Recent Posts

2451

General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently

« Last post by wraith808 on March 29, 2017, 11:30 AM »

I think of 2FA as only affecting the first time signing in from a locale (not sure what is the definition of a locale with a moving laptop). 

-Steven Avery (March 29, 2017, 10:03 AM)

Notice my requirements above.  Every time I close my browser (or it times out), I have to use 2FA.  Which, because of how they implemented it, requires an active cell signal (MS sends me a text with a number.  I have to text that number back from that device).  Every time I join a meeting with Skype for Business Web Client, I have to log in too- which uses 2fa.  It's a pain in my ass.  I also have to change my password every so often (I think 30 days, but sometimes it's more than that, and sometimes less... so I'm not really sure what the interval is).

2452

General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently

« Last post by wraith808 on March 29, 2017, 11:27 AM »

We are at the point where either use cases require LastPass or people just want to use more 'convenient' ones and use LastPass (or alikes), as evidenced by the comments on that Arstechnica article, those that mention KeePass seem more prone to downvotes 

-rgdot (March 29, 2017, 08:13 AM)

LastPass provides a service, not software.  I don't see why they don't OpenSource their software, so that it can be audited by external sources.  It would do away with these embarrassing episodes.  Vulnerabilities, I'm sure would be found - and I'm sure they happen in KeePass too, but it's not as newsworthy.

(What is alikes?  Couldn't find it with a google search.  And truthfully, I'm having trouble parsing that whole sentence.  )

2453

General Software Discussion / Re: Windows 10 Announced

« Last post by wraith808 on March 25, 2017, 07:03 PM »

Doesn't this go without saying? How else can they "improve your typing/voice recognition" or keyboard suggestions? Google does the same with with the Google Keyboard (Gboard?) on Android devices, as well as with the voice searches.

-Deozaan (March 25, 2017, 05:23 PM)

I think that what is being said in that article, however, is even if you opt out, they're still doing it.  Either against your wishes, or changing the setting every update.  Mine is off.  And I haven't even looked at it since I installed.  But, they get around that by saying 'claimed'.

2454

Clipboard Help+Spell / Re: Kapersky reports trojan in CH&S 2.41

« Last post by wraith808 on March 25, 2017, 03:13 PM »

Hopefully kaspersky will fix the false positive in the next day or two before others get scared.

-mouser (March 25, 2017, 03:02 PM)

Did you report it to them?

2455

General Software Discussion / Re: Windows 10 Announced

« Last post by wraith808 on March 25, 2017, 12:26 PM »

Got any links for that from a more reputable source?  They might be right, but the Daily Star is pretty much a tabloid, which makes me default to sensationalism.

2456

General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently

« Last post by wraith808 on March 23, 2017, 07:53 AM »

How do you handle logins from your various devices? Do you sync your password file somehow?

-Deozaan (March 22, 2017, 05:12 PM)

There have been times where I have had KeePass in Dropbox folder, but mostly everything is already logged in on all devices and a password change only means re-logging on devices 'manually', obviously site admin panels and banking/money related ones I don't stay logged in but that is a special case and banking accounts especially are either memorized or accessed from one machine only.
I see sync as more an appointment, calendar thing than a password thing.

-rgdot (March 23, 2017, 12:31 AM)

Yeah, definitely different use case than me.  I have a two pronged problem that lastpass helps me with, and I haven't been able to find anything that really solves them (1Password came closest, but in the end wasn't what I needed for a final solution)

1. I use my passwords on many devices.
2. I share my passwords with my wife in the case that I'm indisposed.
3. I have many devices/items that are 2fa enabled (a lot of them time out after a given time, and a lot of them time out for no particular reason at all)
4. My workplace is paranoid for home workers (they have 2fa every time something happens, i.e. I login to office and am logged  in, then go to skype - which is connected- they text me again for 2fa, and they time out the connections on different intervals.)
5. Their password requirements are very long and complex.

Too much security with too many passwords, with the need to share and be able to 2fa.  I feel like a hacker sometimes with what I have to go through for a simple login, but they probably have it easier.

I had to change my master work password yesterday, and spent a good 2-3 hours getting everything synced and working before I could get back to work.  And heaven help me if I don't have cell/email reception.

2457

General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently

« Last post by wraith808 on March 22, 2017, 02:04 PM »

Offline isn't really an advantage to some of us.  My use case, it's a disadvantage.

2458

General Software Discussion / Re: LessPass password manager

« Last post by wraith808 on March 22, 2017, 02:01 PM »

Have they changed the core mechanics of how it works, or is it still 100% utterly useless?

Last time I looked at it, the design meant compromised master password == having to change each and every password you've used it for.

Also, what this guy wrote.

-f0dder (March 22, 2017, 02:35 AM)

Thanks!  That's the kind of info/criticism I was hoping for, as it seemed simple and sound to me.  Disappointing.  Another good article on this from that guy: https://anarc.at/blo...-02-hashers-history/

2459

General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently

« Last post by wraith808 on March 21, 2017, 11:40 PM »

Nothing about LessPass?  Surprisingly little activity on that thread, and that's what I'm looking at switching to.

-wraith808 (March 21, 2017, 08:11 PM)

LessPass uses very interesting ideas, but I don't plan to move to it because I have an old-fashioned password manager program that runs locally (though it does sync the encrypted database via dropbox - or maybe it's google drive). I manually copy/paste my passwords instead of using any browser integration.  I'm happy with that solution.  I believe it's safe enough for me because even though the database is in the cloud, it's not in a centralized database with a lot of users - anyone compromising it would be someone targeting me specifically rather than collecting passwords for thousands or millions of people.

Though I would be quite interested in hearing about anyone else's experience - maybe it'll convince me to switch.

-mwb1100 (March 21, 2017, 08:49 PM)

I have a different use case, wanting to share with my wife so that in case something happens to me, or I'm just incommunicado, she has access to all of them.  She's not technically inclined, nor does she switch things or like technology switches lightly.  I don't think that KeePass satisfies my needs from those requirements.  LessPass seems to do so, in a deceptively simple way.

Just installed LastPass yesterday and deleted logins from my browser.  What now?

-fredemeister (March 21, 2017, 08:19 PM)

you could export your data from LastPass (https://lastpass.com...=showfaq&id=1206) and put it into something else?

-mwb1100 (March 21, 2017, 08:52 PM)

See on their forums they've fixed the problem with Chrome, and working on the FF version.  May just wait a while since I spent the effort and time migrating away from the browser this week.

-fredemeister (March 21, 2017, 10:17 PM)

Yeah, to say multiple vulnerabilities in this case seems a little less than forthright, considering that I don't think that anyone would be exposed to both.

2460

General Software Discussion / Re: Multiple LastPass Vulnerabilities Discovered Recently

« Last post by wraith808 on March 21, 2017, 08:11 PM »

Nothing about LessPass?  Surprisingly little activity on that thread, and that's what I'm looking at switching to.

2461

Screenshot Captor / Re: Screenshot Captor

« Last post by wraith808 on March 21, 2017, 05:36 PM »

Oh, that's a lot of work for me. I have connected the tool with other software. When I switch to an other Version I have to adjust a lot of code. If I have more time I sign up again.

But thank you for quick answers ( Great Tool).

-ffbb (March 21, 2017, 04:21 PM)

You might get the portable version, and extract the main application files (get rid of the config file), and copy over your installation, depending on what you mean by "connected the tool with other software".  Unless it's looking at the version of the software, it shouldn't affect your other applications (at least I don't think SSC has a true API yet)

2462

Living Room / Re: Movies you've seen lately

« Last post by wraith808 on March 21, 2017, 05:21 PM »

Just watched Hacksaw Ridge.  Very good movie, and incredible man (Desmond T. Doss).  It's very gory, and I think very realistic in what you'd see on a battlefield, so I will give that warning.



Rotten Tomatoes
IMDB

2463

General Software Discussion / Re: When testing untrustworthy software, remember virtual machines can be escaped

« Last post by wraith808 on March 20, 2017, 04:54 PM »

(I don't actually do that.)

-Deozaan (March 20, 2017, 01:09 PM)

(That you'll admit )

2464

General Software Discussion / Re: Malwarebytes goes full Anti-Virus

« Last post by wraith808 on March 19, 2017, 09:49 PM »

It got to the heuristic scanning after about 30 minutes- which on the longer side, but not overly so.  The rest of the time was just that.  I've changed the schedule to once a week in the dead of night on Monday morning.  I'll see how it goes, but not upgrading any of my other machines until I figure this out.

-wraith808 (March 19, 2017, 08:02 PM)

Actually, ~30 minutes is pretty much what MB2 takes on my desktop computer when the scan includes checking for rootkits (without that, it takes about half as long). So perhaps the problem you're experiencing is something wrong with the heuristic scanning in MB3, rather than something absurdly excessive about the entire scanning process.  Have you reported this on the MBAM Forum?

-cyberdiva (March 19, 2017, 08:37 PM)

No, just looked through the other people's threads that had the same problem.  If they didn't get a solution, didn't look very worth it - I don't frequent many forums, and try to keep it that way.  Might try a support ticket.

2465

General Software Discussion / Re: Malwarebytes goes full Anti-Virus

« Last post by wraith808 on March 19, 2017, 08:02 PM »

I don't see what that has to do with the heuristic scanning.

-wraith808 (March 18, 2017, 01:43 PM)

Wraith, I'm very sorry to hear about your horrendous experience with MB3, but I'm most grateful to you for posting about it.  You've saved me from moving to MB3 from MB2.  One very weird thing about your present experience is that apparently it's the heuristic scanning that is taking so long. In MB2, the heuristic scanning occurs at the end of the scan and takes VERY little time, perhaps a minute or so. 

-cyberdiva (March 19, 2017, 07:01 PM)

I know!  I was surprised!  It got to the heuristic scanning after about 30 minutes- which on the longer side, but not overly so.  The rest of the time was just that.  I've changed the schedule to once a week in the dead of night on Monday morning.  I'll see how it goes, but not upgrading any of my other machines until I figure this out.

2466

General Software Discussion / Re: XYplorer is not responding.

« Last post by wraith808 on March 19, 2017, 05:16 PM »

Looks cool, but I don't get it to work with XYplorer, using the portable version apimonitor-x86.exe. I have XYplorer.exe listed and selected in "Monitored Processes" but no API calls are listed.

-DonL (March 19, 2017, 04:42 PM)

I'll still try it to see if I get different results.  I'll also see if anything in my normal toolbox can help.

2467

General Software Discussion / Re: XYplorer is not responding.

« Last post by wraith808 on March 19, 2017, 02:16 PM »

API Monitor can be a helpful tool for investigating. Although it is marked as alpha software, it did work when I needed it at the time. It is both free and available as PortableApp.

-Shades (March 18, 2017, 11:10 PM)

Good find for a few different uses.  Thanks!

2468

General Software Discussion / Re: XYplorer is not responding.

« Last post by wraith808 on March 18, 2017, 10:25 PM »

Thanks for the suggestion.  Unfortunately, I've already used it on bare metal VMs with nothing on them (including AVs) and have the same problem.

2469

General Software Discussion / Re: XYplorer is not responding.

« Last post by wraith808 on March 18, 2017, 06:05 PM »

FWIW, I use XY and do not see this problem.  Also even though there's obviously no obligation to do so, I think it's completely reasonable for a vendor to suggest that problems with the software be discussed in his forum rather than some other random place on the internet.  If nothing else, the XY forum has a number of very dedicated users who might be able to help in addition to Don.

I think everyone should be aware the Don is a software vendor who puts his money where his mouth is when it comes to support.

-mwb1100 (March 18, 2017, 02:56 PM)

 

Never said it wasn't reasonable.  Didn't ask for support, he jumped in- probably has some filter set up to see when his product is mentioned in other forums.  I was/am perfectly fine with it as is.  That's the difference.

Just to add another voice, I also have a lifetime license, and I have also had the "sleepytime" every time I have installed XYplorer (installing the newest release every time I try). Not constantly, but often enough to aggravate me, and it usually occurs soon enough after installation that I get discouraged. And, like Wraith, I can't point to any common circumstances when it happens.

I'll pull down the current version and give it another go, last time I tried was at 16.50. I always liked the interface. :-)

-x16wda (March 18, 2017, 03:31 PM)

Be aware of the false positives if you're using Windows defender.  It's crazy to get past them if you get them.  I had to d/l it on the machine that doesn't get it, exclude a folder on the machine that does, and sync to that directory to get it to work.

2470

General Software Discussion / Re: Malwarebytes goes full Anti-Virus

« Last post by wraith808 on March 18, 2017, 01:43 PM »

Almost what you want:
Edit planned scanning > Edit > Plan frequency > Once

-Curt (March 18, 2017, 01:40 PM)

That just makes it so that it only scans once.  I don't see what that has to do with the heuristic scanning.

2471

General Software Discussion / Re: Re: XYplorer is not responding.

« Last post by wraith808 on March 18, 2017, 01:40 PM »

I agree this should be discussed in XY's user forum.

-DonL (March 18, 2017, 01:17 PM)

He was just saying that it should be split into a different thread, which I agree with.  I don't have an account on your forum, and I try to limit my participation on several different forums - too much of a time sink.  If you don't want to continue here, that's fine.  I'll continue as I have been, and thank you for your time so far.

Deo, I think you can split it into something more descriptive, and DonL can follow if he wishes.  Thanks for your efforts on this.

2472

General Software Discussion / Re: Re: XYplorer is not responding.

« Last post by wraith808 on March 18, 2017, 01:38 PM »

Just an FYI - in the new version, only on my surface (though I have the same definitions as on my desktop), contextmenu64 is being detected as a trojan by windows Defender.  I did submit that to microsoft.

2473

General Software Discussion / Re: Re: XYplorer is not responding.

« Last post by wraith808 on March 18, 2017, 12:53 PM »

Have you tested the latest version (17.70)? This thing is evolving and, contrary to some others , it's usually getting faster with each release.

-DonL (March 18, 2017, 04:37 AM)

That I have not done.  I'll try using it full time on my surface, as I can afford to try there, and let you know what I see.

2474

General Software Discussion / Re: Malwarebytes goes full Anti-Virus

« Last post by wraith808 on March 18, 2017, 12:50 PM »

That's not what that said to me, but maybe it's in the reading, ...

-wraith808 (March 17, 2017, 10:08 PM)

It's in the reading, if you ignore the overenthusiastic hype in the heading and first couple of paragraphs:

With the launch of Malwarebytes 3.0, we are confident that you can finally replace your traditional antivirus ...

That says to me that they think their product can now perform the function of an normal AV program.

They then go on to say you can still use your AV program in tandem with it:

But rest assured, we continue to support compatibility if you choose to use a third-party antivirus or other security software alongside Malwarebytes 3.0.

ATM, I'm still running v2 after the debacle of trying to get v3 to install, upgrade, or work.

I can't understand why they wouldn't see that going from signature style virus detection to signature-less would naturally increase the load on system resources.
One can only guess that the only machines they have to test on are all using top tier components.

-4wd (March 18, 2017, 02:33 AM)

I got all of that in the reading.  I just took away something different- if you can replace your AV with it, even if it works with your existing AV (i.e. doesn't conflict, which is good), then it has to have the same functionality, right?

2475

General Software Discussion / Re: Malwarebytes goes full Anti-Virus

« Last post by wraith808 on March 18, 2017, 12:49 PM »

my version is in Danish, so these are my translations of the User's Interface:

Open Malwarebytes 3 > Settings > Schedule scanning > check Type > click Edit , then in Type of Action change "Normal", to "Defined by User" or Hyper.

Modified:
1) I am not quite sure, because I can't remember this part, but you may have to first delete the job that was already there (instead of editing it), and only then create a new job with your preferred type of action.

2) oh, yeah, Fill "Exclusions" with everything you already trust. Why not?

Malwarebytes 3 is easy to live with, but we have to do the settings, don't we.

-Curt (March 18, 2017, 04:54 AM)

I've already done what you said.  You see my results above.  First thing I do with any software is to check the settings.  And, as I pointed out, I'm apparently not the only person with the problem.  And the very thing they tout (heuristics) seems to be what is causing the problem.  And I don't see any way in any of the settings to turn it off.