Pages

RSS Feed

Wednesday, January 9, 2008

Windows XP Patches - "offline-update"

Installing a fresh copy of Windows XP can be a long drawn out process. Depending on the date of your original copy, you will ulitmately need to go to the Microsoft update site and then download, reboot, download reboot, etc, etc, etc...

Heise Security offers an alternative to this utilizing scripts available from Microsoft.

Version 3 of their recent script collection called "Offline Update" requires only a few steps to obtain a current service pack at any time, combining all released Windows updates at the time of download. The download script acquires the complete update library for selected operating systems from Microsoft's servers and uses them to created ISO images for CDs or DVDs as desired. These in turn can be used to update as many PCs as you wish.

According the the developers, "Offline update is not intended to replace the mechanism specified by Microsoft for bringing Windows up to date via Internet. It is intended to provide removable storage media with security updates for PCs, after which they can be brought safely onto the internet. A self-assembled service pack can be quite practical when making "house calls" for acquaintances or clients who lack a broadband internet connection or who have previously been skittish about patching."

This makes me feel a lot better about tackling the Windows XP re-install for my parents.

Visit their website at: http://www.heise-security.co.uk/articles/80682

Happy Updating!

A great home computer backup program using off-site storage for very little cost (2gb is free)

Ask any IT professional and they will tell you the number one thing everyone should do is backup, backup, backup! (Otherwise we suffer the "Agony of Delete!".)

Enter "Mozy." I just heard about this program for a few folks who were discussing how they do backups for themselves and for their clients. So I started to check it out and here's what I found.

You can go to Mozy.com (by the way Mozy is now owned by EMC) and get running in 3 steps:

1. Sign up for an account (allows you to download the software.
2. Download and install the software
3. Select the files to be backed up

It uses SSL encryption for the data transfer/transport and 448-bit blowfish encryption for the files. Backups can be scheduled automatically. After the initial backup, MozyHome will only backup adds or changes.

The home version gives you up to 2gb of space.

Mozy is different from other traditional types of backups. For the most part many are use to burning the files to CD, or copying the files to a usb drive or another computer. Some of us that have been around a long time even use to save them to tape.

There are pros and cons.

Pros:
It's cheap, the mozy home gives you 2gb free. (They also sell an unlimited version for around $5.00/month.)
It's secure (you transfer to their off-line server in a secure manner and the data that is saved is encrypted.)
It's off-site (it's not subject to any natural disasters that may occur, i.e. fire, water damage, etc..)

Cons:
When you need to recover, it may take you a while to get all your data back (it's transferring it back from the internet off-site storage to your computer.)
The first backup is probably going to take a while (your going to transfer upto 2gb of data.)

Best best is to review your needs, time, and budget.

Just some comments to ease the pain of the cons...

If you had to use a restore, plan out how you get your files back first. You should probably just select the stuff you need absolutely first, then do a different restore for those files you can wait on, this way you won't have wait as long for the stuff you need right away.

I've not experienced it yet firsthand, however I've been told that to do a restore, you select the backup set or drives/folders via their website. Once you've made and committed your selection, Mozy will bundle up those files into a series of self-extracting archives and then send you an email when they’re ready to be picked up.

As with any backup system, you don't just want to set it up and forget about. Be sure to check on it from time to time to be sure it's really backing things up. This means checking the backup history or log files. Look for actual completion, sometimes an error can cause a program to terminate.

Visit https://mozy.com/home

Your own local web server (fast and easy)

Ever wanted to have your own web server to learn HTML, etc...

For the most part it requires you install web server software and other utility programs and work your way through making the appropriate configurations.

Today I heard about an application that takes all of the hard work away.

XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really very easy to install and to use - just download, extract and start.

Visit: http://www.apachefriends.org/en/xampp.html

Sunday, January 6, 2008

Re-installing Windows XP

It will eventually happen. Your Windows XP system will become slow and sluggish. Best remedy to correct this is a fresh re-install of the operating system. This of course is a several hour task at best and can involve tracking down software license keys, configuration settings, etc... My parents Windows XP system is now at this point and I'll soon be embarking on the process of the re-install.
However, before you re-install, there are few things you should have available to you or things/settings you should know about the current system before you do this. There are so many things to remember to look at and just when you think you have it all, you discover later that you missing something. A checklist is in order to help you remember these items. A while back I heard Mike Smith from the "www.miketechshow.com" taking about this very thing. He had a link from a past podcast show that I thought I would pass along. It's his version of a "Windows Reinstall Checklist." I know I'll be printing this out and looking it over to make sure I've captured, backed-up and copied all the relevant information that the system will need. (By the way, I have used this same checklist in the past to rebuild my Daughters home XP system after it got infected with some crazy spyware after downloading a myspace page theme.

Here's the link to the PDF File...

Also, here's another great link about slip streaming XP SP2 into your install to save time from Paul Thurrott's SuperSite for Windows.

Good Luck with any re-installs you have..

Saturday, January 5, 2008

Create your own Blog Site with your own Personal Web Address (URL) for about $10.00 a year.

Yes, you Can create a Blog Web Site with your own Personal Web Address (URL) for about $10.00 a year. This is how I'm hosting this blog.

Steps:

1. You can obtain a domain name first (most can be purchased for around $10.00/year), Here are a few... Yahoo, or GoDaddy (this is optional, as you can also purchase the domain name from Google later, however if you do this option, you need to create a "CNAME" record in your DNS settings that points to ghs.google.com.)
2. Sign-up for a free blog with Google's Blogger.
3. Create your content on the blog
4. Within the Blogger Dashboard, goto "Settings", then "Publishing" from your Blogger options and then select "Buy a domain for your blog" (this is where you can buy one) or the "Already own a domain? Switch to advanced settings" links.

Happy Blogging!

Tuesday, January 1, 2008

Another New Favorite Live Linux Distro

I've been playing a lot with BackTrack a live linux distribution. This distro has many, many features already installed to assist you in doing your own penetration testing. Also the Firefox works great showing almost all types of video/audio without any modifications (which means your ready for internet surfing without worry.) I've been running it as a live CD under VMPlayer (another great program for your system), this way you don't even have to reboot your computer to use it. Backtrack 2 is the latest stable version, however, they are in beta on Backtrack 3. You can get both at http://www.remote-exploit.org/backtrack.html.

I don't promote using this for bad intentions, please use it responsibly to review your own systems and give you insight on what to protect on your own system.

Happy Exploring.

Friday, December 28, 2007

Long Time between Postings

Sorry all, it's been a long time since I've been able to post. Both Work and School have kept me extremely busy. I'm going to try post again on a much more regular basis.

Lately in my spare time, I've been trying to learn more about network/computer security and protecting a network from attack. There's some scary stuff out there. Best tip is to keep your windows systems patched quickly and keep your personal firewall's on at all times.