Monday, May 30, 2016

Windows “Service Pack”, Slipstreaming, ISO files, misc.

Wow.  Big thanks to Lavie for being patient with me while I hammered out all these blog posts.

I’ve still got quite a lot more, but it has been a very productive – non-productive day off.

Cheers!

Claus Valca

Linux Linkfest

Again, some of this is old, some is not.

Note: I spent Sunday watching the Indy 500 and NASCAR races all day and reinstalled Apricity OS from scratch because it crashed out in the middle of a Update session. Despite my best noobie efforts and troubleshooting, I was unable to get it going.

When launching the “Update Manager” I would get a “Failed to synchronize any databases” error.

I tried this fix metioned in the Apricity forum - Lost my upgrade ability … along with some others but nothing could get it restored.  Took me a short matter of time to reinstall a fresh load of Apricity and all is well now.

Cheers,

Claus Valca

EMET news bits

Some more news about the Microsoft Enhanced Mitigation Experience Toolkit (EMET).

I still recommend running it as part of that GSD Windows Defense in Depth Strategy.

Even for home users.

Cheers,

Claus Valca

KeePass & KeeFarce

Yes I use (and recommend) the freeware KeePass Password Safe & MiniKeePass (iOS) as a password management vault.

There are lots of other very good applications that take a similar approach. This one works for me as I can keep my database file in use both on Windows and iOS.

Though all that said, I remain intrigued by Master Password.

Anyway, there were some security news blips a while back that painted a picture that KeePass might be expoitable.

Well sure, if someone already is already running malcious code on your system, it seems obvious they can scrape any data you may access while the database is unlocked.

As Zeljka Zorz said in the close of her HelpNet Security article;

Lest you believe this is the death-knell for KeePass or other password managers, it’s important to know that as helpful as they are, all password managers are unlikely to withstand a targeted attack made with specialized software like KeeFarce (KeePass developers admitted as much).

But, in order to run this software, attackers must either already have access to the target machine, or trick users into giving them access by running malicious software such as remote access Trojans (RATs) or specialized spyware on their machines.

And if they gain access, your machine is not your machine anymore, and they can do pretty much what they want with it – security protections will not last long. So you can continue (or start) using a password manager, but protect your system with security software and be careful about the software you run on it, especially when it comes from untrusted parties.

Enough said.

Claus Valca

…since we are talking about encryption…

Here are some links about TrueCrypt, VeraCrypt, CipherShed, and Bitlocker…

FWIW – I’m still running the last release version of TrueCrypt…

Cheers,

Claus Valca

Western Digital Encrypted Hard Drive “gotchas”

Good information to know if you use a Western Digital encrypted hard drive. Not breaking news but still good to be familiar with – especially if your organization uses them!

Wow.

Claus Valca

More PowerShell Fun

PowerShell and Windows To Go USB stick building

PowerShell and WinPE USB stick building

Tips

Cheers,

Claus Valca