close
  Stumble Tweaks & TricksDiscussion

Got A SECURITY Tip ? Post it Here



JackCuStoweOct 24, 2007 12:04pm
Services are often run with default settings -- for example, a service may be disabled automatically at startup. However, you can use the Services snap-in to change the default settings for a service. This is useful if you are troubleshooting service failures or if you need to change the security account under which a service runs. Membership in Account Operators or Domain Admins, Enterprise Admins, or equivalent, is the minimum required to complete this procedure. Review the details in "Additional considerations" in this topic. Configuring how a service is started To configure how a service is started using the Windows interface
  1. Optionally, export and save a list of the existing settings. To do this, in the console tree, right-click the Services node, select Export List, and save the settings list.
  2. In the details pane, right-click the service that you want to configure, and then click Properties.
  3. On the General tab, in Startup type, click Automatic, Manual, Disabled, or Delayed Start.
  4. To specify the user account that the service can use to log on, click the Log On tab, and then do one of the following:
    • To specify that the service uses the Local System account, click Local System account.

    • To specify that the service uses the Local Service account, click This account, and then type NT AUTHORITY\LocalService.

    • To specify that the service uses the Network Service account, click This account, and then type NT AUTHORITY\NetworkService.

    • To specify another account, click This account, click Browse, and then specify a user account in the Select User dialog box. When you are finished, click OK.

  5. Type the password for the user account in Password and in Confirm password, and then click OK. If you select the Local Service account or Network Service account, the password must be blank.
To configure how a service is started using the command line
  • You can also manage services using the sc config command. For more information about the options available, open a command prompt and type sc config /?. For detailed descriptions of the command-line options as well as examples, see the command-line reference at go.microsoft.com/fwlink/ [go.microsoft.com/fwlink/].

Additional considerations
  • To perform this procedure, you must be a member of the Account Operators group, the Domain Admins group, the Enterprise Admins group, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure.

  • Changing the default service settings might prevent key services from running correctly. It is especially important to use caution when changing the Startup Type and Log On As settings of services that are configured to start automatically.

  • In most cases, we recommend that you not change the Allow service to interact with desktop setting. If you allow the service to interact with the desktop, any information that the service displays on the desktop will also be displayed on an interactive user's desktop. A malicious user could then take control of the service or attack it from the interactive desktop.

  • The Local Service account and Network Service account are configured with a null password. The password information you supply is ignored.

  • We recommend that user accounts that are used to log on as a service have the Password never expires check box selected in their Properties dialog box and that they have strong passwords.

  • If account lockout policy is enabled and the account is locked out, the service will not start.

  • If you enable or disable a service and you encounter a problem starting the computer, you can start the computer in Safe Mode. In Safe Mode, core services that are required to start the operating system are started in a default scheme, regardless of any changes that are made to the service settings. After the computer is in Safe Mode, you can change the service configuration or restore the default configuration.

  • If you specify an account that does not have permission to log on as a service, the Services snap-in automatically grants the appropriate permissions to that account on the computer that you are managing.

  • For more information about configuring the Windows Time service, see go.microsoft.com/fwlink/ [go.microsoft.com/fwlink/].

Additional references For more information about the user accounts that a service uses to log on, see the list of default services and their default settings at go.microsoft.com/fwlink/ [go.microsoft.com/fwlink/].


DaTechGuyOct 25, 2007 6:34am
Windows Update Broken...?

Addressing a Windows Update failure after repairing from XP CD

Posted by Nick White Microsoft/Windows Update Program Manager Nate Clinton has just posted on an issue we've learned of that affects some users of Windows Update repairing their systems using a Windows XP CD. The symptom is that some Windows XP customers are unable to install --->Read the Article

14 Comments


TeddyChicagoOct 28, 2007 11:16am
Leopard hacked Already To Run on your Pc!


Posted Oct 27th 2007 9:05PM by Paul Miller

Filed under: Desktops, Laptops

We've come to expect our Apple-related hacks early and user friendly these days, but we've still got mad respect for the folks at OSx86 Scene who've managed to get Mac OS X 10.5


Leopard up and running on Intel PCs on launch day -- the day before if you felt like being a bit less upright about it. The hack requires a minimum of trickery on your part: just a burnable DVD, USB thumb drive and a bit of luck. Not everything's super tested just yet, and OSx86 Scene will be expanding support and simplifying the process as time goes on, but this is sure a promising start.


Mac OS X 'Leopard' Hacked To Run On Generic Wintel Hardware ... Mac OS X 'Leopard' Hacked To Run On Generic Wintel Hardware
Posted by Mitch Wagner, Aug 15, 2007 01:16 PM spacer » E-Mail
» Print
» Write To Editor
» Digg
» Slashdot
spacer The bloggers at Profit42 posted instructions that they claim will get the upcoming version of Mac OS X, code-named
"Leopard," running on generic Wintel hardware.
Two catches: It's illegal to do, and they won't tell you where to get the software, because that would be illegal, too. The bloggers write: DISCLAIMER: This guide is for information purposes only! We only say what's possible. As you maybe already know, it is illegal to download OSX 10.5 Leopard and illegal to install OSX 10.5 Leopard on [your] Windows computer. If you are here for that purpose, leave this site now. If you want to use OSX,
buy a Mac (I would recommend the iMac that has been released a few days ago, it's fast and the design is just ...
well, let's say it's prettier than the girl you met yesterday). Wikipedia has a history of Mac clones.

Apple sanctioned clones 1995-97, but Steve Jobs ended the program when he took back control of the company.

Wikipedia says there was an earlier clone program: From 1986 to 1991, several manufacturers created Macintosh clones, including the portable

Outbound; however, in order to do so legally, they had to obtain official ROMs by purchasing one of Apple's Macintosh computers, remove the required parts from the donor, and then install those parts in the clone's case.


This resulted in very expensive, relatively unpopular clones.


Sponsor
ChicagoDadOct 29, 2007 2:36pm
What better gift could Apple ask for with the launch of its "Leopard" Mac OS X v. 10.5? How about a PR disaster surrounding Windows?

tinyurl.com/2ske27 [tinyurl.com/2ske27]


Now there's new anger over a new product update being pushed out, even if people don't run Windows Update. The product revision in question is Windows Desktop Search 3.01 (WDS), which Microsoft had been pushing out with Windows Live automatically. Some users charge that it seems as if the new version is being pushed out with any Windows update.



Windows Desktop Search 3.01 (WDS), which Microsoft had been pushing out with Windows Live automatically.


source: internetnews.com

send email Send link 2 friend  |  Permalink


JackCuStoweOct 29, 2007 7:14pm
Erase the Junk

section: download, for your questions: KezNews forum, 29.10.2007Eraser is an advanced security tool (for Windows), which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.




Works with Windows 95, 98, ME, NT, 2000, XP, Windows 2003 Server and DOS.Eraser is Free software and its source code is released under GNU General Public License. The patterns used for overwriting are based on Peter Gutmann's paper "Secure Deletion of Data from Magnetic and Solid-State Memory" and they are selected to effectively remove magnetic remnants from the hard drive. Other methods include the one defined in the National Industrial Security Program Operating Manual of the US Department of Defence and overwriting with pseudorandom data. You can also define your own overwriting methods.

Eraser Features: * Erases Files and Folders.
* Erases Files/Folders that were only previously 'deleted'.
* Erases all hard drives using 'Darik's Boot and Nuke' method.
* Erases Encrypted Files and Drives.
* Erases FreeSpace on 95, 98, ME, NT, 2000, XP and DOS.
* Erases contents of the Recycle Bin.
* Erases Network Files, Floppy Disks, CD-RW, DVD-RAM, DVD-RW.
* Supports FAT32 and NTFS Files Systems
* Erases Compressed Files and Drives and more...



Download:
Eraser 5.85 (link 1)
Eraser 5.85 (link 2)
Eraser 5.85 (link 3)


SickBastardNov 12, 2007 11:45pm
How the Heck do I set up One of them their Routers ?


- How To: Setting up a Hardware Router
Let me start out by saying Do not Call Linksis or you get Ali and and a hand full of his friends...as they keep telling you to call back over and over about the same problem..Once it took 7 calls to fix a problem.....FYI
and...this comapany is Run By Cisco the BackBone Of the the internets ..Go Figure...

Image Hosted by ImageShack.us




Setting up a Hardware Router Short-term effort: Minimal
Long-term effort: Minimal
Required equipment: Router (like the SMC Barricade), one Ethernet cable to connect the router to the modem, one cable for connecting each computer to the router Getting Started The first step is plugging everything in. Most home routers will be like my SMC Barricade, with four 10/100-BaseT Ethernet ports and one WAN (Wide Area Network) port.


More : - How To: Setting up a Hardware Router

--------------------------------------------------------------------




What about those wireless devices ?

Network security tutorials » Secure your Wireless Network in 6 steps
Can't I just plug it in and surf wireless ?
oooO! Shiii#4#T!
You Mean...All my neighborers can use it too (thats nice )

and slow down my speed ....and even worse see everything i m doing?

Image Hosted by ImageShack.us

ok maybe i need to look into this wireless security thingie...


Network security tutorials » Secure your Wireless Network in 6 steps



CrazyBastardNov 26, 2007 3:50pm
How safe is online shopping with all the spoofers out there ?

Is your credit card information at risk this holiday season?Posted Nov 26th 2007 5:48PM by

Brian White
Filed under: Industry, Personal finance



The next time you're in a retail store paying for your purchase with a credit or debit card, you may want to take a deep breath. That credit card machine that verifies your customer status and credit line/checking account balance may be broadcasting that sensitive financial information right into the air. With the right equipment, data thieves may even be able to snatch it.


Similar to how some folks piggyback on their neighbors' Wi-Fi wireless internet connections, data thieves could be sitting outside the entrance to a local Best Buy (NYSE: BBY) or Target (NYSE: TGT) location just waiting to snatch those wireless transmissions from the air and possibly see all that personal, financial information. Yes, it's the kind used to steal one's identity.

According to some industry watchers, purchasing goods this holiday season using a website and credit card may actually be safer than swiping a physical card at a retail location just due to the security provided. Are those wireless credit card machines securely encrypted at all your favorite retail locations?

Sounds odd, but it never hurts to ask for a store manager and see what the answer is. Otherwise, one of those retailers could be broadcasting your information to whoever is listening just outside the door. With millions of credit card transactions set to take place in the next month, perhaps the information technology teams of these retailers should ensure customer information is completely protected.


Sponsor
ChicagoDadNov 27, 2007 5:16pm
Microsoft Critical Patch Updates November 13, 2007Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460): MS07-061
Vulnerability in DNS Could Allow Spoofing (941672): MS07-062
Last Month's Microsoft Security Patches & Updates Popular Resources red arrow Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution: MS07-055: MS07-051 red arrow Security Update for Outlook Express and Windows Mail (941202): MS07-056
red arrow Cumulative Security Update for Internet Explorer (939653): MS07-057 red arrow Vulnerability in Microsoft Word Could Allow Remote Code Execution (942695): MS07-060


BlackHatDec 3, 2007 10:52am
whats this ip public and private ip stuff?
showmyip.com/glossary.php [showmyip.com/glossary.php]
privacy-ecosystem.com [privacy-ecosystem.com]



advanced links:  (stuff I have no Clue about)

ttp://www.opensourceprivacy.org/ coming soon, to be a resource for Open Source software, projects and solutions to help you take care of, and take charge of, your Privacy. For example:
>>> The GNU Privacy Guard, a complete and free implementation of the OpenPGP standard as defined by RFC2440.
>>> How to validate a PGP key, by Juliusz Chroboczek, author of the Polipo caching web proxy.
>>> Incognito the bootable CD (that can be copied to a USB drive) based on Tor, that appears to set the standard for anonymous internet use from any computer.
>>> OpenSSL the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) toolkit and crypto libary.
>>> PuTTY an SSH (secure shell) client for Win32 and Linux.
>>> WinSCP an SFTP (secure ftp) client for Windows.
>>> stunnel the multiplatform SSL tunneling proxy.
>>> Nmap Security Scanner for network exploration and security auditing.
>>> Wireshark the Network Protocol Analyzer. (formerly "Ethereal")
>>> Snort the de facto standard for IDS Intrusion Detection and Prevention.
>>> TrueCrypt the Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP/2000 and Linux.
>>> OpenVPN the full-featured SSL VPN.
>>> Security Engineering - A Guide to Building Dependable Distributed Systems by Ross Anderson, is now available free as a download.
  • Flash/AJAX-based drag-n-drop Email Detox service coming soon. We will post details to ippages.com/emaildetox.php [ippages.com/emaildetox.php] as they become available. This service will allow you to drag-n-drop your email to our "detox" program on your desktop, giving you complete details on where it came from, what sorts of nasty surprises it contains, and whether we recommend you delete it.


  • ChocolateRainDec 3, 2007 7:08pm
    Is OpenVpn the next Rage?
    openvpn.net [openvpn.net]

    OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls (articles) (examples) (security overview) (non-english languages).
    untangle.com
    OpenVPN implements OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN is not a web application proxy and does not operate through a web browser.



    OpenVPN runs on: Linux, Windows 2000/XP and higher, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris. An OpenVPN PocketPC port is under development.
    With OpenVPN, you can:
    • tunnel any IP subnetwork or virtual ethernet adapter over a single UDP or TCP port,
    • configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients,
    • use all of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic as it transits the internet,
    • use any cipher, key size, or HMAC digest (for datagram integrity checking) supported by the OpenSSL library,
    • choose between static-key based conventional encryption or certificate-based public key encryption,
    • use static, pre-shared keys or TLS-based dynamic key exchange,
    • use real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization,
    • tunnel networks whose public endpoints are dynamic such as DHCP or dial-in clients,
    • tunnel networks through connection-oriented stateful firewalls without having to use explicit firewall rules,
    • tunnel networks over NAT,
    • create secure ethernet bridges using virtual tap devices, and
    • control OpenVPN using a GUI on Windows or Mac OS X.


    Got A SECURITY Tip ? Post it Here