As Microsoft prepares to release patches, researchers said they’ve seen exploit code for a new flaw that puts organizations using Vista and Windows 7 at great risk.
The flaw lies in a driver used for the SMB file-sharing feature in Windows, said Bojan Zdrnja, a handler for the SANS Internet Storm Center. Exploit code was released around 11 p.m. ET, he said.
Zdrnja said he tested the exploit code and it works on fully patched Vista machines running Service Pack 1 or 2 as well as Windows 7. It may also affect Windows Server 2008. When successfully attacked, the exploit will cause the targeted machine to crash.
Researchers don’t know yet if the flaw is remotely exploitable, he said. Just one malicious packet is needed to crash a machine. Most PCs on internal networks keep port 445 open, which is used for file sharing.
That’s dangerous, since if a hacker already has access to a compromised computer within the network, it would be possible to crash all the other machines, Zdrnja said. Administrators should disable access to the port.
Home users usually have that port open, too, Zdrnja said. But for users who join a public Wi-Fi network, Windows will ask if it is a public network and, if it is, then block port 445.
A module for the exploit has already been created for Metasploit, a hacker toolkit used to attack PCs
[click to continue…]
Vista is one of those operating systems that was “good enough” for release. Some users are finding that it does not work like XP, icons have been changed, menus have been rearranged and some features are harder to find. I can see how the average home user (most of you) out there could be confused by this. This post might help you sort some of those out. The first thing is there is no more BOOT.INI file available in msconfig. So? This file was used to change your boot if you had multiple operating systems installed. Vista has something called BCEDIT which is not user friendly; I do not recommend using it. What can you do? what can you do? download Vista Boot Pro, this freeware program offers an easy to use interface, click the options you want, select the OS to Boot first and click Apply. How did the big guns at ZDNet manage to miss that? Problem number one, solved.
Next on the list is the buried display settings problem. Burying and hiding settings from users is not a good thing but I don’t really feel that this is what they have done. Sure, you have to right click on your desktop and go down to Display Settings but if you have a sufficiently large display with a resolution of at least 1024 x 768 you won’t have to scroll to find it. Yeah, it could be annoying but if you think about it, it is more logically organized.
[click to continue…]
Asteroids –This is a great Windows Mobile version of an equally great classic. If you don’t mind using 200KB of your mobile phone’s memory, this is a must-have.
BeMario – A simple clone of the 8-bit Super Mario game, BeMario offers even the iconic jump and coin-snatching sounds.
BombSquad – This is a cool game which clones an equally cool Windows game, Minesweeper.
Break My Bricks – This game was developed specifically for the HTC Touch Pro, but it works on other Pocket PCs. The game feature various options for sound, vibration and ball speeds and has increasing levels of difficulty.
Buggles - This is the classic plastic bubble game ported to the Windows Mobile phones. It features an authentic ‘pop’ and realistic graphics.
Butterfly – Match sets of three or more bubbles to rescue butterflies in this fun puzzle game.
Crazy Matrix – Try to get as many lights glowing as you can in this addictive puzzle game.
Dope Wars – Buy and sell dope in this strategy classic.
EdgeWay Turbo 21 – If you’re fond of playing cards, you’ll like this game. Exercise your mind to make as many blackjacks as possible. Just a little warning: this game can be pretty addictive.
[click to continue…]
Microsoft has released more details about the security measures it is adding in Windows 7. The focus is on finding a balance between security and ease of use for businesses which have workers computing on the move.
Among the new or enhanced features:
Users can now use more than one set of firewall rules at once. The firm gives the example of a worker on the road who gets their Internet connection through a public network such as a wireless hotspot, but then needs to remotely connect to their corporate network. They will now be able to run different firewall set-ups for the two connections. An added benefit of this change is that firms can now set-up a standard firewall policy for all employees on the corporate network, regardless of where they are connecting from.
A DirectAccess feature automatically sets up a two way link between your computer and your corporate network whenever you are online. This also means your company can access your machine the moment you get online, allowing it to run any security checks or apply updates without having to wait for you to return to the office.
BranchCache uses cacheing to minimize the problem of workers visiting a branch office but being slowed by limited bandwidth. The goal is that accessing a corporate network from a branch office should feel as quick as if you were in the main office itself.
BitLocker To Go takes the existing hard disk encryption technology from Vista and applies it to removable media such as USB drives.
[click to continue…]
