<![CDATA[Article Comments for M Edwards]]>http://www.windowsitpro.com/authors/author/author/4188404/rsscomment/4188404en-USSun, 27 May 2012 03:27:13 GMTSun, 27 May 2012 03:27:13 GMTSQL Injection Attacks by Example http://www.windowsitpro.com/article/data-access/sql-injection-attacks-by-example-#commentsAnchorTue, 25 Oct 2011 15:42:09 GMT
sql injection step by step practicle guide www.readyproject.in/sqlInjection/]]>
sujanTue, 25 Oct 2011 15:42:09 GMThttp://www.windowsitpro.com/article/data-access/sql-injection-attacks-by-example-#commentsAnchor
Did TippingPoint Take Things Too Far?http://www.windowsitpro.com/blog/security-matters-blog-19/security/did-tippingpoint-take-things-too-far-136944#commentsAnchorTue, 27 Sep 2011 03:25:06 GMT
I agree with you! Thanks for sharing this great article! Buy Dissertation]]>
Buy DissertationTue, 27 Sep 2011 03:25:06 GMThttp://www.windowsitpro.com/blog/security-matters-blog-19/security/did-tippingpoint-take-things-too-far-136944#commentsAnchor
Countless RFID Cards At Riskhttp://www.windowsitpro.com/article/encryption2/countless-rfid-cards-at-risk#commentsAnchorFri, 26 Aug 2011 01:12:19 GMT
RFID reader MR800 series for reader/writer with the popular ARM7 microprocessors are of rapid & stable, reliable operation and beautiful appearance. User can choose freely if with the LCD display modul(128x64). They support boot screen & idle screen set and picture storage etc. The interface is USB PC/SC. They can be directly used the Windows operating system with driver and the API functions. The development cycle simple and short. The reader not only supports series IC cards according to ISO14443 TypeA/B, ISO15693 but also SAM cards compliant with ISO7816 (T=0 and T=1). Qualifications: PCD: NXP RC531, RC632; RC400, RC500(select) Working frequency: 13.56MHz RF standard: ISO14443A, ISO14443B, ISO15693 Operating distance: 100mm (Mifare One, typical distance) SAM card slot: 2 slots, (supports ISO7816 T=0 and T=1) Interface: USB PC/SC Power supply: USB DC5V Power consumption: 0.9W LED: four LED (red, green, blue, yellow) Dimension: 123mm × 88mm × 25mm Weight: About 200g Operating temperature: -25 ~ +85 (-77 ~ +185°F) Storage temperature: -40 ~ +125 (-104 ~ +257°F) PC software: PTransWin, download SDK&Program: VC, VB, C++ Builder, DELPHI, Power Builder, download Manual: download]]>
jinmuyuFri, 26 Aug 2011 01:12:19 GMThttp://www.windowsitpro.com/article/encryption2/countless-rfid-cards-at-risk#commentsAnchor
How to Recover a Lost Administrator Passwordhttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchorWed, 24 Aug 2011 23:04:02 GMT
I've been using a software which called Windows Password Seeker.It is a very quick and useful utility for recovering passwords. Just an easy to use bootable CD/DVD . It can also be used on a USB Flash Drive. http://www.passwordseeker.com ]]>
Anddy 2011Wed, 24 Aug 2011 23:04:02 GMThttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchor
Need to Reverse An MD5 or SHA1 Hash To Plain Text?http://www.windowsitpro.com/article/security/need-to-reverse-an-md5-or-sha1-hash-to-plain-text-#commentsAnchorSat, 26 Mar 2011 23:18:57 GMT
With the advance of faster computers and more storage space than ever before, MD5 hash lookups has become readily available.
Still storage space needed for hashes need to be utilized via special designed software.
In addition, the list of hashes need to be indexed in order to prove ultimately useful.
With a complete 64 bit (8 byte) list of hashes, a working passphrase would be found in only 68 searches.

We face 2 mayor and one minor problem if using a home computer for this.
The Mayor problems is Time.
It does take some time to compute the hashes :-)
Then the hashes need to be indexed. This does not take much less time even if using Binary Sort methods
We can of course simplify a bit by not having one database. We could limit each database to the size of a 2 Terrabyte HD, and index each of these.
That way we can apply binary search on each HD when searching. It makes making the computerprogram for doing this a lot easier.

If we limit the hashes to only utilize the letters and numbers in the English alphabet, then we don’t need so much time, but what if there are special characters in password as well :-)
Lets allow for Capitals and non capitals, include numbers and 30 special characters. That makes a total of 92 characters the password can consist of in any order. with 8 characters in the password, this makes 5,132,188,731,375,620 different possibilities.
The total database would need 82,115,019,702,009,900 bytes of storage space. That is equivalent to approx 41,060 harddisks of 2 Terrabyte each.
It would take a lot of time to sort this data in order to make the database really useful.
It is however doable. Give me enough resources and I’ll make this happen :-)
I do not know where to put all these HD’s, but I am sure they can be connected somehow via Intranet or Internet and... a few computers to house them.
-
49,313,614 hashes seem a low number when comparing to all the different possible results :-)
-Morten B-



]]>
Morten BrendefurSat, 26 Mar 2011 23:18:57 GMThttp://www.windowsitpro.com/article/security/need-to-reverse-an-md5-or-sha1-hash-to-plain-text-#commentsAnchor
Certified Ethic Hackinghttp://www.windowsitpro.com/article/training-and-certification2/certified-ethic-hacking#commentsAnchorThu, 09 Dec 2010 05:43:07 GMT
Good morning all,

This is Sarah Morgan from Firebrand Training, UK.

Id like to take the opportunity to update you and your readers on the fact that Training Camp has since 2001 been rebranded to Firebrand Training. Furthermore, Firebrand does not, any longer, operate its business activates in US territories. This is due to a set of commercial policy agreement between Firebrand Training and other the party concerned. For further information and full company history, visit:- http://www.firebrandtraining.co.uk

For anyone who is still interested in taking IT security courses such Certified Ethical Hacker (CEH), Firebrand does still deliver this industry accredited course and many other IT security related professional curriculums. There is also a free practise test available for students to examine their immediate knowledge of how deal with internet intrusion and interloping. This recommendable before any actual exams are taken.

Resource(s):-
Certified Ethical Hacker:-
http://www.firebrandtraining.co.uk/courses/ec_council/ceh/hacking.asp
]]>
MorganThu, 09 Dec 2010 05:43:07 GMThttp://www.windowsitpro.com/article/training-and-certification2/certified-ethic-hacking#commentsAnchor
Did TippingPoint Take Things Too Far?http://www.windowsitpro.com/blog/security-matters-blog-19/security/did-tippingpoint-take-things-too-far-136944#commentsAnchorThu, 08 Jul 2010 03:41:35 GMT
I also agree. Remember that research papers can always provide with additional info.]]>
ner werThu, 08 Jul 2010 03:41:35 GMThttp://www.windowsitpro.com/blog/security-matters-blog-19/security/did-tippingpoint-take-things-too-far-136944#commentsAnchor
Did TippingPoint Take Things Too Far?http://www.windowsitpro.com/blog/security-matters-blog-19/security/did-tippingpoint-take-things-too-far-136944#commentsAnchorSat, 05 Jun 2010 08:42:05 GMT
Yeah mark..agree with u

IT pro’s has created a new trojan application ..it does something very simple and useful but has a malicious part too :).

and Of course people will download the application from some trusted website - nothing to wonder about..

we could wonder that there is only one application..]]>
RaySat, 05 Jun 2010 08:42:05 GMThttp://www.windowsitpro.com/blog/security-matters-blog-19/security/did-tippingpoint-take-things-too-far-136944#commentsAnchor
Are The Mind Police Are Out To Get Ya?http://www.windowsitpro.com/article/security/are-the-mind-police-are-out-to-get-ya-#commentsAnchorSat, 09 Jan 2010 17:11:00 GMT
Consider that the "police" already KNOW everything they need to know, but simply need to "gather" the evidence to prove it --- in other words, they already have access to your head in ways you can’t imagine - your thoughts, your past, your present, the possibilities of your future. What’s worse is that they will even plant thoughts that are not even yours to begin with just to bring about further despair in your situation. Stop intrusions into the mind by government: STOP THE MIND POLICE!!!]]>
babyphat Sat, 09 Jan 2010 17:11:00 GMThttp://www.windowsitpro.com/article/security/are-the-mind-police-are-out-to-get-ya-#commentsAnchor
Lessons in Disaster Recoveryhttp://www.windowsitpro.com/article/disaster-recovery3/lessons-in-disaster-recovery#commentsAnchorSat, 02 Jan 2010 13:59:33 GMT
Hurricane Katrina and many recent hurricanes have brought to light the fact that you and your business can be displaced not just temporarily, but for significant periods of time. A robust disaster recovery plan is Paramount. Katrina shows us that in addition to thinking about IT systems and communication failure, you should also consider the possibility that your premises might be destroyed and rendered unusable either temporarily or permanently. You need to think about disaster recovery services to get your building facilities up and running while dealing with relocating services. Thanks again, Steve Slepcevic Paramount Disaster Recovery, Inc.]]>
SteveSat, 02 Jan 2010 13:59:33 GMThttp://www.windowsitpro.com/article/disaster-recovery3/lessons-in-disaster-recovery#commentsAnchor
How to Recover a Lost Administrator Passwordhttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchorMon, 21 Dec 2009 03:22:43 GMT
There’s a way to reset the password and it doesn’t involve reformatting and reinstalling Windows. The solution is called Windows Password Reset 7.0. It can reset almost all Windows passwords in seconds. It is a great windows password recovery tool: http://www.resetwindowspassword.com . you can log in again just in one second. It also support windows 7 password reset.]]>
LinkyMon, 21 Dec 2009 03:22:43 GMThttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchor
How to Recover a Lost Administrator Passwordhttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchorMon, 21 Dec 2009 03:22:10 GMT
There’s a way to reset the password and it doesn’t involve reformatting and reinstalling Windows. The solution is called Windows Password Reset 7.0. It can reset almost all Windows passwords in seconds. It is a great windows password recovery tool: http://www.resetwindowspassword.com . you can log in again just in one second. It also support windows 7 password reset.]]>
LinkyMon, 21 Dec 2009 03:22:10 GMThttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchor
How to Recover a Lost Administrator Passwordhttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchorWed, 21 Oct 2009 05:17:04 GMT
I would like to introduce Windows Password Recovery Tool 3.0 . it not only supports XP, 2000, and NT, I have personally tested it with Vista Home Premium and Ultimate. It works perfectly to reset any local user account to a blank password. I Wrote it to an old 128mb USB flash drive do this. Booting up and clearing a password takes a minute or two works like a charm. You can download it from http://www.windowspasswordsrecovery.com]]>
happymark88 Wed, 21 Oct 2009 05:17:04 GMThttp://www.windowsitpro.com/article/security/how-to-recover-a-lost-administrator-password#commentsAnchor
Fight Spam with Blacklistshttp://www.windowsitpro.com/article/email/fight-spam-with-blacklists#commentsAnchorWed, 26 Aug 2009 05:38:29 GMT
it is also important to understand how blocklist providers work. here is a very interesting article on how these work: http://www.allspammedup.com/2009/08/understanding-blocklist-providers/ have a look.]]>
MarkWed, 26 Aug 2009 05:38:29 GMThttp://www.windowsitpro.com/article/email/fight-spam-with-blacklists#commentsAnchor
How To Help Secure HTTP Data Without SSLhttp://www.windowsitpro.com/article/security/how-to-help-secure-http-data-without-ssl#commentsAnchorFri, 14 Aug 2009 00:50:25 GMT
The article has very less information. Need some elaboration.]]>
chandraFri, 14 Aug 2009 00:50:25 GMThttp://www.windowsitpro.com/article/security/how-to-help-secure-http-data-without-ssl#commentsAnchor
Laptop Security: Be Deliberatehttp://www.windowsitpro.com/article/encryption2/laptop-security-be-deliberate#commentsAnchorThu, 06 Aug 2009 08:39:56 GMT
Yes, it does - you can get it at http://www.absolute.com/]]>
RupertThu, 06 Aug 2009 08:39:56 GMThttp://www.windowsitpro.com/article/encryption2/laptop-security-be-deliberate#commentsAnchor
Kon-Boot Lets You Bypass Logon for Windows and Linuxhttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchorThu, 23 Jul 2009 10:27:03 GMT
Wasn’t that what Windows PE was developed for? Have they tried UBCD recently. That does exactly this, and has been doing so for many years.]]>
JasonThu, 23 Jul 2009 10:27:03 GMThttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchor
Kon-Boot Lets You Bypass Logon for Windows and Linuxhttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchorThu, 09 Jul 2009 12:52:57 GMT
As a systems administrator with a background in software engineering, my response to this article is - quite frankly - "oh please." It is a fact that you do not need to alter the kernel to bypass a logon - just the boot sequence, which is as easy as pie if you are a programmer. If I’m booting an ISO CD from the console, I can bypass the security anyway. I can gain root access regardless of the operating system being used by booting from a CD, as long as I know how to read the underlying filesystem. No special programming is even required for such a feat. That is why encrypted filesystems were created in the first place.]]>
TJThu, 09 Jul 2009 12:52:57 GMThttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchor
Kon-Boot Lets You Bypass Logon for Windows and Linuxhttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchorThu, 09 Jul 2009 08:18:01 GMT
From my testing on a Windows XP computer which is part of a domain, you can only use a local user account, not an AD account. This is why you locked your AD account out. Try it against a local account and it should work fine. Another caveat is that you need to know the name of at least one local user account to access the system; however, there are ways to find this out before hand if you don’t already know. (Ex. Offline NT Password & Registry Editor, ERD Commander)]]>
GLENThu, 09 Jul 2009 08:18:01 GMThttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchor
Kon-Boot Lets You Bypass Logon for Windows and Linuxhttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchorWed, 08 Jul 2009 19:10:44 GMT
Maybe it already has been added to a rootkit!!!!]]>
sWed, 08 Jul 2009 19:10:44 GMThttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchor
Kon-Boot Lets You Bypass Logon for Windows and Linuxhttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchorWed, 08 Jul 2009 15:31:30 GMT
Hmmm - booting up using the .iso left me with a blinking cursor the first time, and a blinking "ERR" the second time, all while I received an alert my AD account was now locked out. Are we sure this thing does what it says it does?]]>
ERICWed, 08 Jul 2009 15:31:30 GMThttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchor
Kon-Boot Lets You Bypass Logon for Windows and Linuxhttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchorWed, 08 Jul 2009 15:00:38 GMT
Can,t wait to see the havoc when these features are added to a rootkit.]]>
brogdroneWed, 08 Jul 2009 15:00:38 GMThttp://www.windowsitpro.com/article/security/kon-boot-lets-you-bypass-logon-for-windows-and-linux#commentsAnchor
Gmail to go with HTTPS by defaulthttp://www.windowsitpro.com/article/security/gmail-to-go-with-https-by-default#commentsAnchorWed, 17 Jun 2009 17:12:37 GMT
Why was this never an issue with Hotmail...? It’s been around a lot longer than Gmail, yet no one seems to care that Hotmail doesn’t even have an option to browse with SSL full time...]]>
CHRISWed, 17 Jun 2009 17:12:37 GMThttp://www.windowsitpro.com/article/security/gmail-to-go-with-https-by-default#commentsAnchor
Google Posts Top 10 Malware Siteshttp://www.windowsitpro.com/article/security/google-posts-top-10-malware-sites#commentsAnchorWed, 17 Jun 2009 16:58:23 GMT
Why bother blocking just 10 sites? Block them all or maybe the top 100 or so. At least by blocking 100 you are blocking a bigger majority of malware out there than just 10.]]>
EdWed, 17 Jun 2009 16:58:23 GMThttp://www.windowsitpro.com/article/security/google-posts-top-10-malware-sites#commentsAnchor
Gmail to go with HTTPS by defaulthttp://www.windowsitpro.com/article/security/gmail-to-go-with-https-by-default#commentsAnchorWed, 17 Jun 2009 14:58:08 GMT
For those who need to know. You can go into your gmail settings and scroll down to ’Browser connection’ and select ’Always use HTTPS’. Log off, log back in and you will see that the ’s’ is now added to http. You are now secure. Greg Greene IT support]]>
GregWed, 17 Jun 2009 14:58:08 GMThttp://www.windowsitpro.com/article/security/gmail-to-go-with-https-by-default#commentsAnchor
More Firefox Add-on Controversy And An Impending Fix?http://www.windowsitpro.com/article/security/more-firefox-add-on-controversy-and-an-impending-fix-#commentsAnchorWed, 10 Jun 2009 15:19:56 GMT
See http://support.microsoft.com/kb/963707]]>
EdWed, 10 Jun 2009 15:19:56 GMThttp://www.windowsitpro.com/article/security/more-firefox-add-on-controversy-and-an-impending-fix-#commentsAnchor
More Firefox Add-on Controversy And An Impending Fix?http://www.windowsitpro.com/article/security/more-firefox-add-on-controversy-and-an-impending-fix-#commentsAnchorWed, 10 Jun 2009 15:18:25 GMT
Last I checked, there’s been a fix for about 4 weeks on the MS Downloads. Mr. Edwards. Why are you reporting old news without a bit of research?]]>
EdWed, 10 Jun 2009 15:18:25 GMThttp://www.windowsitpro.com/article/security/more-firefox-add-on-controversy-and-an-impending-fix-#commentsAnchor
Microsoft Oversteps Common Sense Boundaries - Againhttp://www.windowsitpro.com/article/security/microsoft-oversteps-common-sense-boundaries-again#commentsAnchorMon, 08 Jun 2009 15:44:19 GMT
This is troubling! Has Mozilla had a reaction to this?]]>
JimMon, 08 Jun 2009 15:44:19 GMThttp://www.windowsitpro.com/article/security/microsoft-oversteps-common-sense-boundaries-again#commentsAnchor
StrongWebMail Weak On The Backside?http://www.windowsitpro.com/article/security/strongwebmail-weak-on-the-backside-#commentsAnchorWed, 03 Jun 2009 15:55:27 GMT
The author is making a lot of assumptions and has a really poor argument. I just signed up for a Strongwebmail account and I couldn’t be happier knowing how secure my email is. A truly valuable service!!!]]>
GlennWed, 03 Jun 2009 15:55:27 GMThttp://www.windowsitpro.com/article/security/strongwebmail-weak-on-the-backside-#commentsAnchor
Two More Portable Anonymous Web Browsershttp://www.windowsitpro.com/article/web-administration/two-more-portable-anonymous-web-browsers#commentsAnchorWed, 27 May 2009 10:58:06 GMT
You can install an addon for Firefox and Firefox Portable that eliminates every browsing trace - it’s the Distrust addon: https://addons.mozilla.org/en-US/firefox/addon/1559 On the Opera sympathizers side, you have OperaTor - similar characteristics to Torpark: http://www.softpedia.com/get/PORTABLE-SOFTWARE/Internet/Browsers/Windows-Portable-Applications-OperaTor.shtml]]>
MarsWed, 27 May 2009 10:58:06 GMThttp://www.windowsitpro.com/article/web-administration/two-more-portable-anonymous-web-browsers#commentsAnchor
$100 Million Down the Drainhttp://www.windowsitpro.com/article/security/-100-million-down-the-drain#commentsAnchorWed, 22 Apr 2009 10:28:57 GMT
Or use Macs.]]>
AndrewWed, 22 Apr 2009 10:28:57 GMThttp://www.windowsitpro.com/article/security/-100-million-down-the-drain#commentsAnchor
Laptop Security: Be Deliberatehttp://www.windowsitpro.com/article/encryption2/laptop-security-be-deliberate#commentsAnchorTue, 21 Apr 2009 08:20:52 GMT
I know a lot of software companies now have BIOS level software that will reinstall itself, even if the OS is installed. I believe CompuTrace does this with it’s security software.]]>
DarnellTue, 21 Apr 2009 08:20:52 GMThttp://www.windowsitpro.com/article/encryption2/laptop-security-be-deliberate#commentsAnchor
Data Leaks Abound And No One Is Safehttp://www.windowsitpro.com/article/security/data-leaks-abound-and-no-one-is-safe#commentsAnchorMon, 20 Apr 2009 22:01:17 GMT
Well this just a mere fact that we need to keep some of defenses to our selves. Computer user mustn’t just rely on the computer’s programs it’s self. Computer user must also learn how to protect their computer with or without them. Reviews, news, reports is already a useful source. It’s not so bad to take some times on researching on them if it concerns about the computer user’s computer defenses. Just reading articles above is enough to know that computer users are still vulnerable. Also try this site and sites like this (http://www.systemsecurityinstitute.org) will help and give out information on how to defend your computers and know what might hit your computers.]]>
GustuvMon, 20 Apr 2009 22:01:17 GMThttp://www.windowsitpro.com/article/security/data-leaks-abound-and-no-one-is-safe#commentsAnchor
35 Percent Of Infected PCs Had Up To Date AV Softwarehttp://www.windowsitpro.com/article/security/35-percent-of-infected-pcs-had-up-to-date-av-software#commentsAnchorMon, 20 Apr 2009 21:44:14 GMT
Very informative information. People is only relying on Anti virus programs because they lacks information about them. Also there is a saying on a computer usage "Garbage in Garbage out" which mean any improper command you put will come out improper. So a computer user must know how and why they must do this actions. Computer programs is just a tool for people. It’s up to people on how to use them. So it’s better that people must know how and why they have to use this programs and what are they going to use it for. So researching isn’t that bad. Internet is the widest library they can read from. Like this site give out this information is really good and reliable source on how to react on this kind of situation. Just keep on reading latest news and blogs will also going to help on defend your computer. Also try seeing site like this or this link (http://www.systemsecurityinstitute.org) will also be a big benefits.]]>
GustuvMon, 20 Apr 2009 21:44:14 GMThttp://www.windowsitpro.com/article/security/35-percent-of-infected-pcs-had-up-to-date-av-software#commentsAnchor
Google Docs Not So Securehttp://www.windowsitpro.com/article/security/google-docs-not-so-secure#commentsAnchorTue, 07 Apr 2009 09:34:22 GMT
Thanks for your post. It’s always true that the internet cannot be 100% secure. : (]]>
ViolaTue, 07 Apr 2009 09:34:22 GMThttp://www.windowsitpro.com/article/security/google-docs-not-so-secure#commentsAnchor
Google Docs Not So Securehttp://www.windowsitpro.com/article/security/google-docs-not-so-secure#commentsAnchorTue, 07 Apr 2009 09:29:21 GMT
Thanks for your post. It’s always true that the internet cannot be 100% secure. : (]]>
ViolaTue, 07 Apr 2009 09:29:21 GMThttp://www.windowsitpro.com/article/security/google-docs-not-so-secure#commentsAnchor
Zero-day PowerPoint Exploit On The Loosehttp://www.windowsitpro.com/article/office/zero-day-powerpoint-exploit-on-the-loose#commentsAnchorFri, 03 Apr 2009 12:54:38 GMT
Week after week, ok, month after month, these things happen. The insidious thing about all this: malware is getting smarter. Those already infested may right now be having all of their PowerPoints corrupted so anyone receiving them: hello world! I opine on this often: http://www.securitynowblog.com/endpoint_security/computer-software-hijacked-malware-attack-steal Funny, I believe my last post was about Excel: MS Excel Malware Exploit May Get You http://www.securitynowblog.com/endpoint_security/documents-from-known-people-may-infect-pc-malware Cheers, Eirik]]>
EirikFri, 03 Apr 2009 12:54:38 GMThttp://www.windowsitpro.com/article/office/zero-day-powerpoint-exploit-on-the-loose#commentsAnchor
Facebook Presents A Serious Security Problemhttp://www.windowsitpro.com/article/security/facebook-presents-a-serious-security-problem#commentsAnchorWed, 25 Feb 2009 20:25:27 GMT
the fruit does not fall far from the tree, sadly]]>
RostandWed, 25 Feb 2009 20:25:27 GMThttp://www.windowsitpro.com/article/security/facebook-presents-a-serious-security-problem#commentsAnchor
Facebook Presents A Serious Security Problemhttp://www.windowsitpro.com/article/security/facebook-presents-a-serious-security-problem#commentsAnchorSat, 21 Feb 2009 10:23:16 GMT
Social sites are full of got’chas, pitfalls and security problems. Example: my research documents reports of the Koobface worm infecting (or attempting to infect) workplace-related computers by way of Facebook. Employers/organizations thus have security as a reason to block social network sites. http://computersafety.wordpress.com/2009/01/19/security-threat-facebook-and-myspace-at-work/ --Ben]]>
BenjaminSat, 21 Feb 2009 10:23:16 GMThttp://www.windowsitpro.com/article/security/facebook-presents-a-serious-security-problem#commentsAnchor
Data Leaks Abound And No One Is Safehttp://www.windowsitpro.com/article/security/data-leaks-abound-and-no-one-is-safe#commentsAnchorMon, 09 Feb 2009 12:41:31 GMT
My kid applied for a job at Linens N Things and was required to give all this info online about herself. Now of course, LnT is gone. What happened to the data do you suppose?]]>
zenithz Mon, 09 Feb 2009 12:41:31 GMThttp://www.windowsitpro.com/article/security/data-leaks-abound-and-no-one-is-safe#commentsAnchor
Malware Fiesta Attracts and Infects Thousandshttp://www.windowsitpro.com/article/security/malware-fiesta-attracts-and-infects-thousands#commentsAnchorWed, 17 Dec 2008 15:08:06 GMT
Opera’s browser percentage is peanuts compared to IE or Firefox. Maybe the malware creator specifically went after non-Firefox browsers?]]>
EdWed, 17 Dec 2008 15:08:06 GMThttp://www.windowsitpro.com/article/security/malware-fiesta-attracts-and-infects-thousands#commentsAnchor
Image Captcha Crackinghttp://www.windowsitpro.com/article/security/image-captcha-cracking#commentsAnchorThu, 16 Oct 2008 09:32:57 GMT
CAPTCHAs are starting to become so obfuscated as to prove difficult for legitimate registrants. Time to move to the questions, but of course if everyone does move to question-based validation, then the spammers will simply create an app to evaluate the question and provide the simple answer.]]>
ERICThu, 16 Oct 2008 09:32:57 GMThttp://www.windowsitpro.com/article/security/image-captcha-cracking#commentsAnchor
Image Captcha Crackinghttp://www.windowsitpro.com/article/security/image-captcha-cracking#commentsAnchorWed, 15 Oct 2008 23:47:50 GMT
And yet WinITPro is still using CAPTCHAs ;) I think they can still prove useful, but I feel that if you’re going to bother using them you should at least do something productive as well ... like transcribe books. http://recaptcha.net/ I’ve seen the question/answer method on a few sites and I think I like it better. The questions tend to be fairly simple but probably more difficult for a spambot to deal with (at least at the present time). No anti-bot technology is immune from hacking, however. As a matter of fact you might say they are all equally vulnerable where a distributed workforce is used. http://en.wikipedia.org/wiki/Captcha#Human_solvers]]>
bsweeneyWed, 15 Oct 2008 23:47:50 GMThttp://www.windowsitpro.com/article/security/image-captcha-cracking#commentsAnchor
Image Captcha Crackinghttp://www.windowsitpro.com/article/security/image-captcha-cracking#commentsAnchorTue, 14 Oct 2008 09:05:04 GMT
I agree completely, Some CAPTCHA’s are extremely difficult to read.]]>
JerryTue, 14 Oct 2008 09:05:04 GMThttp://www.windowsitpro.com/article/security/image-captcha-cracking#commentsAnchor
Palin's Yahoo Account Hackedhttp://www.windowsitpro.com/article/security/palin-s-yahoo-account-hacked#commentsAnchorThu, 25 Sep 2008 08:12:08 GMT
A user is a user is a user. no matter which way you flip it. we technical people take security seriouly, but a user relies on us to make it good and tight for them. if we fail then is upon us to take the load and make it so. I for one would like to have the dude or gal that did the hacking be punished.]]>
LuisThu, 25 Sep 2008 08:12:08 GMThttp://www.windowsitpro.com/article/security/palin-s-yahoo-account-hacked#commentsAnchor
Palin's Yahoo Account Hackedhttp://www.windowsitpro.com/article/security/palin-s-yahoo-account-hacked#commentsAnchorTue, 23 Sep 2008 13:11:04 GMT
Can’t Alaska afford to have their own server? :-) First, John McCain knew nothing about computers and now Sarah Palin using a public server to send and receive confidential information? I’m voting Democrats .... if I could.]]>
EdTue, 23 Sep 2008 13:11:04 GMThttp://www.windowsitpro.com/article/security/palin-s-yahoo-account-hacked#commentsAnchor
Researcher Says DNS Still Vulnerablehttp://www.windowsitpro.com/article/security/researcher-says-dns-still-vulnerable#commentsAnchorFri, 15 Aug 2008 08:35:12 GMT
Wow, small least useful article with two grammar mistakes. What is happening to WinITpro.com ? Rick]]>
RickFri, 15 Aug 2008 08:35:12 GMThttp://www.windowsitpro.com/article/security/researcher-says-dns-still-vulnerable#commentsAnchor
Router Rootkitshttp://www.windowsitpro.com/article/rootkits/router-rootkits#commentsAnchorFri, 18 Jul 2008 15:40:38 GMT
Here’s the author’s response: "My understanding was that if a company has a service contract with Cisco then they can get the IOS. In other words, companies without a contract are referred to resellers."]]>
LAVONFri, 18 Jul 2008 15:40:38 GMThttp://www.windowsitpro.com/article/rootkits/router-rootkits#commentsAnchor
More Than 12,250 Laptops Lost at Airports Every Weekhttp://www.windowsitpro.com/article/laptops-and-notebooks/more-than-12-250-laptops-lost-at-airports-every-week#commentsAnchorWed, 09 Jul 2008 00:18:33 GMT
So if I was wanting to leave a bomb at an airport, probably all I need to do is leave it in a laptop bag and nobody will think it unusual or in any way suspect (at 12,250 per week, discarded laptops must be almost as common as chocolate bar wrappers). Or are there 12,250 (or more) suspect devices discovered every week that are dealt with so efficiently and unobtrusively by airport authorities that the general public aren’t even aware of it. Hmmm, food for thought.]]>
DuncanWed, 09 Jul 2008 00:18:33 GMThttp://www.windowsitpro.com/article/laptops-and-notebooks/more-than-12-250-laptops-lost-at-airports-every-week#commentsAnchor
Majority of Companies Don't Audit File Ownership and Accesshttp://www.windowsitpro.com/article/auditing/majority-of-companies-don-t-audit-file-ownership-and-access#commentsAnchorMon, 07 Jul 2008 14:54:26 GMT
my self, i really dont have any idea on how to audit the files ownership. i should take an action and study more]]>
TariqMon, 07 Jul 2008 14:54:26 GMThttp://www.windowsitpro.com/article/auditing/majority-of-companies-don-t-audit-file-ownership-and-access#commentsAnchor
PuTTY on Windows Mobilehttp://www.windowsitpro.com/article/security/putty-on-windows-mobile#commentsAnchorTue, 01 Jul 2008 18:30:58 GMT
I tried the pocket Putty on my SmartPhone. It runs however it does not make its job because there is no way to switch between tabs, unless using a SmartPhone with touch-screen. Even my phone comes with a keyboard, no key can move the input column to the next tab thus I cannot really do the job. Hope the next version can support regular smartphone.]]>
lihou Tue, 01 Jul 2008 18:30:58 GMThttp://www.windowsitpro.com/article/security/putty-on-windows-mobile#commentsAnchor
Guide to General Server Securityhttp://www.windowsitpro.com/article/security/guide-to-general-server-security#commentsAnchorTue, 01 Jul 2008 12:35:18 GMT
Great information to start a developer with.]]>
TinaTue, 01 Jul 2008 12:35:18 GMThttp://www.windowsitpro.com/article/security/guide-to-general-server-security#commentsAnchor
Firefox 3: A Long Time Coming and Worth the Waithttp://www.windowsitpro.com/article/security/firefox-3-a-long-time-coming-and-worth-the-wait#commentsAnchorMon, 23 Jun 2008 04:00:30 GMT
I downlodaded FF3.0 first day and very satisfied with it. Again, it is fast and good]]>
TomislavMon, 23 Jun 2008 04:00:30 GMThttp://www.windowsitpro.com/article/security/firefox-3-a-long-time-coming-and-worth-the-wait#commentsAnchor
Router Rootkitshttp://www.windowsitpro.com/article/rootkits/router-rootkits#commentsAnchorThu, 19 Jun 2008 15:44:04 GMT
I am writing regarding the article in Security UPDATE June 4, 2008 edition concerning Router Rootkits by Mark Joseph Edwards. In the article, the reader is advised to load new IOS code onto the device if you happen to buy used Cisco hardware. This would be sound advice if it were possible to obtain IOS code directly from Cisco. However, Cisco will not supply IOS code - instead, it directs you to use a reseller. We all need to bring pressure to bear on Cisco to behave far more responsibly by making the IOS readily available for download from their website. After all, their revenue will not be affected because Cisco IOS can only be used on Cisco hardware and, even then, it is model specific - so Cisco must have received revenue from selling the hardware in the first place. I am currently working for the Ministry of Defence in the UK and, because the IT budget for our section is extremely tight, we have had to purchase refurbished Cisco equipment but I have found it impossible to obtain a Cisco IOS image from Cisco. The resellers are no better, either. In short, Cisco equipment is excellent but their after-sales service, both directly and through their resellers is appalling.]]>
JoeThu, 19 Jun 2008 15:44:04 GMThttp://www.windowsitpro.com/article/rootkits/router-rootkits#commentsAnchor
How Can I Hide the Logon Script Dialog Box on Windows NThttp://www.windowsitpro.com/article/security/how-can-i-hide-the-logon-script-dialog-box-on-windows-nt#commentsAnchorThu, 05 Jun 2008 06:25:28 GMT
Importante]]>
DanielRamos2008 Thu, 05 Jun 2008 06:25:28 GMThttp://www.windowsitpro.com/article/security/how-can-i-hide-the-logon-script-dialog-box-on-windows-nt#commentsAnchor
TJX Making Unwise Security Decisionshttp://www.windowsitpro.com/article/security/tjx-making-unwise-security-decisions#commentsAnchorThu, 29 May 2008 15:44:04 GMT
Maybe the US government to get off it’s butt and do something.]]>
ebraiter@videotron.ca Thu, 29 May 2008 15:44:04 GMThttp://www.windowsitpro.com/article/security/tjx-making-unwise-security-decisions#commentsAnchor
Could Phlash Attacks Be Your Next Big Concern? http://www.windowsitpro.com/article/security/could-phlash-attacks-be-your-next-big-concern-#commentsAnchorThu, 29 May 2008 01:01:41 GMT
Can sophisticated phlashing of a computer’s firmware somehow sabotage firewalls or other security mechanisms? Could printers and other network-attached devices be turned into sniffers?]]>
LarsThu, 29 May 2008 01:01:41 GMThttp://www.windowsitpro.com/article/security/could-phlash-attacks-be-your-next-big-concern-#commentsAnchor
Could Phlash Attacks Be Your Next Big Concern? http://www.windowsitpro.com/article/security/could-phlash-attacks-be-your-next-big-concern-#commentsAnchorWed, 28 May 2008 19:46:39 GMT
"In addition, some people think these attacks aren’t likely to occur." Perhaps you should have asked those people to elaborate. I think they like me understand that the motive of modern hackers is largely to gain control of remote computers, not shut them down. The majority of them and their efforts is in anonymous exploitation, not personal malice. Sure, the scenario you paint is feasible & perhaps likely for those scenarios where damage rather than silent exploitation is the aim, but I think in the grand scheme of exploit vectors, Phlashing wont be more than a niche concern. Although it may result in widespread strengthening of fhash update mechanisms, and that can only be a good thing.]]>
AnthonyWed, 28 May 2008 19:46:39 GMThttp://www.windowsitpro.com/article/security/could-phlash-attacks-be-your-next-big-concern-#commentsAnchor
First Web Page on the Nethttp://www.windowsitpro.com/article/security/first-web-page-on-the-net#commentsAnchorThu, 15 May 2008 10:02:03 GMT
A fun bit of history! Mark, do you know the date of the first Web page?]]>
AnneThu, 15 May 2008 10:02:03 GMThttp://www.windowsitpro.com/article/security/first-web-page-on-the-net#commentsAnchor
Likewise Releases Active Directory Authentication Tool For Linux and Unixhttp://www.windowsitpro.com/article/interoperability/likewise-releases-active-directory-authentication-tool-for-linux-and-unix#commentsAnchorWed, 14 May 2008 01:55:22 GMT
i have more use full]]>
rajukumars25 Wed, 14 May 2008 01:55:22 GMThttp://www.windowsitpro.com/article/interoperability/likewise-releases-active-directory-authentication-tool-for-linux-and-unix#commentsAnchor
McAfee Detects Massive Fake MP3 Attackhttp://www.windowsitpro.com/article/security/mcafee-detects-massive-fake-mp3-attack#commentsAnchorFri, 09 May 2008 13:27:16 GMT
McAfee must of hit it well. Can’t find any mention of it? Of course the article does’nt mention the trojan’s name either. Symantec’s site doesn’t say much either.]]>
ebraiter@videotron.ca Fri, 09 May 2008 13:27:16 GMThttp://www.windowsitpro.com/article/security/mcafee-detects-massive-fake-mp3-attack#commentsAnchor
Outbound Traffic Is a Serious Security Riskhttp://www.windowsitpro.com/article/firewalls3/outbound-traffic-is-a-serious-security-risk#commentsAnchorThu, 08 May 2008 01:28:32 GMT
how to achieve this kind of control?]]>
whn3375 Thu, 08 May 2008 01:28:32 GMThttp://www.windowsitpro.com/article/firewalls3/outbound-traffic-is-a-serious-security-risk#commentsAnchor
How To Block Service Pack Installationhttp://www.windowsitpro.com/article/security/how-to-block-service-pack-installation#commentsAnchorFri, 02 May 2008 01:54:07 GMT
so....so....]]>
AvinashFri, 02 May 2008 01:54:07 GMThttp://www.windowsitpro.com/article/security/how-to-block-service-pack-installation#commentsAnchor
XP SP3 Now Available, Sort Ofhttp://www.windowsitpro.com/article/security/xp-sp3-now-available-sort-of#commentsAnchorMon, 28 Apr 2008 06:52:52 GMT
I’ve seen some articles stating that after iinstalling SP3 systems didnt boot up especially if you have norton antivirus installed or any other antivirus program with a firewall component. So take extra care before rolling out SP3!!!]]>
ManeeshMon, 28 Apr 2008 06:52:52 GMThttp://www.windowsitpro.com/article/security/xp-sp3-now-available-sort-of#commentsAnchor
XP SP3 Now Available, Sort Ofhttp://www.windowsitpro.com/article/security/xp-sp3-now-available-sort-of#commentsAnchorFri, 25 Apr 2008 13:19:52 GMT
It seems that some people can’t wait. I’ve heard that some beta/RC versions have been posted on sites claiming that copy is the final version. Sure enough, "SP3" is installed and it’s not the final. Why can’t people wait not even a week.....]]>
ebraiter@videotron.ca Fri, 25 Apr 2008 13:19:52 GMThttp://www.windowsitpro.com/article/security/xp-sp3-now-available-sort-of#commentsAnchor
Mystery IIS Hack Unveiledhttp://www.windowsitpro.com/article/web-administration/mystery-iis-hack-unveiled#commentsAnchorWed, 23 Apr 2008 13:52:41 GMT
So the title of the article is completely wrong. There was no hack of IIS, but rather a hack of poorly written applications running on IIS. I expect security articles should distinguish the difference between a poor web server config, and poor application code.]]>
AndrewWed, 23 Apr 2008 13:52:41 GMThttp://www.windowsitpro.com/article/web-administration/mystery-iis-hack-unveiled#commentsAnchor
PayPal's Approach to Fighting Fraudhttp://www.windowsitpro.com/article/phishing/paypal-s-approach-to-fighting-fraud#commentsAnchorWed, 23 Apr 2008 13:33:23 GMT
A reason for a big decline is that phishers are going after bank users. And as they continue to come, it shows that the banks prefer that their customers are getting hit and they don’t care. [Of course the phishers are also stupid - they sent fake Emails trying to imitate my ISP.] For those using older Windows operating systems, it’s quite simple. Install Firefox 2. It installs on and Windows OS from Win 98 and on.]]>
ebraiter@videotron.ca Wed, 23 Apr 2008 13:33:23 GMThttp://www.windowsitpro.com/article/phishing/paypal-s-approach-to-fighting-fraud#commentsAnchor
Green, Green, PR Machinehttp://www.windowsitpro.com/article/security/green-green-pr-machine#commentsAnchorWed, 16 Apr 2008 12:01:04 GMT
Green marketing PR can be useful, however, I agree that attitudes must be changed universally for the practice to be less hypothetical. If you’d like more info related to this topic check out my site, it may be helpful. www.pilmerpr.com/green_public_relations.html]]>
pilmerpr Wed, 16 Apr 2008 12:01:04 GMThttp://www.windowsitpro.com/article/security/green-green-pr-machine#commentsAnchor
Green, Green, PR Machinehttp://www.windowsitpro.com/article/security/green-green-pr-machine#commentsAnchorMon, 07 Apr 2008 16:12:17 GMT
Thank you for writing about McAfee’s recent effort to "green" our corporate event in Las Vegas! I wanted to clarify a couple items. -- by "green strategies," we mean various actions we took to minimize the footprint of this event, including limiting printed handouts, donating unused food to local farms, conducting registration electronically, using badges and lanyards made of recycled materials, using paper made from recycled content, avoiding plastic disposable utensils/packaging, using corn-based compostable cups for beverages, etc. We tried a number of ways to green our event in this inaugural effort. -- good point about participants getting back on airplanes to travel back home. in our press release (http://www.mcafee.com/us/about/press/corporate/2008/20080403_181010_e.html), we do report the full carbon footprint of our event, which includes all the travel by airplane and other vehicles. as you’ll see, the air travel in fact was 90% of the carbon footprint. since we could not eliminate this air travel, instead we purchased carbon offsets through CarbonFund.org to offset our full carbon footprint. Our offsets are supporting a reforestation project in Louisiana. Ideally, the strategy is to minimize as much as you can and then offset the balance. We certainly tried to follow this approach with our event. Thank you again for writing about our efforts. We certainly welcome any and all feedback and comments either on blogs or sent to us at responsibility [ a t ] mcafee.com. Sincerely, Douglas Sabo Director, Worldwide Corporate Responsibility McAfee, Inc.]]>
DouglasMon, 07 Apr 2008 16:12:17 GMThttp://www.windowsitpro.com/article/security/green-green-pr-machine#commentsAnchor
Acunetix Releases Free XSS Web Site Scannerhttp://www.windowsitpro.com/article/news2/acunetix-releases-free-xss-web-site-scanner#commentsAnchorSun, 30 Mar 2008 01:31:55 GMT
hello]]>
ahmad200 Sun, 30 Mar 2008 01:31:55 GMThttp://www.windowsitpro.com/article/news2/acunetix-releases-free-xss-web-site-scanner#commentsAnchor
Free Tool Identifies Apps That Require Elevated Privilegeshttp://www.windowsitpro.com/article/auditing/free-tool-identifies-apps-that-require-elevated-privileges#commentsAnchorMon, 24 Mar 2008 17:53:42 GMT
Tuncluer Textil .Istanbul:Turkiye Dr.Serdar Tuncluer]]>
SerdarMon, 24 Mar 2008 17:53:42 GMThttp://www.windowsitpro.com/article/auditing/free-tool-identifies-apps-that-require-elevated-privileges#commentsAnchor
Free Tool Identifies Apps That Require Elevated Privilegeshttp://www.windowsitpro.com/article/auditing/free-tool-identifies-apps-that-require-elevated-privileges#commentsAnchorMon, 24 Mar 2008 17:50:57 GMT
The Tuncluer International T.T.I Group Ltd./ Israel Dr.Serdar Tuncluer]]>
SerdarMon, 24 Mar 2008 17:50:57 GMThttp://www.windowsitpro.com/article/auditing/free-tool-identifies-apps-that-require-elevated-privileges#commentsAnchor
Symantec Releases pcAnywhere 10.5 with Secure Remote Controlhttp://www.windowsitpro.com/article/remote-computing/symantec-releases-pcanywhere-10-5-with-secure-remote-control#commentsAnchorMon, 10 Mar 2008 12:40:45 GMT
GREAT FULL]]>
abuassaf Mon, 10 Mar 2008 12:40:45 GMThttp://www.windowsitpro.com/article/remote-computing/symantec-releases-pcanywhere-10-5-with-secure-remote-control#commentsAnchor
Symantec Releases pcAnywhere 10.5 with Secure Remote Controlhttp://www.windowsitpro.com/article/remote-computing/symantec-releases-pcanywhere-10-5-with-secure-remote-control#commentsAnchorMon, 10 Mar 2008 12:39:49 GMT
THANK YOU]]>
abuassaf Mon, 10 Mar 2008 12:39:49 GMThttp://www.windowsitpro.com/article/remote-computing/symantec-releases-pcanywhere-10-5-with-secure-remote-control#commentsAnchor
Windows Server: The New King of Downtimehttp://www.windowsitpro.com/article/interoperability/windows-server-the-new-king-of-downtime#commentsAnchorFri, 07 Mar 2008 11:28:50 GMT
good]]>
hogalvan Fri, 07 Mar 2008 11:28:50 GMThttp://www.windowsitpro.com/article/interoperability/windows-server-the-new-king-of-downtime#commentsAnchor
Untangle Security Suite Is Free for Allhttp://www.windowsitpro.com/article/antivirus/untangle-security-suite-is-free-for-all#commentsAnchorTue, 26 Feb 2008 06:03:30 GMT
KEEPS ME UPDATED]]>
rexTue, 26 Feb 2008 06:03:30 GMThttp://www.windowsitpro.com/article/antivirus/untangle-security-suite-is-free-for-all#commentsAnchor
Microsoft's Bid For Yahoo!http://www.windowsitpro.com/article/security/microsoft-s-bid-for-yahoo-98190#commentsAnchorMon, 04 Feb 2008 16:53:29 GMT
It will be interesting to see how this affects the portal sites in Australia. MS is aligned with Channel Nine here with ninemsn and Yahoo with Chanenel Seven. Both parties have spent considerable money trying to on up each other and now looks like probably 7 will have their legs cut out from under them.]]>
CarlMon, 04 Feb 2008 16:53:29 GMThttp://www.windowsitpro.com/article/security/microsoft-s-bid-for-yahoo-98190#commentsAnchor
D.C. Mayor Fires 9 Employees For Inappropriate Computer Usehttp://www.windowsitpro.com/article/news2/d-c-mayor-fires-9-employees-for-inappropriate-computer-use#commentsAnchorThu, 31 Jan 2008 21:06:19 GMT
Nice to read that usage policies are actually enforced...]]>
RickThu, 31 Jan 2008 21:06:19 GMThttp://www.windowsitpro.com/article/news2/d-c-mayor-fires-9-employees-for-inappropriate-computer-use#commentsAnchor
Microsoft Fixes Broken Internet Explorer Hotfixhttp://www.windowsitpro.com/article/internet/microsoft-fixes-broken-internet-explorer-hotfix#commentsAnchorThu, 17 Jan 2008 00:55:39 GMT
Works for me.]]>
GordyThu, 17 Jan 2008 00:55:39 GMThttp://www.windowsitpro.com/article/internet/microsoft-fixes-broken-internet-explorer-hotfix#commentsAnchor
New Rootkit Hides In the Master Boot Recordhttp://www.windowsitpro.com/article/news2/new-rootkit-hides-in-the-master-boot-record#commentsAnchorTue, 15 Jan 2008 13:44:28 GMT
Users of OEM computers that did not come with a bootable Windows Setup CD can be prepared for this type of rootkit by using RescueBoot to create a bootable RescueBoot Windows CD after copying Microsoft’s DskProbe.exe utility and a backup copy of their MBR into the RecueBoot Windows hard disk directory. DskProbe.exe is free in various Windows resource kits and RescueBoot is available free for a limited time at www.resqware.com.]]>
JOHNTue, 15 Jan 2008 13:44:28 GMThttp://www.windowsitpro.com/article/news2/new-rootkit-hides-in-the-master-boot-record#commentsAnchor
Social Networking 'Worm' Unleashed At Facebookhttp://www.windowsitpro.com/article/news2/social-networking-worm-unleashed-at-facebook#commentsAnchorFri, 11 Jan 2008 10:08:27 GMT
A secret crush is when someone who knows you has a "crush" on you but has never told you or you don’t know about it. A crush means they like you and are attracted to you.]]>
rhenderson@wlu.caFri, 11 Jan 2008 10:08:27 GMThttp://www.windowsitpro.com/article/news2/social-networking-worm-unleashed-at-facebook#commentsAnchor
Social Networking 'Worm' Unleashed At Facebookhttp://www.windowsitpro.com/article/news2/social-networking-worm-unleashed-at-facebook#commentsAnchorThu, 10 Jan 2008 01:09:06 GMT
Can somebody explain what a "secret crush" is? From the context I guess that it is either a virtual hug or a threat, but I’d like to know which.]]>
LarsThu, 10 Jan 2008 01:09:06 GMThttp://www.windowsitpro.com/article/news2/social-networking-worm-unleashed-at-facebook#commentsAnchor
Is Sears Spying On You?http://www.windowsitpro.com/article/security/is-sears-spying-on-you-#commentsAnchorWed, 09 Jan 2008 21:57:50 GMT
This should make an interesting court case. I don’t use the computer or internet for any financial transactions. Sears reaffirms my belief that the internet is not safe for financial or personal information.]]>
RickWed, 09 Jan 2008 21:57:50 GMThttp://www.windowsitpro.com/article/security/is-sears-spying-on-you-#commentsAnchor
Is Sears Spying On You?http://www.windowsitpro.com/article/security/is-sears-spying-on-you-#commentsAnchorWed, 09 Jan 2008 11:09:01 GMT
Wow! I definitely won’t be shopping Sears, either online or in person! I’m surprised this hasn’t generated other comments of dismay.]]>
BarbWed, 09 Jan 2008 11:09:01 GMThttp://www.windowsitpro.com/article/security/is-sears-spying-on-you-#commentsAnchor
Hosted Web Mail Is A Huge Risk - Do You Need Proof?http://www.windowsitpro.com/article/security/hosted-web-mail-is-a-huge-risk-do-you-need-proof-#commentsAnchorMon, 07 Jan 2008 13:43:52 GMT
I must agree with robthealiean. Gmail and the others like it are not hosted out sourced e-mail. As a IT professional for a company that used to outsource their e-mail to an ISP I can say there is nothing wrong with a reputable company hosting your e-mail. The only reason we took our e-mail in house was to avoid the limits imposed by our ISP.]]>
PaulMon, 07 Jan 2008 13:43:52 GMThttp://www.windowsitpro.com/article/security/hosted-web-mail-is-a-huge-risk-do-you-need-proof-#commentsAnchor
Hosted Web Mail Is A Huge Risk - Do You Need Proof?http://www.windowsitpro.com/article/security/hosted-web-mail-is-a-huge-risk-do-you-need-proof-#commentsAnchorWed, 02 Jan 2008 16:08:58 GMT
First, Lets improve the accuracy of this post: Gmail (and HotMail etc ad nauseaum) is NOT a genuine "outsourced mail service." It is a free (first and final warning) web mail system, which if the SPAM volume coming from gmail is any indicator, something you should avoid like the plague! I am afraid I have zero sympathy for anyone misguided (read "dumb") enough to both use gmail et al for sensitive mail AND as a contact address for the domain registration. As someone who runs a Hosted Exchange Service for my clients - I am appalled anyone would compare that concept with a free web mail system.]]>
ROBERTWed, 02 Jan 2008 16:08:58 GMThttp://www.windowsitpro.com/article/security/hosted-web-mail-is-a-huge-risk-do-you-need-proof-#commentsAnchor
Microsoft Compares IE and Firefoxhttp://www.windowsitpro.com/article/internet/microsoft-compares-ie-and-firefox#commentsAnchorWed, 19 Dec 2007 16:22:49 GMT
This guy Mr Jones is so good at spinning, that he should be working for Bush, it would help him. 1. IE 6 was relased in 2001 and IE 7 in 2006. So looking at vulnerabilities for the past 3 years, he compares a mature product IE6 (at least 3 years old) with Firefox which was a new product at the time! (Early 2005). 2. So if I understand correctly, Mr Jones compares IE6 and IE7 with FF 1.0 FF 1.5 and FF 2.0, wich means that for 2 years, he compare a product that should have been stabilised IE 6 with FF 1.0 and FF 1.5 which were just released! Conclusion: Mr Jones compared carrots and orange an report that oranges are a better fruit! So what! And finally, being a user, I can tell you that there still a lot of corporations who recommend to not install IE7, because some applications of their Intranet do not work with the last release. Thank’s to Microsoft again to have not comply with the standards of the WWW! On the other hand, I must say the IE7 is a lot better than IE6 at respecting standards, and maybe one day, all web sites will work with all the browsers!]]>
MichelWed, 19 Dec 2007 16:22:49 GMThttp://www.windowsitpro.com/article/internet/microsoft-compares-ie-and-firefox#commentsAnchor
Rise of The Rootkitshttp://www.windowsitpro.com/article/antivirus/rise-of-the-rootkits#commentsAnchorFri, 14 Dec 2007 18:25:05 GMT
The problem could be also that the output from tools like Root Kit Revealer is kinda problematic for most users... Witch contribude to the problem...]]>
PavelFri, 14 Dec 2007 18:25:05 GMThttp://www.windowsitpro.com/article/antivirus/rise-of-the-rootkits#commentsAnchor
Rise of The Rootkitshttp://www.windowsitpro.com/article/antivirus/rise-of-the-rootkits#commentsAnchorFri, 14 Dec 2007 03:46:39 GMT
Hi Mark, Just a quick note about the Windows IT Pro article. I think you might want to elaborate a bit on this one. The article in a sense does get people to visit Prevx, however, I think you need to do some up front work and test out its product and report on that as well. Their so called free scan looks like it’s a complete software install. Readers will want to know details about that and if it plays well with existing Antivirus packages already installed on users machines, how accurate it’s scans are and if the software uninstalls without incident. It’s an enticing article, but many of us have been burned before after trying something like this out. Best regards]]>
JAMESFri, 14 Dec 2007 03:46:39 GMThttp://www.windowsitpro.com/article/antivirus/rise-of-the-rootkits#commentsAnchor
Microsoft Compares IE and Firefoxhttp://www.windowsitpro.com/article/internet/microsoft-compares-ie-and-firefox#commentsAnchorWed, 12 Dec 2007 19:12:35 GMT
If it’s true, is it spin? Your statement, "It seems obvious that a major vulnerability in IE will cause more widespread damage than a similar vulnerability in Firefox or any other browser" doesn’t make much sense. Aren’t there safety in numbers as well? If a few thousand people have a problem, it’s much more likely to be seen and then fixed in IE than a few hundred who are using Firefox... in my mind the two arguments cancel each other out. In the end, I’ll take the one with fewer vulnerabilities. Oh, and I’ve never had an IE or Firefox update hurt my computer... I have however had SERIOUS ram leakage with FF and that’s why I never keep it open at work for more than 10 minutes. IE never has that problem. Don’t get me wrong, I like FF but it’s too buggy and restricting (I could write a novel if I had the time) to use as my primary browser.]]>
CoryWed, 12 Dec 2007 19:12:35 GMThttp://www.windowsitpro.com/article/internet/microsoft-compares-ie-and-firefox#commentsAnchor
Firefox 2.0.0.10 Availablehttp://www.windowsitpro.com/article/security/firefox-2-0-0-10-available#commentsAnchorTue, 04 Dec 2007 19:44:31 GMT
Actually the current version of Firefox is 2.0.0.11 now. 2.0.0.10 was buggy.]]>
PatrickTue, 04 Dec 2007 19:44:31 GMThttp://www.windowsitpro.com/article/security/firefox-2-0-0-10-available#commentsAnchor
New Services and Devices Bring New Security Riskshttp://www.windowsitpro.com/article/voip/new-services-and-devices-bring-new-security-risks#commentsAnchorSat, 01 Dec 2007 20:10:22 GMT
Thanks for the heads up. It is nearly impossible to keep up now with the technology as it was just a few years ago. I spend hours daily after work and I consider I am out of touch. I find I no longer have time to read my emails just reading technology articles. Thanks again, FB.]]>
FSat, 01 Dec 2007 20:10:22 GMThttp://www.windowsitpro.com/article/voip/new-services-and-devices-bring-new-security-risks#commentsAnchor
Malware Infects Visitors to NHL and MLB Web Siteshttp://www.windowsitpro.com/article/firewalls3/malware-infects-visitors-to-nhl-and-mlb-web-sites#commentsAnchorSat, 17 Nov 2007 11:09:54 GMT
This is yet another good reason to use a browser that allows you to block (some or all) popups and also lets you to turn javascript on/off on a site by site basis (I’m using Opera). -={TBearr}=-]]>
LesterSat, 17 Nov 2007 11:09:54 GMThttp://www.windowsitpro.com/article/firewalls3/malware-infects-visitors-to-nhl-and-mlb-web-sites#commentsAnchor
Malware Infects Visitors to NHL and MLB Web Siteshttp://www.windowsitpro.com/article/firewalls3/malware-infects-visitors-to-nhl-and-mlb-web-sites#commentsAnchorSat, 17 Nov 2007 07:04:00 GMT
Good article - but the ads are still there. I’ve just checked MLB.com and watched as the banner ad attempted to redirect me to the same IP serving fake anti-malware scanning software that it’s been redirecting to for over a month now. NHL.com isn’t quite as bad - it ponly happens about once every ten or so times I visit. With MLB.com its practically every other time.]]>
StuartSat, 17 Nov 2007 07:04:00 GMThttp://www.windowsitpro.com/article/firewalls3/malware-infects-visitors-to-nhl-and-mlb-web-sites#commentsAnchor
Big Business Slow to Adopt Network Access Controlhttp://www.windowsitpro.com/article/access-control/big-business-slow-to-adopt-network-access-control#commentsAnchorWed, 31 Oct 2007 14:44:53 GMT
In the new letter that went out you stated the following "If your bank decided to use the solution" then latter you said "First and foremost, letting some relatively untrusted third party install software on your computers is a big risk." isn’t your bank a trusted third party. Millions of people are using online banking already. What did i miss?]]>
JOSIAHWed, 31 Oct 2007 14:44:53 GMThttp://www.windowsitpro.com/article/access-control/big-business-slow-to-adopt-network-access-control#commentsAnchor
Webroot Says SMBs Struggling With Securityhttp://www.windowsitpro.com/article/malware/webroot-says-smbs-struggling-with-security#commentsAnchorWed, 24 Oct 2007 14:32:18 GMT
My own research has found that the majority of SMB IT guys do not keep themselves educted. They feel that the company should pay for more eduction. I and this is the wrong kind of thinking and the wrong attitude to have. I’ve come across several Windows Admin who have never heard of Technet.com or Windows IT Pro mag. I also engange SMB owners everyday who don’t think thier IT guy is cutting it. No kidding, everyday. If this sounds like you then you had better wake up and smell the coffe. Your coffe is burning and you better get down to the book store so you can learn how to keep your boss happy.]]>
JOSIAHWed, 24 Oct 2007 14:32:18 GMThttp://www.windowsitpro.com/article/malware/webroot-says-smbs-struggling-with-security#commentsAnchor
Tighten Up Your Citrix and RDP Securityhttp://www.windowsitpro.com/article/protocols/tighten-up-your-citrix-and-rdp-security#commentsAnchorThu, 18 Oct 2007 14:24:10 GMT
How would you prevent these files from being exposed to the Internet?]]>
JessicaThu, 18 Oct 2007 14:24:10 GMThttp://www.windowsitpro.com/article/protocols/tighten-up-your-citrix-and-rdp-security#commentsAnchor
SSHFS Lets You Mount Remote Linux File Systemshttp://www.windowsitpro.com/article/security/sshfs-lets-you-mount-remote-linux-file-systems#commentsAnchorThu, 27 Sep 2007 11:04:43 GMT
The URL for sftpdrive is http://www.sftpdrive.com/]]>
xavierThu, 27 Sep 2007 11:04:43 GMThttp://www.windowsitpro.com/article/security/sshfs-lets-you-mount-remote-linux-file-systems#commentsAnchor
SSHFS Lets You Mount Remote Linux File Systemshttp://www.windowsitpro.com/article/security/sshfs-lets-you-mount-remote-linux-file-systems#commentsAnchorThu, 27 Sep 2007 11:03:27 GMT
For Windows, you have the sftpdrive utility that does the same.]]>
xavierThu, 27 Sep 2007 11:03:27 GMThttp://www.windowsitpro.com/article/security/sshfs-lets-you-mount-remote-linux-file-systems#commentsAnchor
Free Security Toolshttp://www.windowsitpro.com/article/security/free-security-tools#commentsAnchorWed, 12 Sep 2007 19:24:26 GMT
Graet Info]]>
JuliaWed, 12 Sep 2007 19:24:26 GMThttp://www.windowsitpro.com/article/security/free-security-tools#commentsAnchor