Categories
Uncategorized

Security & SXSW data

While my local posts have been light on the security front, I have been doing a bit of the data aggregation of content on social networks and a bit of testing of my own. Recent subjects here cover removed content on these networks and spring boards into becoming the new propaganda mechanism to replace the television. #JustinBieber, so on and so forth.

I got to explain what a hashtag is to my grandparents yesterday, that was quite funny. Speaking of the subject, do not forget that Windows XP end of life support is coming quite soon. April 8th 2014 to be exact.

I have deployed some 2012 Server installs. Granted I had to regHack 2008 compatibility back in quite a bit, largely because Windows 8 removed the config options, but the registry remains intact. Core services tend to operate as in 2008 / 2003, for the most part.

Anyhow, Enjoy some Snowden and Assange talks. You are likely aware of the global surveillance happening, that has been for a decade or so by GCHQ and NSA. These talks from 2014-03-08 will encapsulate the current state of these. Keep on keeping on friends. :)

(Julian Assange @ SXSW)

(Edward Snowden @ SXSW)
These are remote videos, because both are in exile.

Categories
Uncategorized

DNS Router Malware

Check your DNS servers, because many vendors have exploited flaws that allow the routers to be changed to new DNS servers. Man In the Middle, yeah an alternate DNS server will certainly allow this type of attack.

300,000+ Routers Hijacked

Affected devices had their DNS settings changed to use the IP addresses 5.45.75.11 and 5.45.75.36. As with the DNS Changer malware, unwitting victims are vulnerable to a loss of service if the malicious servers are taken down, as both primary and secondary! DNS IP addresses are overwritten, complicating mitigation.

Categories
Uncategorized

Card Prox RFID Fun

Hey. I may have worked in the badge industry, so this video I came into about Prox and RFID card cloning and ID collection is pretty enjoyable to me. Card Formats for building access, and many other cards like Credit Cards are into this stuff.

Quite silly because the old technology is in fact quite active, as of a few years ago when I was working that environment. Facility Codes, Badge Numbers and Card Formats. Such common terms we used. Especially when migrating an old system to your software platform of access control.

I did not do this talk, it is really good and hits on many terms and topics. Highly recommended if you are into the subject.

Categories
Uncategorized

Linux – GRUB Changing Boot order

The methods for modifying your default system start have changed quite a bit over the last few years.  I will add more details to this thread as I experiment, and this will be my main source, for it is written up very well and loaded with info!

https://top-hat-sec.com/forum/index.php?topic=3813.0

– Actually, I just edited the “set default=”0″” parameter to define the default option.  Zero index, so count the menuentry item you want 1st, then subtract one from it and change the param.

Spoiler edition / TL;DR

    [*]open your grub.cfg, but do not edit that file
    (command) gksu leafpad /boot/grub/grub.cfg
    [*]search for menuentry in this listing.  Find the OS choices you want.
    [*]open 40_custom and add the menuentry items in the sequence you wish to have your boot order
    (command) gksu leafpad /etc/grub.d/40_custom
    [*]After pasting in the proper and desired ‘menuentry’ items, save the file.
    [*]Backup grub.cfg to a sub-folder and remove it from /boot/grub/ folder.
    [*]Also backup into a sub-folder 30_os-prober & 10_linux (then remove from main folder) which can be found in: /etc/grub.d/
    [*](command) update-grub
    [*]Reboot and see if it worked
     
    [/list]

    gksu may be redundant as root, but it is a good practice to be in, for other distros as a regular user level account.

    The guide also covers custom splash screens and stuff.  Fun, but I have some other things to finish up on first :)

Categories
Uncategorized

Acer Tablet Icona A500

Project to resolve a hard lock screen issue.  Quite a few people are also seeing this issue over the last year.

Work in progress. 
http://community.acer.com/t5/Android-Tablets/Iconia-A500-frozen-at-Acer-logo-boot-screen/td-p/7171/page/4http://community.acer.com/t5/Android-Tablets/Iconia-A500-frozen-at-Acer-logo-boot-screen/td-p/7171/page/4

 

http://community.acer.com/t5/Android-Tablets/Iconia-A500-frozen-at-Acer-logo-boot-screen/m-p/107683
 

Categories
Uncategorized

TPP (STOP) Trans Pacific Partnership

We were the Library portion from http://moveon.org. Hello, I an Ryan Mkowski from Anonymous. I spoke and handed out cards for this domain @ BlissPC.com.

This post is in relation to World Bank Group. Wikipedia info I covered. http://en.m.wikipedia.org/wiki/World_Bank_Group – Mobile
– member banks include:

    [*]Goldman Sachs
    [*]Bank of America
    [*]Citibank
    [*]International Monetary Fund IMF @ WikiPedia
    [/list]

    (More will be added)
    [url=”https://www.youtube.com/watch?v=c7E9SUwlooE”]https://www.youtube.com/watch?v=c7E9SUwlooE[/url]

    As I spoke about World Bank Group at the event, here are some very good notes about the Jesuits.  They are one of the main power families in this web of corruption.

    – thanks go to: Ben Fankhauser
    “The Jesuits where banned in 83 countries , so they had to come up with a plan to remain power) The Bavarian Illuminati was born in 1776 , (Jesuit Adam Weishaupt was trained on Ingolstadt University which is a Jesuit institution) since then all These Papal Jews (Like The Rotschilds and Rockefellers) have gotten all the Important Positions (Knights of malta) , This is why most researchers end up Blaming the Jews in General OR only blame The Zionists while all these powerful Masonic Labour Zionists are Knighted into The Vatican Knighthoods and are all Catholic. Its The Jesuits that control it ALL. The Ptolemaic Papal Bloodlines give advice to the Jesuit generals and are more powerful then for example The English Queen who is part of the Black Venetian Nobility Bloodlines.”

    As for Karen Hudes (World Bank Whistle-blower), here is her Facebook and personal website address.  She is an excellent resource!
    https://www.facebook.com/karen.hudes.9
    http://kahudes.net/

    – invite details –
    ☆YOU’RE INVITED!☆
    Take Action
    Wednesday in Penfield

    Host: Paul F.

    Where: Public Library, Ruth Braman Room (in Penfield)

    When: Wednesday at 7:00 PM EST

    1985 Baird Road
    Penfield, NY 14526

    I will add more info to this post. Also about Group of Eight.
    https://en.wikipedia.org/wiki/Group_of_8]Group of 8[/url] @ WikiPedia

    Full Link to World Bank Group article on WikiPedia:
    https://en.wikipedia.org/wiki/World_Bank_Group

Categories
Uncategorized

How to Hacking

I shared a brief opinion on how to get into hacking and it got a few favorable replies.  Sharing because it’s more a state of mind and lifestyle choice, than reading a guide and following steps.
 

Also if you have an old hard drive and install CD for whatever operating system. Be ready to reinstall, if you want to learn much about tinkering.

Also ask yourself many questions. Take a known process and come up with an alternate means to get a similar or swifter objective. Hacking is vasty more than accessing other remote systems by unintended means. Ask questions forever and you are da haxor.

P.S.  Use your Imagination.  It’s the most essential part, imo.

 

This will not have you making animated GIF viruses or logging into remote systems, but it’s a legit method for learning more about things and having fun in the process.  Luckily I’ve been of the quoted mindset since before I can remember.  I’ll thank Atari and Nintendo.  Those games were damn hard to play when you are in single digits of your life :wub:

If one of your thoughts or ideas for something fails to work, you may find that technique help on some other later project.  Think and explore.  Of course you can also read guides and videos, just be sure to put your own spin on it and think about why what worked, and what else might also.

 

 

 

Attached Thumbnails

  • ANON-COOKIES.jpg

Categories
Uncategorized

RAID0 SSD configs (and post RAID benchmarks)

Howdy and Yo.  This thread is about my experience with RAID0 and my current plans to break my array and just run from a single drive.   Reading around my hardware threads since I built my current rig, you’d see I started with 2x 90GB Corsair Force GT drives and also have a single Samsung 840 Pro SSD.   My main reason for breaking the array combos up with:

a.  One of the drives is giving a ‘S.M.A.R.T. Event (0)’ but it is still currently functional.

b.  Cannot see my RAID array in Linux via the Intel SSD controller on my motherboard.

c.  Updating Firmware and having TRIM support on RAID0 arrays doesn’t really work well.  This seems to be the case across the OEMs, not just with Corsair & SandForce chipsets.

 

Instead of trying to port my current OS install, I’m just backing up user data and reinstalling fresh.  Biggest time sync will be re-downloading Steam and other games. :p

 

On the upside, I will be looking to pop the non-error 90GB SDD into my PS3.  I hope to make GTA V real happy like. :D

(SSD installed in PS3) Only 1 second quicker initial game load up.  XMB is much faster however.

 

PC wise I would say I hardly notice a difference back on one SSD, instead of RAID0.  I noticed slightly more “hourglass” time on a reboot after logging in, but I was also installing a ton of Windows updates after the fresh OS install.  Adding the previous SMART event and other trade offs from running an array over a 2nd drive, I say one is fine for my purposes and having better feature and fail-over support.

 

PC applications do load slower enough to see an hourglass.  Firefox is my most visible (and only actual one I noticed) case of this.  Besides that I say GIMP loads exactly as fast.  YMMV, but this Samsung 840 Pro is otherwise mostly equal to the Corsair Force GT’s in RAID0.

 

ATTO Benchmarks for each SSD in single drive mode.  Additional info can be found in my SSD vs Benchmark thread from April.
I am lazy, so the C: photo is the Samsung, G: is the Corsair Force GT single drive.

Attached Thumbnails

  • ATTO_Corsair_ForceGT-SATA6.png

  • ATTO_Samsung_840-SATA6.png

Categories
Uncategorized

Partition Recovery

I recall this question coming up before but never could find the old thread, so here’s a new one.  The situation is one of your HDDs gives you the dreaded ‘unallocated partition’ display in Disk Management, as you were wondering why you had no partitions display for that drive.

 

You likely have a corrupted boot table, but fear not (yet).  You might be able to run TestDisk to fix that partition table and get back into your prior files, completely intact.

 

Read the wiki carefully before running the program, since partition writes are something you don’t want to do on the wrong drive and paying attention may pay off nicely for you.  It would appear you need to run this program sequence for each partition to be restored.

 

To be safe, I recovered the 1st partition and am migrating my data, before restoring whatever is on the smaller 2nd partition.  Happy Data recon and partition recovery. :wub:

 

edit:

As for the 2nd partition, my issue actually comes from reporting that the end and start of the 2nd partition intersect one another.  Mighty glad I backed up the 1st data partition before getting data from the second one.

To recover the 2nd partition, I used the browse option in TestDisk (‘P’ to view files I think it was).  When viewing the file structure, you can select the folder and copy it to another disk on your rig.  Be warned, the file browsing folder recovery is a very slow process.  Just under a 1000 files around 80GB, took probably 6+ hours to copy by this method.

 

Despite being slow, all files did copy from the sub-partition successfully.   That old drive needs a repartition, of only 1 for that drive. :p

Categories
Uncategorized

Autodesk support

I searched but didn’t see a dedicated thread, yet made.  Welcome because I’ve found some silly things in supporting Autodesk / Autocad environments over the last year+.

 

Today’s issue was relating to an error 29001 and 500.21 error coming from IIS.  My Server OS is Windows 2012 x64 and software in question is Autodesk Vault Basic 2013.  Below is the dialog box verbage I was given.

 

 

Error 29001.  Vault management error: IIS 8.0 Detailed Error – 500.21 – Internal Server Error

 

 

Let me also state that the installer for 2013 Vault will bark about the IIS version before it starts to install.  To move past this, just stop IIS, recheck requirements in the installer and it should now pass.  Click Next / Continue once the pre-install check is clear, then Start IIS back up.

IIS 8.0 is not properly read by this installer, so it assumes it’s a conflicting web service.

 

Once proceeding beyond the requirements check, I got the error 29001 as quoted above.  Searched the internets, but found most info related to an older installer or another operating system.  All in all, no dice.  Per frustration, I tried the Vault Basic 2014 installer and only had an error about ASP test failing… hmm.

 

So, to fix this up, you’ll want to Add Roles and Features to your Server 2012 install.  Under Web Server, you’ll want:

 

    [*]ASP.NET 3.5
    [*]ASP.NET 4.5
    [/list]

     

    installed.  Selecting these will also add some prerequisite packages, you want to do this too.  Doing this enabled the 2014 installer to pass the pre-install check without issue, so I thought why not try the 2013 install again?  Worked this time for me.  Fantastic!

     

    Other steps I took, based off previous issues was to modify the IIS Application Pool.  Disabling 32 bit mode was a thing I had to do previously for Vault 2013 installs, so I applied the same to this install.

     

    Merry Autodesking and Good Luck!