Administrator Log

How secure is your Windows machine?

admin — Mon, 01 Dec 2008 04:21:17 +0000

Yesterday, I decided to test my work computer for viruses. The last test I made when I still had Avira as antivirus solution. For several months I use Kaspersky Internet Security 2009 but since that time I had not yet complete any tests of the running system.
Although KIS found no malicious software, it found a lot of vulnerabilities. The new version of Kaspersky apparently seeks not only for viruses or Trojans, but also examining the whether installed on the system software up to date and has no security gaps. Here were my failings clearly visible. From the report I learned that my system has not only a one version of Flash player installed, but also two older versions (8 and 9). There were also a few programs that are written in Java and had an independent Java Runtime Environment. This two programms had JRE not up to date and were a serious security vulnerability. An Attack with the help of such JRE is rather unlikely, because these programs are not as widespread (For example Brockhaus encyclopedia), but in the case of a targeted attack, it would have disastrous consequences. The fact that I work with rights of a user, would not help in this case. Overall, KIS found in my system a dozen of such gaps.
The reason why there are so many gaps in my system, is that I have except a work computer, 2 other computers at home. I was not able to maintain an overview of all of my installed programs, and so it came to such negligence. There were no viruses or Trojans found on my system, but such a vulnerability that could certainly be exploited to access the system. I am really pleased that Kaspersky offers such feature.

Share and Enjoy:

Up-to-date is the key to security

admin — Tue, 30 Sep 2008 01:52:07 +0000

A major disadvantage of Windows operating systems is that there is no centralized software-based solution that would take care of actuality of a software of third party developers. In the Linux world is such software since long time a part of the operating system. SuSE Linux Yast does this function, Debain offers APT numerous graphical user interfaces (for example Synaptic).
As an administrator of a Windows operating system, it will become increasingly difficult over time, to keep the overview of the installed software. Precisely for this reason, the developers from Secunia developed a software called Secunia PSI. This program is, according to the manufacturer is able to review more than 4700 applications and the quantity of the database is growing with each day.
The program works like this: it collects information about the system and transmits it via an encrypted HTTPS connection to the server where the data is finally evaluated.
Secunia PSI is still in beta and does not yet entirely reliable. There are still problems with programs that run without installation, because Secunia PSI is not able to find it. Although, I found the program very helpful. I was able to recognize, for example, that my WinSCP-Installation is very old and it was very importnant for me. The program is also free for private use and I find thic fact very positive.

Share and Enjoy:

ZoneAlarm blocks the internet connection after Windows Update (KB951748)

admin — Wed, 16 Jul 2008 16:47:05 +0000

This update was developed for Windows XP and Windows 2000, to block the use of static source ports for DNS requests, because the hacker were able to guess and falsify the transaction-ID of DNS queries with a very high probability.
Although this problem was known since a long time and several software vendors worked together with the aim to find a solution, Checkpoint, the maker of ZoneAlarm, was obviously surprised. After the installation of the above update, ZoneAlarm blocks all connections, so there is no name resolution possible and the Internet activity is paralysed. I had this problem yesterday, when I started my notebook. I knew already that such problem is exists, but I thought that I will not have this problem on my laptop. But because Windows Auto Update on my computer is on, the update was downloaded and installed on my computer automatically. As a result, I could not access the Internet. The problem was solved by getting firewall on “Medium”, then I could update ZoneAlarm to the latest version. Despite the rapid solution, I am very disappointed that I had experiencing this problem. It could occur not at home, but at work, while presentation of some product to my customers. It would be very unprofessional act and I’m sure that the customers would see the source of the problem not at Checkpoint, but at me.

Share and Enjoy:

How to access linux file system under windows

admin — Thu, 26 Jun 2008 21:16:48 +0000

I have on my computer both Linux and Windows Vista installed. It’s very convenient because I need both systems from time to time for certain purposes. However, because my data is stored on different partitions, I must constantly switch between the systems, if I need certain data. The reason for this problem lies in the fact that Linux and Windows systems are using different file systems. All current versions of Windows set on NTFS. Linux use mostly EXT3. I can access from Linux to NTFS partitions, but I can not write on NTFS. If I’m on Windows, I can’t read or write on EXT3 partition.
I tried to find a simple way to find a solution for this situation, how could I get access from Windows to Linux partition. After a short time, I found this solution.
There are at least two programs that gain an access to EXT3.
One of them is DiskInternals Linux Reader. This program works under Windows 2000 and above. It supports files that are larger than 2GB.
Another program is called Ext2 IFS for Windows. The author of it is Stephan Schreiber. It also works on all versions of Windows and works with files that are larger than 2 GB too.
Linux Reader is a very practical tool with a user-friendly GUI. This is a great for accessing data from Linux partitions. But if you need a write access, you will need Ext2 IFS for Windows. After the installation of Ext2 IFS, you can use linux drives as ordinary drives. They could be accessed as well as the Windows drives.
Actually, there is a possibility to get a read and write access between NTFS and EXT3. It is possible if you use a FAT32 file system. The problem of this solution is that this file system supports files that are not bigger then 4 GB.

Share and Enjoy:

Regular expressions

admin — Thu, 08 May 2008 20:54:12 +0000

Regular expressions are widely used and provide a filter criterion, in which the expression in the form of a pattern is matched.
That’s the theory …
In practice, the regular expression often used, for example, to filter strings or to create a rewrite rules for Apache. To understand the regular expressions, you must lern the EBNF. In this topic I would like to explain the basics, so that you could understand how the regular expressions work:

| - Pipe symbol stands for logical “or”.
() - Round brackets indicate a grouping.
e.g. (a | b) stay for „a or b“.
[] - The square brackets define a range of characters that can occur. For example, [0-6] means that there is a number from 0 to 6 can occur.
[a-z] would mean that there is a small letter of the alphabet can occur.
You can also combine: [a-zA-Z0-9] would mean that any Latin letter or any number can occur.
[^ f] - A ^-symbol before a character means an exception, it could occur any symbol expect f.
. - Point stands for „any character“. (Note, if you would like to match point self, you should mask it with a backslash “\.”).
? - The term with question mark is optional.
Example: (aaa) (abc)? All of the strings with the phrase “aaaabc”, but also just “aaa” will be matched.
+ - The expression occurs at least once, but it can also occur many times.
Example: (aaa) + - This allows strings “aaa”, but also “aaaaaa” or “aaaaaaaaa” etc.
* - This expression can occur many times, but it is not required.
For example [a-z] *
{min, max} – This rule define how often the expression may occur.
For example, [0-9] (1.2) would mean that a number from 0 to 9 could occur at least 1 times and not more than 2 times.

If you have problems and do not know where the your mistake, I recommend the program The Regex Coach, so you can operate wonderfully debugging and error.

Share and Enjoy:

Gateway antivirus software

admin — Tue, 07 Aug 2007 10:08:27 +0000

I search a good antivirus solution that is able to monitor HTTP and FTP connections and protect a network against viruses.

The main problem is to find a solution for windows that is good and not very expensive. At the moment I read about solutions from CA, F-Secure and Trend Micro. Perhaps know somebody a solution for SBS that are cheap and good at the same time?:-)

Share and Enjoy:

Antispam-Solution for Exchange

admin — Tue, 17 Jul 2007 19:04:15 +0000

If some important e-mail address of your firm is an aim of spammer, you have a problem.

It is impossible to delete or rename such e-mail addresses as info@domain.tld or webmaster@domain.tld and that’s why it is needed to find some other way to protect e-mail and reduce spam.

Some time ago I have this problem on my to-do-list. My aim is to find a solution, which is able to act against spam not only on client side, but on server side too.

The most simply and free solution that I tried at first is an Intelligent Message Filter (IMF) by Microsoft.

IMF is since Service Pack 2 for Exchange Server a part of Exchange Server. This filter detects approx. the half of spam mails. For me is a good result, because of the big amount spam.

But because I had some false positives on level 4, I can’t increase it any more.

Some other solution that I will test in near future is ASSP.

I don’t know anything about how powerful is ASSP, but I’ll test it and tell about my experience.

Share and Enjoy:

The price of Windows Vista

admin — Thu, 07 Jun 2007 13:23:13 +0000

As official sources say, the price of Windows Vista will be pretty high.

For example Windows Vista Home Premium will cost ca. 200€ and Windows Vista Ultimate – 500€. These prices were a big disappointment for me, because I planned to buy Ultimate Edition.

But the hope dies last. I found a possibility to buy new Windows cheaper. So called “System Builder” is a version of Windows Vista without Support and some no relevant tools, but the price of those windows is more than 2x lower than regular price. For example the price of Windows Vista Home Premium System Builder in Plus is 114,99€ and Windows Vista Ultimate only 193€.

Share and Enjoy:

NTFS and Linux…

admin — Wed, 02 May 2007 15:01:23 +0000

Writing under Linux on NTFS file system was always a problem. In fact there are some solutions for this problem, but most of them are slow and unstable or commercial (not open source).

That’s why I would like to suggest you NTFS-3G Read/Write driver, because this software is open source, free and not very hard to install and setup. Moreover, this driver works pretty well, I could not detect any performance problems after installation.

NTFS-3G works with all of most popular Linux distributions, such es Debain, openSuSE, Knoppix, Kanotix, Ubuntu, Fedora, Slackware and others.

Here is the official page of NTFS-3G:

http://www.ntfs-3g.org/

Share and Enjoy:

Suggest: DNS Tools

admin — Sun, 22 Apr 2007 02:21:27 +0000

Some of the really good collection of tools like Whois, DNS Tools, Domain Suggesting Tools, Domain Search, Domain Monitor, Mark Alert and mach more will be offered by http://www.domaintools.com.

Very advisible!

Share and Enjoy: