, a sysadmin would, naturally!

More Tips & Rumors

  • Reset Your Forgotten Windows Login Password The Easy Way - Addictive Tips
  • How to reset a Windows 8 password - 4sysops
  • How to reset a Microsoft account password (connected account) - 4sysops
  • Offline enable the Windows 8 built-in administrator account - 4sysops
  • Triple Your Speed: How to Install an mSATA SSD Boot Drive in Your Laptop = LaptopMag blog
  • Seagate is done making 7200rpm 2.5-inch pure hard disk drives - Ars Technica

Networking News

  • Chrome's Developer Tools for HTML Analysis - LoveMyTool blog by Tony Fortunato
  • Network Capture is Dead! - MessageAnalyzer - This post highlights how MessageAnalyzer (the next generation Microsoft capture tool evolving from Network Monitor) doesn’t just focus captures on network “traffic” but also can monitor and analyze Event Tracing for Windows data as well. Pretty cool.
  • Sniffing Traffic on the Wire with a Hardware Tap - Open Security Research blog
  • Wireshark Security Updates -ISC Diary post
  • Wireshark · Download - Versions 1.8.6 stable, 1.6.14 (old stable), and 1.9.1 (Dev release)

Toys and Wonders

  • Kali Linux - New Sec/PenTest distro built on the back of BackTrack Linux and developed specifically for enterprise environments supporting penetration testing and security auditing. According to the distro documentation, it has over 300 tools baked in, will be free, sports many wireless devices, and has ARMEL/ARMHF support for “non-standard” hardware platforms such as Raspberry Pi, a VMWare Image, and the Samsung Chromebook. Pretty snazzy!
    • Kali Linux - Downloads
    • Kali Linux - Documentation
    • Kali Linux arrives as enterprise-ready version of BackTrack - The H Security: News and Features
    • Kali Linux Cracks Passwords and Finds Security Exploits on the Enterprise Level - Life Hacker
  • Piriform pushes out minor update for CCleaner, version 4 coming soon -  BetaNews
    • CCleaner v3.28 - Piriform News
  • Easily Download & Launch Sysinternals & Nirsoft Utilities With WSCC - Addictive Tips. Previously mentioned back in this Windows System Control Center (WSCC): Awesome Cool! GSD post.
  • VirtualBox update fixes problems, makes the virtualization tool more stable - BetaNews - Yeah, go get your update… Downloads - Oracle VM Virtualbox
    • Changelog – Version 4.2.10 - Oracle VM VirtualBox
  • Upgrading Linux Guests - The Fat Bloke Sings blog
  • Alternative Flash Player Auto-Updater - pXc-coding - now at version 1.1.0.2 - Works on XP,Vista. Win 7, Win 8, can work without user interaction (handy); of course Flash does have the option imbedded to auto-update. As I understand it, Flash auto-checks every seven days while this app can check for Flash updates at every reboot (or every two hours) if you are patch twitchy.
  • Uninstall Flash Player - Windows - Adobe - Can’t get Flash out of your Windows system using Add/Remove/Programs & Features? Or want to roll back to and older version and Flash won’t let you? Use the official Flash Uninstall utility to remove all traces.
  • JavaRa - SingularLabs - Fantastic all-in-one utility to update Java runtimes, remove Java runtimes, and clean up logs/temp-files used by Java runtimes.
  • USB Image Tool 1.61 - alex's coding playground - Fast arriving update to fix a bug, use user-defined date/time formats for file name suggestions, and once an image restore is completed, automatically rescans for all devices to be detected.
  • UEFI MULTI 72 - reboot.pro - Project to make a multi-boot USB-harddisk to boot systems with BIOS or UEFI firmware.
  • IntegrateDrv - reboot.pro - Project for utility tool to integrate mass-storage or PNP drivers into Windows setup. This is a little bit different than the WinPE/DISM driver integration tools such as DISM GUI - Download: DISM GUI 3.1.1, and Je Jin's DISM Tool, and GUI Dism ELDI v3.0.2. I covered use of those in my GSD post Scratching at a SCSI Drive Itch - Part II - WinPE Redux .

Cheers and may you have a marvelous work-week!

Claus Valca

Read More
Posted in boot-cd's, hacks, hardware, Link Fest, Linux, Microsoft, networking, security, troubleshooting, tutorials, utilities, virtualization, Windows 7, Windows 8 | No comments

Internet Explorer 10 (for Win 7), Firefox bits, and How Google Works

Posted on 8:40 PM by Unknown

News of Microsoft’s release of Internet Explorer 10 for Windows 7 seemed to go off like a flare; lots of noise and brilliance…and then flickering out to nothing.

In my security posture of trying to keep all the web browsers installed on all our home systems current, I went ahead and jumped on IE 10 and installed it almost immediately after release on our Windows 7 systems. 

None of us (well except Alvis with her college portal) regularly use Internet Explorer.

I use still primarily use Firefox for my daily heavy-lifting at home, and supplement it with Chromium (a build version of Chrome).

Alvis prefers the public release version of Chrome…which self-updates BTW…so that is fine by me.

Lavie uses Firefox exclusively….also because of the bookmark sidebar feature.

But I leave Internet Explorer on our systems (for compatibility reasons with some applications and websites).

Anyway, it went on all out systems without much fuss…well, not really on mine. Lessons learned. If you want to manually put it on your system, just make sure of all the links you are offered, the one you are using is to the actual FINAL release installer and not one of the IE 10 “preview” release version installers. In my haste (and trust in the IE Blog post I used) I grabbed a preview version and had to go through a series of additional security updates and IE 10 release upgrades to eventually arrive at a fully updated version of IE 10.  I didn’t make that same mistake with subsequent installs on everyone else’s systems.

  • Internet Explorer 10 finally released for Windows 7 - Ars Technica
  • Internet Explorer 10 now available for more than 700M Windows customers - Exploring IE Blog
  • IE10 for Windows 7 Globally Available for Consumers and Businesses - IEBlog
  • RELEASED - Download Internet Explorer 10 for Windows 7 - Scott Hanselman’s ComputerZen
  • Bloody well time, Microsoft releases Internet Explorer 10 for Windows 7 - BetaNews
  • Internet Explorer For Windows 7: New Features & Improvements - Addictive Tips
  • IE10 on Windows 7: 5 Essential Facts - Software -Information Week
  • Download Internet Explorer 10 for Windows 7 (32-bit) - Official Microsoft Download Center
  • Download Internet Explorer 10 for Windows 7 64-bit Edition and Windows Server 2008 R2 64-bit Edition - Official Microsoft Download Center
  • Download Internet Explorer 10 Language Packs for Windows 7 and Windows Server 2008 R2 - Official Microsoft Download Center
  • Release Notes - Microsoft
  • Download Internet Explorer 10 - Microsoft Windows - Worldwide installation packs

Meanwhile, these Firefox articles were pretty timely.

  • Prepare Mozilla Firefox for Enterprise Deployment and Virtualization - Aaron Parker
  • The Firefox Extension Guru's Blog links to this How to make Firefox the Fort Knox of browsers - over at Ghacks.

And Google has some great presentations to help you understand how their email and search services work.

  • Follow an email’s journey with Story of Send - Google Official Blog
  • The Story of Send - Google
  • Google Releases Interactive Infographic: "How Search Works" - Search Engine Land
  • How Search Works - Google

Stay informed & Browse safe.

Claus Valca

Read More
Posted in browsers, Firefox, Gmail, Google, Internet Explorer, Microsoft, search engines, security, Windows 7 | No comments

Saturday, January 12, 2013

Saturday Linkfest - Cold Pizza Edition

Posted on 2:56 PM by Unknown

The other night on my way home from work, I was tired and exhausted. I didn’t feel like going grocery shopping for dinner so I punted.

I stopped by the pizza parlor, grabbed three large pies. We ate one for dinner, then have been snacking on cold-pizza leftovers for the past two days.

I’m almost out of slices so I guess it will be to the grocery store tomorrow for some real food again.

USB-based Windows System Install Options

The other day at work, a co-worker asked me for some feedback on a particular problem they had at home.

Seems that he had decided to upgrade (actually a fresh install) a laptop from Windows XP to Windows 7. Only problem was the CDROM drive was in pretty bad shape, and all he had was optical install disks. So how could he get the upgrade on.

Although I supposed he could find an external USB-based CD/DVD-ROM drive to use, that seemed like an unnecessary purchase. He did have a working Windows desktop system, however, so the solution seemed quite simple: create a bootable USB drive with the installation media present. Boot the laptop from the USB drive and install away!

So here are three methods to accomplish that task; full-hands on, Windows tool, and automated utilities.

If you are game and want to learn a bit of the structure of creating such a tool, then this TechRepublic post is perfect: How do I ... create an installation flash drive for Windows 7? I noticed it doesn’t have instructions to make the partition/device bootable via bootsect. BOOTSECT /NT60 <usb drive letter>    (Where <usb drive letter> equals your USB device).

Microsoft has a nice and simple tool to assist you with the process: Windows 7 USB/DVD download tool.  This guide How To Create Bootable Windows 7 USB To Install Windows 7 From USB Flash Drive (Using Windows 7 DVD/USB Tool) from Into Windows provides a nice walkthrough of the process.

Finally, there are some specialized utilities that give you a bit more control over the creation process. I particularly like these two:

  • WinToFlash - Install Windows from usb - Home page
  • Rufus - Create bootable USB drives

Piece of cake.

ForSec Bits

  • EMET 3.5: The Value of Looking Through an Attacker's Eyes - ISC Diary - This was a fascinating post about the Microsoft Enhanced Mitigation Experience 3.5 toolkit and how it can leverage additional anti-malware protection on systems. I’m not sure a site-wide deployment would make a lot of sense, but for workbench systems and testing it might be a smart move to consider.
  • Hunting Down and Killing Ransomware - Mark's Blog. Mark Russinovich provides an excellent technical review on dealing with scareware/ransomware infections on a system.
  • A picture worth a 1000 barcodes? - ISC Diary - be careful what you post!
  • Adobe Security Bulletins Posted - Adobe Product Security Incident Response Team (PSIRT) Blog
  • Microsoft and Adobe close almost 40 holes - The H Security: News and Features. Time to patch Windows and Adobe holes again!
  • Carving Station – RAR Files - M-unition. Mary Singh has a highly in-depth post coving file-carving from unallocated disk space. Not exactly light reading, Mary provides some excellent coverage on this topic.
  • Freeware Release: Redline 1.7 - M-unition. New version released. download page
  • TeamViewer 8 - Forensic Artifacts - Useful information on system artifacts left by TeamViewer 8 usage.
  • You down with LNK? - SpiderLabs Anterior

Installing Stuff

  • How to install Ubuntu on Acer’s $199 C7 Chromebook - Ars Technica
  • Installing Windows XP to SSD - TinyApps.org
  • Repurpose PCs with Windows ThinPC - Anything about IT (via tip from TinyApps bloggist).  See also AnandTech - Windows Thin PC: Windows, Slimmed Down

Tips for Techs

  • No sound from Google Chrome: Adobe Flash issue and workaround - MarkWilson.it
  • Easily Fix Or Delete Broken Desktop & Start Menu Shortcuts - AddictiveTips. Uses NirSoft tool ShortcutsMan for housecleaning.
  • Free e-books for Windows administrators (updated) - 4sysops
  • 150 Best Windows Apps Of Year 2012 - AddictiveTips
  • Standalone Sysadmin - blog.  TinyApps bloggist pointed me to Matt Simmon’s great website a while ago. In addition to the great posts, Matt also provides a super-handy List of Subscribed Feeds covering all kinds of tech/sysadmin/forsec goodness. If you are new to RSS feeds and need a great “seed list” to get started with, look no further. Matt also provides a more current OPML file for use. Whew!

Network Monitoring

  • PCAP Files Are Great Arn't They?? - SpiderLabs Anterior - fantastic examples of tshark-fu and other tricks for extracting great data-points out of PCAP files.
  • Filtering with Message Analyzer - MessageAnalyzer Blog. It’s been a while since we have seen much chatter regarding the replacement for Network Monitor. Paul E Long has some great tips for filtering in the new tool; especially useful for those used to filter use patterns in Network Monitor. More posts promised soon.
  • Installing Wireshark 1.8.4 and WinPcap 4.1.2 on a Windows 8 System - Moon Support Weblog

Tools, Utilities, and Updates

  • Updates: Autoruns v11.4, ProcDump v5.12, SDelete v1.61 - Sysinternals Site Discussion
  • GMER 2.0 arrives - BetaNews review. Rootkit detection tool now adds support added for Windows 8 and x64 systems. GMER download pager
  • JavaRa Definitions Updated - SingularLabs - Use these with JavaRa to help install/update/remove Java Runtime Environment installations on your systems.
  • Dev Eject - version 1.0.26 beta - this is a fantastically clever tool that can not only help you eject removable devices from Windows, but it also can tell you specifically what is causing (locking) the device from ejection.
  • Oracle VM VirtualBox - Now at version 4.2.6. Overview of significant changes: VirtualBox 4.2.6 delivers many fixes - BetaNews.
  • TightVNC: What's New in TightVNC - Now at version 2.6.4. Download TightVNC
  • DMDE (DM Disk Editor and Data Recovery Software) - free/$ versions - Interesting advanced file recovery tool. The free version is pretty limited but is a good place to start and play around with. Portable so no installation required. DMDE is a handy free data recovery tool for Windows experts - BetaNews review.

Firefox News

  • Mozilla to Continue 64-Bit Windows Firefox Builds - Firefox Extension Guru's Blog
  • Private windows coming to Firefox - Mozilla Links

Cheers!

--Claus Valca

Read More
Posted in boot-cd's, browsers, Firefox, forensics, Link Fest, Linux, malware tools, networking, NFAT, RSS, security, troubleshooting, utilities, Windows 7 | No comments

Sunday, October 28, 2012

For-Sec & Utility Jumble Linkfest

Posted on 6:52 PM by Unknown

Wordle_2012-10-28_10-49-54

The short weekend is done. The “Sandy Watch” is on for what could be -- for our northeastern friends -- a storm event to be remembered for many years to come. So comes a pile of security/forensic and utility-minded links spill out below for the curious and information hungry.

Forensics and Security

Girl, Unallocated: Be Very Quiet... I'm Tracking Emails Through Headers - Girl, Unallocated Blog. The Girl has a great post looking at email headers and their bits and perils. One gem is a report (PDF) from Stroz Friedberg and a particular focus on email headers. The report as a whole is a great read and again provides a lesson in technical report writing and presentation as well as some forensics pushback on anti-forensics techniques. At 102 pages, it isn’t a brief, but well worth the time to download and study.

The Girl’s post reminded me of another great publicly-available report that addressed emails in a forensic investigation.  In my GSD post Interesting Malware in Email Attempt - URL Scanner Links, I wrote the following bits at the end:

A recent Digital Forensics Case Leads post has mention of a super-fantastic investigation/forensic report involving anonymous emails. This is must-read material, not just in terms of the investigative methodology but also the way the report was composed and presented. Very clearly done!  I’m keeping a saved copy of the report for future reference; both technically and as a report template. From the post via the link above:

“University of Illinois recently released a detailed investigation report (PDF) regarding anonymous emails allegedly sent by its Chief of Staff to the University's Senates Conference. The report is an interesting read, and also serves as a potentially useful model for those looking for report samples and templates.”

How a Google Headhunter's E-Mail Unraveled a Massive Net Security Hole - Threat Level @ Wired.com.  I almost overlooked Kim Zetter’s post on how Mathematician Zach Harris -- as an exercise -- discovered a flaw in some providers user of a weak DKIM key to sign emails originating from them. Fascinating and short read.

DEFT 7.2 and DEFT english manual, ready for download! DEFT Linux - Computer Forensics live cd . New DEFT version out. Last one in x32 bits. Future versions will be strictly x64 flavored.

Xplico – Xplico 1.0.1 - Xplico new version release just dropped. From the brief post:

ChangeLog:

  • nDPI integration
  • performace improved
  • FTP dissector improved
  • Added the prism dissector
  • CLI execution bug fixed
  • PCAP-over-IP SSL encryption
  • IRC dissector improved
  • File reconstruction from Fragmented Payloads improved
  • FaceBook Chat updated
  • FaceBook Message (partial)
  • HTTP without initial packets (packets lost)
  • RTP dissector improved
  • PCAP2WAV, RTP2WAV interface added

And don’t forget! Now you can update/get via apt-get! for Ubuntu 11.04 and higher.  Sweet!

sudo bash -c 'echo "deb http://repo.xplico.org/ $(lsb_release -s -c) main" >> /etc/apt/sources.list'
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 791C25CE
sudo apt-get update
sudo apt-get install xplico

LastActivityView - Nirsoft brand new utility! - Use this new tool to view the latest computer activity in Windows operating system. Nir Softer has some more details on his NirBlog: New utility that shows general computer activity. Could be useful for incident response and analysis and other “quick peeks” for key system activity indicators to narrow down the search.

FileAlyzer Portable 2.0.5.57 (detailed file analyzer) Released -PortableApps.com

Hacking KeyLoggers - Open Security Research has a great post that not only identified a USB keylogging device, but takes it to the next level in hacking it to determine the impact of the device and when it might have been dropped. Clever stuff.

Attacking TrueCrypt - The H Security: News and Features. Another interesting post that almost slipped by me. Interesting by itself but also shows the benefit of using “cascaded algorithms” in TrueCrypt to thwart current attacks…for now.

Restoration of defocused and blurred images - Yuzhikov.com. This is super cool.  Vladimir Yuzhikov hasn’t just done a proof of concept for de-fuzzing blurred imaged (either out of focus or those blurred with a mathematical algorithm), no, he has actually released a free Windows app to demonstrate the possibilities. Besides images, text that is out of focus can be unblurred as well. This is very fascinating and could assist investigators facing images and other digital files with blurred faces or content. It’s not exactly easy or guaranteed to work, but it is very promising start and Vladimir notes he is continuing development and refinement. Read his work please and snag the download.

Google Drive opens backdoor to Google accounts - The H Security: News and Features . Quoting from the post, “The Windows and Mac OS X desktop clients for Google's Drive file storage and synchronisation service open a backdoor to users' Google accounts which could allow the curious to access a Drive user's email, contacts and calendar entries.”  read the post for more info. As usual it seems to be a convenience versus security trade-off again. Choose your cake wisely. I stick with using only the web interfaces and pass on the client versions of these cloud-based storages services…for now.

Virtualization

The TinyApps bloggist has been hard at work digging out great tips and techniques for importing the virtualized “Windows XP Mode” into popular virtualization software. As always, the posts are impeccable with lots of details and supporting source documentation for additional study and research.

  • Import Windows XP Mode into VMWare Player - TinyApps.org blog
  • Import Windows XP Mode into VirtualBox - TinyApps.org blog
  • Must-have tool for VirtualBox users - TinyApps.org blog.

Oracle VM VirtualBox - Version 4.2.4 just dropped…by the way. I almost missed it were it not for my RSS feed filters. See the changelog for more details.  And be sure to grab the 4.2.4 VM VirtualBox Extension Pack as well.

Miles’ posts reminded me of an earlier GSD summer post Virtual Solutions and his great post comment guiding me to getting MS’s IE VirtualPC images running in Virtual Box.

How to run Microsoft’s IE VPC images in VirtualBox
http://tumblr.jonthornton.com/post/11405634980/how-to-run-microsofts-ie-vpc-images-in-virtualbox

ievms - Automated installation of the Microsoft IE App Compat virtual machines
https://github.com/xdissent/ievms

Browser Plugin Update Time…Again.

Yes dear readers, it is “Jack and Jill” time again. Bother.

Adobe Shockwave got updated, as of this post, the newest (Windows) version of Adobe Shockwave is currently 11.6.8.638.

  • Adobe - Adobe Shockwave Player - direct download
  • Adobe - Security Bulletin: APSB12-23 - Security updates available for Adobe Shockwave Player - Adobe
  • Adobe patches 6 critical security flaws in Shockwave - ZDNet
  • Adobe fixes critical Shockwave vulnerabilities - The H Security: News and Features

Adobe Flash was updated as well. Newest (Windows) version is currently 11.4.402.287.

  • Adobe - Flash Player - version information
  • Adobe releases 25 critical Flash patches - The H Security: News and Features
  • Adobe - Security Bulletins: APSB12-22 - Security updates available for Adobe Flash Player - Adobe

Java also got a quick update to both build versions. Windows Java updates are available in 1.6.0_36 and 1.7.0_09.

  • Java SE 6 Update Release Notes - Oracle
  • Java SE 7 Update Release Notes - Oracle
  • Java SE Downloads - Direct download

Trying to figure out if all your browser plug-ins are current can be a super-pain for the inexperienced and geekless.

My go-to recommendation remains to pop over to Qualys BrowserCheck in each of your installed web-browsers, be it Chrome, Windows IE, or Firefox. Alas, Opera, Safari, and other browsers are not currently supported, however a check in one of the supported browsers may quite likely uncover a outdated plug in, patching it may fix the others in the process.  For a backup check, hope over next to The Secunia Online Software Inspector for a second opinion.

If you want a good all-in-one location to manually download your plugs, check out Browsers and Plugins Downloads over at FileHippo.com.

Utility and SysAdmin Finds of the Week

Defrag Tools: #13 - WinDbg - Defrag Tools @ Channel 9. New video on Sysinternals tool usage; specifically integrating Debugging Tools for Windows.

Case of the CertUtil Import Refusing The Correct Password - chentiangemalc. Great practicum post on troubleshooting a strange password error where the password was correct but not being taken.

SpeedyFox - Boost Firefox,Skype,Chrome,Thunderbird in a Single Click! - CRYSTALIDEA Software . It has been forever…like dinosaurs roaming the earth eras ago…since I last saw any post anywhere on speeding up a pokey Firefox browser by “optimizing” the JSON databases. This is a dead-simple process to improve launch-time for a well-used Firefox browser. It’s been months since I last optimized mine. When I went to run SpeedyFox, my favorite tool to do so, I wondered if there had been an updated release. My version was at least a year old.  Happily I found there was a newer version, and that it now supports optimizing Chrome-based browsers as well. It remains available as a free edition. Current version is 2.0.3 but while I was sleeping, the developers have been adding support for Skype, Chrome (including SRWare Iron and Pale Moon), Mozilla Thunderbird, and Firefox (including Epic Browser). There is a Mac version (Firefox only) also.

If you use Firefox/Chrome/Thunderbird, stop, drop and run right now!  Did I mention it supports custom paths to your browser profiles so you can optimize portable versions on your drive/disks? Sweet baby Jebus!

CR2 Converter - I shot a lot of photos for Lavie and her family last weekend with the Canon 5D Mark II.  Pops asked for copies and when I was getting ready to pass them off, I realized I had not changed the setting from “RAW” only to RAW+JPEG. So I had over 300 digital images in RAW .cr2 format that his computer cannot read and that are not really a practical format for him anyway to use. Sure, I could batch-convert them in Lightroom/Photoshop, but I really just needed to get them quickly on a CD for him.  I have more than a few RAW freeware tools for tweaking individual RAW file images but that was too time-consuming to use. Luckily, with just a bit of Google diving, I found the freeware Canon RAW Image Converter “CR2 Converter”.   It supports batch-conversion and did an acceptable job for this task. My i7 x64 8 GB RAM system chewed through converting the files in no-time.  To my eyes the resulting images were a bit lightly purple-tinted…not bad or unpleasant but definitely noticeable when compared to the RAW file. Nothing that some simple color correction can’t fix if really important. For Pops it wasn’t but YMMV.  I wouldn’t use it everyday for batch processing but for quick-n-dirty RAW .cr2 to JPEG/JPG/GIF/BMP/PNG/TIFF conversions it is a super time-saver. Tuck it away for when needed in a pinch.

Cheers and hopes and prayers for the very best across the north-east seaboard as Sandy rolls in.

--Claus V.

Read More
Posted in browsers, Firefox, forensics, Google, graphics, hurricanes, Internet Explorer, Link Fest, Microsoft, networking, NFAT, security, troubleshooting, utilities, video, Virtual PC, virtualization, Windows 7, XP, Xplico | No comments

Windows 8 - “It’s here” edition

Posted on 12:41 PM by Unknown

I don’t know…it seemed like an appropriate lead-in to this Windows 8 post now that Windows 8 has been officially released.

  • Poltergeist freaked a LOT of folks out when first released, with special effects, plotline of a normal family with their normal lives torn apart by a new evil released by new building over a hallowed ground.
  • Heather O'Rourke as Carol Anne Freeling looks like she is reaching out to try to use the TV as a “touch/Surface” interface.  And she does get quite the interactive experience out of it!
  • What seemed like pretty successful mainstream horror at the time now has become --over time and filmmaking sophistication--pretty cheesy and not even Halloween showing worthy to the youth of today.  Despite this, it remains regarded by many as a horror movie classic and possibly one of the very best and beloved ever made.
  • A number of the actors that made the movie so compelling have since died fueling rumors the movie was cursed.

I wonder if Windows 8 will leave a similar mark on the Microsoft OS landscape?

So before we get to the Win8 linkage below, what’s my opinion?

  • No “Family Pack” available…at least for now. However the $40/upgrade price per system still beats the Win7 family pack price so to upgrade our systems one-at-a-time this would still be fairly economical. In fact, Alvis's recent laptop purchase this summer might qualify for an even steeper discount…if I dared put it on her system.  Which I do not.
  • I am not going to install Win-8 on any of our home systems, all running Win 7 Home Premium (x64) for now. Why? Well…
  • …Win7 is too solid and perfect for my needs right now. I have no compelling reason to upgrade to Win8 just yet. Yes, I will miss out on the even faster boot times, the enhanced file/copy features, and the super-cool task-manager, and those crazy tile-apps. I can live with that for now.
  • In running Win8 in a virtual machine pretty regularly now, I can comfortably work-around automatically bypassing the Start Screen interface and add back the traditional Start Menu. That will no longer be my primary concern or objection for NOT making the Win8 upgrade.
  • Windows 8 is here to stay. This is the new face of Microsoft. Get over it. Get it. Or get a Mac or Linux or a Chromebook or a tablet or a game-console. Seriously. The days of desktop systems are on the decline. Sure, there will always be some hard-core geeks and freaks who will always want and need a traditional “desktop” based interface and OS system but between DRM  & DCMA changes, a brand-new, cutting-edge, super-efficient and user/platform agnostic computing technology is coming! Deal with it. They are called Smart dumb-terminals/tablets/phones & The Cloud!
  • Umm…sorry, I forgot, that terminal/mainframe technology was how things got started in the first place before all that “personal computer” technology got us distracted on his march down a dead branch of the technology tree; kinda like how the railroad and Model-T’s got us all horribly sidetracked from the horse-n-buggy technology. My bad. Let’s head back to the past to make progress for the people again. Control the medium…control the message…control the consumption.

Sigh.

Drama aside, I’ll probably upgrade our systems to Windows 8 by spring of next year. It will need some post-install tweaking, some training to get up to speed for support and user navigation, stuff like that. However at the core, past all the interface changes and Modern versus Desktop usage sea-change, it seems to be a solid and advanced OS. I wouldn’t discourage folks looking to pick up a new system from adopting it. I wouldn’t discourage friends and family still using XP/Vista to switch to it. What I can’t do is find a compelling reason to try to convince anyone using Windows 7 right now on a system they have bought or built in the last two years or so to UPGRADE to Windows 8. Not yet at least.

Windows 8 could have been so much more by just being a bit more balanced between the old and the new. Instead they decided to go boldly forward and not look back.

Time will tell…but for now…”It’s here”.

If you like Windows…my advise is just deal with Windows 8 and try not to look too hard at the corpses popping out of the pit in the back-yard.

HUMOR: Ah. So that’s what happened. - Kurt Shintaku's Blog

Win8 - Start Here - Get It

  • Microsoft Windows - Microsoft
  • Reserve your copy of Windows 8 Pro and Pre-order Windows 8 PCs today! - Blogging Windows
  • Windows Upgrade Offer - Landing Page - Microsoft
  • FAQ: The ins and out of Windows 8 pricing - Computerworld
  • Microsoft’s first stab at a tablet: Surface reviewed - Ars Technica
  • Download Windows 8 Media Center Pack for free - The Windows Club

Win8 - Related Products and Services

  • nothing new of note since last post.

Win8 - Install It

  • How To Install Windows 8 From A USB Stick - MakeUseOf blog
  • Microsoft Security Advisory (2755801): Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 - Microsoft TechNet
  • The Windows 8 upgrade install experience - Ars Technica
  • Installation FAQ & diagnosis when Windows dies 8 Setup ... Part 1 - Borns IT & Windows Blog
  • Windows 8 Installation & Setup troubleshooting FAQ ... Part 2 - Borns IT & Windows Blog
  • How To Install Windows 8 As Guest OS Using VMware Player - Addictive Tips

Win8 - Under the Hood

  • Windows, reimagined: A review of Windows 8 - Ars Technica
  • Windows 8 review - BetaNews
  • Introducing the Remote Desktop Windows Store App - Remote Desktop Services (Terminal Services) Team Blog
  • Remote Desktop Windows Store app: Managing multiple PCs - Remote Desktop Services (Terminal Services) Team Blog
  • Windows 8: rejuvenation of old computers? - Borns IT & Windows Blog
  • Windows 8–Metered Connections - Anything about IT
  • Windows 8 / Windows Server 2012: Faster Boot Process - Ask the Performance Team
  • Maintenance in Progress Windows 8 What Does it Mean ? - Windows7hacker
  • Windows 8 / Windows Server 2012: File Explorer - Ask the Performance Team
  • Gentlemen, start your benches: Measuring Windows 8′s performance - Ars Technica
  • A visual tour of Windows 8 - Ars Technica
  • Removing Built-in Applications from Windows 8 - The Deployment Guys
  • Review: Bing Apps are fast, slick, and responsive - Ars Technica
  • The new and updated games of Windows 8 - Ars Technica

Win8 - To Go

  • nothing new of note since last post.

Win8 - Tweaks

  • Create Custom Windows 8 Start Screen Tiles Out Of Your Images - AddictiveTips
  • Add Windows 7 Start Menu & Start Orb To Windows 8 With StartMenu 8 - AddictiveTips
  • IObit StartMenu8 Free download, Bring Start Menu back to Windows 8 -IObit
  • Prevent Users From Changing Windows 8 Start Screen Background - AddictiveTips
  • Create Custom Windows 8 Start Screen Tiles For Programs & More - AddictiveTIps
  • Create A Grid Of Custom Windows 8 Start Screen Tiles Out Of Any Image - AddictiveTips
  • Pin Any Program, Folder Or Item To Windows 8 Start Screen - AddictiveTips
  • Windows 7 & 8: Shutdown & Co via the context menu - Borns IT & Windows Blog
  • Microsoft Rolls Out Windows 8 "Service Pack" - Before Its Launch -ReadWrite
  • User Account Picture - Change in Windows 8 - Windows 8 Forums
  • Windows 8 Tutorials - Windows 8 Forums
  • Pokki For Windows 8 Adds A Start Menu & Start Screen Bypass Controls - AddictiveTips
  • HOWTO: Add names to Program Groups in Windows 8 - Kurt Shintaku's Blog
  • Top 20 Windows 8 Tweaks, Hacks & Tips - AddictiveTIps
  • How to Change the Default Search Provider in Internet Explorer 10 - Groovy Post
  • Top 10 Secret Features in Windows 8 - Lifehacker
  • Best Windows 8 Start Screen Modifiers And Start Menu Apps - AddictiveTips
  • Personalization Gallery - Now merged at Microsoft.com
  • How to enable multi-user concurrent Remote Desktop sessions in Windows 8 -Tenniswood Blog - See post update below.

Post Update: On October 29th, Kent over at Windows 7 Hacker blog picked up the technique from Tenniswood Blog I posted above (and included a hat-tip back-link here to GSD) regarding a patch to enable multi-user concurrent Remote Desktop sessions in Win 8. It seemed very similar to one for Windows 7 I had posted about three years ago (RDC hack post & followup clarification post) so I didn’t think much of it. I did not install it on my own virtual Windows 8 test system. A few days later a dear friend emailed me his perspective about the patch and potential concerns. So I’m coming back and adding a few more thoughts. First the technique requires application of Windows 8 Patcher which changes some Windows OS file binaries to enable the process to work and can remove the watermark from Windows 8 Release Preview. Second, I’m no programmer so I cannot fairly analyze the source code to confirm it may not have other effects on the system/stability/security once modified. It seems to be based on or very similar to prior Win 7 work for the same feature enablement. The developer of the code is a very smart and clever programmer and has given a number of presentations in the computer security industry; his best work is in the field of bootkits and rootkits. Back in 2009 there was a bit of love/hate swirling around the security industry based on some of his work. All this to say, please treat with consideration the application of the patch with care and forethought. It should fall under the “here may be dragons” label. Is this a feature you really, really need on your Windows system? Are there vetted/stable alternatives you have already explored first and found lacking? Have you done due-diligence and after reviewing the open-source code provided found it sufficiently clear and safe for your purpose? Is this a patch you are authorized to apply to a system? All I am saying is read the whole forum thread to familiarize yourself with it first.I confess I find it technically interesting, but TightVNC meets my remote session needs and I don’t need to run multi-user concurrent sessions on my personal Windows 7/8 boxes. Do you really need it? If you do apply the patch, future Microsoft updates may impact how the patched system works (or even prevent it from working). Enough said. Moving on…

Win8 - Deeper Insights

  • Out Now: Windows 8 and 2012 Group Policy Reference Spread sheet - Windows 7 Hacker
  • DOWNLOAD: Group Policy Settings Reference for Windows (8) and Windows Server (2012) - Kurt Shintaku's Blog
  • Updating our built-in apps for Windows 8 - Building Windows 8
  • Microsoft: Windows 8 seam with the end of the service packs? - Borns IT & Windows Blog
  • Windows 8 “XP Mode” – Part 1: Hyper-V - 4sysops
  • Windows 8 “XP Mode” – Part 2: Setting up Windows XP - 4sysops
  • Windows 8 “XP Mode” – Part 3: Gotchas - 4sysops
  • hiberfil.sys in Windows 8 and why you should never delete it by disabling hibernation -Windows7hacker
  • Windows 8 Start Screen Customization with MDT - The Deployment Guys
  • Turning to the past to power Windows’ future: An in-depth look at WinRT -Ars Technica

Win8 - Usage Tips

  • How To Defrag Disks in Windows 8, including SSD Drives - Windows7hacker
  • Prevent Windows 8 File Explorer From Deleting Image Thumbnail Cache - AddictiveTips
  • Windows 8 wireless networking – Part 2 - 4sysops
  • Multimedia 8 is a native Windows 8 app alternative to media player - Windows7hacker
  • Download Work Smart Guides for Windows 8 & Internet Explorer 10 - The Windows Club
  • Metro Commander: Windows 8 Modern UI File Manager With SkyDrive Sync - AddictiveTips
  • Listen To Your Favorite Radio Stations In Windows 8 With TuneIn Radio - AddictiveTips
  • Norton Satellite For Windows 8: Scan Local & Dropbox Files For Malware - AddictiveTips
  • Browse Google Maps & Get Turn-By-Turn Directions In Windows 8 - AddictiveTips
  • The Official Google Search App For Windows 8 Now Available - AddictiveTips
  • Windows 8′s Start Screen: Navigating a brave new world - Chron.com’s TechBlog
  • DOWNLOAD Getting Started: Your Guide To Windows 8 - MakeUseOf Blog
  • Windows 8 / Windows Server 2012: Start Screen and User Interface Part 1 - Ask the Performance Team
  • Windows 8 Review - Complete Guide To New Features - AddictiveTips
  • Windows 8: A safe harbor with the ‘classic’ desktop - Chron.com’s TechBlog
  • Remote Desktop App TeamViewer Touch Comes To Windows 8 - AddictiveTips
  • Windows 8: Sleek apps for Mail, Music and Photos - Chron.com’s TechBlog

Win8 - Miscellanea, Rumors, & General Grumblings

  • Is Windows 8 Already In Trouble? Survey Says Most Win 8 Users Prefer Win 7 - ReadWrite
  • NEWS: The early returns on Windows 8 (Updated 10/23/12) - Kurt Shintaku's Blog
  • Why Windows Just Can't Win - Wired.com
  • Could Restoring The Windows 8 Start Button Fix Everything?  - ReadWrite
  • Op-Ed: Prepare for Windows 8 induced user rage - Ars Technica
  • Paul’s take on Windows 8 - Paul Allen’s Idea Man
  • Top 10 Windows 8 Features #1: The Windows Store - ReadWrite
  • Microsoft co-founder dings Windows 8 as 'puzzling, confusing' - ComputerWorld
  • First Windows 8 PCs appear early, crapware included - ZDNet’s Ed Bott 
  • Acer, Gateway already shipping Windows 8 PCs – crapware included - Chron.com’s TechBlog
  • 5 big reasons businesses should consider Windows 8 - BetaNews
  • Conflicted: The tension in Windows 8 - Chron.com’s TechBlog

Windows 8 - GSD Previously Posted

  • Windows 8 Linkage: “Majestic Metro” version
  • Windows 8 Linkage: “Passage Public Metro” version
  • Windows 8 Linkage: “Metro Santiago” edition
  • Windows 8 Linkage: “Metro at Nightfall” edition
  • Windows 8 Linkage: Product Name “Something or Another”
  • Windows 8 Linkage: In Which a Name is Chosen
  • Windows 8 Linkage: A Bit Behind the Ball

Cheers and good luck.

--Claus V.

Read More
Posted in Active Directory, Internet Explorer, Link Fest, Microsoft, software, troubleshooting, tutorials, utilities, Virtual PC, virtualization, Windows 7, Windows 8 | No comments
Older Posts Home
Subscribe to: Posts (Atom)

Popular Posts

  • New Year’s Day - First Post 2011
    Same day I came out with my first post after a long drought, I fell upon this article Blogging Seems To Have Peaked, Says Pew Report over a...
  • Oscar watch Linkpost
    Alvis and Lavie are watching the Oscars tonight and I’m along for the ride. I wasn’t able to come even close to getting out some of the pos...
  • Finally! Time to Post! New material list
    After a recent text from my bro reminding me it has been since March since I’ve done a blog post, I was finally able to clear the schedule a...
  • Ubuntu 13.10 Upgrade - Lessons Learned & VIDMA utility found
    A few weeks ago a new release of Ubuntu came out. Naturally that meant it was update time! I have been getting pretty good at this now so ...
  • iodd : Multi-boot madness!
    Like many computer technicians and responders, I seem to always have at hand a collection of bootable media; CD’s, DVD’s, USB-HDD’s, flash m...
  • Network Capture Tools and Utilities
    At a conference this week, we had quite a section regarding network captures. The instructor was going on about how you can try to sort ou...
  • It just has to be bigger on the inside…
      Last Christmas, Lavie gifted me with a cute little Jawbone JAMBOX unit. I thought it was pretty cool. It uses a Bluetooth connection t...
  • Mostly Minor Network Notes
    Here are some minor tweaks and features, mostly of a network nature. Manual Uninstall of the Cisco VPN Client « Mobile Expertise -- becaus...
  • Windows Live Mail error 0x80041161
    Dad is working with his father-in-law who has an issue with his Suddenlink web-mail-based “forwarding” handling of messages. Seems that (an...
  • FireCAT 1.5 “Plus” Add-On Collection
    In yesterday’s GSD post I noted the following: Both of these tools brought be back to the excellent FireCAT 1.5 collection of Firefox...

Categories

  • Active Directory
  • anti-virus software
  • Apple
  • architecture
  • art
  • AVG
  • Blogger
  • blogging
  • books
  • boot-cd's
  • browsers
  • cars
  • cell-phones
  • cheat sheets
  • Chrome/Chromium
  • command-line interface
  • cooking
  • crafts
  • crazy
  • curmudgeon
  • DHC
  • Dr. Who
  • E-P1
  • Education
  • family
  • Firefox
  • firewalls
  • For the Gentleman
  • forensics
  • Gmail
  • Google
  • graphics
  • hacks
  • hardware
  • humor
  • hurricanes
  • imagex
  • Internet Explorer
  • iOS
  • iPhone
  • iPod
  • iTunes
  • Kindle
  • Learning
  • Link Fest
  • Linux
  • malware tools
  • Microsoft
  • movies
  • music
  • networking
  • NewsFox
  • NFAT
  • Nook
  • Opera
  • organization
  • PDF's
  • photography
  • politics
  • PowerShell
  • recipes
  • Remote Support
  • RSS
  • science
  • Scripting
  • search engines
  • security
  • Shuttle SFF
  • software
  • Texana
  • Thunderbird
  • troubleshooting
  • TrueCrypt
  • tutorials
  • utilities
  • VBscript
  • video
  • Virtual PC
  • virtualization
  • viruses
  • Vista
  • Vista mods
  • wallpapers
  • Win FE
  • Win PE
  • Win RE
  • Windows 7
  • Windows 8
  • Windows Home Server
  • Windows Live Writer
  • Windows Phone
  • writing
  • XP
  • XP mods
  • Xplico

Blog Archive

  • ▼  2013 (83)
    • ▼  November (8)
      • Ubuntu 13.10 Upgrade - Lessons Learned & VIDMA uti...
      • ForSec Linkfest - 2013 DST Fallback Edition
      • CryptoLocker Ransomware Info & Free Prevention Sol...
      • Linkfest for the SysAdmins
      • Microsoft Security Essentials/Defender & PowerShell
      • Miscellaneous TrueCrypt linkage
      • PowerShell 4.0 and a tiny “gotcha”
      • New Software Updates + VMware Tools Update fix
    • ►  October (8)
    • ►  September (14)
    • ►  August (6)
    • ►  July (10)
    • ►  June (10)
    • ►  April (11)
    • ►  March (6)
    • ►  February (7)
    • ►  January (3)
  • ►  2012 (96)
    • ►  December (8)
    • ►  November (4)
    • ►  October (9)
    • ►  September (8)
    • ►  August (12)
    • ►  July (4)
    • ►  June (3)
    • ►  May (7)
    • ►  April (13)
    • ►  March (3)
    • ►  February (5)
    • ►  January (20)
  • ►  2011 (41)
    • ►  December (8)
    • ►  November (7)
    • ►  September (4)
    • ►  August (4)
    • ►  July (2)
    • ►  June (6)
    • ►  March (5)
    • ►  February (1)
    • ►  January (4)
  • ►  2010 (69)
    • ►  December (1)
    • ►  October (3)
    • ►  September (2)
    • ►  August (13)
    • ►  July (17)
    • ►  June (3)
    • ►  May (3)
    • ►  April (3)
    • ►  March (11)
    • ►  February (1)
    • ►  January (12)
  • ►  2009 (177)
    • ►  December (20)
    • ►  November (11)
    • ►  October (7)
    • ►  September (7)
    • ►  August (21)
    • ►  July (17)
    • ►  June (7)
    • ►  May (18)
    • ►  April (9)
    • ►  March (17)
    • ►  February (23)
    • ►  January (20)
  • ►  2008 (35)
    • ►  December (23)
    • ►  November (12)
Powered by Blogger.

About Me

Unknown
View my complete profile