Minggu, 21 Maret 2010

IE8, iPhone will fall first day of hacking contest, predicts organizer

Computerworld - Microsoft's Internet Explorer 8, not Apple's Safari, will be the first browser to fall in next week's Pwn2Own hacking challenge, the contest organizer said today.
Aaron Portnoy, security research team lead with 3Com TippingPoint, the sponsor of Pwn2Own, also predicted that Apple's iPhone will be the only smartphone hacked during the contest, which starts March 24.
Portnoy, who organized the fourth annual Pwn2Own, changed his predictions from earlier bets he made a month ago because of new information he received from researchers who have registered for the contest. Previously, Portnoy said that Apple's browser would crumble before rivals from Google, Microsoft and Mozilla; he had also declined to speculate on which mobile phone, if any, would collapse under attack.
Researchers will compete for $100,000 in cash prizes next week at CanSecWest, the Vancouver, British Columbia, security conference that has been the home of Pwn2Own. The dual-track contest -- one for browsers, the other for mobile operating systems -- will pit hackers against the latest versions of Chrome, Firefox, Internet Explorer (IE) and Safari running on Windows 7 or Mac OS X. The smartphone track will set hackers against Apple's iPhone 3GS, a Blackberry Bold 9700, a Nokia phone running the Symbian S60 platform and a Motorola, most likely a Droid, powered by Google's Android.
"I have discovered that one of our very own ZDI researchers is armed and ready to take on [IE8] on the very first day," said Portnoy in an e-mailed explanation of why he changed his browser prediction. "This will indeed be an impressive exploit from a technical standpoint."
ZDI, for Zero Day Initiative, is TippingPoint's bug bounty program, which purchases the vulnerabilities and exploits used during Pwn2Own. ZDI reports the vulnerabilities to the appropriate vendors during the contest, but keeps technical details secret until the bugs are patched.
In a post to the TippingPoint blog Tuesday, Portnoy said that attempts to hack IE8 would be especially difficult because of Windows 7 security mechanisms such as DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization). TippingPoint has also barred researchers from exploiting third-party plug-ins the first day of the three-day contest, making it tougher to carry out a successful attack.
"I have seen the prowess of the researcher in question and I have no doubt they will be able to pull off a DEP- and ASLR-bypassing exploit on Day 1," said Portnoy about the impending IE8 attack.
Safari will fall the second day, Portnoy said; last month, he had put his money on Safari to drop first, in part because he said Mac OS X 10.6, aka Snow Leopard, wasn't "on the same level as Windows 7" when it came to security. "I believe that Safari will indeed go down, just not on Day 1," Portnoy said today.

Sabtu, 13 Maret 2010

How to update a Windows hardware driver

What is a Driver?

A driver is a program that is able to control a device that is connected to your computer. These drivers are used by the operating system to enable it to communicate with the particular device the driver was made for. Devices that you connect to your computer are often very specialized which makes it so Windows can not communicate directly with the device without a program telling it how to. This program, or device driver, acts as a translator between the installed device and the programs that utilize the device.

Why do I need to update?

By default Windows contains generic drivers for many different types of hardware connected to your computer. Unfortunately, many of these drivers that are bundled with Windows tend to be generic and do not support all of the advanced features of the hardware being installed. Therefore you would want to download and install the driver created by the hardware manufacturer so that Windows understands how to use these special features.

Also as time goes by, hardware manufacturers release new versions of their drivers to fix bugs, increase performance, increase stability on your computer, or add new features. When these drivers are released it is recommended that you upgrade your driver to take advantage of these new enhancements.

When new drivers are released they tend to come in two types of updates. The first type is a program that you run that will automatically update the driver for you and then prompt you to reboot your computer. The second type is a set of driver files that you need to manually update the drivers with. This tutorial will focus on teaching you how to upgrade your driver using both methods.

Finding Out the Manufacturer and Model of Your Device

Before we begin updating your driver, we need to know the manufacturer and model number for the device. This is a pretty simple problem to overcome. Simply look at your device for a brand name, and that should be the manufacturer. For example I am looking at my modem and on the top it says "Binatone". Pretty simple huh!

To find the “model” of your device look at the back/bottom of your device for a code (my modem's is ADSL 2000). If this does not work, try looking in the paperwork that came with your device and see if you can find it there.

On the other hand, if you have an internal device that is not easily accessible, it may be difficult for you to find the make and model for it (for example a video card). For internal devices you should use the Device Manager to find out this information:

Click on the Start button in the bottom right hand corner of your desktop as shown below:

Click on the Control Panel menu option to open the Control Pane as shown below:

Double-click on the System icon as shown below:

Click on the Hardware tab at the top of the box (red arrow), then click on the box which says Device Manager (blue arrow) as shown below:

A window will appear which contains a list of the devices on your computer like the image below.

You will need to click on the plus (+) arrow next to the hardware category for the driver you want to update (red arrow). For my continuing example of updating a video driver I would click on the plus (+) arrow next to display adapters (where video cards reside). After clicking on the (+) sign, the category will open listing the devices that are installed on your computer that fall under this category of hardware. You should see your video card listed and you would make a note of the make and model of the card you wish to update. Stay in the current window, as the following steps will continue from here.

Determining the current version of your driver

Before you upgrade your driver, you want to determine whether or not you have the latest version. When developers create drivers they assign a version number to it. Each time the manufacturer releases a new update to this driver, they increase the version number. In this way you can determine if you have the latest version of the driver by comparing the version number of your currently installed driver to the version number of the driver currently . So if there version number is higher than yours, you know that there is a newer version available for download.

To determine the current version of your driver you would do the following:

While in the device manager, as described above, you need to click on the (+) arrow next to the category of device you want to update (red arrow). Then right click on the device which you would like the update. Again, in my example I would right click on the Radeon 9500 pro / 9700 which the blue arrow is pointing at.

After right clicking a list of options will appear. Click properties:

A new windows will open, which will display the various properties of your device. Click on the Driver tab in the top of the window (red arrow). Then look at the details in the Driver Version line (blue arrow):

Write down this version number so you can reference it later.

Finding the latest driver

So, now that you know the name, model, and version number of your device it is time to determine if there is a newer driver available for you to use. The easiest way to find a updated driver is to check the manufacturer’s web site. This will ensure you have the latest and most up-to-date drivers available for your device. Finding your manufacturers web site should be pretty simple. Using the example above, I found my device manufacturer for my video card was ATI radeon. Usually the manufacturer’s web site is its name with standard internet tags around the end (www. and .com). If you are unable to find the website this way, try going to www.google.com and searching for the name there. Usually the first entry should be the official manufacturer’s site:

When you find the address of the manufacturer, go to the site and have a look around. It would be impossible to give instructions for each manufacturer, but you should be looking for a drivers page. On some manufacturer's sites the Drivers link is prominent. On others you generally need to go into their support section to find the updated drivers. If that does not work, you can search for it on the site. After taking a good look around the manufacturer’s site, you should have found the driver section for your device. However, in the event that you are unable to find a driver section, there are a number of handy sites which collect all the drivers available into an alphabetical list by manufacturer name. My favorite is www.driverzone.com. It has an up-to-date list of available drivers, and is very easy for novices to navigate around. This step is the only part of the tutorial where I cannot give you specific instructions; it varies too much from brand to brand.

If you have found the drivers page, simply compare the version number of the driver they have available for download to the version number you retrieved earlier. If their version number is higher, then they have an updated driver for your machine. If it is the same version, then there is no newer driver available.

Downloading the driver update

When you have found driver update for your device that is newer that the one you have installed, simply go back to the manufacturers site/or driverzone, and find the newer driver. Click on the download link to this file and you should be prompted with a download box. If you use Internet Explorer it will look like so:

You should save your driver update download to the desktop. This is so that the file can be easily found later on. To do this, click save and setting the Save In pathname as Desktop (red arrow) and press the Save button.

IPB Image

So now you should have the file placed neatly on your desktop for easy access.

If the files extension is .zip, then the driver will need to be extracted first. This can be done very easily using BleepingComputer's own tutorial on the subject here:

How to create and extract a ZIP File in Windows ME/XP/2003

How to create and extract a ZIP File in Windows 95/98/2000

You should extract these files to the desktop now. If on the other hand, the file is an executable (ends with .exe), then move on to the next section.

Installing the Driver update

To launch the driver update program you would look for the program that you downloaded or extracted. The setup file should look something like this:

IPB Image

Double-click on the setup file and follow the on screen instructions to install the update. When the driver has finished installing, it will usually prompt you to reboot. Reboot your machine and you should now be using the updated drivers.

If on the other hand, there is no setup.exe file or other executable to run, then you will need to manually update the driver through the Device Manger. Using the previous instructions open the Device Manger. Using the drop down plus (+), open the category of the device you want to update and select the device by clicking on it once to highlight it. Right-click on the device and click Properties. Now click on the Driver tab and then click on the Update Driver button:

A wizard will begin in a new window. If the Wizard asks Can Windows connect to Windows Update to search for software? select the option labeled No, not this time and press the Next button. You will now see a screen similar to the one below.

Click on the option labeled Install from a list of specific location (Advanced) (red arrow). Then click next (blue arrow). A screen will open similar to the one below.

Select the option labeled Don't search. I will choose the driver to install. (red arrow) and press the Next button. A new screen may come up showing compatible hardware. Simply press the Have Disk button.

Then click on the Browse button and navigate to the folder on your desktop where you extracted the driver files. Once you are navigated to that folder you will see something like below.

You will see a list of .inf files that contain the information about the driver update found in that folder. Select the .inf file (red arrow) and press the Open button (blue arrow). Then press the OK button. You will now see a list of compatible hardware. Select the driver and press the Next button. Windows will copy the updated driver to your system. When it is done, press the Finish button.

You will now be back at the properties page for your device. If you look at the version, you should see that the version number now corresponds to the new driver you just installed. You can now press the Close button and exit the Device Manager.

Selasa, 20 Januari 2009

A Guide on RSS Tool

RSS is an abbreviation that has evolved into the following, depending on their versions:

• RDF Site Summary (also known as RSS 0.9; the first version of RSS)
• Rich Site Summary (also known as RSS 0.91; a prototype)
• Really Simple Syndication (also known as RSS 2.0)

Today, RSS stands for 'Really Simple Syndication', and it has the following 7 existing formats or versions:

• 0.90
• 0.91
• 0.92
• 0.93
• 0.94
• 1.0
• 2.0

RSS tools refer to a group of file formats that are designed to share headlines and other web content (this may be a summary or simply 1 to 2 lines of the article), links to the full versions of the content (the full article or post), and even file attachments such as multimedia files. All of these data is delivered in the form of an XML file (XML stands for eXtensible Markup Language), which has the following common names:
• RSS feed
• Webfeed
• RSS stream
• RSS channel

They are typically shown on web pages as an orange rectangle that usually has the letters XML or RSS in it.

RSS feeds can be used to deliver any kind of information. Some of these 'feeds' include:

• Blogs feed - each blog entry is summarized as a feed item. This makes blog posts easier to scan, enabling 'visitors' to zoom in on their items of interest.

• Article feed - this alerts readers whenever there are new articles and web contents available.

• Forum feed - this allows users to receive forum posts and latest discussion topics.

• Schedule feed - this allows users (such as schools, clubs, and other organizations) to broadcast events and announce schedule changes or meeting agendas.

• Discounts or Special feed - this is used to enable users (such as retail and online stores) to 'deliver' latest specials and discounted offers.

• Ego or News Monitoring - this enables users to receive 'filtered' headlines or news that are based on a specific phrase or keyword.

• Industry-specific feed - used by technical professionals in order to market, promote, or communicate with current (and prospective) customers and clients within their specific industries.

RSS feeds enable people to track numerous blogs and news sources at the same time. To produce an RSS feed, all you need is the content or the article that you want to publicize and a validated RSS text file. Once your text file is registered at various aggregators (or 'news readers'), any external site can then capture and display your RSS feed, automatically updating them whenever you update your RSS file.

RSS tools are useful for sites that add or modify their contents on a regular basis. They are especially used for 'web syndication' or activities that involve regular updates and/or publications, such as the following:

• News websites - as used by major news organizations such as Reuters, CNN, and the BBC.
• Marketing
• Bug reports
• Personal weblogs

There are many benefits to using RSS feeds. Aside from being a great supplemental communication method that streamlines the communication needs of various sectors, RSS tools and feeds can also have tremendous benefits in your business, particularly in the field of internet marketing.

RSS tools and feeds provide Internet users with a free (or cheap) and easy advertising or online marketing opportunity for their businesses. Below are some of the RSS features that can help make your internet marketing strategies more effective.

1. Ease in content distribution services. With RSS, your business can be captured and displayed by virtually any external site, giving you an easy way to 'spread out' and advertise them.

2. Ease in regular content updates. With RSS, web contents concerning your business can now be automatically updated on a daily (and even hourly) basis. Internet users will be able to experience 'real time' updates as information in your own file (such as new products and other business-related releases) is changed and modified simultaneously with that of the RSS feeds that people are subscribed to.

3. Custom-made content services. With RSS, visitors can have personalized content services, allowing them total control of the flow and type of information that they receive. Depending on their interests and needs, visitors can subscribe to only those contents that they are looking for (such as real estate or job listings).

4. Increase in (and targeted) traffic. With RSS, traffic will be directed to your site as readers of your content summary (or 1 to 2 lines of your article) who find them interesting are 'forced' to click on a link back to your site.

These are just several of the many things that you can do with RSS. The possibilities are endless, and they are all aimed at providing you with an effective internet marketing strategy for your business.

In the mean time, Good Luck on your journey to success…

OR if you would like to succeed immediately to create financial freedom working only 4 hours a week, check out www.secrets2internetfortunes.com

Sabtu, 17 Januari 2009

Disable USB Ports

n Active Directory Users and Computers, open an existing GPO or create a new one and open it. Use the security settings of that GPO to specify which computers it affects.

In that GPO, go to Computer Configuration – Windows Settings – Security Settings – File System and create a new entry (right-click File System and select Add File). Specify the location of USBSTOR.INF (usually SystemRoot%\Inf\USBSTOR.INF)
Change the security settings of the new entry. The security settings that you specify here will be enforced on the USBSTOR.INF of every computer to which the GPO is applied. This process is not additive, which means that the previous security settings of USBSTOR.INF will be overwritten by the ones given in the GPO. It is therefore recommended to grant full control to SYSTEM and local administrators. But unlike in the default security settings of USBSTOR.INF, you should not grant any priviledges to Everybody. You do not need to explicitly deny access – just omit an entry for Everybody. Optionally, you can grant read access to a certain group. Members of this group will be able to use USB storage.
Repeat the above two steps for USBSTOR.PNF.


Back in the GPO, right-click Administrative Templates under Computer Configuration and select Add/Remove Templates. Click Add and browse to the location of USBSTOR.ADM. Close the dialog.

You should now have an additional entry called Services and Drivers in Administrative Templates. Click on it. If it is empty, select View from the menu and uncheck Show Policies Only. Click back on Services and Drivers in Administrative Templates. It should now show the USB Storage policy. Double click it, select Enabled and pick Disabled from the Startup Type drop down. Again, the policy must be enabled wheras Startup Type must be Disabled.
Close the dialog as well as the GPO and boot/reboot one of your workstations. Make sure no USB strorage device is connected to that computer. Log on with administrative privileges and check the permissions of USBSTOR.INF and USBSTOR.PNF. Check the value of the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor\Start. It should be 4. It is also ok if the UsbStor key doesn't exist at all.
On the same workstation, log off and back on as a user that should not have access to USB storage. Connect a USB memory stick or a similar device. Nothing should happen. Remove the memory stick.

Log on as a user that should have access to USB storage and execute net start usbstor in a command shell or at Start – Run before connecting the memory stick. The memory stick should initialized and mapped to a drive letter. If USBSTOR fails to start, it's probably because this is the first time a memory stick is plugged into the workstation in which case USBSTOR is not yet installed. Nevertheless, the memory stick should be initialized and mapped correctly but you need to reboot in order to reapply the administrative template such that USBSTOR is disabled again. Alternatively, you can disable it manually by downloading and double clicking USBSTOR.REG as well as executing net stop usbstor.

Instruct the users with access to USB storage that they need to execute net start usbstor before they can connect a USB storage device.

Jumat, 16 Januari 2009

Firefox keyboard shortcuts

CTRL + A Select all text on a webpage

CTRL + B Open the Bookmarks sidebar

CTRL + C Copy the selected text to the Windows clipboard

CTRL + D Bookmark the current webpage

CTRL + F Find text within the current webpage

CTRL + G Find more text within the same webpage

CTRL + H Opens the webpage History sidebar

CTRL + I Open the Bookmarks sidebar
CTRL + J Opens the Download Dialogue Box

CTRL + K Places the cursor in the Web Search box ready to type your search

CTRL + L Places the cursor into the URL box ready to type a website address

CTRL + M Opens your mail program (if you have one) to create a new email message CTRL + N Opens a new Firefox window
CTRL + O Open a local file

CTRL + P Print the current webpage

CTRL + R Reloads the current webpage

CTRL + S Save the current webpage on your PC

CTRL + T Opens a new Firefox Tab

CTRL + U View the page source of the current webpage

CTRL + V Paste the contents of the Windows clipboard

CTRL + W Closes the current Firefox Tab or Window (if more than one tab is open) CTRL + X Cut the selected text CTRL + Z Undo the last action

Troubleshooting Computer Freezes / Lockups

1. Check for recently installed software or hardware.

If the lockups started to happen after you installed a new peace of hardware, new software program, or new drivers, uninstall it and see if the problem goes away. If you don't know what software you installed recently or don't know what changes made your computer crash, you can try System Restore which comes with XP. It restores your computer to a previous working state. Run the application from here: Start Menu -> Programs -> Accessories -> System Tools -> System Restore.

2. Run your antivirus program.

One of the first things to do in the case of sudden lockups is to run your antivirus program. Check your antivirus manufacturer's website for updates and latest virus definition files. (This is absolutely necessary, outdated antivirus is not going to be of any use!) If you don't have antivirus software installed - or if updates are unavailable - run one of the web-based antivirus scans that some major antivirus vendors like Trend Micro are offering for free.

3. Run some good spyware removal tool.

If your machine is not infected with any viruses, it is still possible that it has some harmful adware or spyware is present. Download and run some good spyware removal tool such as AdAware, Spybot S&D or SpywareBlaster. These tools are superb spyware prevention tools and provide regular updates.
4. Check for free hard drive space.

When no viruses are found, check out free hard drive space on drive C:. Make sure there is more than 20% of free space available; low disk space can lead to random lockups.

5. Check for overheating.

Overheating is another known cause of lockups. It can be caused by problems with fans inside the case, dust buildup, or other cooling problems. Make sure the power supply fan and CPU fan are running and free of dust buildup. You can check the temperatures inside the case by running Motherboard monitor http://mbm.livewiredev.com- make sure the temperatures are within the preset limits. Be very careful while cleaning inside the computer case (use plastic vacuum crevice tool) and NEVER OPEN THE POWER SUPPLY CASE as it contains high voltage.

6. Check the hard disk.

Check the hard disk - it is possible that its logical structure is corrupted. To check the disk for errors, right-click on the disk C: icon in "My Computer", select the "Tools" tab, check all check boxes in the "Check disk options" field, and press the "Check now" button. It should ask whether you want to schedule the check next time you restart your computer - answer "Yes" and restart your PC. The check will be performed automatically after startup; it can take a while, so be patient. The program will attempt to fix some problems automatically – however, if the hard disk is failing physically, it will need to be replaced. It is also a good idea to run Disk Defragmenter (located in Start Menu > Programs > Accessories > System Tools) to optimize data placement on the hard disk for increased performance and reliability.

7. Check the memory.

Sometimes random lockups can be attributed to the computer memory (RAM) starting to fail. You can test the memory by running Windows Memory Diagnostic that can be downloaded from Microsoft Online Crash Analysis If memory problems are found, try re-seating the RAM (pull it out and plug it back in). If it doesn't work, replace the defective RAM.

8. Check for other hardware problems (advanced users).

More hardware-related problems can be diagnosed by running hardware tests from the Ultimate Boot CD that can be downloaded from Ultimate Boot CD - Overview However, you should only use it if you know what are you doing - some programs on that CD can be dangerous when used inappropriately (for example, some of them can wipe the contents of your hard disk).

9. Update Windows and drivers.

Some lockups can be caused by outdated software components. Everyone should ensure their Windows Updates are on automatic (Control Panel -> Automatic Updates). Set and forget - Windows will remember for you. (As an alternative you may want to run a windows update: http://windowsupdate.microsoft.com). Also ensure you regularly update all your hardware drivers from vendors' websites. These contain bug fixes and resolves compatibility issues with other hardware.

The above steps will help diagnose and eliminate the most common causes of lockups. Hundreds more of other possible scenarios need to be dealt with on a case-by-case basis, as it all goes down to your particular computer configuration. Asking in troubleshooting forums/newsgroups should help you figure out solutions to not-so-obvious lockup cases.

51 Run Commands In Windows Xp

Run command are very useful, but sometimes you are not able to remember them. Use these commands and you will find how powerful they are.

1. Accessibility Controls - access.cpl
2. Accessibility Wizard - accwiz
3. Add Hardware Wizard - hdwwiz.cpl
4. Add/Remove Programs - appwiz.cpl
5. Administrative Tools - control admintools
6. Automatic Updates - wuaucpl.cpl
7. Bluetooth Transfer Wizard - fsquirt
8. Calculator - calc
9. Certificate Manager - certmgr.msc
10. Character Map - charmap
11. Check Disk Utility - chkdsk
12. Clipboard Viewer - clipbrd
13. Command Prompt - cmd
14. Component Services - dcomcnfg
15. computer - compmgmt.msc
16. Control Panel - control
17. Date and Time Properties - timedate.cpl
18. DDE Shares - ddeshare
19. Device Manager - devmgmt.msc
20. Direct X Troubleshooter - dxdiag
21. Disk Cleanup Utility - cleanmgr
22. Disk Defragment - dfrg.msc
23. Disk Management - diskmgmt.msc
24. Disk Partition Manager - diskpart
25. Display Properties - control desktop
26. Display Properties - desk.cpl
27. Dr. Watson System Troubleshooting Utility - drwtsn32
28. Driver Verifier Utility - verifier
29. Event Viewer - eventvwr.msc
30. Files and Transfer Tool - migwiz
31. File Signature Verification Tool - sigverif
32. Findfast - findfast.cpl
33. Firefox - firefox
34. Folders Properties - control folders
35. Fonts - control fonts
36. Fonts Folder - fonts
37. Free Cell Card Game - freecell
38. Game Controllers - joy.cpl
39. Group Policy Editor (for xp professional) - gpedit.msc
40. Hearts Card Game - mshearts
41. Help and Support - helpctr
42. HyperTerminal - hypertrm
43. Iexpress Wizard - iexpress
44. Indexing Service - ciadv.msc
45. Internet Connection Wizard - icwconn1
46. Internet Explorer - iexplore
47. Internet Properties - inetcpl.cpl
48. Keyboard Properties - control keyboard
49. Local Security Settings - secpol.msc
50. Local Users and Groups - lusrmgr.msc
51. Logs You Out Of Windows - logoff