topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Tuesday December 16, 2025, 4:59 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Recent Posts

Pages: prev1 ... 5 6 7 8 9 [10] 11 12 13 14 15 ... 364next
226
A browser whose main two selling points are things that are better handled as addons, and a business model that's doomed to fail?

Nah.
227
DC Gamer Club / Re: No more pirated games in two years, cracking group warns
« Last post by f0dder on February 02, 2016, 02:12 PM »
3DM probably isn't the group with the most skilled reversers - and we've heard this song before, anyway.

As long as the software can run, the protection can be defeated, it's only a matter of time. And then the groups will have developed knowledge + in-house tools, making the next release stripped faster. Thus the cat-and-mouse game continues.
228
I've found nothing, but I got curious, so I made a backup and installed it anyway.
That's a pretty great way to get your system infected :)
229
Living Room / Re: Patch your Flash! Version 19.0.0.226 (October 16, 2015)
« Last post by f0dder on November 11, 2015, 12:13 PM »
Right, I've dropped RequestPolicy - uMatrix beats it in every possible way, from performance to advanced features to ease-of-use. All of those were expected, perahsp except ease-of-use... it's really great. I modified the defaults from always allowing css/image references to only allowing them first-party, which means a little more work, but also more safe blocking. The matrix view that quickly lets you identify & check off the stuff you need works extremely well.

It doesn't replace RefPolicy, though, since it only lets you spoof the HTTP REFERER, it doesn't offer the block/allow that RefPolicy does. And I'm still keeping Ghostery and uBlock since uBlock can pretty up visual elements and is more fine-grained than uMatrix (DOM regexes rather than non-regex host-based).

Some day I'll have to take a more indepth look at Ghostery to evaluate whether it adds a lot when I have extensive host blocking - but it works differently than uBlock/uMatrix since it can fiddle with JavaScript to neutralize trackers even on first-party sites where you want to run the non-tracking scripts.
230
Non-Windows Software / Re: Linux and Internet security
« Last post by f0dder on November 11, 2015, 11:58 AM »
It's fairly straightforward to design security into a system, which basically comes down to controlling access to memory and the supervisor. The old mainframe security was virtually bulletproof in that regard.
That's only a very small part of the whole picture, though... there's a Whole Lot Of Horrible in that world because people mess up the (complicated!) security settings and then expose the boxes to the internet. Like when Anakata of PirateBay fame hacked the central Danish police mainframe.
231
Announce Your Software/Service/Product / Re: Bvckup 2
« Last post by f0dder on November 11, 2015, 02:37 AM »
Also, if I find a way to automate the cold-cache testing (suggestions would be very welcome!), I'll throw in stats from my old dualcore-with-SSD laptop.
I found a way (a while ago, I just keep forgetting to update this thread).

This is done by flushing "Standby list" of Windows Memory Manager. For example, with Sysinternals' RAMMap -

It can also be done with NtSetSystemInformation from within the app if needed.
Great, thanks!

Just tested on Win8.1 x64, and it indeed works. Interesting, because "back in the day" I did a bit of searching, and the concencus seemed to be that the read cache couldn't be flushed, even through NtSetSystemInformation. Any idea when this was introduced? Has it been there a while, but just overlooked? RamMap apparently doesn't run on XP, so perhaps Vista+?

Also, seems you can flush cache for a single file by opening with FILE_FLAG_NO_BUFFERING and closing again, for all Windows version. Here's a StackOverflow post with a bit of information :)
232
General Software Discussion / Re: SpiderOak Unlimited Space
« Last post by f0dder on November 05, 2015, 03:16 PM »
They can see what's in your drive?  Yes, many of these 'services' can.  Especially for de-duping.  The big row over that happened a while ago.
And it's something that should be complained about again and again and...
233
General Software Discussion / Re: SpiderOak Unlimited Space
« Last post by f0dder on November 05, 2015, 09:13 AM »
It truly is aggravating when a few idiots fail to use a little common sense, self police their actions, and screw it up for everybody.
If you're in reality not going to offer unlimited storage, stop your marking drones from trying to gain goodwill with their usual lies. Simple as that.

I'm on a 40Mb symmetrical fiber connection, at my house ... But if I tried pushing anywhere close to 5TB up the wire I'd end up having a very unpleasant conversation with my ISP. So... 75TB!!! That had to have come from some clown on a commercial connection, because there's no way in hell a - classically upstream capped for a reason... - residential provider would have tolerated that volume of traffic coming from a single IP.
Depends on provider. There's plenty of ISPs in Denmark that don't have silly caps, and give you the flatrate you pay for - including high-speed fibre providers.

The thing that worries me most about this change of policy isn't really the change of policy, but the emphasis in the quote:
Since we started to roll out unlimited cloud storage to Office 365 consumer subscribers, a small number of users backed up numerous PCs and stored entire movie collections and DVR recordings. In some instances, this exceeded 75 TB per user or 14,000 times the average.
-Microsoft

Care to guess why I find that part troubling?
234
I think I'm going to give the x64 version a try - thanks for telling about it :)
235
General Software Discussion / Re: How to recover a MySQL Password?
« Last post by f0dder on November 03, 2015, 11:34 AM »
Worked perfectly - Thank You!!
You're welcome - I'm glad it worked :)
236
General Software Discussion / Re: How to recover a MySQL Password?
« Last post by f0dder on November 03, 2015, 07:19 AM »
However I fear we may have slightly different perceptions of what is trivial.. :D
Here you go, my friend - trivial :)

shot-2015-11-03@14.15.33.png

Without all the file opening and other red tape, it all boiled down to this:
Code: C++ [Select]
  1. std::vector<unsigned char> decrypt(BYTE *input, size_t length) {
  2.         DATA_BLOB inblob { length, input };
  3.         DATA_BLOB outblob;
  4.  
  5.         if (!CryptUnprotectData(&inblob, NULL, NULL, NULL, NULL, CRYPTPROTECT_UI_FORBIDDEN, &outblob)) {
  6.                 throw std::runtime_error("Couldn't decrypt");
  7.         }
  8.  
  9.         std::vector<unsigned char> output(length);
  10.         memcpy(&output[0], outblob.pbData, outblob.cbData);
  11.  
  12.         return output;
  13. }
237
General Software Discussion / Re: How to recover a MySQL Password?
« Last post by f0dder on November 03, 2015, 06:30 AM »
Right, took a look at the MySQL Workbench sourcecode - passwords seem to be stored in workbench_user_data.dat, protected with the CryptProtectData WIN32 API - without any application-specific entropy. So it should be pretty trivial to decrypt - as long as you have access to the user account the workbench was run from :)

Also, from my quick spelunking it looks like the passwords are kept unencrypted in memory, so a process memory dump should also work, although there's the needle/haystack issue with that.
238
General Software Discussion / Re: How to recover a MySQL Password?
« Last post by f0dder on November 03, 2015, 06:16 AM »
Yes ... But as to how to go about extracting it, I've not a clue.
It might be possible by doing a memory dump, or by sniffing network traffic while connecting to the database. Also, I'd be surprised if there isn't a tool out there somewhere to do it, but a few quick google searches just gave me "reset root password" stuff.

The second part I may consider down the road, if Postgre is also free...and has the same level of readily available documentation. Is there a specific issue with MySQL that you're picking at here?
Gratis and Libre, and not entangled in whOracle's nasty tentacles - also a proper database, and one I see much fewer horror stories about on our techies mailing-list than MySQL/MariaDB :)
239
General Software Discussion / Re: How to recover a MySQL Password?
« Last post by f0dder on November 02, 2015, 01:12 PM »
The pw is stored in a copy MySQL workbench, so hopefully there are 2 possible angles of attack.
"Stored"? As in, you can start the workbench, and it will authenticate against the database? Then it should definitely be possible to extract.

Or, do the sensible thing: export a dump, remove MySQL, and restore to a Postgres ;)
240
General Software Discussion / Re: Windows 10 Announced
« Last post by f0dder on November 02, 2015, 10:31 AM »
Fair enough. Though by "business user" I didn't quite mean 'enterprise' or 'corporate' use. I was wondering what was MS's main proposition to convince someone to switch from Win7 to Win10 who uses it for work, rather than just play. The article itself was kind of suggesting that there wasn't one.
I can't really recall the last time an OS upgrade had a killer feature - the thing that comes closest is probably Vista moving the graphics stack mostly back into usermode, improving stability over XP immensively. It's really been just gradual improvements (and a few warts).

I've personally found increased performance and additional security stuff good enough reasons to eventually update, when I needed a reinstall anyway.
241
Screenshot Captor / Re: Add: passwords hidden behind asterisks
« Last post by f0dder on November 02, 2015, 10:16 AM »
(yes, I know there are tools to do so, often AV software are getting warnings, false positives, etc)
Which is a pretty good reason why it shouldn't be added to ScreenShot Captor. The feature doesn't really make sense either, anyway - use one of the dedicated tools.
242
General Software Discussion / Re: Windows 10 Announced
« Last post by f0dder on October 29, 2015, 04:09 PM »
Most of these seem to me primarily consumer-oriented features. Not much there to convince a business user (in fact they're likely to wind them up with the forced download and reminders).
A consumer newspaper probably focuses on features of consumer interests? :-)

Not very interested in what's enterprise-interesting myself, so haven't looked at it - but it performs pretty well (MS seems have done progressively better with 7->8->10), and there's some additional lowlevel security panzering (mitigations, defense-in-depth). Those benefit consumers, and might be of interest at the corporate level.

Of course there's also the said-to-be-privacy-invading stuff, which I'm no fan of - but until somebody discovers anything really underhanded about it, well, that's what group policies are for.

Although many have Apple flat screen monitors.  I guess the Apple flat screen is tough to beat?  A friend has a Mac Laptop and the screen is paper thin, very lightweight, and high quality.
Haven't seen many laptops that can beat the macbook screens, but dunno why you'd buy an external monitor from Apple, really.
243
Living Room / Re: Apple leads the charge: Root access is no longer root access
« Last post by f0dder on October 24, 2015, 09:13 AM »
Seems like quite a hole...
Not really, since you need admin privileges to perform the trick. Not having admin have SYSTEM privileges is more about making it difficult to blow off your legs by accident :)
244
Official Announcements / Re: DonationCoder Major Upgrades - Progress Report Thread
« Last post by f0dder on October 24, 2015, 09:11 AM »
Looks fine here in Firefox, Chrome and IE11.

Is your laptop running in high DPI mode, tomos?
245
Living Room / Re: The end of the hard disk
« Last post by f0dder on October 24, 2015, 09:08 AM »
Oh and Renegade, you DID mismatch the two devices right? RAID1 of SSDs is not safe if you ordered both devices around the same time and they have been together in the raid the whole time. The result is that they will die by way of media wearout within a few days of one another usually.
-SeraphimLabs (June 25, 2015, 12:08 PM)
I really wouldn't be worried about an SSD dying from wear-out unless have really heavy workloads... in which case you know you're abusing the drive, and thus have an orderly plan for swapping them out in good time.

All the SSD deaths I've seen have been from firmware bugs (the early days) or flaky electronics. I wouldn't bother with batch-avoidance, and would just order identical SSDs :)
246
General Software Discussion / Re: Unique Solution to Pirates
« Last post by f0dder on October 24, 2015, 08:41 AM »
Instead, we got emails from grown adults using their corporate email addresses, replete with management job titles. These people actually pirated a $20 piece of software, and then had, again, the gall to email the uBar team for support. Example, with identifying information mercifully redacted:
Emphasis is mine...
247
Living Room / Re: Apple leads the charge: Root access is no longer root access
« Last post by f0dder on October 21, 2015, 01:49 PM »
(As an aside, there's a cheat for logging in as NT AUTHORITY\SYSTEM.  Let me know if you're interested).
A new one, or the usual of running cmd.exe as a scheduled job? :)

And when you do it, you turn it completely off until you reboot again and turn it on.  It's hard enough to get people not to run as admin when they don't have to- rebooting?  Not going to happen.
Well, while I'm not fond of the way Apple is doing this, you don't really need SYSTEM/root privileges often, neither on OSX nor Windows. And normal admin privileges don't (yet...) require this switcharoo, so it's not too bad in and by itself. It's the reason behind it that's worrying :)
248
Living Room / Re: Apple leads the charge: Root access is no longer root access
« Last post by f0dder on October 21, 2015, 11:40 AM »
UEFI isn't exactly the same.  Imagine if you couldn't modify anything in the windows directory.  No installing unsigned assemblies to the GAC.  No installing unsigned drivers at all.
You can't install unsigned drivers on (64bit) Windows unless you're running in TESTSIGNING mode.

It's not just Apple. Microsoft has a built in account that's a level above Administrator now. If it creates a file or folder, you can't delete or modify it even if you are the admin (i.e. root) on your system.
Hasn't NT always had the SYSTEM AUTHORITY?

IMHO it's a very good idea to not let your OS admin account run as root/SYSTEM (just like it's a good idea to user a less-privileged account for your daily work!). But of course it should still be possible to elevate to root/SYSTEM rights, and I believe having to reboot to do this is a bit overkill...

It would seem quite likely that Apple is testing the waters wrt. garden-walling desktops and laptops, and it was certainly something Microsoft wanted to test when UEFI was introduced - if there hadn't been a lot of uproar about it, that might very well have happened by now, and I'd be surprised if we don't see more attempts in the future.
249
Living Room / Re: Patch your Flash! Version 19.0.0.226 (October 16, 2015)
« Last post by f0dder on October 19, 2015, 09:23 AM »
I don't know why (?) you settled on µBlock instead of  µBlock Origin, but I thought I'd try them both out, starting with  µBlock Origin first.
I'd be interested in any advice/thoughts you might have on this.
(This subject seems a bit off-topic. Maybe I need to put it in a new/separate topic/thread.)
I'm sticking with uBlock Origin - here's why.
250
Living Room / Re: Patch your Flash! Version 19.0.0.226 (October 16, 2015)
« Last post by f0dder on October 19, 2015, 09:19 AM »
The combination of RefControl + Request Policy lets me control which 3rd-party domains get contacted at all
That's the whole point of uMatrix.
That much I had already gathered, and I've considered looking into uMatrix as a replacement for RequestPolicy. Anyway, you skipped the second part of that line of text - "and lets me control whether the HTTP Referer [sic] header is set for the domains I allow to be contacted.".

I guess I'll have to check out uMatrix, although I'm doubtful it really does handle all the above-mentioned stuff - you probably misunderstood my questions.
Pages: prev1 ... 5 6 7 8 9 [10] 11 12 13 14 15 ... 364next