Saturday, March 9, 2013
Labels:
Dell
,
PowerEdge 2950
,
RAID
The Dell PowerEdge 2950 comes with a hardware RAID controller, which needs to be invoked during boot (press Ctrl + R at the prompt). Once the PERC 5/i Integrated BIOS Configuration Utility loads, you can follow the handy guide over at thegeekstuff.com to set up the hardware RAID. Their guide cites the PERC 6/i, but the steps are the same.
Thanks, Ramesh (the author)!
I have four 2TB disks installed, and I selected them all to participate in the RAID-5. Some brief research reveals that in a RAID-5 with four disks, all parity bits are stored on one drive. I would ask if anyone could confirm that, but I'm R'ingTFM. In the mean time though, feel free to chime in. :)
Update: Make sure after you stage the RAID, you select your Virtual Disk and press either the right arrow key or enter. In the Initialization menu, there will be a Fast Initialization which you definitely want to select. It will save you hours of build time (48 in my case). It may pop up and tell you there's an initialization already in progress, but go ahead and break that one to start the fast init. Add it the lessons learned!
Read More
Dell PowerEdge 2950: Staging the RAID
Thanks, Ramesh (the author)!
I have four 2TB disks installed, and I selected them all to participate in the RAID-5. Some brief research reveals that in a RAID-5 with four disks, all parity bits are stored on one drive. I would ask if anyone could confirm that, but I'm R'ingTFM. In the mean time though, feel free to chime in. :)
Update: Make sure after you stage the RAID, you select your Virtual Disk and press either the right arrow key or enter. In the Initialization menu, there will be a Fast Initialization which you definitely want to select. It will save you hours of build time (48 in my case). It may pop up and tell you there's an initialization already in progress, but go ahead and break that one to start the fast init. Add it the lessons learned!
Tuesday, February 12, 2013
Labels:
browser plug-ins
,
java
,
metasploit
It's been about a month now, and the talk of the Java exploit has largely subsided. Thank you, five-minute attention span. (Don't worry, I'm accusing myself too). When the Java exploit received such a critical warning from the Department of Homeland Security's, U.S. Computer Emergency Readiness Team (DHS US-CERT, for short), on January 10, 2013 the news spread like wildfire. The reason more attention was paid to this than the other 20 alerts for significant risk published in 2012 is that it's very rare for the CERT to advise the general public, consumers and businesses alike, to completely disable a software component - in this case, a browser plug-in.
A complete breakdown of the exploit is available at Mitre's Database of Common Vulnerabilities and Exposures, but in essence the exploit payload, once executed, escalates privileges to allow an attacker control of the system. A key factor in this exploit receiving so much attention is that all versions of Java are vulnerable across all operating systems, and a package to deliver this exploit was built for metasploit - the free, open-source penetration testing software suite. Here's a video demonstrating how easy it is to exploit a Windows 8 virtual machine running Internet Explorer 10:
The exploit delivery is all hinged upon whether or not the user accesses a page and auto-loads Java, which will make a request for the .jar file. What does this mean? Key dangers come from compromised websites hosting this malware and phishing attempts.
It took Oracle about four days to patch the vulnerability. If you haven't already done so, it's highly recommended that you update your version of Java. Most of those concerned will just patch Java and get on with browsing the web, but I think this exploit brings to attention interesting browser behavior.
Running the Browser Gauntlet
When I was first alerted to the exploit, I wanted to test the three big ones to see how they'd inform me of a website wanting to load the Java plug-in.
Read More
Vulnerable Browser Plug-ins: I'm looking at you, Java
A complete breakdown of the exploit is available at Mitre's Database of Common Vulnerabilities and Exposures, but in essence the exploit payload, once executed, escalates privileges to allow an attacker control of the system. A key factor in this exploit receiving so much attention is that all versions of Java are vulnerable across all operating systems, and a package to deliver this exploit was built for metasploit - the free, open-source penetration testing software suite. Here's a video demonstrating how easy it is to exploit a Windows 8 virtual machine running Internet Explorer 10:
The exploit delivery is all hinged upon whether or not the user accesses a page and auto-loads Java, which will make a request for the .jar file. What does this mean? Key dangers come from compromised websites hosting this malware and phishing attempts.
It took Oracle about four days to patch the vulnerability. If you haven't already done so, it's highly recommended that you update your version of Java. Most of those concerned will just patch Java and get on with browsing the web, but I think this exploit brings to attention interesting browser behavior.
Running the Browser Gauntlet
When I was first alerted to the exploit, I wanted to test the three big ones to see how they'd inform me of a website wanting to load the Java plug-in.
- First up, Internet Explorer. As in the video above, when I visited a website hosting Java, IE didn't prompt me for action and immediately loaded the Java plug-in. FAIL
- Next in line, Firefox. FAIL
- Okay, Chrome...here we...wait, what? Chrome alerts me that individual websites want to run Java? I can still see the rest of the page and just choose not to let Java run? And this is a default browser behavior? Well done, sir. Well done.
I know, I know. Both IE and Firefox both have browser add-ons that will perform the Java block, but those features aren't baked into the browser by default, whereas Chrome's is! Here's a screen capture of what you can expect:
So, it would appear the easiest way to protect yourself in regard to this exploit is to use Chrome. Aside from that, disable Java, or update it to the latest patched version. Be safe out there!
Thursday, February 7, 2013
Labels:
aacs
,
Blu-Ray
,
VLC
,
Windows 8
Windows 8: VLC Blu-Ray playback
Background
When I first purchased my Sony laptop, it came with PowerDVD or something similar installed in Win7 allowing Blu-Ray playback. Any time I travel, I always take this laptop so I can play my Blu-Rays for shows not available through streaming methods. When I upgraded to Windows 8, Sony doesn't offer the Blu-Ray playback software in the list of software available for download for my laptop model, so I basically lost my ability to play Blu-Rays.
I've used VLC before, and it's a great open-source, multi-platform video player. I encourage everyone to check it out if you haven't had the privilege to use it. Since it was free, I installed it and tried to play a Blu-Ray - no luck. I used the 32-bit version, which is the default download version for Windows. When I inserted the disc, I just pointed VLC to my disc drive and clicked "Play." Since that didn't work, I opened the menu: Media > Open Disc, and on the Disc tab I selected BluRay and tried to play it. Still no luck, but this time I received a more informative error, which was that VLC was missing libaacs.
The Fix
I Googled how to add libaacs capability to VLC, and came across an older guide. Here's my specific steps:
Read More
When I first purchased my Sony laptop, it came with PowerDVD or something similar installed in Win7 allowing Blu-Ray playback. Any time I travel, I always take this laptop so I can play my Blu-Rays for shows not available through streaming methods. When I upgraded to Windows 8, Sony doesn't offer the Blu-Ray playback software in the list of software available for download for my laptop model, so I basically lost my ability to play Blu-Rays.
I've used VLC before, and it's a great open-source, multi-platform video player. I encourage everyone to check it out if you haven't had the privilege to use it. Since it was free, I installed it and tried to play a Blu-Ray - no luck. I used the 32-bit version, which is the default download version for Windows. When I inserted the disc, I just pointed VLC to my disc drive and clicked "Play." Since that didn't work, I opened the menu: Media > Open Disc, and on the Disc tab I selected BluRay and tried to play it. Still no luck, but this time I received a more informative error, which was that VLC was missing libaacs.
The Fix
I Googled how to add libaacs capability to VLC, and came across an older guide. Here's my specific steps:
- Install VLC
- Visit http://vlc-aacs.whoknowsmy.name/
- Copy the libaacs.dll to the root VLC installation directory:
- C:\Program Files\VideoLAN\VLC (x64)
- C:\Program Files (x86)\VideoLAN\VLC (x86)
- Open your appdata folder
- Start > Run (or Windows key + R)
- Type %appdata%; on Windows 8 the qualified path is: C:\Users\username\AppData\Roaming\
- Look for an aacs folder, and if there isn't one, create it
- Inside the aacs folder place the KEYDB.cfg file
- Insert a Blu-Ray disc, open VLC, and try to play it.
Once I completed that process, I can play Blu-Ray discs again! Hope it works for you. Feel free to leave feedback if your steps differed from mine.
P.S. alternatively, you could just fork over the $50 to $100 for a Blu-Ray playback software suite and save yourself the time/trouble.
P.S. alternatively, you could just fork over the $50 to $100 for a Blu-Ray playback software suite and save yourself the time/trouble.
Thursday, January 31, 2013
Labels:
Sony Drivers
,
Windows 8
Windows 8 Pain Point #3 - Intel Centrino Wireless-N 6150
So, I've been on Windows 8 for a couple months now, and all in all it's not too bad. One trend that has started to irritate me quite a bit is the fact that my WiFi connection continually drops. It's intermittent, but for whatever reason, my adapter just disconnects from the WiFi router. Then, when I go to reconnect it, Windows tells me I can't connect back to the network.
When this first happened, I thought okay, let me try a different WiFi signal. Nope! No matter what other WiFi signal I chose, my adapter basically said it had eaten enough packets. So, what's the classic solution in these circumstances? Reboot! Sure enough, everything started working fine again. I dealt with that for a couple days before I decided having to reboot every time was ridiculous. My next troubleshooting effort led me to re-install the driver. No luck - the problem intermittently persisted. Then, just out of curiosity, I disabled the network adapter and re-enabled it. BOOM! Fixed...temporarily. Now I just have to disable/re-enable the network adapter, which is less irritating than having to reboot, but still a pain.
I didn't have this issue in Win7, so the only thing I can think of at this point is that the driver is causing issues. My driver version is 15.5.0.43. I'm not sure if I can stand to wait for an update. I think I may go back to Win7. Anyone else having this issue?
Update #1: just went to Intel's site, and there's an update for the software suite. To detect if your adapter needs an update, check out Intel's scanning web-app. You'll have to enable Java for the scanning to work, so only do it if you trust Intel.
By the way, here's the output of the scanner:
Read More
When this first happened, I thought okay, let me try a different WiFi signal. Nope! No matter what other WiFi signal I chose, my adapter basically said it had eaten enough packets. So, what's the classic solution in these circumstances? Reboot! Sure enough, everything started working fine again. I dealt with that for a couple days before I decided having to reboot every time was ridiculous. My next troubleshooting effort led me to re-install the driver. No luck - the problem intermittently persisted. Then, just out of curiosity, I disabled the network adapter and re-enabled it. BOOM! Fixed...temporarily. Now I just have to disable/re-enable the network adapter, which is less irritating than having to reboot, but still a pain.
I didn't have this issue in Win7, so the only thing I can think of at this point is that the driver is causing issues. My driver version is 15.5.0.43. I'm not sure if I can stand to wait for an update. I think I may go back to Win7. Anyone else having this issue?
Update #1: just went to Intel's site, and there's an update for the software suite. To detect if your adapter needs an update, check out Intel's scanning web-app. You'll have to enable Java for the scanning to work, so only do it if you trust Intel.
By the way, here's the output of the scanner:
| Product Detected | Intel® Centrino® Wireless-N + WiMAX 6150 | ||
| Current Driver Installed | 15.5.2.0 | ||
| |||
I have my fingers crossed!
Update #2: After updating directly from Intel's site, the problem appears to be fixed. I'll keep monitoring in case the situation changes, but it looks to be corrected. NOTE: anyone expecting the Windows Update to fix this should instead go to the links above to download the driver directly as Windows Update does not correct the problem.
Update #2: After updating directly from Intel's site, the problem appears to be fixed. I'll keep monitoring in case the situation changes, but it looks to be corrected. NOTE: anyone expecting the Windows Update to fix this should instead go to the links above to download the driver directly as Windows Update does not correct the problem.
Saturday, January 26, 2013
Labels:
anonymous
Anonymous allegedly strikes ussc.gov
According to mashable.com, Anonymous defaced ussc.gov and posted a YouTube video describing their intentions (embedded in the article) to declare "war" on the U.S. government in response to Aaron Schwartz' suicide.
Read More
They encouraged people to download "warheads" to be launched at supposedly vulnerable assets within U.S. government networks.
In the YouTube video, it shows a file name with the words "aes256" at the end, which I guess means they files were encrypted with aes256. The video also advertises the location where you can download these alleged "warheads," which is just a pastebin link. Once you visit the pastebin link, you see a text file calling for action on Twitter as well as mirror sites from which you can directly download these "warheads."
Out of curiosity for what these alleged warheads contained, I fired up Firefox with NoScript and HTTPFox activated to see if the access to the warheads was just a front to compromise some systems. The first mirror I tried delivered a 503 service unavailable message, meaning either the site was taken down on the server or it crashed from too many people trying to access the files. The other three mirror sites are currently still active. I visited one to download a file.
With HTTPFox loaded, I can see there are no secondary scripts or modules loaded, and no XSS calls. The request is just a standard GET request. The scary part is that there were no file extensions, but the server offers the files up as "text/plain" mime-types.
These files each appear to be over 100 MB and are delivered as text files. The text is rendering in the browser, completely encrypted. The sizes are broken out as follows:
Scalia.Warhead1 - 150MB
Kennedy.Warhead1 - 108.3MB
Thomas.Warhead1 - 150MB
Ginsburg.Warhead1 - 150MB
Breyer.Warhead1 - 150MB
Roberts.Warhead1 - 22.7MB
Alito.Warhead1 - 150MB
Kagan.Warhead1 - 132.7MB
The different file sizes could mean different things. Maybe during their upload they were truncated due to early disconnect from whoever uploaded them, I'm not sure. It seems the common factor is 150MB.
Forensics analysts, please step forward...
In the YouTube video, it shows a file name with the words "aes256" at the end, which I guess means they files were encrypted with aes256. The video also advertises the location where you can download these alleged "warheads," which is just a pastebin link. Once you visit the pastebin link, you see a text file calling for action on Twitter as well as mirror sites from which you can directly download these "warheads."
Out of curiosity for what these alleged warheads contained, I fired up Firefox with NoScript and HTTPFox activated to see if the access to the warheads was just a front to compromise some systems. The first mirror I tried delivered a 503 service unavailable message, meaning either the site was taken down on the server or it crashed from too many people trying to access the files. The other three mirror sites are currently still active. I visited one to download a file.
With HTTPFox loaded, I can see there are no secondary scripts or modules loaded, and no XSS calls. The request is just a standard GET request. The scary part is that there were no file extensions, but the server offers the files up as "text/plain" mime-types.
These files each appear to be over 100 MB and are delivered as text files. The text is rendering in the browser, completely encrypted. The sizes are broken out as follows:
Scalia.Warhead1 - 150MB
Kennedy.Warhead1 - 108.3MB
Thomas.Warhead1 - 150MB
Ginsburg.Warhead1 - 150MB
Breyer.Warhead1 - 150MB
Roberts.Warhead1 - 22.7MB
Alito.Warhead1 - 150MB
Kagan.Warhead1 - 132.7MB
The different file sizes could mean different things. Maybe during their upload they were truncated due to early disconnect from whoever uploaded them, I'm not sure. It seems the common factor is 150MB.
Forensics analysts, please step forward...
Wednesday, January 9, 2013
FoxFi acquired by PDAnet
I have a Samsung Galaxy Nexus LTE (SCH-i515), and my go-to app for WiFi tethering since Summer 2012 has been FoxFi. FoxFi originally only had one version, which was free. When activated, it sets up a wireless router instance on your phone. Fortunately, it's pre-set to use 802.11n and WPA2-PSK. All you have to do is accept the default SSID (FoxFi73) or create your own, set the password, activate it, and then connect to that SSID from your tablet/laptop. With an LTE phone and depending on the coverage zone, the speeds are better than a FiOS connection! I was in downtown Miami, FL last October and had download speeds of 28Mbps!
Anyway, FoxFi and its free use was an amazing ride. Some time in November, I received a pop-up when launching the app (after an update) that FoxFi was no longer solely free. You could continue to use the limited free version, which appeared to be on a time-based quota, but you had to restart the connection once you notice that it failed. Alternatively, you could purchase the unlock key to get unrestricted access for $7.
"What about rooting your phone so you don't have to pay anything?" you might ask. To that I answer, I was lazy. Plus, I thought the app was great and it got me out of a crappy internet connection otherwise when I was in Florida, so I went ahead and purchased the full version to support the developer. Fast forward a few months and this week I get a new pop-up every time I open the app that FoxFi is now under the PDAnet umbrella. Version 4.0 of PDAnet, published by June Fabrics, appears to incorporate FoxFi with its USB tethering capability. Anyone who's already purchased the FoxFi unlock can retain the unlimited tethering, but for newbies, the price is now $9.95. Still not a bad price, all things considered; especially since it's a one-time fee.
If you're like me, and you don't want to have to go through the hassle of rooting your phone to get free tethering, skip a meal and spend the $10 on the app instead. Happy tethering!
Read More
Anyway, FoxFi and its free use was an amazing ride. Some time in November, I received a pop-up when launching the app (after an update) that FoxFi was no longer solely free. You could continue to use the limited free version, which appeared to be on a time-based quota, but you had to restart the connection once you notice that it failed. Alternatively, you could purchase the unlock key to get unrestricted access for $7.
"What about rooting your phone so you don't have to pay anything?" you might ask. To that I answer, I was lazy. Plus, I thought the app was great and it got me out of a crappy internet connection otherwise when I was in Florida, so I went ahead and purchased the full version to support the developer. Fast forward a few months and this week I get a new pop-up every time I open the app that FoxFi is now under the PDAnet umbrella. Version 4.0 of PDAnet, published by June Fabrics, appears to incorporate FoxFi with its USB tethering capability. Anyone who's already purchased the FoxFi unlock can retain the unlimited tethering, but for newbies, the price is now $9.95. Still not a bad price, all things considered; especially since it's a one-time fee.
If you're like me, and you don't want to have to go through the hassle of rooting your phone to get free tethering, skip a meal and spend the $10 on the app instead. Happy tethering!
Friday, January 4, 2013
Labels:
Excel
,
Office 2013
Office 2013: Impressions after Day 1
Installation:
The install is pretty standard. The new aspect to the install is that you now have an option to either enter a product key or enter in your domain account to complete the process. I chose the product key option, but I'm assuming the domain account allows end users to perform approved installs without having to pre-stage the product key. It probably calls out for a domain level license administrator service. I'll do more research on that aspect down the road.
Load Times:
I'm impressed with the speed of loading any app of the suite. A nice test for this was opening a 6MB Visio file from a network share. It took about 3 seconds in Office 2013, whereas in Office 2007 I was waiting about 10 seconds on average.
Bells and Whistles:
The suite allows users to choose from a set of themes for Ribbon decoration (meh).
What I'm most currently excited about is Excel. Finally! Microsoft has at last given us the ability to open Excel spreadsheets in two separate windows without any special tweaks! In prior Office versions, it took a registry hack to be able to accomplish it. For those with dual monitor setups, you can now easily have one Excel spreadsheet on the left monitor and one Excel on the right monitor!
I'll post more as I discover other features.
Read More
The install is pretty standard. The new aspect to the install is that you now have an option to either enter a product key or enter in your domain account to complete the process. I chose the product key option, but I'm assuming the domain account allows end users to perform approved installs without having to pre-stage the product key. It probably calls out for a domain level license administrator service. I'll do more research on that aspect down the road.
Load Times:
I'm impressed with the speed of loading any app of the suite. A nice test for this was opening a 6MB Visio file from a network share. It took about 3 seconds in Office 2013, whereas in Office 2007 I was waiting about 10 seconds on average.
Bells and Whistles:
The suite allows users to choose from a set of themes for Ribbon decoration (meh).
What I'm most currently excited about is Excel. Finally! Microsoft has at last given us the ability to open Excel spreadsheets in two separate windows without any special tweaks! In prior Office versions, it took a registry hack to be able to accomplish it. For those with dual monitor setups, you can now easily have one Excel spreadsheet on the left monitor and one Excel on the right monitor!
I'll post more as I discover other features.
Subscribe to:
Posts
(
Atom
)


