Cooperative Linux - "Cooperative Linux is the first working free and open source method for optimally running Linux on Microsoft Windows natively. More generally, Cooperative Linux (short-named coLinux) is a port of the Linux kernel that allows it to run cooperatively alongside another operating system on a single machine. For instance, it allows one to freely run Linux on Windows 2000/XP, without using a commercial PC virtualization software such as VMware, in a way which is much more optimal than using any general purpose PC virtualization software."
This looks very promising for those who want to use linux functionality/programs but can't escape the windows platform. I'm planning on playing with this on a test machine at some point in the near future. If anyone has any war stories with this product, let me know.
March 25, 2005
March 15, 2005
The BlogCast Repository - A Microsoft Community Resource: "THE CENTRAL VAULT FOR FREE TECHNICAL VIDEOS"
This is a great resource.. seems small right now, but it looks like it will grow (it's also really new). User-created videos that walk you through issues really help. I might even consider creating my own Blogcasts (even gives me the idea of doing some for custom in-house setups!).
They even have a RSS feed: http://www.blogcastrepository.com/Pages/RSS/The%20Blogcast%20Repository.xml.
Also take a look at the "How to Create a Blogcast" link. It is extremely easy! You can create your own video to accompany your documentation or training materials. Really nice. I'm going to be focusing some time/energy on this in the near future.
Internet security takes a hit with encryption technique flaw - Mar. 15, 2005: "The technique, called a 'hash function,' has been commonly used by Web site operators to scramble online transmissions containing credit-card information, Social Security numbers and other personal information.
Hash functions were thought to be impenetrable, but a team of researchers in China found that this encryption method was not as resistant to hackers than previously thought, according to the report."
SecurityFocus HOME Mailing List: BugTraq: SAV9 Functionality Hole - misses virus files: "When SAV9 is protecting the file server, and an unprotected client saves files to
a share on the server, the files are not scanned. When another unprotected client opens these files, they are not scanned by the server. The server will only find these files during a scheduled scan."
"The API that Symantec is using is not on file open from the file system, but rather file open by the local desktop - this allows files to be saved and opened without being scanned."
March 09, 2005
MS skips patch Tuesday | The Register: "Microsoft passed on this month's instalment of its regular patch release cycle. Patch Tuesday brought no security updates in March, unlike February when the software giant issued 12 new advisories and a major revision of an earlier notice."
I'm not complaining...
Maxthon browser produces a better IE: "Today, I have a new entrant into the group that builds on the underlying code of Internet Explorer. The product is from MySoft Technology (see editorial links below) and is called Maxthon. "
"Maxthon uses very few resources, resulting in an average of 65% less RAM usage compared to IE when having the same large number of pages open."
"Maxthon uses a tabbed browsing interface and supports mouse gestures, super drag and drop (which allows any URL to be highlighted in a browser window and dragged to any tab) and privacy protection (automatic end of session flushing of history, cookies, and cache). It also includes AD Hunter (Maxthon's popup blocker), full support for the Google toolbar, a very useful "External Utility Bar" that can be used to launch selected application from the browser, and skinning. "
This looks very interesting.. I'll look into it at home.
MS skips patch Tuesday | The Register: "Microsoft passed on this month's instalment of its regular patch release cycle. Patch Tuesday brought no security updates in March, unlike February when the software giant issued 12 new advisories and a major revision of an earlier notice."
I'm not complaining...
February 28, 2005
ProcessLibrary.com - The online resource for process information!: "In the recesses of your computer, 20-30 invisible processes run silently in the background. Some hog system resources, turning your PC into a sluggish computer. Worse yet, other useless processes harbour spyware and Trojans - violating your privacy and giving hackers free reign on your computer. ProcessLibrary.com is an invaluable resource for anyone who wants to know the exact purpose of every single process."
Awesome resource.. it had information for every process running on my system (with the exception of rare or custom stuff).
February 24, 2005
Sysinternals Freeware - PsExec: "PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software. "
Here's Windows IT Pro Mark Russinovich's article on PsExec.
February 23, 2005
Programmingtutorials.com - Free Online Programming Tutorials - You will find over 300 programming language tutorials, lessons, and how-to's.
Table of Contents - Practical PHP Programming: "Welcome to the home of the online book, 'Practical PHP Programming'. "
Free Programming and Computer Science Books - tons of free technical books. RSS feed: http://techbooksforfree.com/new.xml
Sysinternals Freeware - Utilities for Windows NT and Windows 2000 - RootkitRevealer: "RootkitRevealer is an advanced root kit detection utility. It runs on Windows NT
4 and higher and its output lists Registry and file system API discrepancies that
may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect memory-based rootkits like Fu that don't survive reboots)."
February 10, 2005
Slashdot | Symantec Antivirus May Execute Virus Code
Symantec flaw leaves opening for viruses: ZDNet Australia: News: Security - "Symantec has issued a patch for a flaw in its scanning software that could cause a virus to run, rather than catch it."
"Symantec is distributing patches to its customers through its LiveUpdate automatic update service and other mechanisms. It warned companies that do not use those services to download the patches from its Web site and apply them as soon as possible. "
This could have been a VERY bad situation. Luckily, Symantec was able to update thier software via thier subscription service, but just imagine the trouble and headache that would occur if thier auto-update wasn't possible for this fix...
February 08, 2005
Microsoft Security Bulletin MS05-004: ASP.NET Path Validation Vulnerability (887219) - Important
Microsoft Security Bulletin MS05-005: Vulnerability in Microsoft Office XP could allow Remote Code Execution (873352) - Critical
Microsoft Security Bulletin MS05-006: Vulnerability in Windows SharePoint Services and SharePoint Team Services Could Allow Cross-Site Scripting and Spoofing Attacks (887981) - Moderate
Microsoft Security Bulletin MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302) - Important
Microsoft Security Bulletin MS05-008: Vulnerability in Windows Shell Could Allow Remote Code Execution (890047) - Important
Microsoft Security Bulletin MS05-009: Vulnerability in PNG Processing Could Allow Remote Code Execution (890261) - Critical
Microsoft Security Bulletin MS05-010: Vulnerability in the License Logging Service Could Allow Code Execution (885834) - Critical
Microsoft Security Bulletin MS05-011: Vulnerability in Server Message Block Could Allow Remote Code Execution (885250) - Critical
Microsoft Security Bulletin MS05-012: Vulnerability in OLE and COM Could Allow Remote Code Execution (873333) - Critical
Microsoft Security Bulletin MS05-013: Vulnerability in the DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (891781) - Critical
Microsoft Security Bulletin MS05-014: Cumulative Security Update for Internet Explorer (867282) - Critical
Microsoft Security Bulletin MS05-015: Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113) - Critical
All I can say is: DAMN.
February 03, 2005
The Windows XP Layout: "This sample book chapter looks at the file and folder structure created by a Windows XP installation, provides a roadmap for important programs, and discusses other issues related to file structure and layout."
Nice little bit of reading material. It is important to note that the author, Stu Sjouwerman, is of NTSysAdmin list fame.
RFIDAnalysis.org - Analysis of the Texas Instruments DST RFID - "The Texas Instruments DST tag is a cryptographically enabled RFID transponder used in several wide-scale systems including vehicle immobilizers and the ExxonMobil SpeedPass system. This page serves as an overview of our successful attacks on DST enabled systems. A preliminary version of the full academic paper describing our attacks in detail is also available below. "
This is pretty sweet. They describe their attack and show you the practical applications of it in the field, complete with videos.