July 2007 - Jesper's Blog - MSInfluentials

The Protocol Handler Saga Continues: Say What Secunia?

Sometimes you just have to wonder how far people will go to lend undeserved credibility to opinions. The Protocol Handler Saga is rapidly becoming a religious war. The latest entry is related to a very cool exploit that Billy Rios and Nate McFeters published...

Published Thu, Jul 26 2007 6:19 PM by Jesper's Blog

Filed under: Security, Security Pontification

Hey, Mozilla: Quotes Are Not Legal in a URL

When I was a child, I learned a saying that I still find important to keep in mind: Those who are sitting in a glass house shall not throw stones The good folks at Mozilla may want to look up what that really means. Two days ago, Mozilla published Firefox...

Published Sat, Jul 21 2007 12:25 AM by Jesper's Blog

Filed under: Security, Security Pontification, Windows Security, Windows Vista

At Least This Snake Oil Is Free

Snake oil , for those that are not familiar with the U.S. English vernacular, is a derogatory term for some product that makes unverifiable or exaggerated claims. True to the tradition, we now find " Vista Firewall Control ," complete with a...

Published Thu, Jul 19 2007 11:33 PM by Jesper's Blog

Filed under: Security Pontification, Windows Security, Windows Vista

New Firefox Available

Mozilla has published a new Firefox. Version 2.0.0.5 fixes the FirefoxURL protocol handler issue by changing the calling convention for the protocol handler. Instead of the old calling convention: C:\\PROGRA~1\\MOZILL~2\\FIREFOX.EXE -url “%1″ -requestPending...

Published Thu, Jul 19 2007 11:10 AM by Jesper's Blog

Filed under: Security

Downloads from the Vista Security Book

As with Protect Your Windows Network I wrote some tools for the Windows Vista Security book that just came out. However, the Vista book does not come with a CD. Rather, Wiley has made the tools available for download . If you solemnly promise that you...

Published Wed, Jul 11 2007 1:39 PM by Jesper's Blog

Filed under: Windows Security, Windows Vista

Blocking the Firefox -> IE 0-day

Thor Larholm, unhelpfully, published details on what he claims is a 0-day exploit for Internet Explorer (IE) yesterday. This exploit is actually for Firefox, but Thor exploited it by making IE launch Firefox. Firefox creates three protocol handlers. A...

Published Tue, Jul 10 2007 10:55 AM by Jesper's Blog

Filed under: Security, Security Pontification, Windows Security

WSUS is Like A Box of Chocolates

Windows Software Update Services (WSUS) is one of the more entertaining products Microsoft has created, if by entertaining you mean trying to put logic behind the installation of some relevant subset of 4,381 updates (today's total). WSUS 3.0 has...

Published Fri, Jul 06 2007 9:04 AM by Jesper's Blog

Filed under: Windows Vista

Unified Hardening Guidance for the U.S. Government

All U.S. Government computers are finally required to conform to one of two configurations. White House Memo M-07-11 , further clarified in M-07-18 directs all government agencies to use a single hardening guide. M-07-18 clarifies that it is to be the...

Published Tue, Jul 03 2007 7:51 PM by Jesper's Blog

Filed under: Windows Security, Windows Vista

Show the Owner of a File

In my most recent article in TechNet Magazine I wrote: Unfortunately, icacls.exe can’t show you the owner of an object. There is no way to actually see, from the command line, who the owner of an object is. Furthermore, if you save the ACL for an object...

Published Mon, Jul 02 2007 6:36 PM by Jesper's Blog

Filed under: Windows Security, Windows Vista

It's been a month already?

It has really been a month since my last post. I will try not to let it go that far between them again. I've been busy with diving, and writing. On that note, my second Access Control List (ACL) article came out in TechNet Magazine this week. It is...

Published Sun, Jul 01 2007 5:02 PM by Jesper's Blog

Filed under: Security, Diving

July 2007 - Jesper's Blog

Syndication

Recent Posts

Tags

Archives

The Protocol Handler Saga Continues: Say What Secunia?

Hey, Mozilla: Quotes Are Not Legal in a URL

At Least This Snake Oil Is Free

New Firefox Available

Downloads from the Vista Security Book

Blocking the Firefox -> IE 0-day

WSUS is Like A Box of Chocolates

Unified Hardening Guidance for the U.S. Government

Show the Owner of a File

It's been a month already?