ស្វែងរក

Showing posts with label Tips. Show all posts
Showing posts with label Tips. Show all posts

Thursday, September 12, 2013

The iPhone 5s and iPhone 5c: What you need to know


We're now in that funny in-between time: On Tuesday, Apple announced the new iPhone 5s and iPhone 5c, providing some information about both. We had a brief hands-on session with both of them. But now we have to wait a week and a half before we can actually get our own new phones and find out everything we want to know. In the meantime, here are our answers to some of the most pressing questions about the new smartphones, based on what Apple has told us and our own investigations.

The basics

When can I get the new iPhone models?
You can pre-order an iPhone 5c starting on Friday, September 13; the 5c will actually be available on September 20. The iPhone 5s will also be available on September 20, but Apple isn’t taking pre-orders for that model. These dates apply to the US, Australia, Canada, China, France, Germany, Hong Kong, Japan, Puerto Rico, Singapore, and the UK.
How much do the phones cost?
The iPhone 5c costs $99 for 16GB of storage or $199 for 32GB with a new two-year contract. Unlocked versions—without a contract—will cost $549 and $649, respectively. With the unlocked version, you can choose one that ships with a T-Mobile SIM card, or one without a SIM card at all. Both unlocked options work only with GSM networks.
The iPhone 5s costs $199 for 16GB, $299 for 32GB, or $399 for 64GB of storage with a new two-year contract. Without a contract, those same phones will cost $649, $749, and $849, respectively. As with the 5c, you can get the unlocked model for use with T-Mobile. (Apple’s site doesn’t currently list a no-SIM option for the 5s.)
Which carriers are offering the iPhone 5c and 5s?
In the U.S., your contract-carrier choices are AT&T, Sprint, and Verizon. As mentioned above, no-contract versions are available for use with T-Mobile or other GSM providers.
How much will it cost me to upgrade from my existing iPhone?
That depends on the carrier and type of contract you have. You can check your upgrade eligibility via Apple’s website.

How they compare

How does the 5c compare to the iPhone 5?
From a hardware perspective, the 5c is very similar to the iPhone 5: It uses the same processor (Apple’s A6), the same graphics circuitry, and the same screen. The main differences are that the 5c includes a slightly more capacious battery, compatibility with more bands of LTE, and an updated FaceTime HD camera that features larger pixels and a better backside-illumination sensor.
Apple says the performance of the 5c will be similar to that of the iPhone 5, except that the FaceTime HD camera offers better images. Indeed, in our brief hands-on with the iPhone 5c, the phone felt exactly as snappy and responsive as the iPhone 5 units we've been using for the past year. (We’ll of course be putting the 5c and the 5s through more rigorous testing when we get them.)
The 5c is also close to the same size and weight as the iPhone 5, but the 5c uses a very different exterior. Instead of an aluminum enclosure, the iPhone 5c features a plastic unibody design reminiscent of the old white-plastic MacBook. This body is molded from a single piece of polycarbonate that gives it a solid, rigid feel (part of that also stems from the steel frame that Apple uses inside). Even the volume buttons, mute switch, and Sleep/Wake button on the 5c are plastic. “Unapologetically plastic,” as Apple puts it.
How does the 5s compare to the 5c and the 5?
Apple calls the 5s its most “forward-thinking” phone. Though its aluminum body is almost the same as the iPhone 5’s, there’s a bunch of new hardware inside. Most impressive is the new A7 processor, which Apple touts as the first 64-bit processor available in a phone. The iPhone 5s also includes a new M7 “motion coprocessor”; some big camera upgrades and capabilities; and the Touch ID fingerprint-authentication system. (More on these below.)
Other improvements over the iPhone 5 include a slightly larger battery, expanded carrier support, and a new color. Speaking of which...
What colors can I get?
That depends on which iPhone model you purchase. The lower-cost iPhone 5c, constructed of hard-coated polycarbonate, will be available in candy-like light blue, light green, pink, yellow, or white. Each—including the white version—has a black bezel surrounding the screen.
There is one tiny—and we mean tiny—difference between the iPhone 5c models: On the blue, green, yellow, and white models, the Ring/Silent switch shows an orange line when flipped to the Silent position. On the pink model, the line is white. Details, people.
If you splurge on the aluminum-body iPhone 5s, your choices are different: “space gray” (with a black screen bezel and back trim), silver (with white screen bezel and back trim), or gold (also with white screen bezel and back trim). The gold is subtler than it sounds; it’s more of a champagne color. A nice touch on the 5s is that the metal ring around the Home button on each phone matches its main color: gray, silver, or gold.
I hear Apple also makes cases for the new phones?
Yep, Apple is also offering offering two lines of cases, one set for the 5c and one for the 5s.
The $29 iPhone 5c case, available in the same five colors as the phone plus a black version, is made of silicone with a microfiber interior lining and sports a pattern of 35 circular holes on the back that let your iPhone’s own color peek through. You can match your phone to the case or opt for something a bit more interesting like, say, a white phone with a blue case.
The $39 iPhone 5s case is made of leather with a microfiber interior and is available in brown, beige, black, yellow, blue, and Product(Red) red. The case is molded over the Sleep/Wake and volume buttons, with openings for the Ring/Silent switch and back camera and flash.

The iPhone 5s

What’s this about a new processor and a coprocessor?
The A7 inside the new iPhone 5s is unquestionably the most powerful chip Apple has ever put in a mobile device. It’s also the first one that uses a 64-bit architecture—usually found only on laptop and desktop computers. The implications of that architecture might not be immediately apparent, because apps have to be written to take advantage of it. But down the road, the new chip will offer some exciting possibilities for expansion and power.
The A7’s support for the latest OpenGL ES 3.0 standard means better graphics performance, too. In fact, Apple claims that the new A7 processor is twice as fast at both processor-intensive and graphics-intensive tasks as its predecessor. We’ll see about that when we test the 5s.
The iPhone 5s also includes a separate processor, called the M7, that handles sensor data.
What’s this M7 thing good for?
The M7—which Apple calls the motion coprocessor—is a brand-new chip inside the iPhone 5s that complements the A7 by handling data from the device’s many sensors, including the accelerometer, gyroscope, and compass. Why a separate processor for all that? The key to the M7 is that it can log data from those sources without waking the full A7 processor. This means that not only can fitness-tracking apps more easily run in the background, but they’ll also chew up less of your precious battery power. And using the new CoreMotion API, third-party apps can use real-time location and motion information—like, say, whether you're walking or riding in a car—to determine how the app behaves, without dramatically affecting battery life.
Is the iPhone 5s camera really that much better?
We haven’t yet tested the back camera on the 5s; we’ll give it a thorough evaluation once we get a couple iPhone 5s samples in-house. But if Apple’s specs and feature list are any indication, that camera should offer noticeably better performance, along with some useful new capabilities.
For starters, the 5s uses a new, five-element lens that Apple designed specifically for the new iPhone. This new lens offers an f/2.2 aperture, a 15-percent-larger area than the iPhone 5’s lens, and 1.5-micron pixels—larger than those on the iPhone 5 and other smartphones.
The phone also includes a new dual-LED True Tone flash that Apple says is the first of its kind on a phone or a standalone camera. One flash is cooler white, while the other is amber with a warmer color temperature. The phone monitors ambient light and then fires the two flashes together to match that light. Together, Apple says, the two flashes provide more than 1000 unique light combinations, for flash lighting that’s brighter and more natural.
But iOS 7 also includes a bunch of software specifically designed to take advantage of the improved camera hardware. For example, before you take a photo, the phone automatically adjusts white-balance and exposure to create a tone map for better highlights and shadows; it also performs auto-focus matrix metering for improved sharpness. When you take the photo, the phone actually takes multiple images, analyzes them in real time, and then shows you what it thinks is the best one.
The 5s also includes image stabilization in software: In situations—such as low lighting—where you’d normally end up with blurry images, the phone takes multiple photos with a single shutter press, and then it blends them together into a single, sharp image. And a new burst mode captures ten full-resolution frames per second for as long as you hold down the shutter button. But unlike most burst modes, on an iPhone 5s, the phone automatically filters out bad shots to show you only the “best” ones. (You can choose others manually, if you like.)
When taking video, you can capture 720p video at 120 frames per second, slowing it down later for true slow-motion video. (You can do the editing in your favorite video app, or you can choose, right in the Photos app, which section of the clip to view in slo-mo.) And Panorama mode now lets you adjust exposure as you pan.
Many times during the iPhone event, Apple pointed out the advantages of making both hardware and software, combining them to best take advantage of both. The iPhone’s camera features are one of the best examples of this philosophy in action.
So, this fingerprint-sensor thing, Touch ID: how does it work?
It’s a capacitance-based (as opposed to optical) scanner built into the iPhone 5s Home button. The “capacitance” part means that instead of taking a visual scan of your finger or thumb, the scanner detects minute differences in electrical charge caused by a fingerprint’s whorls, loops, and curves.
The phone then produces a digital template (again, not an image) based on that scan. In other similar systems, software then runs such a template through a cryptographic hashing process, making it virtually impossible to recreate the original print from the template. If that’s how Touch ID works, the hashing process should make it harder—if not impossible—to spoof your prints. For further security, your fingerprint is never stored in the cloud or anywhere in the phone’s memory—only in a secure area of the A7 chip itself.
We don’t yet know all the details about how iOS 7 will use the fingerprints it detects. But we do know that it will let you bypass the lockscreen passcode. (You do have a lockscreen passcode, right?) It will also let you authenticate with iCloud and the App Store using your finger.
With all this new technology and speed on the iPhone 5s, is the battery life worse than that of the iPhone 5?
Apple claims that the iPhone 5s offers battery life equal to or greater than that of the iPhone 5. Specifically, the company says the iPhone 5s offers 10 hours of 3G talk time, 10 hours of LTE or Wi-Fi browsing, or 250 hours of standby time. Compare that to Apple’s claims for the iPhone 5 when that model was released: 8 hours of 3G talk time, 10 hours of Wi-Fi browsing, or 225 hours of standby time.
Apple says that the iPhone 5c’s battery life is identical to that of the iPhone 5s. We’ll of course thoroughly test each model’s battery life in the coming weeks.

Accessories and apps

Is the 5s exactly the same size as the 5? Will my existing accessories and cases work? What about the iPhone 5c?
The iPhone 5s is indeed exactly the same size as the iPhone 5, so existing iPhone 5 cases will fit the new iPhone 5s. However, the camera and LED flash on the iPhone 5s differ in size and position from those on the iPhone 5, so existing cases may partially obscure the lens and/or LED—or may be close enough to obscuring them that the case affects flash or photo quality. If you want to use a case not specifically made for the iPhone 5s, be sure the opening(s) for the camera and flash are large enough to avoid this problem.
Cases aside, existing iPhone 5 accessories—docks, speaker docks, chargers, and the like—should all work with the iPhone 5s. Similarly, with the exception of dock cradles custom-fit for the iPhone 5s, most of these accessories should work fine with the iPhone 5c.
Of course, cases for the iPhone 5 and 5s won’t fit the iPhone 5c, due to the latter’s different dimensions and slightly different shape.
We’ll be testing many accessories once we get our hands on the iPhone 5c and 5s, and we’ll publish our findings here on Macworld.com.
Apple says it’s making Keynote, Numbers, Pages, iMovie, and iPhoto for iOS free “for new devices”? Does that include the new iPhones? What about current iPhone owners?
Apple’s webpage about the iPhone 5s built-in apps (and the similar page for the iPhone 5c) lists iMovie, iPhoto, and the iWork suite, but they don’t actually come pre-installed.
Instead, any iOS 7-compatible device activated on or after September 1, 2013—regardless of when you purchased it—is eligible for free copies of these apps. If your device came pre-loaded with iOS 7, you’ll be prompted during the setup process to download the iOS versions of Keynote, Numbers, Pages, iMovie, and iPhoto. If your device didn’t come with iOS 7 pre-installed (but, again, you activated the device on or after September 1), once you install iOS 7, you’ll be prompted during the iOS 7 setup process to install the apps. You’ll need an Apple ID, but you won’t have to pay for the apps—they’re free with your new device.
Note that this offer isn’t limited to the iPhone 5c and 5s—it includes any iOS 7-compatible device activated on or after September 1, including the iPhone 4 and 4s, the fifth-generation iPod touch, and recent iPads (see the list of compatible devices at the bottom of this page).
If you’ve got a device activated prior to September 1, 2013, you’ll still be able to purchase the apps on the App Store, but you won’t get them for free.

Monday, September 9, 2013

RFID Card Reading




Sunday, September 8, 2013

How to Succeed in Your Online Classes



For the past year and a half, I have been attending seminary via online classes. This experience has been very convenient for me since I don't have a set time that I have to be in class. Despite the convenience however, I have made several mistakes while taking classes online. In learning from these mistakes, I have concluded that there are several things people can do to have greater success in the world of online learning. Outside of the obvious things that any student should do to have success in school (such as attending class and studying), there are strategies you can implement to increase the likelihood that you succeed. Here are two:

1. Check Your E-mail Box Daily and Thoroughly. While many technologically savvy people already do this, everyone who opts to learn online is not in love with the internet or immensely familiar with its inner workings. In short, many online learners are not accustomed to checking their e-mail daily. This can be very problematic for the online student because of the fact that many professors and student instructors make e-mail the primary mode of communication about things pertaining to the class. If you are not checking your e-mail daily for updates, you may miss important information. Moreover, if you are just skimming through your e-mails rather than specifically looking for messages from your professors, you are likely to miss important information. I had an encounter with this recently. After taking a midterm for my Practical Biblical Communication class, I went in to check my e-mail and discovered that the professor of the course had sent us all a message with specific information regarding what to study in order to do well on the exam. If I had checked my e­-mail box thoroughly, I would've seen that I had a note from my professor entitled "BE522-SP13 Midterm Review" and I could've accessed extra data pertaining directly to the midterm that could've boosted my score.

2. Make Sure You Have More Than One Computer or Laptop At Your Disposal. This tip is important for a reason that is probably obvious. Irrespective of how new your machine is, it can break down at any moment. Because this is the case, you want to make sure that you have more than one machine you can access in order to complete your assignments. Personally, I have one laptop from which I do the majority of my work. But if it were to break down, I have at least two other options for study: the business center of my apartment and the library of my undergraduate university. The business center contains two computers which are available for use when the apartment office is open. The university that I attended at the undergraduate level has at least one hundred computers that I can still make use of because I purchased an alumni card. Irrespective of the sources from which you access your alternate computer or laptop, make sure you have at least more than one at your disposal. Not doing so means that you will have no back-up source from which to work if your own machine breaks down. If this happens and you have an assignment due immediately, it could negatively impact your grades.

As mentioned earlier, there are specific things that students can and should do upon deciding to take courses online. I believe the tips I've listed above will help you have greater success as you pursue the world of online learning. Good luck!

Sunday, September 1, 2013

Windows 2008R2 Server Hardening Checklist

The hardening checklists are based on the comprehensive checklists produced by CIS. The Information Security Office has distilled the CIS lists down to the most critical steps for your systems, with a particular focus on configuration issues that are unique to the computing environment at The University of Texas at Austin.

How to use the checklist

Print the checklist and check off each item you complete to ensure that you cover the critical steps for securing your server. The Information Security Office uses this checklist during risk assessments as part of the process to verify that servers are secure.

How to read the checklist

Step - The step number in the procedure. If there is a UT Note for this step, the note number corresponds to the step number.
Check (√) - This is for administrators to check off when she/he completes this portion.
To Do - Basic instructions on what to do to harden the respective system
CIS - Reference number in the Center for Internet Security Windows Server 2008 Benchmark . The CIS document outlines in much greater detail how to complete each step.
UT Note - The UT Note at the bottom of the page provides additional detail about the step for the university computing environment.
Cat I - For systems that include Category-I data , required steps are denoted with the ! symbol. All steps are recommended.
Cat II/III - For systems that include Category-II or -III data , all steps are recommended, and some are required (denoted by the !).
Min Std - This column links to the specific requirement for the university in the Minimum Security Standards for Systems document.

Server Information

MAC Address                                                                                                                                
IP Address
Machine Name
Asset Tag
Administrator Name
Date

Step To Do CIS UT Note Cat I Cat II Cat III Min Std
Preparation and Installation
1 If machine is a new install, protect it from hostile network traffic, until the operating system is installed and hardened.   § !   5.1
2 Consider using the Security Configuration Wizard to assist in hardening the host.   §    
Service Packs and Hotfixes
3 Install the latest service packs and hotfixes from Microsoft. § ! ! 5.2
4 Enable automatic notification of patch availability. 1.6.1 § ! ! 5.3
Auditing and Account Policies
5 Configure Audit policy as described. 1.2 ! 6.1
6 Set minimum password length. 1.1.4 § !
7 Enable Password Complexity. 1.1.5 § !
8 Configure event Log Settings. 1.4 § ! 6.1
Security Settings
9 Disable anonymous SID/Name translation. (default) 1.9.6 !
10 Do not allow Anonymous Enumeration of SAM accounts (Default) 1.9.37 ! 5.5
11 Do not allow Anonymous Enumeration of SAM accounts and shares. 1.9.38 ! 5.5
12 Disable the guest account. (Default) 1.9.5 ! 5.12
13 Digitally Encrypt or Sign Secure Channel Data (Always). (Default) 1.9.12 5.6
14 Digitally Encrypt Secure Channel Data (When Possible). (Default) 1.9.13 ! 5.6
15 Digitally Sign Secure Channel Data (When Possible). (Default) 1.9.14 ! 5.6
16 Place the University warning banner in the Message Text for Users Attempting to log on. 1.9.27-28 § ! 5.10
17 Disable the sending of unencrypted password to connect to Third-Party SMB Servers. (Default) 1.9.32 ! 5.6
18 Do not allow Everyone permissions to apply to anonymous users. (Default) 1.9.40 ! 5.12
19 Do not allow any named pipes to be accessed anonymously. 1.9.41 ! 5.12
20 Restrict anonymous access to Named Pipes and Shares. 1.9.43 ! 5.12
21 Ensure that no shares can be accessed anonymously. 1.9.44 ! 5.12
22 Choose "Classic" as the sharing and security model for local accounts. (Default) 1.9.45 ! 5.12
23 Do not store LAN Manager hash values 1.9.46 ! 5.13
24 Set LAN Manager Authentication level to NTLMv2 only 1.9.47 ! 5.13
Additional Security Protection
25 Disable or uninstall unused services. ! 5.4
26 Disable or delete unused users. ! 5.4
27 Configure User Rights to be as secure as possible. 1.81 § !
28 Ensure all volumes are using the NTFS file system. § !
29 Use the Internet Connection Firewall or other methods to limit connections to the server. 1.5 § ! 5.5
30 Configure file system permissions. § !
31 Configure registry permissions. § !
Additional Steps
32 Set the system date/time and configure it to synchronize against campus time servers. § !
33 Install and enable anti-virus software. § ! ! 3.1
34 Install and enable anti-spyware software. § ! 3.2
35 Configure anti-virus software to update daily. § ! 3.3
36 Configure anti-spyware software to update daily. § ! 3.3
37 Configure a screen-saver to lock the console's screen automatically if the host is left unattended. §
38 If the machine is not physically secured against unauthorized tampering, set a BIOS/firmware password to prevent alterations in system startup settings. ! 4.1
39 Configure the device boot order to prevent unauthorized booting from alternate media. ! 4.1
40 Systems will provide secure storage for Category-I data as required by confidentiality, integrity, and availability needs. Security can be provided by means such as, but not limited to, encryption, access controls, filesystem audits, physically securing the storage media, or any combination thereof as deemed appropriate. § ! 5.7
41 Install software to check the integrity of critical operating system files. § ! 5.8
42 If RDP is utilized, set RDP connection encryption level to high. § ! 5.6

UT Note: Addendum


This list provides specific tasks related to the computing environment at The University of Texas at Austin.
1 If other alternatives are unavailable, this can be accomplished by installing a SOHO router/firewall in between the network and the host to be protected.
2 The Security Configuration Wizard can greatly simplify the hardening of the server.  Once the role for the host is defined, the SCW can help create a system configuration based specifically on that role. It does not completely get rid of the need to make other configuration changes, though. For more information, please see Security Configuration Wizard for Windows Server 2008 .
3 There are several methods available to assist you in applying patches in a timely fashion: Microsoft Update Service
  • Microsoft Update checks your machine to identify missing patches and allows you to download and install them.
  • This is different than the "Windows Update" that is the default on Windows 2008. Microsoft Update includes updates for many more Microsoft products, such as Office and Forefront Client Security.
  • This service is compatible with Internet Explorer only.

    Windows AutoUpdate
    ITS offers a Windows Server Update Services Server for campus use using Microsoft's own update servers. It includes updates for additional Microsoft products, just like Microsoft Update, and provides additional administrative control for software deployment.
    Microsoft Baseline Security AnalyzerThis is a free host-based application that is available to download from Microsoft . In addition to detailing missing patches, this tool also performs checks on basic security settings and provides information on remediating any issues found.
4 Configure Automatic Updates from the Automatic Updates control panel
  • On most servers, you should choose either "Download updates for me, but let me choose when to install them," or "Notify me but don't automatically download or install them."
  • The campus Windows Server Update Services server can be used as the source of automatic updates.
6 Configuring the minimum password length settings is important only if another method of ensuring compliance with university password standards is not in place.
7 Configuring the password complexity setting is important only if another method of ensuring compliance with university password standards is not in place.
8 The university requires the following event log settings instead of those recommended by the CIS Benchmark:
  • Maximum application log size---50000 KB
  • Maximum security log size---100000 KB
  • Maximum system log size---50000 KB
  • Prevent local guests group from accessing application log---enabled
  • Prevent local guests group from accessing security log---enabled
  • Prevent local guests group from accessing system log---enabled
  • Retention method for application log---Overwrite events older than 14 days
  • Retention method for security log---Overwrite events older that 14 days
  • Retention method for system log---Overwrite events older than 14 days

    These are minimum requirements. The most important log here is the security log. 100 MB is a suggested minimum, but if you have a high-volume service, make the file as large as necessary to make sure at least 14 days of security logs are available. You may increase the number of days that you keep, or you may set the log files to not overwrite events.
    Note that if the event log reaches its maximum size and no events older than the number of days you specified exist to be deleted or if you have disabled overwriting of events, no new events will be logged. This may happen deliberately as an attempt by an attacker to cover his tracks. For critical services working with Cat 1 or other sensitive data, you may wish to consider log shipping using syslog, Splunk, Intrust, or a similar service. Another option is to configure Windows to rotate event log files automatically when an event log reaches its maximum size as described in the article http://support.microsoft.com/kb/312571 using the the AutoBackupLogFiles registry entry.
16 The text of the university's official warning banner can be found on the ITS Web site. You may add localized information to the banner as long as the university banner is included.
27 Configure user rights to be as secure as possible. Every attempt should be made to remove Guest, Everyone, and ANONYMOUS LOGON from the user rights lists.
28 Volumes formatted as FAT or FAT32 can be converted to NTFS, by using the convert.exe utility provided by Microsoft. Microsoft has provided instructions on how to perform the conversion
This conversion cannot be reversed.
29 IPSec is one method that can limit connections to the server, and it is another standard method by which communication between servers can be encrypted.
IPSec configuration can be managed using the IP Security Policies Snap-In. More information can be found on the Microsoft site.
30 Be extremely careful, as setting incorrect permissions on system files and folders can render a system unusable.
31 Be extremely careful, as setting incorrect permissions on registry entries can render a system unusable.
30 By default, domain members synchronize their time with domain controllers using Microsoft's Windows Time Service . The domain controller should be configured to synchronize its time with an external time source, such as the university's network time servers.
ITS Networking operates two stratum 2 NTPv4 (NTP version 4) servers for network time synchronization services for university network administrators .
31 Download and install Microsoft Forefront Client Security from BevoWare .
32 Anti-spyware software is only required to be installed if the server is used to browse Web sites not specifically related to the administration of the server. ITS provides anti-spyware software for no additional charge. At a minimum, SpyBot Search and Destroy should be installed. We also recommend the installation of a secondary anti-spyware application, such as SpyWare Blaster, EMS Free Surfer, or AdAware. Both SpyWare Blaster and EMS Free Surfer are available from BevoWare.
 
An additional measure that can be taken is to install ?Firefox with the ?NoScript and ?Adblock Plus add-ons
33 Microsoft Forefront can be configured directly or through the use of GPOs . GPOs can simplify the management of multiple servers.
34 Spyware Blaster — Enabling auto-update functionality requires the purchase of an additional subscription.
SpyBot Search and Destroy--Automatic update tasks can be created inside the program itself and are scheduled using the Windows Task Scheduler.
  1. In the Spybot Application, click on Mode-->Advanced View.
  2. Click Settings on the left hand side of the window.
  3. You should now see an option labeled "Scheduler." Select that option.
  4. Adding the task to update automatically is relatively straightforward.
    • Click Add to create a task.
    • Click Edit to edit the task schedule.
    • In the Scheduled Task window that pops up, enter the following In the Run field:

      "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /AUTOUPDATE /TASKBARHIDE /AUTOCLOSE
    • Click the Schedule tab and choose a time for it to update. The duration of the update is very brief, but it is processor intensive, so consider scheduling it to occur during periods of low usage. The task should be scheduled daily.
37
  1. Open the Display Properties control panel.
  2. Select the Screen Saver tab.
  3. Select a screen saver from the list. Although there are several available, consider using a simple one such as "Blank."
  4. The value for Wait should be no more than 30 minutes.
  5. Select the On resume, password protect option.
40 Windows provides the Encrypting File System as a built-in mechanism to allow the encryption of individual users' files and folders. Be aware of the caveats involved in the use of EFS before implementing it for general use, though. Other options such as PGP , GNUPG , and TrueCrypt also exist.
Another encryption option to consider is whole-disk encryption, which encrypts the entire contents of the drive instead of just specific files and folders. Windows Vista and Windows 2008 come with BitLocker for this. TrueCrypt can also do whole-disk encryption in addition to file-based encryption. ITS provides WinMagic SecureDoc which is recommended for encrypting laptops.

We strongly recommend that, if encryption is being used in conjunction with Category I data, one of the solutions listed in the Approved Encryption Methods (EID required) be implemented.
41 Windows Server 2008 has a feature called Windows Resource Protection which automatically checks certain key files and replaces them if they become corrupted. It is enabled by default.
You can audit in much more in depth using Tripwire. Modern versions of Tripwire require the purchase of licenses in order to use it. The Tripwire management console can be very helpful for managing more complex installations.
42 This setting is configured using the Terminal Services Configuration tool. On the General tab of the properties of the RDP connection, select High from the list next to encryption level.

Sunday, September 2, 2012

TELENET SCANNING

 **********************************************************************
   *                                                                    *
   *                     TELENET SCANNING                               *
   *                                                                    *
   *        written by Doc Telecom   on July 11, 1988                   *
   *                                                                    *
   **********************************************************************


    Telenet is the largest Packet Switching network, that I know of at this
 present time, I could waste valuable buffer space explaining what packet
 switching is and what its uses are ect...so for more information read
 "Packet Switching (tomorrow's communications today) by Roy D. Rosner. It
 is quite indepth and one of the books I cherish in my "legal" Telecomm
 library.

 DEFINITION of GTE TELENET : The packet switching subsidiary of General
 Telephone and Electronics. It provides nationwide common user data
communications via packet switching


 Information on GTE TELENET :
 ----------------------------

 The GTE Telenet commercial packet switched network was developed as a
commercial venture of many of the same principals who developed ARPANET.
GTE Telenet first became in 1979.

 OPERATION :
 ------------

 Telenets network operation and internal protocals evolved from the ARPANET
experience , with additional cababilitys built into each of the switching nods.
The network is mostly a ciruit bases packet switching protocol, that does meet
the requirments of the CCITT X.25 protocol at the user interface. In addition,
Telenet also provides customized user interfaces to meet the need of the
individual users. It also provides emulation interfaces.


 USER ACCESS :
 -------------

 User access to the network is through one of the three clases of telenet
central offices, such as the one in San Fran, support user access speeds up to
56k bps is a Class I. Class II offices, such as the one in Spokane,Wa provide
connection speeds up to 9600 bps. Class III offices support rates up to 1200
bps, such as the one in tucson,arizona. User access can be made to   Public
Dialin ports, private dial in ports, or fixed ports dedicated full time for a
single user. Users can implement X.25 compatable software in there host computer
or they can just use the T-net provided interface processors to provide network
service. Terminal Clusters can be accessed to the network very effciently by use
of Telenet access controllers placed at the customers residece or business,
ect..


 Telenet Dialups
 ---------------

 To find the local Telenet dialup for your area just call WATS to 800-TEL-ENET
and ask them for it but remember to watch out "Every thing you do on telenet is
saved on Mega tape for up to 5 years, and they have installed number
identification since December 1987,

 WATS TELENET DIALUPS....

 (800) 424-9494 300/1200 BPS
 (800) 238-0631 2400 & MPE

 These wats will change in aug. 88 so if you would like the new ones leave my
E-Mail on Lunitics Labs (415) 278-7421


 What to do one you have your POTS dialup:
 -----------------------------------------

 Remember to do any scanning on telenet you need a POTS dialup not a WATS, the
WATS dialup is mainly used for Telemail or GTE MAIL., or SPRINT HP's
Call your local dial up and you should see something that says TELENET
617 18m, or whatevr...just hit  a few times. and you should see something
that looks like this.

 @

at the "@" prompt type in NPA XXX..for now just use your area code...

like this....( this is a Network User Address  or NUA)

@ 415 333

 it will then either connect you, or say "Collect Connection Refused",
because you have not used an NUI, more on NUI's later...

 you will see one of the following :

 1) call connected .... 
 2) Remote Procedure Error  11 b6
 3) Remote Procedure Error  11 e2
 4) Not Reachable  05 e6
 5) not reachable  05 db
 6) Not operating ....  
 7) illegal address  03 80
 8) Busy  01 00 ..... 
 9) enhanced network services unavalible at this time please try again 05 d8
10) illegal address  03 ba
11) rejecting        00 7e
12) illegal address  03 42
13) remote procedure error  11 31
14) Refused collect connection 19 00 ..... 
15) not reachable  05 ed
16) not responding 0d f0



if the call is connected you will find an interesting computer system, or
whatever..


 What is an NUI and how do you use it..
 ---------------------------------------

 An NUI or Network User Id is mostly used for connecting to things that give you
the "Refused collect connection" error. I always have an NUI in use when I am
scanning at the @ promt type:

 @ ID USERID

 it will come up with a
   PASS= promt, so then  you enter the password I have a listing of about 80 or
so NUI's and they usually dont die , so here is a few....

 ID  SIMPCNOE
 PASS= 071034

 ID FINLAY
 PASS= 004461


 NUA listing of recent things Scanned by DOC telecom:
 ----------------------------------------------------



 NUA              SYSTEM TYPE            SPECIAL NOTES
--------------- -----------------------  ----------------------------------
 804 35           ?
 804 43           PRIME                    PRIMENET
 303 38           PRIME                    PRIMENET 21.0.3.C1 SL
 804 60           ?
 713 436                                   CONNECTS
 713 450                                   CONNECTS
 713 454                                   CONNECTS
 713 462                                   CONNECTS
 713 431                                   CONNECTS
 612 442         ?
 415 333         AOS/VS 7.56
 415 334         AOS/VS 7.56
 206 20          HP 3000
 206 30          HP 3000
 206 32          VAX                       MICRO VMS V4.7
 206 35                                    CONCURRECT COMPUTER CORP
 206 38          AOS/VS 7.56
 206 42          AOS/VS 7.56
 206 44          AOS/VS 7.56
 206 40          PRIME                     PRIMENET 20.2.4
 206 53                                    CONNECTS
 206 65          PRIME                     PRIMENET 20.1.1D OAD
 206 72          DIFFRENT KINDS            UNIV. OF WASHINGTON
 212 137         PRIME                     PRIMENET 21.0.3.R7.PTC.3 NY60
 909 46
 303 65                                    COMPUTER SHARING SYSTEM
 212 32                                    CIDIADVICE CENTER
 303 23          PRIME
 212 112                                   VM/370 ONLINE
 212 131                                   VM/370 ONLINE
 909 400
 909 401
 909 403
 909 404
 909 406
 909 407
 909 409
 909 502
 909 508         PRIME
 909 600
 909 615         PRIME
 909 617         PRIME
 212 20                                    "ENTER ID"
 212 21                                    "ENTER ID"
 909 810
 909 800
 909 801
 909 802
 909 805
 909 811
 909 815
 909 818
 909 819
 415 37           HP 3000
 617 622          UNIX                      MEDIA LABS...
 214 71           PRIME                     PRIMENET FB.3.3 UUCB
 212 146                                    OFFICE INFO SERVICE
 415 20                                     DIALOG
 213 35                                     MARKETRUN RESERCH AND SALES
 909 95           PRIME                     TELENET NEWS SEWRVICE
 305 22           HP 3000                   CIERRA COMPUTER
 201 25           DEC                       NJIT ELECTRONIC INFO EXCHANGE
 515 30                                     LEXIS/NEXIS
 201 67                                     WARNER BROTHERS SYSTEMS
 201 68                                     WARNER BROTHERS SYSTEMS
 212 28           OUTDIAL
 909 12           PRIME
 909 13                                     CONNECTS
 909 51                                     CONNECTS
 909 52                                     CONNECTS
 909 54                                     CONNECTS
 909 58                                     CONNECTS
 909 26           PRIME
 909 38
 909 39           PRIME
 909 49
 909 55
 909 777                                    CONNECTS
 909 65
 909 63
 909 53
 909 56
 909 60
 909 62

Tuesday, March 22, 2011

Get rid of Logo1_.exe virus manually

Here is what you exactly do to remove the Logo1_.exe virus:

1. open task manager and look for the process logo1_ and terminate it

2. now go to c:/windows and delete logo1_.exe file

3. create a copy of any exe file ( I used TASKMAN ) and rename it to Logo1_

4. change its permissions to read only.

IMPROVE XP SHUTDOWN SPEED

This tweak reduces the time XP waits before automatically closing any running programs when you give it the command to shutdown

Go to Start then select Run
Type 'Regedit' and click ok

Find 'HKEY_CURRENT_USER\Control Panel\Desktop\'
Select 'WaitToKillAppTimeout'
Right click and select 'Modify'
Change the value to '1000'
Click 'OK'

Now select 'HungAppTimeout'
Right click and select 'Modify'
Change the value to '1000'
Click 'OK'

Key Loggers , Be careful with them if some one has physical acess to your system

Key Loggers, like the name suggests, are programs that record keystrokes from the computer keyboard and either logs it to the computer or sends it to its maker through a built in e-mail engine. Key logging allows a prospective hacker to gain access to the user name, passwords, and even id numbers entered into sensitive online bank accounts or passwords to remote control programs.

You can find the list of latest keyloggers here

http://www.keylogger.org

Use PSMantiKeylogger to check if your computer has any keyloggers installed, you can get it here

http://psmantikeyloger.sourceforge.net/prod03.htm

Here are a few other ways to be safe from harmful effects of key loggers

* Monitoring what programs are running

A user should constantly observe the programs which are installed on his or her machine. Also, devices connected to PS/2 and USB ports (which have both been hacked) can be used to secretly install a keylogger and then remove it (along with the user’s data) by the perpetrator.

* Anti-spyware

Anti-spyware applications are able to detect many keyloggers and cleanse them. Responsible vendors of monitoring software support detection by anti-spyware programs, thus preventing abuse of the software.

* Firewall

Enabling a firewall does not stop keyloggers per se, but can possibly prevent transmission of the logged material over the net if properly configured.

* Network monitors

Network monitors (also known as reverse-firewalls) can be used to alert the user whenever an application attempts to make a network connection. This gives the user the chance to prevent the keylogger from “phoning home” with his or her typed information.

* Anti-keylogging software

Keylogger detection software is also available. Some of this type of software use “signatures” from a list of all known keyloggers. The PC’s legitimate users can then periodically run a scan from this list, and the software looks for the items from the list on the hard-drive. One drawback of this approach is that it only protects from keyloggers on the signature-based list, with the PC remaining vulnerable to other keyloggers.

Other detection software doesn’t use a signature list, but instead analyzes the working methods of many modules in the PC, allowing it to block the work of many different types of keylogger. One drawback of this approach is that it can also block legitimate, non-keylogging software. Some heuristics-based anti-keyloggers have the option to unblock known good software, but this can cause difficulties for inexperienced users.

* One-time passwords (OTP)

Using one-time passwords is completely keylogger-safe because the recorded password is always invalidated right after it’s used. This solution is useful if you are often using public computers where you can’t verify what is running on them. One-time passwords also prevents replay attacks where an attacker uses the old information to impersonate. One example is online banking where one-time passwords are implemented and prevents the account from keylogging attacks as well as replay attacks.

* Automatic form filler programs

Automatic form-filling programs can prevent keylogging entirely by not using the keyboard at all. Form fillers are primarily designed for web browsers to fill in checkout pages and log users into their accounts. Once the user’s account and credit card information has been entered into the program, it will be automatically entered into forms without ever using the keyboard or clipboard, thereby reducing the possibility that private data is being recorded. (Someone with access to browser internals and/or memory can often still get to this information; if SSL is not used, network sniffers and proxy tools can easily be used to obtain private information too.)

It is important to generate passwords in a fashion that is invisible to keyloggers and screenshot utilities. Using a browser integrated form filler and password generator that does not just pop up a password on the screen is therefore key. Programs that do this can generate and fill passwords without ever using the keyboard or clipboard.

* Drag & Drop

Most keyloggers cannot intercept texts which are drag & dropped from one window to another[citation needed][dubious – discuss]. With the help of this technique, sensitive data could be transferred, for example, from a password manager to the target application[citation needed].

* Non-technological methods

Most keyloggers can be fooled by alternating between typing the login credentials and typing characters somewhere else in the focus window. Similarly, one can move their cursor using the mouse during typing, causing the logged keystrokes to be in the wrong order. One can also use context menus to remove, copy, cut and paste parts of the typed text without using the keyboard.

Another very similar technique utilizes the fact that any selected text portion is replaced by the next key typed. E.g. if the password is “secret”, one could type “s”, then some dummy keys “asdfsd”. Then these dummies could be selected with mouse, and next character from the password “e” is typed, which replaces the dummies “asdfsd”.

Locking File Associations

If you have your file associations the way you want for a particular file type, you can remove it from the list that gets displayed in the Folder Options / File Types screen

Start Regedit
Go to HKEY_CLASSES_ROOT

Scroll to the file association you want to lock.

In the right panel, create a new Binary value
Call it EditFlags
Give it a value of 01 00 00 00

Now when you go to the Folder Options / File Types screen, you won’t see that file type listed.

Speed up internet by 20%

Microsoft reserves 20% of your available bandwidth for their own purposes like Windows Updates and interrogating your PC etc

You can get it back:

Click Start then Run and type "gpedit.msc" without quotes.This opens the group policy editor. Then go to:
Local Computer Policy
then Computer Configuration
then Administrative Templates then Network then QOS Packet Scheduler and then to Limit Reservable Bandwidth.


Double click on Limit Reservable bandwidth. It will say it is not configured, but the truth is under the 'Explain' tab i.e."By default, the Packet Scheduler limits the system to 20 percent of the bandwidth of a connection, but you can use this setting to override the default."
So the trick is to ENABLE reservable bandwidth, then set it to ZERO. This will allow the system to reserve nothing, rather than the default 20%.It works on Win 2000 as well.

secure YOUR WIRELESS LAN

* The most important thing is to change the default password of your access point.

* Firmware and the drivers of your wireless access point and wireless adapters should be up to date. They should be updates whenever necessary.

* There should be a combination of high level encryption and decent keys (WPA2/802.11i ) recommended.

* Wireless users should be authenticated with different protocols like 802.1X, RADIUS, EAP (including EAP-PAX, EAP-PSK, EAP-TLS, EAP-TTLS, EAP-FAST, EAP-POTP, EAP-IKEv2, EAP-GPSK, PEAP, and EAP-SIM.

* The above protocols give credentials including certificates, usernames, passwords etc.

* Use Wireless LAN Security Tools for securing the wireless network. This software is specifically designed for securing 802.11 wireless networks.

* Use a proxy for outgoing requests.

* Always check the security of the wireless LAN using recent tools like Airbase, AirCrack-ng etc.

* Make strict system logging on all the devices, do check your wireless log files regularly.

secure your lan, lan security, firewalls, anti-viruses,tcp , udp,lan,lan security,networking

SPEED UP FOLDER BROWSING

You may have noticed that everytime you open my computer to browse folders that there is a slight delay. This is because Windows XP automatically searches for network files and printers everytime you open Windows Explorer. To fix this and to increase browsing significantly:

1. Open My Computer

2. Click on Tools menu

3. Click on Folder Options

4. Click on the View tab.

5. Uncheck the Automatically search for network folders and printers check box

6. Click Apply

7. Click Ok

8. Reboot your computer

Top Ten Tips To Improve System Speed

1.Let your PC boot up completely before opening any applications.



2.Refresh the desktop after closing any application. This will remove any unused files from the RAM.



3.Do not set very large file size images as your wallpaper. Do not keep a wallpaper at all if your PC is low on RAM (less than 64 MB).




4.Do not clutter your Desktop with a lot of shortcuts. Each shortcut on the desktop uses up to 500 bytes of RAM



5.Empty the recycle bin regularly. The files are not really deleted from your hard drive until you empty the recycle bin.



6.Delete the temporary internet files regularly.



7.Defragment your hard drive once every two months. This will free up a lot of space on your hard drive and rearrange the files so that your applications run faster.



8.Always make two partitions in your hard drive. Install all large Softwares (like PSP, Photoshop, 3DS Max etc) in the second partition. Windows uses all the available empty space in C drive as virtual memory when your Computer RAM is full. Keep the C Drive as empty as possible.




9.When installing new Softwares disable the option of having a tray icon. The tray icons use up available RAM, and also slow down the booting of your PC. Also disable the option of starting the application automatically when the PC boots. You can disable these options later on also from the Tools or preferences menu in your application.



10. Protect your PC from dust. Dust causes the CPU cooling fan to jam and slow down thereby gradually heating your CPU and affecting the processing speed. Use compressed air to blow out any dust from the CPU. Never use vacuum.

Monday, November 1, 2010

Fix a problem, prevent another

Set up your computer so it works for you, and make sure it's running as smoothly as it should.
3 stubborn PC problems you can fix

3 stubborn PC problems you can fix

In this article, check out our list of common symptoms and treatments to help even the most troublesome PCs.

5 ways to speed up your PC

5 ways to speed up your PC

By following a few simple guidelines, you can maintain your computer and keep it running smoothly.

8 ways to help maintain your computer and devices at work

8 ways to help maintain your computer and devices at work

This article includes tips and best practices for working with your corporate IT department to keep your computer and devices up-to-date and functioning properly.

Strategies for conserving battery power

Strategies for conserving battery power

Find out how to take advantage of Windows settings to manage power more efficiently, as well as non-software related tips that can extend battery life.

5 productivity tips for Windows

Print more easily, find files faster, and send email right from your desktop.

1. Print from Windows Explorer

If you need to print a document, let’s say a Microsoft Word document, there’s no need to launch Word first. Browse your hard drive for the file that you want to print, right-click its icon, and then click Print. This will automatically send the document to your printer without launching Word.

Windows 7 Print command on the shortcut menu

Windows 7 Print command on the shortcut menu

Windows Vista Print command on the shortcut menu

Windows Vista Print command on the shortcut menu

An example of the Windows XP Print command on the shortcut menu

An example of the Windows XP Print command on the shortcut menu


2. Pin programs to the Start menu

Want to add your favorite programs to the Start menu? From the Start menu, click All Programs. Locate a favorite program, right-click the program’s icon, and then click Pin to Start menu. That’s it.

You can also pin an application by dragging and dropping its icon from All Programs to the Start menu. The program is now “pinned” to your Start menu. To remove it, right-click the program icon on the Start menu and then click Unpin from Start menu or click Remove from this list.

Pinning a program to the Start menu in Windows 7

Pinning a program to the Start menu in Windows 7


3. Use small icons on your Start menu

After you install a few dozen applications, your Start menu can become very crowded. One way to reduce the clutter is to use small icons.

  1. To switch to small icons, click the Start button, right-click in the Start menu, and then click Properties.

  2. Click the Start Menu tab, and then click Customize.

    Windows 7 and Windows Vista users: Scroll to the bottom of the list, clear the Use large icons check box, and then click OK twice.

    Windows XP users: Select Small icons, and then click OK twice.

An example of the Windows 7 Start Menu dialog box

An example of the Windows 7 Start Menu dialog box

Windows XP Customize Start Menu dialog box

Windows XP Customize Start Menu dialog box


4. Search a folder

When I’ve misplaced a file, I almost always know which folder it’s in, but it’s usually lost in a maze of documents or buried in a subfolder. I just can’t remember which subfolder. This is a great way to search a folder quickly.

Windows 7 and Windows Vista users: Locate the folder where you think the file is located. Use the Search box at the top of the open window to search the contents for the selected folder. Type part or all of the name of the file or folder, or type a word or phrase that is in the file. The results list will be updated as you type.

An example of the Windows Vista Search box

An example of the Windows Vista Search box

Windows XP users: Locate the folder where you think the file’s located, right-click the folder, and then click Search. A Search window will open, ready to search for the selected folder and only that folder. Type part or all of the name of the file or folder, or type a word or phrase that is in the file. This is much quicker than launching Search and navigating your hard drive to the folder.

An example of the Windows XP Search command on Shortcut menu

An example of the Windows XP Search command on Shortcut menu


5. Send an email attachment from anywhere on the desktop

Here’s a really handy tip.

  1. Locate a file anywhere on your hard drive that you want to email, right-click the file’s icon, click Send To, and then click Mail Recipient. A new mail message will open with the file attached and ready to send. But what’s really speedy about this tip is that your mail program doesn’t open. This action creates only a single new mail message.

  2. To send your attachment, type the recipient's email address in the To text field, add any accompanying message, and then click the Send icon. The subject and attachment fields are already set.

In Windows Vista, you can send an email attachment directly from the desktop

In Windows Vista, you can send an email attachment directly from the desktop

In Windows XP, you can send a file by email directly from desktop

In Windows XP, you can send a file by email directly from desktop