In the last week there was a well documented writeup of a cross site scripting vulnerability which had allowed a phisher to pose as a paypal login with THE LEGIT PAYPAL SSL CERTIFICATE…. Brian Krebs at the Security Fix has some details on some of the new and interesting ways phishers are trying to exploit to seperate us from our personal information.
Month: June 2006
-
NTFS cloning
Sometimes drives just go bad. Surprise. One recent fresh install of Windows XP had started having real stability problems. On running a chkdsk and looking at the event viewer, it was fairly clear that 16KB of bad sectors and the disk problems had likely been the problem (lots of disk and atapi errors in the system log. Mostly disk error during paging operation (swap filing)) So…. I looked at cloning the drive using dd_rescue. All went well and the new system booted up on the new identically sized drive. In fact EVERYTHING was fine except chkdsk still reported 16KB of bat sectors….
-
Microsoft security roundup
OK – there have been a number of Excel problems floating around in the last week – week and a half. Securiteam blog has a FAQ on the Excel 0-day vulnerabilities with Excel and Excel Viewer Incidents.org kindly gives us a scoresheet documenting the three different vulnerabilities that have been recently exploited. I have not thoroughly read details, but suspect that avoiding opening unexpected xls attachments would likely be a GOOD preventative measure. If you take the attitude… “oh junk mail…. ooo attachment – wonder whats in there – let’s see…” then you’re likely already stuck by a few viruses.
-
VM Player vmx builder
Of course, I’ve spent some time with posts on VMware player (free download to “play” existing vmware images). And more recently on the VMware server which is also a free download but can create images as well. If you’re not in a position to try the VMWare server, you might be interested in this website which walks you through to create the vmx file that defines a virtual machine environment for vmware products. Of course, it doesn’t create the actual disk images for you, but you can use free tools like those supplied with qemu to do that.
-
Playing catchup..
Last week our Church held annual Vacation Bible School and I am just now catching up on some of the items I’ve been intending to post over that period, so…. today will likely be a fairly active posting day as I clear out some of these tabs I’ve opened over the last week. In many cases – I’m doing roundups – like the Google stories all in one article. Between the VBS and related preparations/trips to pick up last minute supplies, and the one or two issues that came up needing my firsthand presence…. there was simply no time for posting (unless I wanted to do away with those wasted “sleep” hours.)
-
French competitor to Google Maps
Sometime last week, the news story of a French competitor to Google Maps called Geoportail.fr caught my attention and I took a look at the page. It caught my eye because the initial article boasted 20 inch resolution in some areas (???) But, as of today, all I’ve been able to get is an error message along the lines that there is too much traffic and that I should try again later. It’s in French – it’s been a while…. anyway, I’m not the only one that’s noticed – The Register has noted the painful launch as well. Really, it should be interesting when it’s up.
-
Ubuntu-server 6.06 LTS plus vmware server and other vmware server notes
What follows are some notes taken on vmware server. Most are related to an install on ubuntu-server (NO GUI INSTALLED)…. the main point of this is to have the host system take as FEW resources away from the guests as possible.
This requires a few x libraries – but not full blown X gui.
-
Windows Vista Beta notes…
What follows are some notes that I’ve taken on the Vista beta that I installed into a VM. I’ve got a lot of toying around yet to do with it (and at least one Internet Explorer bug I want to mention.) But… I’ll go ahead and post this. [warning – rambling and long text…]
A few days back I undertook an effort of self torture. After finally getting the Vista Beta 2 downloaded and having Vmware server up and running I thought I’d give a go at installing and see what things looked like. I did NO pre-googling for tips and so this is a pure “discover as you go” process.