We support Microsoft .NET Framework 2.0 & 1.1, all versions of Access, SQL 2000, SQL 7.0, SQL 2005 Express, SOAP, FrontPage 2002, 2003, Visual Studio 2005, Index Server, XML, UDDI, & Mobile device support. We also offer great third party tools like SmarterMail, Merak Mail, SmarterStats, PHP, Perl, MySql, DeepMetrix Livestats XSP 8.0.   We support Microsoft .NET Framework 2.0 & 1.1, all versions of Access, SQL 2000, SQL 7.0, SQL 2005 Express, SOAP, FrontPage 2002, 2003, Visual Studio 2005, Index Server, XML, UDDI, & Mobile device support. We also offer great third party tools like SmarterMail, Merak Mail, SmarterStats, PHP, Perl, MySql, DeepMetrix Livestats XSP 8.0.
 Sunday, September 10, 2006

A number of people have been having trouble with MS FTP server and finally discovered that their firewall is blocking the ports. They had thought that FTP used only ports 20 and 21 which were opened in the firewall. But they have discovered that FTP uses other ports as well, specifically if they required passive mode. The problem is about the port range which have been blocked by the firewall.

Seems they can find no way to set the range of ports that IIS FTP server will use to assign to passive FTP so that I can open that range in the firewall. Is there a way to assign a range of ports for passive FTP in IIS FTP server other than a huge block?

Yes it is possible to configure the passive port range in IIS so here it is.

To do this in IIS5 you need to be running SP4 :
http://support.microsoft.com/?kbid=810639

In IIS6 you can also do this :
http://support.microsoft.com/?id=555022

9/10/2006 9:55:31 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
 Thursday, September 07, 2006

There are delays between each of the steps in memory access. These delays are referred to as latencies and expressed as a number of clock cycles. Here's a brief explanation of some of the most common, and important, memory timing parameters that affect access latencies:

When we see what a RAM’s CAS latency is, it is 4 numbers, such as 2-2-2-5, which correspond with CAS – tRCD – tRP – tRAS. You should be able to change the CAS Latency in your BIOS. In most BIOSes, it can be found under the “advanced chipset” menu, though it can be found in different areas in different BIOSes.

CAS stands for Column Address Strobe. This is the number of memory cycles that pass between the time a column is requested from the active page and the time the data is ready to send across the bus. This number is usually 2, 2.5, and 3, on DDR memory. This is actually the last part to come into effect.

RAS to CAS Delay is referred to as tRCD. This is the delay in memory cycles between the time a row is activated and when data within the row can be requested. This only happens when data is not on the active row.

tRP is the time for RAS Precharge. This is the time in memory cycles that is required to clear out the active row out of the cache, before a new row can be requested. In other words, it’s the time it takes for the memory to stop accessing one row and start accessing another. Once again this only takes place it the data is not in the active row.

tRAS refers to the minimum time that a row must remain active before a new row can be activated in each memory bank. A new row can not be opened until the minimum amount of time has passed. If there is more than one bank on memory, this will help the performance of the tRAS. If there is only one active bank, then the need to change rows is guaranteed, and if there is more than one bank with memory, then there is only half the chance that there will be a need to change rows. In turn, the tRAS will only come into effect half the time. The tRP and tRAS together are often referred to as the Row Cycle time, because they happen together.

No discussion of memory latency would be complete without mentioning the DRAM command rate. The command rate is the delay between when a memory chip is selected and when the first active command can be issued. The factors that determine whether a memory subsystem can tolerate a 1T command rate are many, including the number of memory banks, the number of DIMMs present, and the quality of the DIMMs. Some memory manufacturers claim that their DIMMs are rated for operation with a one-cycle (1T) command rate.

Since latencies refer to delays, lower is better. That doesn't mean you should hop into your motherboard's BIOS and set each memory timing option to its lowest possible value, though. Memory modules are rated for a specific set of latencies at a given clock speed, and they're generally not stable with lower latencies. A DIMM's latencies are usually expressed as a series of four hyphenated numbers corresponding to the CAS latency, RAS-to-CAS delay, RAS precharge, and active-to-precharge delay. Low latency DDR400, for example, is generally rated for 2-2-2-5 timings at 400MHz. That refers to two cycles of CAS latency, RAS-to-CAS delay, and RAS precharge, and five cycles of active-to-precharge delay.

CAS Details  Crucial Details

9/7/2006 7:13:27 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
 Wednesday, September 06, 2006

Microsoft has issued a recall for Small Business Server 2003 R2 (SBS 2003 R2). Microsoft had only released the update to OEMs, system builders and distributors -- consumer availability was limited so the affect on them is minimal.

“Recently, and during a regular audit as part of our software production process, Microsoft became aware of an issue with the final SBS 2003 R2 software containing non-final versions of a few core components to SBS,” said Eric Ligman on Microsoft's Small Business Community Blog.

Microsoft is in the process re-releasing the SBS 2003 R2 update with final-spec components which will cause a minor delay in general availability of the software.  Microsoft had stated earlier this month at the Worldwide Partner Conference that the update would be available in August.

9/6/2006 7:44:09 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

Instalinux.com is a handy Web site from which users can create customized installation images for a handful of different Linux distributions. The site's service, SystemDesigner, is free, and administrators should find it particularly helpful when provisioning multiple machines—either physical or virtualized.

The Instalinux site was put together by former Hewlett-Packard employee Chris Slater, and SystemDesigner is based on HP's open-source Linux Common Operating Environment project.

We appreciated the option of having all available updates applied at install time. We also could choose to either set up our disk partition layout in advance or to take care of it interactively once we'd booted into our system's installer.

At Instalinux.com, users can create installation disks for CentOS' CentOS 4.3, Debian 3.1 and 3.2, and Red Hat's Fedora Core versions 3 through 5. The site also supports Novell SUSE 9.3 and 10, but not yet SUSE 10.1, as well as Canonical's Ubuntu and Kubuntu. The site does not support the latest Dapper Drake versions of Ubuntu or Kubuntu, however.

We could create installers for the x86 versions of each of the supported distributions; for the newer Fedora and Debian releases, we also could opt for x86-64 versions.

Instalinux.com's SystemDesigner acts as a front end to the automated install systems of the Debian, Red Hat and Novell SUSE distros, and it was interesting to compare the differing levels of customization that each automated installer offered.

Dev
9/6/2006 7:38:56 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

Intel cutting around 10,000 of its employees.  As expected, the company today announced that it will be laying off 10,500 jobs, which is around 10 percent of its work force. Intel hopes it can save around $5 billion over the next two years -- and the job eliminations are a critical part of the company's restructuring. Almost 5,000 of the affected jobs have already been eliminated.

Intel is hoping to turn around sinking profits while trying to raise efficiency in its battle to take back market share from AMD. Intel Chief Executive Paul Otellini said “These actions, while difficult, are essential to Intel becoming a more agile and efficient company, not just for this year or the next, but for years to come.”

Most of the job cuts by the Santa Clara-based company will impact the management, marketing and information technology departments, according to Intel. Manufacturing, design and other departments will suffer job cuts sometime in 2007. Intel expects severance costs to total around $200 million. This is going to be the largest number of job cuts by Intel in 21 years.  Even though the loss of 10,500 jobs is bad, analysts expected numbers in the 15,000 range.

9/6/2006 7:31:17 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
 Tuesday, September 05, 2006

Eliminates hidden applications and processes

Removing rootkits without compromising system integrity is particularly challenging and needs to be done with care. Our free software, Sophos Anti-Rootkit, finds and removes any rootkit that is hidden on your computer.

What is a rootkit?

The term rootkit is used to define a Trojan (or technology) used to hide the presence of a malicious object (process, file, registry key, network port) from the computer user or administrator.

Easily detect and remove rootkits

As part of its complete protection of endpoint computers, Sophos Anti-rootkit detects rootkits and prevents them being installed on any of your desktops, laptops and servers. Sophos Anti-Rootkit provides an extra layer of detection, by safely and reliably detecting and removing any rootkit that might already have secreted itself onto your system.

Simplified management

Using Sophos Anti-Rootkit is straightforward. Whether you use its simple graphical user interface or run it from the command line you can easily detect and eliminate any rootkits on your computer.

9/5/2006 9:21:02 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
The Award-Winning Comodo Firewall
  • PC Magazine Online's Editor's Choice
  • Secures against internal and external attacks
  • Blocks internet access to malicious Trojan programs
  • Safeguards your Personal data against theft
  • Delivers total end-point security for P.C. and networks

      Install now for out-of-the-box protection against identity theft hackers, Trojans, scripts and other unknown threats

      "Download"  "LearnMore"

      Unfortunately, most firewalls leak. But Comodo's Firewall is unique in that it passes all known leak tests to ensure the integrity of data entering and exiting your system. Comodo has put our firewall through all kinds of sophisticated tests to ensure our firewall is powerful enough to ward off these attacks with default settings. No other firewall has had to work this hard. Take this test yourself.

    • 9/5/2006 8:51:14 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      Malicious hackers broke into one of AT&T Inc.'s computer networks and stole credit card data and other personal information from several thousand customers who shopped at the telecommunications giant's online store.

      The company said it discovered the breach last weekend for its online DSL services. Someone apparently broke into the system and glimpsed personal information from several thousand customers who purchased DSL equipment through the company's online Web store.

      AT&T said it was notifying "fewer than 19,000" customers whose data was accessed during the weekend break-in, which it said was detected within hours. The company said it immediately shut down the online store, notified credit card companies and was working with law enforcement agencies to track down the hackers.

      While AT&T didn't provide information about the root cause of the attack, Shlomo Kramer, CEO of security appliance maker Imperva, said there is a greater than 50 percent chance the attack was internal, perhaps by an employee.

      "Maybe somebody misused their privileges and stole this information," Kramer said. "I don't know what was the case here, but a surprisingly large percent of these data-centric attacks are actually internal."

      Regardless of who probed the network, Kramer said the breach is indicative of how traditional security measures, such as firewalls and intrusion prevention systems (IPS), can't totally shore up a network's defenses, especially if the attack comes from within.

      AT&T said it would also pay for credit-monitoring services to assist in protecting the customers involved. The data theft involved people who had bought Digital Subscriber Line equipment for high-speed Internet access.

      9/5/2006 7:57:16 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      So far, NASA, University of California, Berkeley, various government web sites and Microsoft have been targeted.  Unfortunately, the fifty or so machines publically compromised last week are just the tip of the iceberg.  These systems are just peripheral to the amount of Israeli and Arabic computers under attack, but both sides are doing their best to conceal the extent of the attacks.

      Hackers from both China and the US have occasionally sparred with one another since early 2001.  The initial cyberwar started after a US spy plane collided with a Chinese fighter jet in April of 2001.  Thousands of web sites in China and the United States were subject to defacements and hacker attacks for over a month -- and thus earned conflict the title of the first major cyberwar.

      The difference between the Sino-American Cyberwar of 2001 is that governments from all sides are participating a bit more, and damages are considerably higher as well.  Lebanese newspapers report that the major Hezbollah-backed TV and radio stations have been compromised, and that whoever has retained control of these outlets is now broadcasting messages that Hezbollah's leader Hassan Nasrallah is a liar.  PCs compromised in Europe and Russia have been used to send anti-Semitic and anti-Arabic hate mail.  Israeli-based denial of service attacks against Hamas and Hezbollah websites have effectively crippled portions of the internet infrastructure on both sides of the conflict.

      Digital warfare is certainly a component of modern warfare today: electronics espionage and jamming are almost as old as electronics themselves.  This new facet of digital sabotage is another story altogether, with digital warriors partaking from the comfort of their own cable modem virtually side-by-side with government intelligence agencies hacking and counter-hacking the same targets. 

      9/5/2006 6:34:04 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      Intel is expected to launch a Conroe-based Xeon 3000 series processor lineup in September. Four Xeon 3000 series models will be released—the Xeon 3070, 3060, 3050 and 3040. Xeon 3000 series will be clocked at 2.66, 2.40, 2.13 and 1.86 GHz respectively. The new Xeons will use the same Socket T (LGA775) as current Core 2 Duo Conroe and Pentium D processors and operate on a 1066 MHz front-side bus. Cache sizes will vary on the Xeon 3000 series with the Xeon 3070 and 3060 having 4MB of shared L2 cache while the Xeon 3050 and 3040 will have 2MB of shared L2 cache. All Xeon 3000 series processors will support Intel’s Virtualization Technology (VT), Enhanced Intel SpeedStep Technology (EIST), Intel Extended Memory 64 Technology (EM64T) and Execute Disable Bit technologies. Hyper-Threading will not be supported on Intel Xeon 3000 series processors.

      Intel Low End Xeon
      Processor
      Number
      Core
      Frequency
      Bus
      Frequency
      L2
      Cache
      TDP
      Price
      3070 2.66GHz 1066MHz 4MB 65W $530
      3060 2.4GHz 1066MHz 4MB 65W $316
      3050 2.13GHz 1066MHz 2MB 65W $224
      3040
      1.86GHz 1066MHz 2MB 65W $188


      Pricing for Intel Xeon 3000 series will be $530, $316, $224 and $188 for models 3070, 3060, 3050 and 3040 respectively. Xeon 3000 series processors are expected to launch in September.

      Supporting the Intel Xeon 3000 series of processors will be a new platform dubbed Kaylo. Kaylo is based around the upcoming Mukilteo 2 and Mukilteo 2P chipsets. Mukilteo 2 and Mukilteo 2P have been named Intel 3000 and 3010 respectively. Intel is positioning the Kaylo platform for entry-level single processor servers. Current documents show Kaylo will support Pentium D 900 series in addition to Xeon 3000 series processors. There’s no mention of support for the recently released Core 2 Duo and Core 2 Extreme processors though. Not much information is available on the Intel 3000 and 3010 aside from its existence.

      9/5/2006 6:10:00 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Monday, September 04, 2006

      In 1954, Popular Mechanics showed its readers what a home computer might look like by the year (2004). I am sure that everyone will get a kick out of this blast from the past.

      ATT1.jpeg (122.63 KB)
      9/4/2006 10:12:16 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Sunday, September 03, 2006

      Enabling PAE To enable PAE:

      • Locate the Boot.ini file, which is typically in the root folder (for example, C:/) and remove its Read-Only and Hidden attributes.
      • Open the Boot.ini file with a text editor, and then add the /PAE parameter to the ARC path, as shown in the following example:
      multi(0)disk(0)rdisk(0)partition(2)
      \WINNT="Windows ???? Datacenter Server" /PAE /basevideo /sos
      • On the File menu, click Save.
      • Restore the Read-Only attribute to the Boot.ini file.;

      Microsoft explains the issue here.
      Intel explains the issue in this PDF.4GB_Explained_05.pdf (49.12 KB)
      9/3/2006 9:18:05 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Thursday, August 31, 2006

      We were going to post an article of my experiences with just how bad Fedex and UPS service has become. We have recently had a problem with UPS saying they could not find a place of business in a downtown district of Spokane Washington of all places. I ask the lady on the phone to give me directions to the UPS building and I would pick it up. So she gives me the directions from our place of business to the UPS depot.

      We could not even believe it! How can you give me directions from a place you cannot find to yours?..........

      Fedex is too good to believe. For years I thought this was one of the best run companies in the United States. I had a hardware issue with the new Woodcrest Xeon machines which is another story one I will post later. But I have an RMA on the server and SuperMicro did their job and shipped the machine striaght away. They clearly missed the cut off for that day with Fedex. The product was shipped over night.

      So we are in our fourth day now waiting for their overnight service. The product started in San Jose California. Which could have made it in two day's by truck easy to Spokane Washington. But No, Fedex in their brilliant wisdom fly's it to Tennessee, Fedex hub. It sits there doing nothing all day Fedex claiming it was a weather delay. Which checking weather between to two points shows nothing that could stop air traffic like this. So I check commerical airlines for delays between the two points and not a single one is reported.

      The fact is that it seems very common that Fedex will use weather delay as their excuse for incompedence.

      Please Comment: "Tell your horror stories, We know how many of them are out there"! Perhaps thousands of them might drive the point home.

      8/31/2006 8:18:24 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Tuesday, August 22, 2006

      I was able to fix many CDO exception related problems like "Could not access 'CDO.Message' object" in addition to others by using the following
      work around. 
      smtpMailObject>.smtpserver.insert(0,"server name") 
       instead of
      smtpMailObject>.smtpserver = "server name"

      I found this in a number of places still on the web and want to state that is not a good idea at all. It is a myth, and completely misleading. The only thing worse than no answer, is the wrong answer that wastes alot of time.

      For a more indepth article on the topic "view this one". He is telling you the correct way. 

      [Visual Basic] ' This example assigns the name of the mail relay server on the ' local network to the SmtpServer property.
      SmtpMail.SmtpServer = "RelayServer.Contoso.com";

      [C#] //This example assigns the name of the mail relay server on the //local network to the SmtpServer property.
      SmtpMail.SmtpServer = "RelayServer.Contoso.com";

      [C++] //This example assigns the name of the mail relay server on the //local network to the SmtpServer property.
      SmtpMail::SmtpServer = S"RelayServer.Contoso.com";

      
      	
      Dev
      8/22/2006 9:06:15 PM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Monday, August 21, 2006

      McAfee has rolled out a Spam Aptitude Test, which may not get college-bound seniors into the university of their choice, but rather make them and the public at large more aware of how to avoid an inbox full of spam.

      For those who enjoy a challenge, the security software maker has created a spam test. As part of the test, users scroll through eight questions, with each asking the user to determine which of two Web sites would be the most likely to resell or redistribute their email information and other personal details.

      The test allows users to access the privacy policy pages of each site, rather than rely solely on the Web site's design. Users who miss all eight questions in the test face the dire warning: "You're at Risk!" "Watch out!" "Your inbox might explode!" On the flip side, those who ace the test are "Safety Gurus." And "spammy e-mails don't even stand a chance of penetrating (their) inbox."  My score was 7 out of 8 correct. Be sure to read the fine print remember they are experts.

      8/21/2006 9:42:59 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Sunday, August 20, 2006

      British police arrested a man and woman in London on Saturday as part of a wide-ranging investigation into holiday Web site fraud that has left nearly 3,000 people out of pocket.

      The woman in her thirties, and the man in his 60s, were detained at separate addresses in London and are being questioned by fraud squad officers, the Metropolitan Police said. The fake Web sites; sunmedresorts.com, unbeatableholidays.com, holidaydaysforunder200pounds.com, holidayrez.com and holidayez.com were all used in the con.

      The fraud worked by enticing people to buy non-existent holidays and then disappearing with the cash. The Association of British Travel Agents has warned people to be careful about buying trips online. The organization advises people to check its own Web site or that of other affiliated organisations like Air Travel Organisers Licensing to make sure any holiday firm is bona fide. 

      We would recommend NatureTrek for wildlife holidays...

      8/20/2006 11:05:09 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Saturday, August 19, 2006

      Seagate Technology, the world's No. 1 computer disk drive maker, will continue to support Maxtor's branded products, its customer base, and all warranties in all retail and distribution channels.

      Seagate also will continue production of Maxtor's DiamondMax product line and is preparing to launch a mobile hard drive for notebooks called MobileMax in October, said Marc Jourlait, Seagate's vice president for segment marketing.

      MobileMax will be a 2.5-inch hard drive with capacities up to 160GB and speeds of up to 7200rpm, Jourlait said. The company will release more information at a later date, he said.

      The Scotts Valley, Calif.-based company concluded its acquisition of Maxtor —the world's No. 4 seller of disk drives—for $1.9 billion in stock on May 22.

      Jourlait said that Seagate would continue to offer Seagate and Maxtor-branded products to differing market and distribution segments. It's better for the customers, who are used to seeing these brands, as well as the channel distributors, who will have more to offer.

      Generally, Seagate sees its products as being aimed at the "A" and "B" markets—"A" being high-end, techno-knowledgeable and performance-at-any-cost-seeking companies and individuals; and "B" being the general enterprise business market.

      Maxtor products generally are targeted at—and have historically sold well in—the "B" and "C" (consumer) market segments. At the time of the acquisition, Maxtor was either the No. 3 and or No. 4 hard drive maker, depending upon which sales numbers were referenced.

      8/19/2006 10:02:20 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

           

      Abit launched its AW9D and AW9D-MAX motherboards this week, supporting the new Intel Core 2 Duo microprocessors. Both motherboards include the Intel 975X chipset, with the differences deriving from the number of SATA connections as well as the number of heat pipes used. The boards will be "available soon in a store near you," according to Abit.

      Both boards are described as "quad-core ready". Prices were not announced.

      The MAX version includes upon the basic AW9D by including seven internal SATA connections, capable of being configured in either RAID 0, 1, 0+1, or 5 configurations. The basic board includes just four internal SATA connections. In addition, the AW9D-MAX adds an external SATA connection, which the basic board lacks. Furthermore, the MAX board includes a pair of "silent OTES" heat pipes for cooling purposes, while the basic board includes just one.

      Interestingly, the boards support both dual-graphics solutions: the CrossFire from ATI as well as SLI from Nvidia.


      8/19/2006 9:45:55 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Friday, August 18, 2006

      Yahoo Inc. has fixed a security vulnerability in its Yahoo Mail service that could have allowed malicious hackers to hijack accounts and harm users in a variety of ways.

      "We have developed a fix for this bug and have deployed it worldwide. Yahoo Mail users will not be required to take any action to be protected from this exploit," said Kelley Podboy, a Yahoo spokeswoman, via e-mail. Nir Goldshlager and Roni Bachar from Avnet a computer security company based in Israel, discovered the vulnerability in early August.

      The problem was Yahoo Mail's handling of attachments. By creating an HTML attachment with different encoding schemes, one could have bypassed Yahoo Mail's security filter and executed malicious JavaScript code, Bachar said via e-mail.

      The exploit allowed the JavaScript code to be executed as soon as a recipient opened the e-mail message, even if the recipient didn't open the attachment.It was also possible to steal the recipient's Yahoo Mail cookie, hijack the session and gain access to the person's in-box. "This attack vector could be used to launch a variety of other more sophisticated attacks," Bachar wrote. These could include unleashing worms, installing keylogger programs, phishing and scanning ports on the PC.

      8/18/2006 4:37:26 PM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      As you should know, on Windows 2003 Server, CDONTS was deprecated and CDOSYS is the new one Microsoft email sender component (read more on Microsoft Website)

      However, some ASP scripts will require CDONTS and customers can need CDONTS installed.

      So, to install CDONTS

      1) First, be sure IIS Simple SMTP server is installed or MailEnable. Make sure it is running.
      2) Download and unzip cdonts.zip (172.02 KB) to C:Windows\System32 folder
      3) Register the CDONTS.DLL component on your server by clicking start >> run >> type :
      regsvr32 c:winntsystem32cdonts.dll >> ENTER

      8/18/2006 8:06:24 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      Boeing Co. on Thursday said it will close its loss-making, high-speed broadband communications service, Connexion by Boeing, taking charges of up to $320 million in the second half. The closure, which was widely expected, marks an expensive retreat for Boeing's six-year project to put satellite-based Internet connections on its commercial jets.

      Most airlines, especially in the United States, held off buying the service in the hope that cheaper, cellular network-based Internet services will end up dominating the market. In June, a unit of U.S. low-cost carrier JetBlue Airways Corp. was one of two companies that won licenses to supply wireless airborne communications services.

      Boeing said it will take a pretax charge of about $290 million in the third quarter and the balance in the fourth quarter, as it writes down assets of the unit and pays termination fees to customers. Germany's Lufthansa, Scandinavian carrier SAS, All Nippon Airways, Japan Airlines and Singapore Airlines were the only major carriers offering the service on flights.

      8/18/2006 6:42:56 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Monday, August 14, 2006

          eEye Digital Security is alerting the network security community to the presence of multiple attacks circulating which leverage the attack vector recently patched as part of the MS04-060 (http://www.microsoft.com/technet/security/bulletin/MS06-040.mspx) security bulletin.

      Attack Summary

      Once infected, an IRC BOT is installed which allows the system to be used for Distributed Denial of Service (DDOS) attacks against other machines. In addition, the malware allows its controller (an outside user) to execute programs, update the BOT software, and exploit other machines. The malware will also attempt to disable Windows firewall and the Windows XP SP2 security alert that triggers when the system’s antivirus software is disabled.

      The malware in question is leveraging the Server Service flaw that was patched last Tuesday in the Microsoft bulletin MS06-040. MS06-040 fixes a flaw in an unchecked buffer in the Server Service which allows for anonymous exploitation remotely. At the time of the bulletin’s release, US-CERT and Microsoft had claimed to have seen existing attacks on this flaw, but no evidence had been offered.

      At this time there are currently two separate variants of this malware, both using a variant of publicly-disclosed exploit code for MS06-040. While both samples appear to be very similar, they each use a different executable when infecting the system. The first variant uses the file name "wgareg.exe" and the second uses "wgavm.exe". Antivirus vendors have named this threat W32.Wargbot (Symantec), Worm.IRCBOT.JK/JL (Trend Micro), IRC.Mocbot (McAfee), and IRCBOT-ST (F-Secure).

      Protection

      Users should apply the Microsoft patch to vulnerable systems as soon as possible. As a service to the network security community, eEye has also made available a free utility, which can scan up to 256 systems at once to check for the presence of the flaw patched by MS06-040.

      Users of antivirus solutions should make sure that they have the latest signature files. As a final precaution, eEye recommends filtering TCP ports 139 and 445 at your corporate gateway and instructing users to not open any unexpected email attachments.

       

      8/14/2006 5:54:25 PM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Monday, August 07, 2006

      Your Creative Power Unleashed.

      Microsoft® Expression® takes the many sides of your creative personality to all new levels. Professional design tools give you greater flexibility to create sophisticated applications and content. Innovative technologies enable faster and richer interface development for Microsoft Windows® applications or the Web. Compatibility between products increases all levels of your personal productivity. 

      "Learn More Great Videos"

      Dev
      8/7/2006 11:19:27 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      Windows® Presentation Foundation (formerly code named "Avalon") is Microsoft's® unified presentation subsystem for Windows and is exposed through WinFX®, Windows Vista's™ managed-code programming model that extends the Microsoft .NET Framework. Windows Presentation Foundation (WPF) consists of a display engine that takes full advantage of modern graphics hardware and an extensible set of managed classes that development teams can use to create rich, visually stunning applications. WPF also introduces Extensible Application Markup Language (XAML), which enables developers and designers to use an XML-based model to declaratively specify the desired user interface (UI) behavior.

      Learn More Here

      Dev
      8/7/2006 11:12:47 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Saturday, August 05, 2006

      Google Inc. has begun alerting users whenever they click on a search result that may take them to a dangerous Web site.

      The new feature, which had been spotted earlier this week, goes live officially Friday, according to an announcement from The Stop Badware Coalition, which is collaborating with Google on this effort.

      When users attempt to click over to a Web site considered to be potentially dangerous, Google shows users an alert page that informs them of the possible risk and gives them the option to click back to the results page or continue on to the questionable Web site.

      The flagged Web sites have been reported as dangerous to The Stop Badware Coalition. Google will progressively replace the generic alert page with pages containing specific reports about the Web sites. The Stop Badware Coalition will provide these individual reports as well.

      The Stop Badware Coalition is a nonprofit organization led by Harvard University and the University of Oxford and backed by Google, Lenovo Group Ltd. and Sun Microsystems Inc.

      This new Google feature attempts to address a real problem: Search engines routinely display links to Web sites that download spyware and adware to visitors' PCs, exploit security vulnerabilities and attempt to scam users and include them in spam lists.

      In the U.S., people land on malicious Web sites about 285 million times per month by clicking on search results from the five major search engines, according to a recent study conducted by McAfee Inc.'s SiteAdvisor unit.

      8/5/2006 9:55:01 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      Black Hat Briefings: Microsoft security chief Ben Fathi responds to a standing-room-only demo of a new technique used to plant an offensive rootkit in Windows Vista. LAS VEGAS—Ben Fathi slipped into the darkened, standing-room-only conference room and took a seat on the carpeted floor.

      On the Black Hat stage, malware researcher Joanna Rutkowska, of COSEINC, was discussing a new technique that could plant an offensive rootkit in Windows Vista, Microsoft's "most secure ever" operating system.

      As corporate vice president for Microsoft's STU (Security Technology Unit), it is Fathi's responsibility to deliver on Vista's security promise, and Rutkowska's claim—complete with live demo—that a key anti-rootkit feature can be easily defeated could be a public relations nightmare. But Fathi was unperturbed. Almost unnoticed in the crowd, he paid close attention to Rutkowska's slides and didn't even flinch when the room erupted in applause as the demo succeeded in loading unsigned code into Vista Beta 2 kernel (x64), without requiring a reboot.

      During her talk, she described how scripts can be used to allocate excess amounts of memory to a process, forcing the target system to page out unused code and drivers. At this stage, Rutkowska showed how shell code could be executed inside one of the unused drivers, completely defeating the new device driver signing policy being implemented in Vista to only allow digitally signed drivers to load into the kernel.

      Rutkowska created a one-click tool to plant the rootkit and used special heuristics to automatically find out how much memory should be allocated to "knock the unused driver." The shell code used in the demo successfully disabled signature checking in the rooted machine, rendering the system vulnerable to the loading of unsigned drivers.

      Even as she basked in the success of the theoretical attack, Rutkowska offered Microsoft a pat on the back for its decision to block unsigned drivers. "The fact that this mechanism was bypassed does not mean that Vista is completely insecure," she said. "It's just not as secure as advertised."

      Fathi did not say how Microsoft had fixed the issue in later Vista builds, but he received lots of advice and recommendations from Rutkowska.

      Rutkowska said Microsoft should consider forbidding raw disk access from user mode, or encrypting pagefile to keep it in kernel non-paged memory. Though this may cause some performance impact.

      8/5/2006 9:44:20 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 

      On 8 August 2006 Microsoft is planning to release:

      Security Updates

         Ten Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These
      updates will be detectable using the Microsoft Baseline Security Analyzer and the Enterprise Scan Tool. Some of these updates will
      require a restart.

         Two Microsoft Security Bulletins affecting Microsoft Office. The highest Maximum Severity rating for these is Critical. These
      updates will be detectable using the Microsoft Baseline Security Analyzer. These updates may require a restart.

      Microsoft Windows Malicious Software Removal Tool

         Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft
      Update, Windows Server Update Services and the Download Center. Note that this tool will NOT be distributed using Software Update
      Services (SUS).

      8/5/2006 9:28:16 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Sunday, July 30, 2006

      To increase areal densities in longitudinal recording and boost overall storage capacity, the data bits must be shrunk and packed more closely together. However, if the bit becomes too small, the magnetic energy holding the bit in place may also become so small that thermal energy can cause it to demagnetize, a phenomenon known as superparamagnetism. To avoid superparamagnetism, disc media manufacturers have been increasing the coercivity (the field required to write a bit) of the media. However, the fields that can be applied are limited by the magnetic materials making up the write head.

      In perpendicular recording, the magnetization of the disc, instead of lying in the disc’s plane as it does in longitudinal recording, stands on end, perpendicular to the plane of the disc. The bits are then represented as regions of upward or downward directed magnetization. (In longitudinal recording, the bit magnetization lies in the plane of the disc and flips between pointing in the same and opposite directions of the head movement.) The media is deposited on a soft magnetic under-layer that functions as part of the write field return path and effectively produces an image of the recording head that doubles the recording field, enabling higher recording density than with longitudinal recording.
      Seagate has demonstrated a recording areal density with perpendicular recording of 245 Gbpsi (Gigabits per square inch) with a data rate of 480 Mbits per second – more than double the 110 Gbpsi used in today’s highest areal density disc drives – and 500 Gbpsi, which will increase the capacity of today’s drives 5-fold, is possible with the new technology.
      At 500 Gbpsi, a 3.5-inch disc drive could store two terabytes of information, a 2.5-inch drive in a laptop could hold 500GB and a 1-inch drive, such as those in MP3 players, could store as much as 50GB of data.

      7/30/2006 8:46:44 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Saturday, July 29, 2006

      Have you ever wondered why phone companies don't seem interested in trying to prevent the theft of mobile phones? If you have ever lost, or had one stolen, and if you are on a plan, you still have to pay the plan approximately up to 24 months, and you have to buy another handset and enter into another contract. This is more revenue for the phone company.

      There is a simple way of making lost or stolen mobiles useless to thieves and the phone companies know about it, but keep it quiet.

      To check your mobile phone's serial number, key in the following on your phone:

      star-hash-zero-six-hash ( * # 0 6 # )

      and a fifteen digit code will appear on the screen. This is unique to your handset. Write it down and keep it safe. Should your mobile phone get stolen, you can phone your service provider and give them this code. They will then be able to block your handset, so even if the thief changes the sim card, your phone will be totally useless.

      You probably won't get your phone back, but at lease you know that whomever stole it can't use / sell it either.

      If everybody did this, there would be no point in stealing mobile phones.

      7/29/2006 9:06:37 PM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   | 
       Thursday, July 27, 2006

      I ran across this SP to do this very easy and thought I would post it.

      Exec sp_change_users_login 'Auto_Fix', 'Corrupt_Username'

      Dev
      7/27/2006 3:23:53 PM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |   |