Sunday, August 12, 2012

Weekend Linkfest

The Mars lander has been a fantastic success this week and the brainz has been on NASA overload. Couple that with some Perseid watching out back with Alvis last night and things are super fun.

Here is a fresh linkage roundup this week.  I recommend a slice of Key-Lime pie with it.

New Microsoft videos and Miscellaneous presentations

Network Bits

Tool and Utility Roundup

Windows Live Essentials Updates

I was surprised to see news that Windows Essentials 2012 got some updating this week. The primary focus seems to be in Movie Maker and Photo Gallery. I thought most of it was to re-brand and distance from the “Live” naming, but there were some pretty big enhancements.

When I applied the Windows Essentials updater, I noted that many other Essentials apps also got an updating, including my fav Windows Writer. Unfortunately, trying to find a useful change-log for the updates is next to impossible, so your guess (at this time) is as good as mine as to what actually the upgrade enhances.

Introducing the New Windows Photo Gallery and Movie Maker_2012-08-07_20-28-51

The Web-Life

Just saying….

Security and Patching Watch

Forensics

Cheers.

--Claus V.

Sunday, August 05, 2012

Stormy Sunday Linkfest

Here is a roundup of a LOT of Sysadmin/For-Sec linkage I’ve tucked away over the past couple of weeks.

It stormy outside, dry inside, and the Olympics churn on on the tele. Perfect time for a super-fast linkfest dump.

Noteworthy For the SysAdmin

For the Network Watchers

ForSec Focused

USB Imaging

Utilities and Miscellanea

Cheers!

--Claus V.

Innounp Update Tip

I use Universal Extractor from LegRoom.net pretty often to tear open setup packages of software.

There are lots of install packages that use 7-ZIP formats, quite a few MSI based installers, primarily from Microsoft, but more time than not, many packages are wrapped by Inno Setup.

Universal Extractor hasn’t been updated for quite some time. And in many cases, if you stick with the default package, you will encounter a Inno packed set that it can’t open up.

Luckily, because there are so many supported formats Jared Breland has packed in there, it generally is pretty easy to figure out what component you need to update, check that source location, and swap the older one out with a newer one.

Accordingly, I keep a very close eye over at innounp so I can always have the newest version of an Inno unpacker tucked into my Universal Extractor.

Current version of Innounp is 0.37 supporting Inno Setup versions 2.0.8 to 5.5.0.

Cheers.

--Claus V.

Browser Options

There are so many different alternative Windows web-browsers out there, I won’t event begin to attempt to capture them all.

Instead, this post is my reference list of alternative web browsers I would be most likely to use in regular browsing sessions.

Each have their own benefits and drawbacks.  Just depends what the need is.

Which Firefox is right for you -- 14, 15, 16 or 17? - BetaNews - Nick Peers rounds up differences in the current release, beta, alpha, and nightly builds.

Mozilla Firefox, Portable Edition - At this moment, I’ve pulled back a bit from my usage of the “nightly” builds and am back on the main current release level. This is a portable version great for running on your system directly or off a flash-drive.

Comodo IceDragon ver. 13.0 - This is Comodo’s security-designed take on Mozilla’s Firefox. Has some additional features such as Comodo Secure DNS and Site Inspector. More in this WindowsClub post.

Private Browsing - PortableApps.com - Take your standard release-level portable Firefox build, tweak the settings, add in a Flash blocker, disable plugins and local extensions, cram in a privacy-enhancer block-list, a separate profile, and a custom icon to remind you this isn’t your regular firefox, and you have a browser with your privacy in mind. Not this isn’t a “Tor” proxy supported build, though you could add that in if you wanted. It’s more to prevent tracks from being left behind on systems you use it on as well as keeping your browsing a little more directed-ad free. If you want a Tor-based browsing solution, check out the Tor Browser Bundle for one solution.

I hesitate to mention, but will anyway, there are also custom-builds of Firefox for x64 bit operation. I’ve used variants of these in the past, generally with no issues, but these are pretty much hard-core enthusiast builds; so don’t come crying to me if you break something or take your eye out with them; Waterfox and The Pale Moon Project. Check out these great posts about Waterfox to get some background if you are still interesting in running with scissors.

Google Chrome Portable - PortableApps.com. Main release level public build…portable.

Iron Portable - PortableApps.com - Portable version of SRWare Iron browser. This is based on Chromium and removes some of the default “usage tracking” bits that could be a concern for users of the Chrome browser. Although I use Firefox for my primary web-browser, I use Iron Portable now for my general web-surfing; particularly when I am on media-rich/enhanced websites, YouTube, etc. More in this WindowsClub post.

Dragon Internet Browser – This is Comodo’s security modded version of the Chrome browser. Tweaks to offer additional privacy for Chrome users, verifies Domains and alerts on differences in SSL certificates, blocks some cookies and web-trackers, monitors and blocks browser downloading tacking for privacy.

Opera, Portable Edition - Opera. Portable. Enough said.

Maxthon Portable - PortableApps.com. This interesting build uses both the Trident and the Webkit rendering engines to ensure maximum single browser compatibility with web pages.

Sandcat Browser - Syhunt. This is a very interesting portable penetration-testing oriented web-browser. Supports live HTTP Headers, request editor, fuzzer, JavaScript Executor, Lua executor, PageInfo extension, HTTP brute-force, CGI scanner scripts, and much more. Built on the Chromium browser.

--Claus V.

Saturday, August 04, 2012

Free Quality On-Line Learning Resources

I was reading the local on-line news and found this curious article:

Rice joining other elite schools offering free online courses - Houston Chronicle

Rice is not my alma mater (go Cougs!) but even I must confess Rice University is an elite school.

I did some digging and found the web-site they (and other schools) are offering their courses through.

Coursera 

What seems to make the classes offered by Coursera so amazing isn’t just that they are from highly respected and well know colleges and universities, but these aren’t just “giveaway” on-line classes.

No. You need to enroll and the regular class sessions run over a number of weeks.

I looked at some of the IT/Security related ones as they are my current career field, however, they also have many other categories such as biology, economics, business/management, education, medicine, mathematics and physics. Cool!

You may not be able to apply them to a degree, but ongoing educational opportunities like this are incredibilly valuable…both to your career or just keeping the brain-cells active and challenged…especially if you select courses outside your comfort zone.

Check these IT-related offerings out to see what classes are current active or starting soon.

I’m overwhelmed to find this opportunity.  I’m resolved to take at least one class starting either this fall or winter to begin challenging myself.  Maybe programming in Python?

Likewise, if this structured approach isn’t your bag, our favorite TinyApps bloggist has uncovered another amazing source of IT-tech training material. These are less interactive and more watch-n-learn, but still look pretty useful…especially covering subjects you may not be as familiar (or fresh) in.

Take a look at these categories over at TheUrbanPenguin; Linux, Windows, Novell and Citrix

Finally, Code Academy now has a (free) Python course that seems to cover some of the basic foundations. I’m not a Python coder, but I see many projects I do use rely on Python.

Finally, these fresh offerings from Aaron Margosis aren’t really classes, but are educational nonetheless;

  • From TechEd: Legacy Web App Issues, Sysinternals Gems, webcast with Mark Russinovich - Aaron Margosis' "Non-Admin" and App-Compat WebLog
    • Defense Against the Dark Ages: Your Old Web Apps Are Trying to Kill You - Video 1hr, 15m - “The Web browser is the primary path that malware uses to get on users’ computers. Web browser security (especially Internet Explorer’s) has improved dramatically in the past few years to defend against evolving threats. However, continuing to build and maintain Web apps using old practices defeats many of these improvements and leaves your users’ computers more vulnerable than ever. In this session, you will learn why those formerly accepted (or at least tolerated) practices are surprisingly harmful and now must be updated. You will also learn ways to update web apps quickly so that you can adopt more secure practices without stopping your business.”
    • Sysinternals Primer: Gems - Video 1hr, 15m - In the latest edition of the popular Sysinternals Primer series, join Aaron (Mark Russinovich’s co-author of The Windows Sysinternals Administrator’s Reference) as he goes mining for gems. Uncover buried tips and tricks to get the most out of popular tools such as Process Explorer and Process Monitor. Discover treasures among the least-known Sysinternals utilities – tools that you would have been using if you had only known about them sooner. The Sysinternals utilities are vital tools for any computer professional on the Windows platform. Mark Russinovich's popular "Case Of The Unexplained" demonstrates some of their capabilities in advanced troubleshooting scenarios. This complementary tutorial series focuses primarily on the utilities themselves, deep-diving into as many features as time will allow.”
    • Webcast: Mark Russinovich and Aaron Margosis: Sysinternals, Stuxnet, AMA -  Video 52m - “Mark Russinovich and Aaron Margosis discuss Sysinternals tools, computer viruses, hackers, hacking and more with Charles Torre.  Questions from a live virtual audience are addressed.”
    • TSSessions Utility - “TSSessions is a utility I wrote to enumerate terminal services sessions, window stations and desktops.“

Get learning!

--Claus V.

FreeCommander micro-tip

I’m a SuperFan of the FreeCommander freeware file manager.

I have quite the collection of Windows file manager applications and each one has its own coolness factor.

But when it come down to just the daily file management operations, I reach for this one every single day.

The tabs, features, tools, and customizations just make it hands-down awesome.

Developer Marek Jasinski has been hard at work for some time on the next version, FreeCommander XE.

He offers frequently updated Preview Release versions in both installers and “Portable” versions.

I’ve actually been running a non-public “donor” build of FreeCommander XE for quite a while and it has been very stable and fast on my Windows 7 (x64) system.

So when I finally got around to putting a recent copy on an XP system, I was startled to get the following error dialog window when launched.

"The Procedure Entry point ConvertToGlobalHandle could not be located in the dynamic link library KERNEL32.dll".

Super-strange. Interestingly, I could close the error dialog and the application otherwise seemed to function fine. It just appeared at launch.

I did some Google work and eventually found the cause via a similar error reported in the ImgBurn (a optical-media burning/ripping software I also recommend and use):

Imgburn error, entry point not found - ImgBurn Support - ImgBurn Support Forum

The error comes from ImgBurn, but it's not really ImgBurn's fault.

I ran into a similar symptom running ImgBurn under WinXP 32-bit.  In my case, the missing dynalink error dialog box on ImgBurn startup was caused by a copy of the Win9x-specific SvrAPI.dll in the c:\Windows\system32\ directory.

SvrAPI.dll dynalinks to the Win9x Kernel32.dll's ConvertToGlobalHandle() API.  But the Kernel32.dll of NT-based Windows OSes, like WinXP and Win7, doesn't export ConvertToGlobalHandle().  So if you try to load the Win9x SvrAPI.dll on an NT-based Windows OS, you get a missing dynalink error dialog box.  Removing c:\Windows\system32\SvrAPI.dll, which is not used under NT-based Windows OSes, fixes the problem.

Under Win9x, SvrAPI.dll exports the subset of the Net...() APIs available on that platform.  Under NT-based Windows OSes, NetAPI32.dll exports a much fuller set of the Net...() APIs.  ImgBurn, correctly, attempts to explicitly load some OS-specific DLLs via LoadLibrary(), like SvrAPI.dll and NetAPI32.dll.

This issue is not really a bug in ImgBurn since SvrAPI.dll should typically not be installed on an NT-based Windows system.  However, ImgBurn could work around this issue by attempting to load NetAPI32.dll first and only attempting to load SvrAPI.dll after NetAPI32.dll fails to load.  It looks like the explicit loading of SvrAPI.dll was added in ImgBurn 2.5.6.0.  ImgBurn 2.5.5.0 does not attempt to explicitly load SvrAPI.dll, and so does not generate the missing dynalink error dialog box.

I went digging on my Windows XP system system32 folder and -- sure enough -- found the SvrAPI.dll file there.  I renamed mine “SvrAPI.dll.old” instead of deleting it.

Re-launched FreeCommander XE and no more error. Mkay.

That has been about three weeks ago and I can’t find any harm has been done with “disabling” the file like I did. No telling what application I had previously installed that put it there. YMMV.

I was going to post a followup bug note in the FreeCommander Forums about the issue, but found someone else had already ran into the same issue (note to self, check in the program forums first) and reported the behavior and presence of the SvrAPI.dll file; also linking back to the ImgBurn forum link I found.

FreeCommander Forum • View topic - Entry point ConvertToGlobalHandle not located

Hopefully this or the forum link will help others who encounter this weirdness.

FreeCommander and FreeCommander XE (still in beta).

Highly Valca recommended!

--Claus V.

GSD Hurricane Tracking Links – 2012

nmev1i1k.h2uCC attribution: by "An Honorable German" (Charles McCain) on flickr.

Looks like I skipped doing a GSD Hurricane Tracking Links page update in 2011. I guess that’s because the tropics were very quiet for us last year. That’s a Good Thing ™.

Today the Valca clan spread from Houston into the remote reaches of Louisiana now watch with interest the multiple Atlantic Basin churnings.  So it seems fitting to fire up the engines, check and re-check the 2010 GSD hurricane linkages, and get this post into the skies.

Refresh your bookmarks!  (Or at least your link to your GSD Hurricane tracking post!)

Gulf Coast Watch List

Here is the updated list of hurricane links I am watching at home and work. There have been some changes--and additions--due to business model changes at some locations. And I’ve come across a few new and worthy sites to track the impending winds.

Listed in order of my current personal preference…

IBISEYE.com -- Your Atlantic Hurricane Season Tracking Map Source – An awesome site that mashes up tracking data on hurricanes and points of interest, along with Google Maps. Heavy on the JavaScript but makes up for it in pure visual delight. Not only are hurricanes and projected paths displayed, but also counties are added as they fall under various storm watches and warnings. Zoom in/out for more detail.

Google Earth – Google Earth remains in 2nd place in the list this season only because IBISEYE provides (IMHO) the best “at-a-glance” charting of big-picture storm data. Couple that with the wicked-awesome Google Earth Network Link For Entire Basin (direct download link) KMZ files provided by the Tropical Atlantic website and you are ready for some major storm-path modeling. When a storm comes, you can also go to the specific storm page and download/use the KMZ files for just that storm as well. Once you download the file, be sure to save it “permanently” in your Google Earth preferences so it will be available and “updatable” with the latest data when needed. Lay in some of the FEMA flood hazard layers for more usefulness. Finally, supplement it some more with tools from these Google Earth Blog links: Storm Tracking With Google Earth & More tools to help track Hurricane Irene

SciGuy Blog – Chon.com’s Eric Berger - It’s probably not a good idea to attempt to interpret all these charts and data on your own to make life-impacting decisions as a hurricane bears down on you. Fortunately, Eric continues to faithfully provide Houstonians and neighbors beyond his outstanding details, commentary, live chat-sessions, and analysis of all science and prognostication tropical. Highly recommended as a filter of reason and temperance in a media-market filled with over-hype, smashing graphics, and fear-factor extremes. Besides that, you can count on Eric to provide great meteorological linkage to excellent source material like this GFS global model or this the European model. It’s a must-follow/must-RSS feed blog for all Texas Gulf Coast residents. Period. (see also Jeff Masters’ Wunder Blog : Weather Underground).

Skeetobite Weather - New (to me) charts and data site found by keeping a keen eye on Eric Berger’s hurricane posting data linkage. Good stuff here with nice clean graphs, graphs, and data linkage.

Tropical Atlantic: NHC Model Data for Tropical Storms – TropicalAtlantic – For folks who need to have more than one storm-track model.  Look at the top of the page to select any current storms.  Then you can select either the “in-browser” Google Maps mash-up or the Google Earth TMZ builds.  Additional NOAA summary of storm-track models. Also, Tropical Atlantic: Information About Atlantic Hurricanes – main-page. 

Hurricane and Storm Tracking - Terrapin's site remains a dear favorite. It is lean and simple and allows for quick location of information without lots of graphic overkill. The storm-track plots come in two flavors, a simple historical and future projection track that is static as well as a java-based animated one. Loads fast and updated as new forecasts are posted.

National Hurricane Center - Website maintained by the National Weather Service. Lots more linkage on the sidebar for hurricane related topics and preparations. The main page has links to a number of graphics and advisories.

(NHC's) Atlantic Graphical Tropical Weather Outlook - A sub-page of the site listed above. This is pretty cool. Any current tropical systems are overlayed on a satellite image with an icon. Hovering over the icon pulls up a quick update view. Clicking on the update popup then takes you to the system's detailed page.

Moreweather.com -- Tropical Atlantic Weather Page - T-Storm Terry Faber has created a great hurricane system page here. Not only does it have lots of links to any active systems, but it also contains links to radar and satellite images, many in great details and high resolution. The hurricane tracking maps and projections are there, of course. T-Storm Terry also provides links to other sources of information as well as historical data on previous storm systems.

Tropical Weather : Weather Underground - This is a fantastic site that has the widest range of linkages, maps, images, models, and everything. Just about the only thing it doesn't provide is winds blown into your face through the monitor. Which is why I put this at the bottom and not the top: there is just so much information it overwhelms.

Oklahoma Weather Lab | Hoot - Models: GFS Model Upper-Level Wind 850mb provided us great forecast models of the high/low pressure zones and ridges leading up to Ike’s eventual landfall and really helped us understand the forces driving its path.

Tropical Cyclone Guidance Project | Real-Time Guidance - NCAR Research Applications Laboratory - “The real-time guidance system generates an individual page for each active storm in the North Atlantic, Northeast Pacific, and North Central Pacific basins. Each individual storm page features the latest plots of model guidance and intensity forecast aids for that storm, as well as other diagnostic and observational information.” - added 08/10/2012 via a tip from SciGuy blog Eric Berger. Drill down into great plot track guidance models.

WeatherBELL Models - Amazing collection of high-quality weather models and data. Until you get focused, you can easily get lost for hours in the charts, visual model animated “loops”. My head is spinning and I’m afraid I will start to be dreaming in whirls of colors! - added 08/10/2012 via a tip from SciGuy blog Eric Berger.

Experimental forecast Tropical Cyclone Genesis Potential Fields - Department of Earth, Ocean, and Atmospheric Science, Florida State University - Great supplemental animated and static image data on a lot of key tropical weather-related information points. - added 08/10/2012 via a tip from SciGuy blog Eric Berger.

Atlantic and Caribbean Tropical Satellite Imagery - Satellite Services Division / Office of Satellite Data Processing and Distribution and Gulf of Mexico Imagery - Satellite Services Division / Office of Satellite Data Processing and Distribution from the NOAA.  Special thanks to GSD frequent commentator “Bozo” for sharing this great source of satellite images from NOAA with me last year.

National Weather Service - another top-level landing point to drill down deeper into forecast maps, radar imagery, etc. - added 08/25/2012

National Weather Service Doppler Radar Images - link to various NWS/DoD Radar sites. Select your focus then add additional details and information via the bottom control bar as well as run loops from the left control bar. - added 08/25/2012

Tropical Cyclone Heat Potential Page: Global Fields - Select your basin map field on the left (such as the Gulf of Mexico). Put very simply, understanding what the water temperatures are and combining them with storm-track information might help one forecast potential intensification/intensity of a tropical storm. Of course lots of other factors play into the mix as well… - added 08/25/2012

Gulf of Mexico AVN Color Imagery - Satellite Services Division - nice radar loop imagery with options to add additional data markers to the base image. Provided by the NOAA Satellite and Information Service/NESDIS) (AVN=Aviation) - added 08/25/2012

Gulf of Mexico Visible Imagery - Satellite Services Division - nice visible satellite loop imagery with options to add additional data markers to the base image. Provided by the NOAA Satellite and Information Service/NESDIS) - added 08/25/2012

Latest Satellite Imagery - NOAA site that has links to a large number of additional satellite imagery. Neat stuff. - added 08/25/2012

NEXSAT, NRL/JPSS Next Generation Weather Satellite Demonstration Project - Super-duper cool satellite images and loops. Again drill in to get to the NEXSAT area of interest (such as the Gulf of Mexico), then use the controls above and to the left as needed to tweak your views. - added 08/25/2012

NCEP Central Operations - National Weather Service link - Pick the option you want above the map, then select the type and area. Finally make one or more final option picks and you get some very helpful graphs. - added 08/25/2012

Weather & Climate Data - COLA - Additional links for current conditional analysis, forecasts, climate outlooks and hurricane intensity models. - added 08/25/2012

Galveston Bay Operational Forecast System (GBOFS) - NOAA Tides and Currents for the Galveston Bay area - super neat tidal and water level information useful for those who dwell on the rim of Galveston Bay. Also reports wind and current data with animated loop views available. - added 08/25/2012

Northern Gulf of Mexico Operational Forecast System (NGOFS) - NOAA Tides and Currents for the wider upper Gulf of Mexico costal areas. - added 08/25/2012

Texas Storm Surge Models - Wunderground - For additional storm surge inundation maps for US coastlines, see this page Storm surge imagery for the U.S. coast | Weather Underground - added 09/01/2012

U.S. NEXRAD and TDWR Radar Stations - Wunderground - I’m linking to the main map from which specific radar stations can be chosen depending on your area of attention; though the Houston Hobby and Houston-Galveston interest me the most. The radar images have lots of cool tweaks you can perform on them so spend some time getting to know them! - added 09/01/2012

Computer models - USATODAY - old but a good starting point introducing foundations to weather forecast models. - added 08/25/2012

Stormpulse / Hurricane tracking, mapping - Sadly, Stormpulse has now been diminished to the bottom of the pile. The site developers have modified their business model (you go dudes!) to now be solely subscription-based access. There are some time-limited free-trials you can access. Currently they are not offering any “consumer-level” subscription services and the basic package is probably still too pricy for all but the most crazy consumer weather-heads. All that said, they do still have a “live” mini-display view on their home page that contains a fair amount of the imagery and tracking projections that we all used to love. If you are desperate and pine for the days of Stormpulse of old, then hop over there and just zoom up your browser window display size to your heart’s content.

Local Winds

For local Houston area facts and updates, most of the local news stations have their web-sites powered up.

Even More Weather

I have found these additional links pretty cool:

Road Kill

Again as it bears repeating, you just don’t want to be caught off guard when one of these comes knocking

--Claus V.