In Through The Out Door

MBR Rootkit, A New Breed of Malware

Well almost. Many many years ago the “first” pc virus named “Brain” was also an MBR
RK that worked on Int13 also. This new one starts out in the same fashion.

Today Microsoft launched a blog about the internals of their IT security research and patch development process. There are already some posts that you will not find in the official security bulletins or KB articles. One of the posts says, ‘We periodically identify workarounds or mitigations like this that we can’t use for [...]

No royalties to pay in interop deal?
The Samba team has reached an agreement with Microsoft, with the software giant agreeing to disclose technical and legal information to the software libre project. Samba is by far the most widely-used software stack that allows non-Microsoft computer to talk to Windows machines, and use proprietary Microsoft network services.…
[From [...]

The software maker creates a single business unit, called Connected TV, to handle its Internet Protocol television, Media Center PC, and HD DVD efforts. [From Microsoft quietly combines TV efforts]

(MS07-062)

Xen or VMWare?

Two days after VMWare had one of the most successful IPOs on recent years, and one day after XenSource announces that it is being acquired by Citrix. Money is flowing into the two major virtualization players at a rate we haven’t yet seen, what are your feelings about using Xen or VMWare on Linux?

Russia’s Bomber Force Resumes Long-Range Patrolling:Russia’s strategic bombers have not ranged far from home since the collapse of the Soviet Union. But Vladimir Putin orders the resumption of long-range missions, mostly to give the American flyboys something to think about.

Teredo is a platform-independent protocol developed by Microsoft, which is enabled by default in Windows Vista. Teredo provides a way for nodes located behind an IPv4 NAT to connect to IPv6 nodes on the Internet. However, by tunneling IPv6 traffic over IPv4 UDP through the NAT and directly to the end node, Teredo raises some security concerns.

Best Freeware Utilities: Again, this post is slightly off topic since I’m on vacation, but I wanted to point out a source for good freeware utilities for Windows.  I was looking for a good Windows outliner program and not having much luck and my Java Flex guru buddy Bruce Eckel pointed this site out to me.  If you’re looking for a bit torrent client, a photo organizer, HTML editor, registry editor or any of a few dozen other items, this site will spare you the tedious research. The recommended outliner, Keynote, is available under an open source license, but it’s no longer in active development.

FBI Finds Abuse In Getting Terrorism, Spy Records:Use TOR, anonymous remailers, etc to protect yourself. It’s a large mean jungle out there. Remember not long ago when Google refused to give up customer data? Well it seems now US ISPs are giving out more data than they have too.

How You Can Fight Cybercrime

Tools that manage PCs, Macs

Cain & Abel 4.9.3:A password recovery tool for Microsoft Operating Systems.[License: Freeware| Requires: Win All | Size: 5.96 Mb]It will light up many AV…

Microsoft promises not to sue Linux peopleLOL !!!

Mark Russinovich on Windows Kernel Security:An anonymous reader writes to mention that in the final part of his three part series, Mark Russinovich wraps up his look at changes made in the Windows Vista Kernel by exploring advancements in reliability, recovery, and security. “Applications written for Windows Vista can, with very little effort, gain automatic error recovery capabilities by using the new transactional support in NTFS and the registry with the Kernel Transaction Manager. When an application wants to make a number of related changes, it can either create a Distributed Transaction Coordinator (DTC) transaction and a KTM transaction handle, or create a KTM handle directly and associate the modifications of the files and registry keys with the transaction. If all the changes succeed, the application commits the transaction and the changes are applied, but at any time up to that point the application can roll back the transaction and the changes are then discarded.”

Schneier on Vista’s DRM provisions:Security expert Bruce Schneier has written an interesting essay about Vista…. These features will make your computer less reliable and less secure. They’ll make your computer less stable and run slower…. They may even require you to upgrade some of your peripheral hardware and existing software…. They’re digital rights management (DRM) features built into Vista at the behest of the entertainment industry.

Windows Vista Launch:  Ok, I thought this Windows Vista Upgrade Decision Flowchart was kind of funny.  (Click on the link below and then open up the PDF.) The weird thing is everyone’s been talking about LongHorn Vista for so friggin’ long, I didn’t even realize it was launching this week.  It was five years in the making, so I’m sure it’s an improvement over XP, but does it really matter any more? For a slightly more serious perspective, check out John Stewart’s interview with Bill Gates from the Daily Show via YouTube or read the reviews below. BBSpot: Windows Vista Upgrade Decision Flowchart YouTube: Bill Gates on the Daily Show YouTube: Apple Ad Spoof MIT Technology Review: Uninspiring Vista WSJ: Vista: Worthy, Largely Unexciting OnDisruption: Vista Overshoots Market PC Mag: Vista: The Ho-Hum Launch, Does Vista Matter?

He’s not terribly impressedAfter months of testing Vista on multiple computers, new and old, I believe it is the best version of Windows that Microsoft has produced…. Windows hasn;t been given nearly as radical an overhaul as Microsoft just applied to its other big product, Office.Nearly all of the major, visible new features in Vista are already available in Apple’s operating system, called Mac OS X, which came out in 2001 and received its last major upgrade in 2005. And Apple is about to leap ahead again with a new version of OS X, called Leopard, due this spring.There are some big downsides to this new version of Windows. To get the full benefits of Vista, especially the new look and user interface, which is called Aero, you will need a hefty new computer, or a hefty one that you purchased fairly recently…. They will be able to run only a stripped-down version, and even then may run very slowly.In fact, in my tests, some elements of Vista could be maddeningly slow even on new, well-configured computers Also, despite Vista’s claimed security improvements, you will still have to run, and keep updating, security programs, which can be annoying and burdensome.

Definitive Guide: Windows Vista

Brief: Exploit released for unpatched ActiveX flaw:

Exploit released for unpatched ActiveX flaw