Re: [H] Tracking what program is using bandwidth

2010-06-29 Thread Mesdaq, Ali
You can use the old TDIMON from sysinternals which would tie applications to 
network activity but I don’t think it tracks bandwidth. Maybe you can use that 
to verify its talking home then use another bandwidth tool to monitor the ports 
its communicating over. 

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Tuesday, June 29, 2010 10:15 AM
To: hardware@hardwaregroup.com
Subject: [H] Tracking what program is using bandwidth

Does anyone know of a good program that will display all programs 
that are currently using a network interface and track how much 
bandwidth they use?  I'm trying to see if a program I'm running is 
feeding data back home continously like I think it is.

T




 To report this as spam, please forward to s...@websense.com.  Thank you.


 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] AV disabling question

2010-05-25 Thread Mesdaq, Ali
It's probably because there is a TDI or NDIS driver installed as a shim between 
the network driver and the OS being used to filter traffic. Turning the service 
off probably just stops the driver from forwarding traffic. It's been a while 
since I worked on drivers but there should be some manual ways to get around 
this depending on how much the AV is watching for modifications. One easy thing 
you could try is stop the services like you did then go to device manager then 
in the view menu select show hidden devices. There should be a new list of 
non-plug and play drivers. You can try to figure out which ones are linked to 
the AV by name then confirm it by opening up the driver properties then click 
on the drivers tab and the driver details button. Once you have confirmed it 
you can stop the driver. See if that works. If not then you might need to look 
at some of the tools published by the driver development community that help in 
disabling and unloading drivers. 

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Tuesday, May 25, 2010 1:13 PM
To: hardware@hardwaregroup.com
Subject: [H] AV disabling question

When a computer comes into the shop, I like to disable the current AV 
so as to speed up the scans and prevent two AVs conflicting.  I've 
been disabling the AV's services, but I've found that when I do that 
with NIS (surprise, suprise, it's a piece of crap) then it shuts down 
access to the internet because it's firewall is off.  Then I end up 
having to turn the service back on (no small feat because the PoS 
tries to prevent changes to it's service settings even though it's 
turned off.)  Does anyone know of a better way to disable AVs 
(especially NIS) without uninstalling so that I can still access the internet?

T




 To report this as spam, please forward to s...@websense.com.  Thank you.


 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] 0 Day Viruses Was: Re: Vipre Antivirus

2010-05-18 Thread Mesdaq, Ali
Rogue AV causes lots of problems for AV scanners. We see around 6-25% detection 
of Rogue AV by the AV scanners on VirusTotal here is a link to some related 
blog posts 
http://community.websense.com/blogs/securitylabs/archive/category/1771.aspx . 

Here are some individual reports on VirusTotal that are referenced in some of 
the blogs
http://www.virustotal.com/analisis/fabca4efdaf5c89d36e153637fbe92bc130f62812d6261833b073a23240260c8-1267321093
http://www.virustotal.com/analisis/6c835981a6fd2f866f6200dfd5384240fab14149ddc8c162721305c11533d984-1268277978
http://www.virustotal.com/analisis/7f740567ef431e91f898358c33df60b0f6cb709ecb3fdc88deaf07026e03b7fe-1273234735

But looks like a few of the scanners did better than the others from these 3 
reports.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Christopher Fisk
Sent: Tuesday, May 18, 2010 5:30 AM
To: hardware@hardwaregroup.com
Subject: [H] 0 Day Viruses Was: Re: Vipre Antivirus

Anyone have any luck with their antivirus blocking the various Antivirus 
2010/Security Essentials 2010 variants as they are released?

We're constantly seeing those installed on user's PC's with up to date 
antiviruses (Nordon, Avast, AVG, McAfee, Avira, etc).

What will actually catch this thing?  Best I have found is McAfee with 
very very locked down rulesets (Block files from being run from temp 
folders, etc)


Christopher Fisk


 To report this as spam, please forward to s...@websense.com.  Thank you.


 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Google chrome ?

2010-05-13 Thread Mesdaq, Ali
I use both Chrome and Firefox myself. Chrome is definitely targeted less in 
attacks and overall has not had many issues. It has a nice feature with 
incognito mode which should be used for almost all browsing unless you are 
going to gmail, facebook, etc. But if you are googling stuff and clicking links 
and have no idea where you may be going then incognito is a nice feature to be 
using. I would say at this point in time Chrome is the safest browser to be 
using because of the number of attacks targeting it as well as the number of 
security holes that have been found are low. Also with the silent updates it's 
very hard to be running an out of date version of it which is the biggest issue 
with exploits. Also chrome definitely has the speed and footprint advantage 
from my personal experience. Closing tabs and having the processes go away and 
release memory is a lot nicer than firefox's behavior. Tom's hardware did a 
nice comparison of browsers 
http://www.tomshardware.com/reviews/firefox-chrome-opera,2558.html 

Limewire is very bad for security reasons just because its so easy to download 
something like a song and in fact it’s a Trojan. Not sure if the software 
itself is insecure but with torrents these days I see no need for limewire.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Thursday, May 13, 2010 11:29 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Google chrome ?

At 03:16 PM 13/05/2010, FORC5 wrote:
Son put Google chrome in his system. pretty peppy but how secure is it ?

Updated his security sw just in case. Also installed Limewire. I 
have always been leery of this sharing stuff and too old to change. 
seen way too many problems over the years ( made lot of $$$ because 
of it) but I have been thinking lately operator error more then sw error.

If you're putting Limewire on a machine, then I wouldn't worry about 
how secure the browser is.  From my reading Chrome is pretty secure, 
but a lot of that is due to security through obscurity, rather than 
secure code.  It wasn't hacked at Pwn2Own, but from the interviews I 
read, that was just because the hackers knew more about Safari, IE, 
and Firefox.

T 




 To report this as spam, please forward to s...@websense.com.  Thank you.


 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] cable upgrades

2010-04-07 Thread Mesdaq, Ali
Ahh so that’s how it works. I always thought it worked by caching certain 
content on their cache boxes and serving the cached content at faster speeds 
than if you were to download it over the normal non cached version. I should 
have known better.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Greg Sevart
Sent: Wednesday, April 07, 2010 1:40 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] cable upgrades

Keep in mind that Cox has PowerBoost. It's a temporary increase in speed for
the first few seconds/MB of a stream. It's mostly BS to make speed tests
look good without providing any real material increase.

Comcast developed the technology, and everybody else licenses it--including
Cox and Time Warner Cable.

 -Original Message-
 From: hardware-boun...@hardwaregroup.com [mailto:hardware-
 boun...@hardwaregroup.com] On Behalf Of Winterlight
 Sent: Wednesday, April 07, 2010 3:12 PM
 To: hardware@hardwaregroup.com
 Subject: [H] cable upgrades
 
 
 I have a COX cable Premium account and I pay though the nose for it.
 Their basic entry level account is 19 bucks a month and I pay 56 for
 10 down and 2 up. But this week they upgraded my area to doc3.
 Surprisingly they will be able to update the firmware in my Motorola
 Surfboard doc2  modem without me doing anything. Before they did that
 they called me to come out and check my lines to make sure everything
 was in order and because their tests indicated my modem was out of
 range... which turned out to be caused by a filter on my line. They
 tell me after the upgrade they will be able to deliver up to 45
 down.The timing was fortuitous because I have a new Plasma TV on the
 way .
 
 They cable guy was great, he checked all my fittings, checked the
 drop line and replaced all the connectors gave me new splitters and
 even made a special cable for me for my plasma which isn't hear yet.
 But the real thrill was doing speed tests. Before he came this
 morning I did a speed test, the one Cox tech uses, and I got 10.9
 down and 4 up which is better then what I am paying for. But after he
 did the work and left, I ran it again. www.winterlight.org/speed.jpg
 
 





 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Suggested HTPC Setup

2010-03-26 Thread Mesdaq, Ali
Do you have to buy a cablecard yourself? Here in San Diego TimeWarner 
apparently will lease it for $2.50 a month which I find kind of hard to believe 
its so cheap. Anyone have experience with these cablecards? I hope it doesn’t 
require some DRM software to take over my machine. I will be setting everything 
up on a Linux system so I wonder if that will be a problem. Also what interface 
do these cards plug into? Do I need some type of adapter or is there PCI-x 
slots or similar?

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Alex
Sent: Thursday, March 25, 2010 11:11 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Suggested HTPC Setup

One minor point I'd like to make:

Confirm that you can receive a strong TV signal for the reception mode you are 
going to use. (i.e. OTA/Sat/Cable).  I bought a an ATI TV card, hooked it up to 
an antenna only to find my OTA reception is barely acceptable where I live (for 
the dozen or so channels that are available)... and so my HTPC lacks PVR/Live 
capability, unless I choose to spring for cablecard.


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Mesdaq, Ali
Sent: Thursday, March 25, 2010 10:51 AM
To: hardware@hardwaregroup.com
Subject: [H] Suggested HTPC Setup

Hey Everyone,

I am looking into putting together a HTPC system together and I am at the stage 
of planning it out. I have been looking stuff up online and reading docs and I 
think I have an idea of how the software should be setup. My basic requirements 
are:
- Nice interface
- Easy access to online content
- Ability to remotely stream my content (slingbox'ish)
- DVR replacement

Nice to have features:
- Notification of new online content
- Remote streaming optimized for mobile (nokia n900) and laptops
- Ability to record and locally store online content

So for the software I was thinking of using:
- xbmc as the frontend for everything
- mythtv as the backend pvr

However I am not sure I have found a good solution for doing the remote viewing 
of the content especially have not found anything that can optimize the remote 
streaming. 

For the hardware I was basically thinking of putting together a smaller quieter 
system but not sure if everything will fit in those smaller cases. Also it 
would be nice to have a remote so probably something that can accommodate that 
will be nice. Also I am not sure about best video card for the job as well as 
what tv tuner card I should get. I was thinking of setting the system up with 
either usb flash drive or ssd (if its cost effective) for booting and having 
another larger slower drive to store the content on. 

So I would love to hear from people here who have suggestions on 
software/hardware/configurations to help accomplish this.

ALI MESDAQ
Sr. Security Researcher

WEBSENSE, INC.
ph: +1.858.320.9466
fax: +1.858.784.4466
www.websense.com

Websense TRITON™
For Essential Information Protection™
Web Security | Data Security | Email Security



 Protected by Websense Hosted Email Security -- www.websense.com 



[H] Suggested HTPC Setup

2010-03-25 Thread Mesdaq, Ali
Hey Everyone,

I am looking into putting together a HTPC system together and I am at the stage 
of planning it out. I have been looking stuff up online and reading docs and I 
think I have an idea of how the software should be setup. My basic requirements 
are:
- Nice interface
- Easy access to online content
- Ability to remotely stream my content (slingbox'ish)
- DVR replacement

Nice to have features:
- Notification of new online content
- Remote streaming optimized for mobile (nokia n900) and laptops
- Ability to record and locally store online content

So for the software I was thinking of using:
- xbmc as the frontend for everything
- mythtv as the backend pvr

However I am not sure I have found a good solution for doing the remote viewing 
of the content especially have not found anything that can optimize the remote 
streaming. 

For the hardware I was basically thinking of putting together a smaller quieter 
system but not sure if everything will fit in those smaller cases. Also it 
would be nice to have a remote so probably something that can accommodate that 
will be nice. Also I am not sure about best video card for the job as well as 
what tv tuner card I should get. I was thinking of setting the system up with 
either usb flash drive or ssd (if its cost effective) for booting and having 
another larger slower drive to store the content on. 

So I would love to hear from people here who have suggestions on 
software/hardware/configurations to help accomplish this.

ALI MESDAQ
Sr. Security Researcher

WEBSENSE, INC.
ph: +1.858.320.9466
fax: +1.858.784.4466
www.websense.com

Websense TRITON™
For Essential Information Protection™
Web Security | Data Security | Email Security



 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] bootable flash and DVDs

2009-11-04 Thread Mesdaq, Ali
Something like a LiveCD? Like the one that comes default with the Ubuntu 
installation CD?

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Winterlight
Sent: Wednesday, November 04, 2009 1:44 PM
To: hardware@hardwaregroup.com
Subject: [H] bootable flash and DVDs

  Wednesday, November 04, 2009  01:39:11 PST

One thing I have yet to do is create some kind of windows bootable 
media that I can boot into when I need to repair a windows 
installation, or run a Acronis restore, delete a stubborn file when 
it refuses to delete on a running windows, or a virus scan on a non 
running windows. Something similar to booting from a dual boot 
windows PC... only not from my hard drive and able to use it with any 
PC. Is there an easy way to create such a thing, and how do I go about it?

thanks



 Protected by Websense Hosted Email Security -- www.websense.com 


[H] Nokia N9000 The Ultimate Phone?

2009-09-16 Thread Mesdaq, Ali
Has anyone seen the N9000 phone? I just read some reviews, specs, developer 
docs, and saw some videos on this phone and it seems amazing! Anyone have 
access to this phone or know of anyone with one? Seems like it's not released 
yet but usually phones find their way to the market early. In case you haven’t 
seen the phone here are some links

http://www.techradar.com/news/phone-and-communications/hands-on-nokia-n900-review-631040
http://www.youtube.com/watch?v=RP5R-5NX1BE

Quick highlights for me personally are
- Debian based linux OS
- Updates to everything over the air
- Killer UI
- Full flash support in a full Mozilla based browser
- Very nice hardware specs in every facet i.e. camera, storage, processor, 
screen, graphics hardware accelerator, etc
- Real multi tasking OS and interface
- Get root shell on the device

All in all this device seems to be created as a mobile computer because of 
Maemo's roots as a tablet PC OS. So the phone is just treated as a platform and 
hardware to run the OS. For example you can just not use the phone at all and 
make all your calls via Skype over Wifi or 3g connectivity. Looks like finally 
a no strings attached phone.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Nokia N9000 The Ultimate Phone?

2009-09-16 Thread Mesdaq, Ali
That’s not a limitation of this nokia. Anyone could write a SIP application in 
fact someone wrote something for Google voice already 
http://maemo.org/downloads/product/OS2008/dialcentral/


Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Robert Martin Jr.
Sent: Wednesday, September 16, 2009 11:00 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Nokia N9000 The Ultimate Phone?

I like Nokia and have an N81. What I don't like is that Nokia has been 
pressured by mobile carriers to remove the built-in SIP support on all the 
newer models. When I walk in at home or at work my N81 auto sychs up with my 
asterisk server via wireless, and I can make totally free unlimited calls using 
google voice anywhere in the continental U.S. The phone becomes an extension to 
the system whenever internet connectivity is available.

We got off monthly mobile plan to pay-per-minutes since we can still use the 
nokia phones through WiFi. Now I pay about $8 a month for my cellular service :)

lopaka

--- On Wed, 9/16/09, Mesdaq, Ali ames...@websense.com wrote:

From: Mesdaq, Ali ames...@websense.com
Subject: [H] Nokia N9000 The Ultimate Phone?
To: hardware@hardwaregroup.com hardware@hardwaregroup.com
Date: Wednesday, September 16, 2009, 9:03 AM

Has anyone seen the N9000 phone? I just read some reviews, specs, developer 
docs, and saw some videos on this phone and it seems amazing! Anyone have 
access to this phone or know of anyone with one? Seems like it's not released 
yet but usually phones find their way to the market early. In case you haven’t 
seen the phone here are some links

http://www.techradar.com/news/phone-and-communications/hands-on-nokia-n900-review-631040

http://www.youtube.com/watch?v=RP5R-5NX1BE


Quick highlights for me personally are
- Debian based linux OS
- Updates to everything over the air
- Killer UI
- Full flash support in a full Mozilla based browser
- Very nice hardware specs in every facet i.e. camera, storage, processor, 
screen, graphics hardware accelerator, etc
- Real multi tasking OS and interface
- Get root shell on the device

All in all this device seems to be created as a mobile computer because of 
Maemo's roots as a tablet PC OS. So the phone is just treated as a platform and 
hardware to run the OS. For example you can just not use the phone at all and 
make all your calls via Skype over Wifi or 3g connectivity. Looks like finally 
a no strings attached phone.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com

--




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Nokia N9000 The Ultimate Phone?

2009-09-16 Thread Mesdaq, Ali
Precisely the reason why I haven’t gotten an iphone. I hate the limitations and 
the hoops you have to jump through to do some basic things.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Brian Weeden
Sent: Wednesday, September 16, 2009 12:25 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] Nokia N9000 The Ultimate Phone?

Unless your device isn't allowed to have such pieces of software, like the
iPhone.

Which is why my iPhone is *cough* modified *cough*.

---
Brian Weeden
Technical Advisor
Secure World Foundation http://www.secureworldfoundation.org
Montreal Office
+1 (514) 466-2756 Canada
+1 (202) 683-8534 US


On Wed, Sep 16, 2009 at 3:21 PM, Mesdaq, Ali ames...@websense.com wrote:

 That’s not a limitation of this nokia. Anyone could write a SIP application
 in fact someone wrote something for Google voice already
 http://maemo.org/downloads/product/OS2008/dialcentral/


 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: hardware-boun...@hardwaregroup.com [mailto:
 hardware-boun...@hardwaregroup.com] On Behalf Of Robert Martin Jr.
 Sent: Wednesday, September 16, 2009 11:00 AM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Nokia N9000 The Ultimate Phone?

 I like Nokia and have an N81. What I don't like is that Nokia has been
 pressured by mobile carriers to remove the built-in SIP support on all the
 newer models. When I walk in at home or at work my N81 auto sychs up with my
 asterisk server via wireless, and I can make totally free unlimited calls
 using google voice anywhere in the continental U.S. The phone becomes an
 extension to the system whenever internet connectivity is available.

 We got off monthly mobile plan to pay-per-minutes since we can still use
 the nokia phones through WiFi. Now I pay about $8 a month for my cellular
 service :)

 lopaka

 --- On Wed, 9/16/09, Mesdaq, Ali ames...@websense.com wrote:

 From: Mesdaq, Ali ames...@websense.com
 Subject: [H] Nokia N9000 The Ultimate Phone?
 To: hardware@hardwaregroup.com hardware@hardwaregroup.com
 Date: Wednesday, September 16, 2009, 9:03 AM

 Has anyone seen the N9000 phone? I just read some reviews, specs, developer
 docs, and saw some videos on this phone and it seems amazing! Anyone have
 access to this phone or know of anyone with one? Seems like it's not
 released yet but usually phones find their way to the market early. In case
 you haven’t seen the phone here are some links


 http://www.techradar.com/news/phone-and-communications/hands-on-nokia-n900-review-631040

 http://www.youtube.com/watch?v=RP5R-5NX1BE


 Quick highlights for me personally are
 - Debian based linux OS
 - Updates to everything over the air
 - Killer UI
 - Full flash support in a full Mozilla based browser
 - Very nice hardware specs in every facet i.e. camera, storage, processor,
 screen, graphics hardware accelerator, etc
 - Real multi tasking OS and interface
 - Get root shell on the device

 All in all this device seems to be created as a mobile computer because of
 Maemo's roots as a tablet PC OS. So the phone is just treated as a platform
 and hardware to run the OS. For example you can just not use the phone at
 all and make all your calls via Skype over Wifi or 3g connectivity. Looks
 like finally a no strings attached phone.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com

 --




  Protected by Websense Hosted Email Security -- www.websense.com



Re: [H] Nokia N9000 The Ultimate Phone?

2009-09-16 Thread Mesdaq, Ali
Yeah I agree with you on that and that’s why I haven’t really upgraded my phone 
for so long. Now that the iphone has set such a high standard I require the 
phone to be as user friendly as the iphone and hardware as good. My basic 
requirements are
- UI as good as iphone
- hardware as good or better than iphone
- no limitations or little limitations on what I can do on the phone

If iphone was a little more open in that regard there would be no phone that 
can compare.

ATT has kinda been screwed by the iphone because users are demanding bandwidth 
but not willing to pay for it. So its been kind of a double edged sword for 
them. But lets make a clear distinction between ATT mandated controls and 
Apple controls. Apple wants to control your life and I just want a phone that 
can do a bunch of things.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Brian Weeden
Sent: Wednesday, September 16, 2009 12:48 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] Nokia N9000 The Ultimate Phone?

Well, that's a bit over the top.  As much as I don't like it, it's not
unreasonable for ATT to not allow an app that destroys its business model
on a device that it controls.

I still haven't seen a single phone out there with an interface, software,
and UI that can compare to the iPhone.  So I'm willing to put up with a few
minor issues in exchange for that.

---
Brian Weeden
Technical Advisor
Secure World Foundation http://www.secureworldfoundation.org
Montreal Office
+1 (514) 466-2756 Canada
+1 (202) 683-8534 US


On Wed, Sep 16, 2009 at 3:42 PM, Mesdaq, Ali ames...@websense.com wrote:

 Precisely the reason why I haven’t gotten an iphone. I hate the limitations
 and the hoops you have to jump through to do some basic things.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: hardware-boun...@hardwaregroup.com [mailto:
 hardware-boun...@hardwaregroup.com] On Behalf Of Brian Weeden
 Sent: Wednesday, September 16, 2009 12:25 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Nokia N9000 The Ultimate Phone?

 Unless your device isn't allowed to have such pieces of software, like the
 iPhone.

 Which is why my iPhone is *cough* modified *cough*.

 ---
 Brian Weeden
 Technical Advisor
 Secure World Foundation http://www.secureworldfoundation.org
 Montreal Office
 +1 (514) 466-2756 Canada
 +1 (202) 683-8534 US


 On Wed, Sep 16, 2009 at 3:21 PM, Mesdaq, Ali ames...@websense.com wrote:

  That’s not a limitation of this nokia. Anyone could write a SIP
 application
  in fact someone wrote something for Google voice already
  http://maemo.org/downloads/product/OS2008/dialcentral/
 
 
  Thanks,
  --
  Ali Mesdaq (CISSP, GIAC-GREM)
  Sr. Security Researcher
  Websense Security Labs
  http://www.WebsenseSecurityLabs.com
  --
 
 
  -Original Message-
  From: hardware-boun...@hardwaregroup.com [mailto:
  hardware-boun...@hardwaregroup.com] On Behalf Of Robert Martin Jr.
  Sent: Wednesday, September 16, 2009 11:00 AM
  To: hardware@hardwaregroup.com
  Subject: Re: [H] Nokia N9000 The Ultimate Phone?
 
  I like Nokia and have an N81. What I don't like is that Nokia has been
  pressured by mobile carriers to remove the built-in SIP support on all
 the
  newer models. When I walk in at home or at work my N81 auto sychs up with
 my
  asterisk server via wireless, and I can make totally free unlimited calls
  using google voice anywhere in the continental U.S. The phone becomes an
  extension to the system whenever internet connectivity is available.
 
  We got off monthly mobile plan to pay-per-minutes since we can still use
  the nokia phones through WiFi. Now I pay about $8 a month for my cellular
  service :)
 
  lopaka
 
  --- On Wed, 9/16/09, Mesdaq, Ali ames...@websense.com wrote:
 
  From: Mesdaq, Ali ames...@websense.com
  Subject: [H] Nokia N9000 The Ultimate Phone?
  To: hardware@hardwaregroup.com hardware@hardwaregroup.com
  Date: Wednesday, September 16, 2009, 9:03 AM
 
  Has anyone seen the N9000 phone? I just read some reviews, specs,
 developer
  docs, and saw some videos on this phone and it seems amazing! Anyone have
  access to this phone or know of anyone with one? Seems like it's not
  released yet but usually phones find their way to the market early. In
 case
  you haven’t seen the phone here are some links
 
 
 
 http://www.techradar.com/news/phone-and-communications/hands-on-nokia-n900-review-631040

Re: [H] Nokia N9000 The Ultimate Phone?

2009-09-16 Thread Mesdaq, Ali
I'm not so convinced of that. The openness google refers to when talking about 
android is more about the web standards openness not really the framework 
openness. But the hardware support for android is definitely picking up and so 
are the apps.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Brian Weeden
Sent: Wednesday, September 16, 2009 2:31 PM
To: hardware@hardwaregroup.com
Cc: hardware@hardwaregroup.com
Subject: Re: [H] Nokia N9000 The Ultimate Phone?

I think Android has the potential to be the phone/UI we want, but it's  
going to be a few years of iterations to get there.


-
Brian Weeden
Technical Advisor
Secure World Foundation

On 2009-09-16, at 5:21 PM, Mesdaq, Ali ames...@websense.com wrote:

 Yeah I agree with you on that and that’s why I haven’t really  
 upgraded my phone for so long. Now that the iphone has set such a hi 
 gh standard I require the phone to be as user friendly as the iphone 
  and hardware as good. My basic requirements are
 - UI as good as iphone
 - hardware as good or better than iphone
 - no limitations or little limitations on what I can do on the phone

 If iphone was a little more open in that regard there would be no  
 phone that can compare.

 ATT has kinda been screwed by the iphone because users are  
 demanding bandwidth but not willing to pay for it. So its been kind  
 of a double edged sword for them. But lets make a clear distinction  
 between ATT mandated controls and Apple controls. Apple wants to  
 control your life and I just want a phone that can do a bunch of  
 things.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: hardware-boun...@hardwaregroup.com [mailto:hardware- 
 boun...@hardwaregroup.com] On Behalf Of Brian Weeden
 Sent: Wednesday, September 16, 2009 12:48 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Nokia N9000 The Ultimate Phone?

 Well, that's a bit over the top.  As much as I don't like it, it's not
 unreasonable for ATT to not allow an app that destroys its business  
 model
 on a device that it controls.

 I still haven't seen a single phone out there with an interface,  
 software,
 and UI that can compare to the iPhone.  So I'm willing to put up  
 with a few
 minor issues in exchange for that.

 ---
 Brian Weeden
 Technical Advisor
 Secure World Foundation http://www.secureworldfoundation.org
 Montreal Office
 +1 (514) 466-2756 Canada
 +1 (202) 683-8534 US


 On Wed, Sep 16, 2009 at 3:42 PM, Mesdaq, Ali ames...@websense.com  
 wrote:

 Precisely the reason why I haven’t gotten an iphone. I hate the li 
 mitations
 and the hoops you have to jump through to do some basic things.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: hardware-boun...@hardwaregroup.com [mailto:
 hardware-boun...@hardwaregroup.com] On Behalf Of Brian Weeden
 Sent: Wednesday, September 16, 2009 12:25 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Nokia N9000 The Ultimate Phone?

 Unless your device isn't allowed to have such pieces of software,  
 like the
 iPhone.

 Which is why my iPhone is *cough* modified *cough*.

 ---
 Brian Weeden
 Technical Advisor
 Secure World Foundation http://www.secureworldfoundation.org
 Montreal Office
 +1 (514) 466-2756 Canada
 +1 (202) 683-8534 US


 On Wed, Sep 16, 2009 at 3:21 PM, Mesdaq, Ali ames...@websense.com  
 wrote:

 That’s not a limitation of this nokia. Anyone could write a SIP
 application
 in fact someone wrote something for Google voice already
 http://maemo.org/downloads/product/OS2008/dialcentral/


 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: hardware-boun...@hardwaregroup.com [mailto:
 hardware-boun...@hardwaregroup.com] On Behalf Of Robert Martin Jr.
 Sent: Wednesday, September 16, 2009 11:00 AM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Nokia N9000 The Ultimate Phone?

 I like Nokia and have an N81. What I don't like is that Nokia has  
 been
 pressured by mobile carriers to remove the built-in SIP support on  
 all
 the
 newer models. When I walk in at home or at work my N81 auto sychs  
 up with
 my
 asterisk server via wireless, and I

Re: [H] FireFox confusion

2009-07-22 Thread Mesdaq, Ali
I am using it. As far as I can tell its working.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Steve Tomporowski
Sent: Wednesday, July 22, 2009 2:12 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] FireFox confusion

Does anyone know if X-marks works with the new Firefox?

Jamie Furtner wrote:
 IE Tab works fine with Firefox 3.5.[01] - I use it to avoid having to 
 pull up IE.
 
 Jamie
 
 swzaske wrote:
 Down with IE is right but I still have to use it far too often because 
 a web site fails to render properly in Firefox. Wish I could get rid 
 of IE entirely. Should try IE Tab and see if it works with 3.5.1.


 DSinc wrote:
 All,
 The deed is done! All my units now use FireFox v3.5.1.

 Interestingly, I observe that FF seems to hide some user data in 
 its' own sequestered space.
 Even though I fully de-installed v3.0.12 first; when v3.5.1 did 
 install next, it found all my user data and just trucked on to 
 completion! I can suppose this data was in the magic /profile 
 directory. No need to comprehend the 'magic' at this time. Very glad 
 it is there and working!

 I am favorably impressed with this behavior.

 Just another nail in IE's coffin!!! LOL!
 Duncan


 Thane Sherrington wrote:
 At 12:30 PM 22/07/2009, DSinc wrote:
 http://news.cnet.com/8301-1009_3-10292587-83.html

 So I stumble across the above cnet article about FireFox.
 Have all my machines up to v3.0.12 ATM, but I detect a strong push 
 to update again to v3.5.1. :)

 Does anyone on the List use the new v3.5.1?

 Can I still use/add NoScript and CS-Lite to this new version?

 I'm on 3.5.1 and noscript with no problems.  Definitely upgrade.

 T




 
 


__ Information from ESET Smart Security, version of virus signature 
database 4267 (20090722) __

The message was checked by ESET Smart Security.

http://www.eset.com




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] [Bulk] Re: Google OS

2009-07-08 Thread Mesdaq, Ali
Gotta disagree with both you guys on that one. Cloud computing definitely has 
major advantages over local for various things. Not all things but for example 
storage. I rather have a google doc hosted by google that will never get lost 
to a harddrive crash than a locally stored doc. I can also see big promise in 
things like http://www.onlive.com/ for gaming. Cloud can't replace everything 
but it can replace a few things really well. I personally wouldn’t mind having 
a lightweight computer that boots off a flash image in 2 seconds and connects 
to the web for accessing my files and basic functionality. Something I never 
have to worry about for maintenance. That would be the ultimate web surfing 
platform. Give one of those computers to your family and never have to worry 
about fixing it ever!

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Wednesday, July 08, 2009 7:07 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] [Bulk] Re: Google OS

At 09:55 AM 08/07/2009, Stan Zaske wrote:
Cloud computing is bogus. The day when everyone's apps and data are 
on machines that aren't local is the day the Internet becomes third 
world. My broadband connection failed again yesterday for a couple 
hours during the Michael Jackson memorial blitz. How can so many in 
the industry be pushing this nonsense is beyond me. However, 
competing against Microsoft is a good idea as it may bring down 
their ridiculous prices. Anybody pee od'd that Vista owners don't 
get a free upgrade to 7?

I'm not a big fan of cloud computing either (but interestingly 
enough, am working on a cloud-based project, so go figure.)  I don't 
see net connections going down very often, but when they do, it could 
be a big hit to a business.  Seems like a single point of failure 
issue to me, but it is taking off.

T 




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] [Bulk] Re: Google OS

2009-07-08 Thread Mesdaq, Ali
It's actually even better for business than it is for home users. 
Salesforece.com perfect example of that. Have your whole CRM there for secure 
access anywhere, your data is safe, reports are better, advantages go on. Same 
with things like hosted Email Security which the company I work for does let 
the spam filtering happen in the cloud and save 80% of the bandwidth you use on 
email by having that 80% of your email which is spam removed before it gets to 
your pipe. Also cloud computing is awesome for scaling and growing as can be 
seen by amazon web services which are great cloud based services that are 
allowing a lot of business to run entirely on amazon services. If you’re a 
corporation and you can scale from 1 virtual server to 2000 in 5 minutes you 
have advantages in business.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Wednesday, July 08, 2009 10:18 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] [Bulk] Re: Google OS

At 01:51 PM 08/07/2009, Mesdaq, Ali wrote:
Gotta disagree with both you guys on that one. Cloud computing 
definitely has major advantages over local for various things. Not 
all things but for example storage. I rather have a google doc 
hosted by google that will never get lost to a harddrive crash than 
a locally stored doc. I can also see big promise in things like 
http://www.onlive.com/ for gaming. Cloud can't replace everything 
but it can replace a few things really well. I personally wouldn't 
mind having a lightweight computer that boots off a flash image in 2 
seconds and connects to the web for accessing my files and basic 
functionality. Something I never have to worry about for 
maintenance. That would be the ultimate web surfing platform. Give 
one of those computers to your family and never have to worry about 
fixing it ever!

For the vast majority of people, a cloud based PC makes sense - they 
are only surfing and emailing anyway, so if their internet connection 
is down, they are dead in the water anyway.  But I'm thinking more 
for business applications.

T 




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] [Bulk] Re: Google OS

2009-07-08 Thread Mesdaq, Ali
If you have super sensitive data it's probably a lot harder to get to it in the 
cloud than it is from your pc. I trust a team of people with lots of money and 
resources protecting my data more than I trust myself.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Wednesday, July 08, 2009 10:19 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] [Bulk] Re: Google OS

At 01:58 PM 08/07/2009, Bryan Seitz wrote:
I prefer to host my own stuff that way nobody is farming it for 
information, demographics, etc... I have things called backups and raid!

I can see huge issues with security in the cloud unless you are 100% 
sure you can encrypt with no back door.

T 




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] [Bulk] Re: Google OS

2009-07-08 Thread Mesdaq, Ali
If you pay for a solution you wouldn’t have your information farmed but if you 
use a free service than yeah its gonna happen. But if you think about it from a 
business perspective we get a good deal. Give me 7.3 gigs of email space with 
gmail for free and if they want to analyze that and serve me ads that I will 
never click that’s fine with me as long as they don't start controlling my 
content or changing it or the ultimate betrayal sharing it in its complete form.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Bryan Seitz
Sent: Wednesday, July 08, 2009 9:58 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] [Bulk] Re: Google OS

I prefer to host my own stuff that way nobody is farming it for information, 
demographics, etc... I have things called backups and raid!

On Wed, Jul 08, 2009 at 12:54:53PM -0400, Brian Weeden wrote:
 I'm also a huge fan of cloud (done properly).  I live in my gmail, gdocs,
 and remember the milk accounts and rely on Live Mesh for syncing between my
 home PC and laptop when traveling.
 
 The key that makes all the google stuff work for me is Google Gears.  It
 does a pretty fantastic job of syncing and allowing offline access to my
 gmail.
 
 ---
 Brian Weeden
 Technical Advisor
 Secure World Foundation http://www.secureworldfoundation.org
 +1 (514) 466-2756 Canada
 +1 (202) 683-8534 US
 
 
 On Wed, Jul 8, 2009 at 12:51 PM, Mesdaq, Ali ames...@websense.com wrote:
 
  Gotta disagree with both you guys on that one. Cloud computing definitely
  has major advantages over local for various things. Not all things but for
  example storage. I rather have a google doc hosted by google that will never
  get lost to a harddrive crash than a locally stored doc. I can also see big
  promise in things like http://www.onlive.com/ for gaming. Cloud can't
  replace everything but it can replace a few things really well. I personally
  wouldn?t mind having a lightweight computer that boots off a flash image in
  2 seconds and connects to the web for accessing my files and basic
  functionality. Something I never have to worry about for maintenance. That
  would be the ultimate web surfing platform. Give one of those computers to
  your family and never have to worry about fixing it ever!
 
  Thanks,
  --
  Ali Mesdaq (CISSP, GIAC-GREM)
  Sr. Security Researcher
  Websense Security Labs
  http://www.WebsenseSecurityLabs.com
  --
 
 
  -Original Message-
  From: hardware-boun...@hardwaregroup.com [mailto:
  hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
  Sent: Wednesday, July 08, 2009 7:07 AM
  To: hardware@hardwaregroup.com
  Subject: Re: [H] [Bulk] Re: Google OS
 
  At 09:55 AM 08/07/2009, Stan Zaske wrote:
  Cloud computing is bogus. The day when everyone's apps and data are
  on machines that aren't local is the day the Internet becomes third
  world. My broadband connection failed again yesterday for a couple
  hours during the Michael Jackson memorial blitz. How can so many in
  the industry be pushing this nonsense is beyond me. However,
  competing against Microsoft is a good idea as it may bring down
  their ridiculous prices. Anybody pee od'd that Vista owners don't
  get a free upgrade to 7?
 
  I'm not a big fan of cloud computing either (but interestingly
  enough, am working on a cloud-based project, so go figure.)  I don't
  see net connections going down very often, but when they do, it could
  be a big hit to a business.  Seems like a single point of failure
  issue to me, but it is taking off.
 
  T
 
 
 
 
   Protected by Websense Hosted Email Security -- www.websense.com
 

-- 
 
Bryan G. Seitz


Re: [H] [Bulk] Re: Google OS

2009-07-08 Thread Mesdaq, Ali
I really like the technology and approach of onlive. Render everything server 
side and stream to client. Even their micro console is awesome and a perfect 
example of cloud implementation. Use the cloud for what its good for and leave 
the stuff on the client that needs to be there. But I definitely think we are 
at least 10-15 years away from not NEEDING hardcore pc's because it will take a 
while until apps are written to be cloud based that are useful. The google docs 
and Microsoft office launches are a start, online game with onlive is another 
big step, also like the quickboosk online version for small business, but it 
will be a while till things like audio/video, application development apps, 
graphic/publishing software, and a bunch of other software make usable useful 
cloud version.
 
Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Thane Sherrington
Sent: Wednesday, July 08, 2009 10:21 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] [Bulk] Re: Google OS

At 02:01 PM 08/07/2009, Brian Weeden wrote:
I do all that as well - but a backup solution that doesn't have some form of
offsite backup is not really a good solution.

Besides, when you are traveling and swapping between machines how do you
keep everything synced together and have the ability to do work when there
is no net connection?

I moved from two desktops to a single laptop to avoid the synching 
issues, but I do store a lot of stuff online to access anywhere.  I 
think cloud computing may be very interesting in the next few years, 
but I'm not convinced that we are moving back to the dumb (or nearly 
dumb) terminal days either.  If we do, that'll be a very interesting 
change in the economy.

T 




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Sandboxie

2009-07-06 Thread Mesdaq, Ali
Looks like a home version of the Green Boarder software 
http://en.wikipedia.org/wiki/GreenBorder which Google acquired. If it does what 
it says it can do it would be an awesome piece of software to run as a last 
line of defense.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Naushad Zulfiqar
Sent: Saturday, July 04, 2009 9:59 AM
To: hardware@hardwaregroup.com
Subject: [H] Sandboxie

Has anyone tried this software?

The concept looks good.

http://www.sandboxie.com/

-- 
Best Regards,


Zulfiqar Naushad


 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Sandboxie

2009-07-06 Thread Mesdaq, Ali
Well Google implemented (in Chrome) some of the functionality in what it calls 
Incognito Mode where you can browse whatever sites you want and all traces of 
activity are removed when you close your browser window. So cookies, temp 
files, browsing history, etc. I have been using chrome pretty much as my main 
browser and using incognito mode anytime I browse around on the net. The green 
boarder site had some nice explanations of what exactly their software does but 
looks like all the content is down. 

The best way I think you can think of the virtualization stuff is imagine the 
virtualization software hooks parts of your system things like file creation, 
registry reading, registry writing, etc. Now when a software lets say IE tries 
to save file.exe the virtualization software just captures that attempt 
redirects it to some temporary location but IE has no idea this happened behind 
the scenes. Most of those software are doing either userland hooking or kernel 
level hooking mixed in with drivers. It’s a very similar concept to rootkits.

Eset is pretty good as far as AV goes. But from what I see on a daily basis 
putting trust in AV no matter which one is not a smart move. I think your on 
the right track with your approach of moderate browsing habits and layered 
security. Use chrome since it has the fewest security issues and targeted the 
least, use incognito mode, use another virtualization layer if desired.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of DSinc
Sent: Monday, July 06, 2009 10:34 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Sandboxie

Ali,
I have had a copy(s) of Green Border for years. Never tried it.
I grapple badly with all of the virtualization tech.
I think I sorta get it, but am still skittish of it. Feel safer behind 
my ESET solution...and moderate browsing habits :)
Sorry to see that Google gobbled it up. Will this consolidation ever cease?
Best,
Duncan


Mesdaq, Ali wrote:
 Looks like a home version of the Green Boarder software 
 http://en.wikipedia.org/wiki/GreenBorder which Google acquired. If it does 
 what it says it can do it would be an awesome piece of software to run as a 
 last line of defense.
 
 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --
 
 
 -Original Message-
 From: hardware-boun...@hardwaregroup.com 
 [mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Naushad Zulfiqar
 Sent: Saturday, July 04, 2009 9:59 AM
 To: hardware@hardwaregroup.com
 Subject: [H] Sandboxie
 
 Has anyone tried this software?
 
 The concept looks good.
 
 http://www.sandboxie.com/
 


 Protected by Websense Hosted Email Security -- www.websense.com 


[H] OSX on PC Hardware

2009-07-01 Thread Mesdaq, Ali
Anyone on the list done anything with running OSX on off the shelf PC Hardware?
http://wiki.osx86project.org/
If so what's performance like? Is it worth it to try to build a badass OSX box 
or is it just worth it to buy a Mac? Looking to do some audio work.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--




 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] OSX on PC Hardware

2009-07-01 Thread Mesdaq, Ali
Ok I am jealous! So even with that configuration you still feel that a mac pro 
can beat it performance wise? I am wondering if there is a cutoff where the PC 
hardware beats the mac for performance and is still cheaper to the point where 
it's worth the extra hassle to setup a pc mac instead of buying a real mac.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of James Boswell
Sent: Wednesday, July 01, 2009 11:26 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] OSX on PC Hardware

I'm running OSX 10.5.7 on :-

Asus P5K-E/Wifi-AP
Intel Core 2 Quad Q9550 @ 3.78Ghz
8GB (4x2GB) OCZ DDR2-800 @ 891Mhz
HIS Radeon 4890 1GB
2x 500GB WD HDD's (1x scratch, 1x Time Machine)
1x 500GB Seagate HDD (presently OSX boot drive)
1x 750GB Samsung HDD (Vista)
Lg Super Multi-Blu + Samsung DVDRW

It's a BOOT-132/Chameleon install, so the OSX install itself is  
native and the hacks are all applied by the bootloader (so software  
update works flawlessly, even the 10.5.6  10.5.7 update)


It hauls ass, feels as quick as any real Mac, until you hit it with  
something that can really make a Mac Pro stretch its legs (as I've  
only got 4 cores), even then the 4890 pulls its weight for things like  
Aperture and Final Cut filters.


I've also put OSX on an i7 rig for a friend, and that thing... is  
simply WOW, I suspect there are very few moments where it won't blow  
the sidepanel off a full blooded nehelem Mac Pro

Might be something to do with this though...
https://photos-4.getdropbox.com/i/l/1F7CeoKfpTt7PlM9OlXEk0ZuR-YotULw4_mL1l2ZC3w 
#12

- Partial assembled rig - 
https://photos-1.getdropbox.com/i/l/lUURdDq1OyRc2zlmtboM6ia1luoMhmEdUZXKelcTzCk 
#5

That Gigabyte GA-X58-UD5 is a REALLY REALLY good board for  
hackintoshing, there's even a script that'll completely set up the OS  
boot-132 style on the thing.


On 1 Jul 2009, at 18:36, Mesdaq, Ali wrote:

 Anyone on the list done anything with running OSX on off the shelf  
 PC Hardware?
 http://wiki.osx86project.org/
 If so what's performance like? Is it worth it to try to build a  
 badass OSX box or is it just worth it to buy a Mac? Looking to do  
 some audio work.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --




 Protected by Websense Hosted Email Security -- www.websense.com



Re: [H] HTPC - Which Software?

2009-01-06 Thread Mesdaq, Ali
XBMC actually really looks like a good platform because the base features are 
very good and so is the UI. Then you can pretty easily skin it and add new 
functionality of varying degrees. Its designed to be friendly to various input 
methods like remote control, panel control, etc. I am thinking about creating 
my own box around this platform to test it out. But so far it’s the most robust 
and feature rich platform I have seen. If you do end up going this way keep us 
updated and I will do the same. 

What does everyone think of that nvidia motherboard as a hardware platform for 
a linux+xbmc box? Are those nvidia motherboards pretty heavy duty? I know xbmc 
kinda has high hardware requirements.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Steve Tomporowski
Sent: Tuesday, January 06, 2009 5:31 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] HTPC - Which Software?

I'll check it out.  When I was dealing with GBPVR, the most
frustrating thing was that they did not define their own acronymns.  I
don't mind digging in and learning how to use an open source program,
but a least make some information available, don't make me have to
search the web for the explanation of every single setting.

Steve

On Mon, Jan 5, 2009 at 1:12 PM, Mesdaq, Ali ames...@websense.com wrote:
 Not sure if your looking for something like this but XBMC (http://xbmc.org/)  
 seems to be the best software on the market from what I hear and its open 
 source and free and cross platform. Rare that a open source project is the 
 best but it seems like it is. Boxee.tv is completely based on XBMC source and 
 they are getting a lot of attention lately.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: hardware-boun...@hardwaregroup.com 
 [mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Steve Tomporowski
 Sent: Monday, January 05, 2009 7:00 AM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] HTPC - Which Software?

 What's vmc?  I was going by the recomendations in this thread, I don't
 think that came up.  Meedio was also recommended but I pretty much
 stopped when I got something that actually worked.

 Steve

 On Sun, Jan 4, 2009 at 2:02 PM,  tmse...@rlrnews.com wrote:
 So, if I can ask... What's wrong with vmc?

 --Original Message--
 From: Bobby Heid
 Sender: hardware-boun...@hardwaregroup.com
 To: hardware@hardwaregroup.com
 ReplyTo: hardware@hardwaregroup.com
 Sent: Jan 4, 2009 12:49 PM
 Subject: Re: [H] HTPC - Which Software?

 It is about $100 retail.

 Bobby

 -Original Message-
 From: hardware-boun...@hardwaregroup.com
 [mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Winterlight
 Sent: Sunday, January 04, 2009 1:44 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] HTPC - Which Software?


Beyond TV:  Installed easily.  Virtually no setup.  Uses Hauppauge
Remote.  Image quality is fine.  Uh, huh?  But where's the
problems

 Beyond TV isn't cheap though is it?




Working for about a day now with no issues.  I think you can guess my
recommendation.;-)

Steve




 Sent via BlackBerry



  Protected by Websense Hosted Email Security -- www.websense.com



Re: [H] HTPC - Which Software?

2009-01-05 Thread Mesdaq, Ali
Not sure if your looking for something like this but XBMC (http://xbmc.org/)  
seems to be the best software on the market from what I hear and its open 
source and free and cross platform. Rare that a open source project is the best 
but it seems like it is. Boxee.tv is completely based on XBMC source and they 
are getting a lot of attention lately. 

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: hardware-boun...@hardwaregroup.com 
[mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Steve Tomporowski
Sent: Monday, January 05, 2009 7:00 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] HTPC - Which Software?

What's vmc?  I was going by the recomendations in this thread, I don't
think that came up.  Meedio was also recommended but I pretty much
stopped when I got something that actually worked.

Steve

On Sun, Jan 4, 2009 at 2:02 PM,  tmse...@rlrnews.com wrote:
 So, if I can ask... What's wrong with vmc?

 --Original Message--
 From: Bobby Heid
 Sender: hardware-boun...@hardwaregroup.com
 To: hardware@hardwaregroup.com
 ReplyTo: hardware@hardwaregroup.com
 Sent: Jan 4, 2009 12:49 PM
 Subject: Re: [H] HTPC - Which Software?

 It is about $100 retail.

 Bobby

 -Original Message-
 From: hardware-boun...@hardwaregroup.com
 [mailto:hardware-boun...@hardwaregroup.com] On Behalf Of Winterlight
 Sent: Sunday, January 04, 2009 1:44 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] HTPC - Which Software?


Beyond TV:  Installed easily.  Virtually no setup.  Uses Hauppauge
Remote.  Image quality is fine.  Uh, huh?  But where's the
problems

 Beyond TV isn't cheap though is it?




Working for about a day now with no issues.  I think you can guess my
recommendation.;-)

Steve




 Sent via BlackBerry



 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Trojan??

2008-10-14 Thread Mesdaq, Ali
That very well may be the Trojan redirecting all your DNS requests to its own 
dns server but the server might not be up or it might be redirecting you to an 
IP of its own and that IP could be down. Trojans messing with DNS are 
especially dangerous because even if you type www.wellsfargo.com you could be 
going to a phishing site. Here is a recent blog we wrote about a scam that 
happened to a friend of one of our researchers 
http://securitylabs.websense.com/content/Blogs/3184.aspx


Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Franc
Sent: Tuesday, October 14, 2008 9:04 AM
To: hardware@hardwaregroup.com
Subject: [H] Trojan??

This am when I started up a message came on the screen from AVG.
AVG finds you have a trojan. Do you want to remove it forcefully?
I clicked yes and the message reappeared.
I could not get rid of it.
I restarted the computer and the message was gone.
Now when I start Firefox I get a message it is taking to long no matter
what URL I try to get.
Is that the trojan working?
What should  I do now?

--
Sam Franc
On the Oregon Coast
I must be willing to give up what I am
in order to become what I will be.-Einstein



 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Trojan??

2008-10-14 Thread Mesdaq, Ali
Try scanning those online at www.virustotal.com . Scanning against all those 
AV's gives what I call decent detection.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Franc
Sent: Tuesday, October 14, 2008 11:13 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Trojan??

Brian,
I have been running an AVG scan and it has found several places for the
Trojan Horse Agent_r.CX in Zone Alarm setup files on my desktop.
Zls setup_70_484_000
  70_337_000
  70_483_000
  70_462_000
If I put those files in recycle bin and empty it will that get rid of them?
Sam




Brian Weeden wrote:
 Could be a few different things going on.  Might have been a false positive
 and you might have killed something necessary for your internet connection
 to work.  But it might have also been a real trojan.  Sometimes they insert
 themselves pretty deeply in system processes and removing them breaks the
 links that allows things like the network stack to work.

 Try rebooting, see if that helps.  Also try safe mode.  But don't get your
 hopes up.

 ---
 Brian Weeden
 Technical Consultant
 Secure World Foundation http://www.secureworldfoundtion.org
 +1 (514) 466-2756 Canada
 +1 (202) 683-8534 US


 On Tue, Oct 14, 2008 at 12:04 PM, Sam Franc [EMAIL PROTECTED] wrote:


 This am when I started up a message came on the screen from AVG.
 AVG finds you have a trojan. Do you want to remove it forcefully?
 I clicked yes and the message reappeared.
 I could not get rid of it.
 I restarted the computer and the message was gone.
 Now when I start Firefox I get a message it is taking to long no matter
 what URL I try to get.
 Is that the trojan working?
 What should  I do now?

 --
 Sam Franc
 On the Oregon Coast
 I must be willing to give up what I am
 in order to become what I will be.-Einstein



 


 No virus found in this incoming message.
 Checked by AVG - http://www.avg.com
 Version: 8.0.173 / Virus Database: 270.8.0/1723 - Release Date: 10/13/2008 
 6:42 PM



--
Sam Franc
On the Oregon Coast
I must be willing to give up what I am
in order to become what I will be.-Einstein



 Protected by Websense Hosted Email Security -- www.websense.com 


Re: [H] Trojan??

2008-10-14 Thread Mesdaq, Ali
Hmm that’s odd. How big is the file? Can you zip up the files and upload them 
somewhere for me to get? I can run it through our systems and tell you what I 
find out about the files.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Franc
Sent: Tuesday, October 14, 2008 5:40 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] Trojan??

I started sending my file to your site about a hour ago and it still has
not been sent completely. It says do not stop until it is complete. How
long does it take?
Sam

Mesdaq, Ali wrote:
 Try scanning those online at www.virustotal.com . Scanning against all those 
 AV's gives what I call decent detection.

 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Sr. Security Researcher
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Franc
 Sent: Tuesday, October 14, 2008 11:13 AM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Trojan??

 Brian,
 I have been running an AVG scan and it has found several places for the
 Trojan Horse Agent_r.CX in Zone Alarm setup files on my desktop.
 Zls setup_70_484_000
   70_337_000
   70_483_000
   70_462_000
 If I put those files in recycle bin and empty it will that get rid of them?
 Sam




 Brian Weeden wrote:

 Could be a few different things going on.  Might have been a false positive
 and you might have killed something necessary for your internet connection
 to work.  But it might have also been a real trojan.  Sometimes they insert
 themselves pretty deeply in system processes and removing them breaks the
 links that allows things like the network stack to work.

 Try rebooting, see if that helps.  Also try safe mode.  But don't get your
 hopes up.

 ---
 Brian Weeden
 Technical Consultant
 Secure World Foundation http://www.secureworldfoundtion.org
 +1 (514) 466-2756 Canada
 +1 (202) 683-8534 US


 On Tue, Oct 14, 2008 at 12:04 PM, Sam Franc [EMAIL PROTECTED] wrote:



 This am when I started up a message came on the screen from AVG.
 AVG finds you have a trojan. Do you want to remove it forcefully?
 I clicked yes and the message reappeared.
 I could not get rid of it.
 I restarted the computer and the message was gone.
 Now when I start Firefox I get a message it is taking to long no matter
 what URL I try to get.
 Is that the trojan working?
 What should  I do now?

 --
 Sam Franc
 On the Oregon Coast
 I must be willing to give up what I am
 in order to become what I will be.-Einstein



 


 No virus found in this incoming message.
 Checked by AVG - http://www.avg.com
 Version: 8.0.173 / Virus Database: 270.8.0/1723 - Release Date: 10/13/2008 
 6:42 PM




 --
 Sam Franc
 On the Oregon Coast
 I must be willing to give up what I am
 in order to become what I will be.-Einstein



  Protected by Websense Hosted Email Security -- www.websense.com

 


 No virus found in this incoming message.
 Checked by AVG - http://www.avg.com
 Version: 8.0.173 / Virus Database: 270.8.0/1723 - Release Date: 10/13/2008 
 6:42 PM



--
Sam Franc
On the Oregon Coast
I must be willing to give up what I am
in order to become what I will be.-Einstein



Re: [H] It's A Record!!!

2008-09-23 Thread Mesdaq, Ali
Maybe I am imagining things but I think I remember back in the 1999-2001 days 
when getting 100 was not totally out of the ordinary. The list was even 
advertised as high volume. But its possible I am getting this list mixed up 
with another one.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill
Sent: Tuesday, September 23, 2008 1:50 AM
To: hardware@hardwaregroup.com
Subject: [H] It's A Record!!!

In all my years lurking around HWG, I don't recall ever seeing the volume of
messages generated today by the list. 60!!! If that record was ever bested, I
sure can't recall when..

And just when I thought things were dying off, it springs to life!! Excellent!

By the way if we're taking a show of hands, no Facebook, please. I'm sure I'm
old and in the way, but just don't trust them social networking sites...

Bill








 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] It's A Record!!!

2008-09-23 Thread Mesdaq, Ali
Ahh those were the good ol days when Sabre had ftp accounts for us that were 
serving files SUPER fast. Those were the days of case modd pioneering.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Sr. Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ben Ruset
Sent: Tuesday, September 23, 2008 8:17 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] It's A Record!!!

No -- the list used to be advertised as high volume. I think that's when
Sabre was hosting it.

Mesdaq, Ali wrote:
 Maybe I am imagining things but I think I remember back in the
 1999-2001 days when getting 100 was not totally out of the ordinary.
 The list was even advertised as high volume. But its possible I am
 getting this list mixed up with another one.

 Thanks, -- Ali Mesdaq (CISSP,
 GIAC-GREM) Sr. Security Researcher Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --


 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] NOD32 ?

2008-03-13 Thread Mesdaq, Ali
Not sure if nod32 has any network filter drivers but if it does then yes
it can easily break network connectivity. Do you have anything else
installed that might filter network traffic? Firewalls would be a good
candidate.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Thursday, March 13, 2008 3:41 PM
To: hardware@hardwaregroup.com
Subject: [H] NOD32 ?

Recently installed nod32 AV to play with. Have lost LAN connection from
server to office yet I can still access server no problem from the
office. 

Can nod32 do this ? turning it off has no affect

thanks
fishing
fp

--
Tallyho ! ]:8)
Taglines below !
--
Those without heads do not need hats.



 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] Breaking Disk Encryption

2008-02-22 Thread Mesdaq, Ali
Hardware is not really the solution. The problem is layered but the main
problem here is physical security. If you have a system and all of its
components to encrypt and decrypt are right there in one piece and
people can connect debuggers to it or analyze it they could break
anything you do. But if the system is not complete without something
else like a private key that needs to be retrieved remotely then you
have some extra security. Then you can control the process by seeing if
physical security is compromised you just don't send that private key
and the system is incomplete. For true secure solutions you need to
layer, then separate, then control access to each layer and component.
So in the case of hard drive encryption if an FBI person gets your drive
and you can bet they can find out everything on it if they care enough. 

Security is really just a level of comfort you can deal with. EVERYTHING
can be compromised in some way.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of j maccraw
Sent: Friday, February 22, 2008 2:24 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Breaking Disk Encryption

Nice find Ali!

sorry this long, by I feel passionate about this...

Yet another disturbing insight into how exploitable the modern PC is. To
be fair, peaking into RAM of running systems has been PoC'd more than a
few times (as have a countermeasure or 2) all useless against a fully
unpowered system. 
Scary to have powered vs. not redefined though!

When I 1st started toying 10+ years ago with Norton Your Eyes Only, E4M
 later DriveCrypt it seemed the biggest issue after what cipher, what
app, was OS swapping RAM to disk either pagefile or for hibernation. Yet
for for years Crypto experts like Bruce Schneier and others have been
saying that no matter what, using general purpose computers to run
encryption software is flawed  exploitable.

It would seem that ultimately noting short of both full RAM  storage
encryption is going to prevent a running system from having it's brains
sucked out  scrutinized. We know of attempts with M$ XBOX, HDCP, or
HD-DVD/BluRay to secure against scrutiny. While they are seeing varying
degrees of success locking US out very little is coming in the form of
letting us lock THEM out. Obviously it's possible to build systems that
once set-in-motion, encrypt and continue to run leaving no keys in ram
to sniff since only the system knows what it's using to crypt/decrypt
like Colossus  Guardian talking to each other in a language only they
knew!

Until then, on running systems, manual user intervention is needed where
auto-dismount is not practical. Passwords/phrases must die, keys must be
tied to a secure physical token so that removing it means there are no
keys. Removal of token should trigger memory wiping so keydata is not
cached. Some of this must already exist? I won't even go into EFS, it's
default lame option of obscuring the master keys in the registry, or the
fact that mode
3 only works with floppies!

Now any system that can be suspended has got to be easier to protect
IMHO. If RAM sniffing an issue, then OTFE software needs to add key
flush on on suspend followed by re-authentication to retrieve keys from
external source (read not on the PC's RAM, HDD, SDD) on resume rather
use RAM cached copies. Don't know how easy that is to tie in, but I
assume under the current model apps have to wait for storage drivers to
come back online after suspend anyway so I imagine it how this hole gets
closed. Personally I'd like to have a encrypted hibernation file tied to
a physical token for plug  boot
authentication.

Bottom line is time has come for *affordable*, faster, dedicated
hardware solutions to be made available. Either in the form of TPM's in
motherboards, storage devices, host controllers, or even inline black
boxes between device  host using a tamper-proof hardware solution. A
solution like the IronKey USB flash drive has between it's USB interface
 flash RAM. Give me a bunch of those modules in the form of SATA
go-betweens  programmable hardware security token I'd have all my SATA
drives encrypted!


Mesdaq, Ali wrote:
 Interesting read for those into disk encryption
 
 http://www.news.com/8301-13578_3-9876060-38.html
 
 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Security Researcher II
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --
 
 
  Protected by Websense Messaging Security --
www.websense.com 
 
 


 


Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


Re: [H] Offline Windows Updater

2008-02-21 Thread Mesdaq, Ali
With perl you could just parse the  c:\windows\WindowsUpdate.log and
after you check and see no patches found then you could just delete the
startup script. I am sure it would be really easy to determine that even
if its a hack like checking for the existence of a file or something.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of j maccraw
Sent: Thursday, February 21, 2008 11:50 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Offline Windows Updater

Totally doable if you use a INF instead of a REG to do the patching so
you have a control over setting or reverting the settings by simply
changing the parameters of the call to the INF.

Initiate the setup call the INF install with GUIRunOnce in WINNT.SIF. As
to how to automatically detect when all updates are installed I'm
stumped but removing is as simple as calling the same command with a
different section.

To invoke the INF

Add a line to $OEM$\Cmdlines.txt to invoke the INF you created from the
sysdff difference file. The command is of the same form as you would use
to invoke any Windows 95-style INF. The format is as follows:

RUNDLL32 syssetup,SetupInfObjectInstallAction section
128 inf

where:

Section specifies the name of the section in the INF file. Inf specifies
the name of the INF file. This should be specified as a relative path to
avoid invoking Setup's default INF rules, which look for an unqualified
filename in the system inf directory instead of the current directory.
For example, specify ..\newtools.inf, not just newtools.inf.

The command is always enclosed in double quotation marks. 




Mesdaq, Ali wrote:
 Greg your the Man! Thanks for the reg key info and
the wuaclt
 /detectnow info. I remember there was a command
line way to force it to
 check but too lazy to look for it. So you answered
my laziness for me.
 
 I think a combination of nLite customized xp install
to include
 something's in the install like perl or whatever
scripting language can
 really automate this whole process so the computer
keeps checking for
 updates on start up until there are none left and
deletes itself and
 changes reg keys back to normal.
 
 Thanks,
 --
 Ali Mesdaq (CISSP, GIAC-GREM)
 Security Researcher II
 Websense Security Labs
 http://www.WebsenseSecurityLabs.com
 --
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On
Behalf Of Greg Sevart
 Sent: Wednesday, February 20, 2008 11:23 AM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Offline Windows Updater
 
 Some other useful notes:
 
 net stop wuauserv stops the Automatic Updates (AU)
service so it will
 pick up the new config. Change to start, obviously,
to restart it.
 
 wuauclt /detectnow forces AU to detect if updates
are needed
 immediately.
 
 c:\windows\WindowsUpdate.log provides a verbose log
file of AU activity.
 
 Greg
 
 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:hardware- 
 [EMAIL PROTECTED] On Behalf Of Thane
Sherrington
 Sent: Wednesday, February 20, 2008 1:13 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Offline Windows Updater

 At 03:04 PM 20/02/2008, Greg Sevart wrote:
 Oh, absolutely. You also don't need a domain and
group policy--you
 just use
 a .reg file to add the WSUS server info, then
delete the key when
 you're
 fully patched. We use it internally to bring new
machines up to date
 -before- joining the corporate domain.
 Awesome.  This is going to be a huge time saver for
me.  I owe you.

 T
 
 
 
 
 
  Protected by Websense Messaging Security --
www.websense.com 
 
 


 


Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


[H] Breaking Disk Encryption

2008-02-21 Thread Mesdaq, Ali
Interesting read for those into disk encryption

http://www.news.com/8301-13578_3-9876060-38.html

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] Offline Windows Updater

2008-02-20 Thread Mesdaq, Ali
I would 2nd not using 3rd party tools for this kind of stuff unless its
a up to business par. I worked for a company who was the pioneer of
windows patch management and trust me its a VERY hard thing to do right
I would be very hesitant to trust some free tool. But if you could
install with a xp sp2 install then connect to your own internal WSUS
server for updates post install patching could go from 2hrs to 20min.

One cool tool I found and actually used was nLite. Anyone else here use
that before? I only used it once but worked good that one time. But I
can't really vouch for it as a tool to run your business on but if
anyone wants to play with it and let us know what you think I would love
to hear.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
Sent: Wednesday, February 20, 2008 5:48 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Offline Windows Updater

Thane,

I'm actually kinda surprised you don't just run an internal WSUS server
for in-house patching. I've always preferred it over third party tools.
Sure, it still requires multiple reboots, but at least pulling updates
is nearly instantaneous. After a couple botched systems caused by
Autopatcher, I just don't trust those tools to get the dependencies
right. 

It doesn't help much in the field so to speak, but could certainly
assist in-house.

Greg

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:hardware- 
 [EMAIL PROTECTED] On Behalf Of Thane Sherrington
 Sent: Wednesday, February 20, 2008 7:34 AM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Offline Windows Updater
 
 Hi Brian,
  Thanks for the tip, I'm definitely going to try this out.
 
 T
 
 At 09:06 AM 20/02/2008, Brian Weeden wrote:
 Having going through the apain of multiple reboots and patching for

 a new windows install too many times myself, I wanted to pass along 
 this little gem that I don't think has been mentioned here before:
 
 http://www.heise-online.co.uk/security/Do-it-yourself-Service-Pack--
 /features/80682
 
 It's an offline updater for Windows, reminiscent of the now defunct 
 Autopatcher.  You download it, tell it which windows products (OS 
 and/or Office), versions, and languages you want, and it will 
 download all the patches and service packs and put them into one 
 burnable CD or DVD.
 
 The download link for the latest version is here:
 
 http://www.heise.de/ct/projekte/offlineupdate/download_uk.shtml
 
 Lifesaver.
 
 ---
 Brian





 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] Offline Windows Updater

2008-02-20 Thread Mesdaq, Ali
Greg your the Man! Thanks for the reg key info and the wuaclt
/detectnow info. I remember there was a command line way to force it to
check but too lazy to look for it. So you answered my laziness for me.

I think a combination of nLite customized xp install to include
something's in the install like perl or whatever scripting language can
really automate this whole process so the computer keeps checking for
updates on start up until there are none left and deletes itself and
changes reg keys back to normal.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
Sent: Wednesday, February 20, 2008 11:23 AM
To: hardware@hardwaregroup.com
Subject: Re: [H] Offline Windows Updater

Some other useful notes:

net stop wuauserv stops the Automatic Updates (AU) service so it will
pick up the new config. Change to start, obviously, to restart it.

wuauclt /detectnow forces AU to detect if updates are needed
immediately.

c:\windows\WindowsUpdate.log provides a verbose log file of AU activity.

Greg

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:hardware- 
 [EMAIL PROTECTED] On Behalf Of Thane Sherrington
 Sent: Wednesday, February 20, 2008 1:13 PM
 To: hardware@hardwaregroup.com
 Subject: Re: [H] Offline Windows Updater
 
 At 03:04 PM 20/02/2008, Greg Sevart wrote:
 Oh, absolutely. You also don't need a domain and group policy--you
 just use
 a .reg file to add the WSUS server info, then delete the key when
 you're
 fully patched. We use it internally to bring new machines up to date
 -before- joining the corporate domain.
 
 Awesome.  This is going to be a huge time saver for me.  I owe you.
 
 T





 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] Capturing websites

2008-02-14 Thread Mesdaq, Ali
I forgot to ask if you were looking for local copies of whole websites
or if you were more interested in just saving a webpage's important
content. If its the latter the recommendation I gave was the best I have
come across since it saves it online but if its the first then wget with
the right parameters is good as well as a bunch of other ones.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mesdaq, Ali
Sent: Tuesday, February 12, 2008 2:55 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] Capturing websites

Clipmarks for Firefox works kidna well. It saves content on the server
so thats good but only in like 1k words or letter chunks.
https://addons.mozilla.org/en-US/firefox/addon/1407 


Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Anthony Q.
Martin
Sent: Tuesday, February 12, 2008 12:27 PM
To: hardware@hardwaregroup.com
Subject: [H] Capturing websites

Anyone know of a tool (free is nice) to capture an entire website?

Not interested in stealing, mind you. I just need to preserve the info
there so that I can look at it after the website disappears. 

Doesn't Acrobat (not the reader) do that?

Thanks.



 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] Symantec AV went NUTS ?

2008-02-11 Thread Mesdaq, Ali
Check your host file c:\windows\drivers\etc\hosts or check which IP your
connecting to for downloads. You might have had a trojan mess with your
dns settings. This could happen in the host file or at a lower level
which will be harder to detect.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Saturday, February 09, 2008 3:06 PM
To: hardware@hardwaregroup.com
Subject: [H] Symantec AV went NUTS ?

Have narrowed this down to the scheduled update feature in my SAVC file
dwhwizrd.exe.
When it runs it creates a endless stream of files dwh.tmp ( where
is random numbers) It detects these as a trojan . So does my Webroot
AV.

Have I been infected by a really smart V or is this a bug in my SAVC.

Wondering if anyone else has seen this.?
Getting ready to un install it but meanwhile have disabled scheduled
updates.
Also FWIW it also is detecting tools I have used for years as bad boys.
( combofix and rockxp to name just two) google has shown this to be a
false positive. 

thanks
fp



--
Tallyho ! ]:8)
Taglines below !
--
I'm on the trailing edge of technology.




 Protected by Websense Messaging Security -- www.websense.com 


Re: [H] Symantec AV went NUTS ?

2008-02-11 Thread Mesdaq, Ali
You could check at the IP level on a box that's not the compromised
machine. Just launch a sniffer and make sure your on a network that can
see the traffic and see where the actual download is going to. Then
compare that to where it should be going to. I bet rootkit is
redirecting your downloads and just serving malware from that new
location. I would be interested in knowing that if it were true.

Thanks,
--
Ali Mesdaq (CISSP, GIAC-GREM)
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Monday, February 11, 2008 2:28 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] Symantec AV went NUTS ?

good idea, nothing in hosts except
127.0.0.1 localhost

all others show nothing suspicious.
think I will do a rootkit scan for grins.
fp

At 11:07 AM 2/11/2008, Mesdaq, Ali Poked the stick with:

Check your host file c:\windows\drivers\etc\hosts or check which IP 
your connecting to for downloads. You might have had a trojan mess with

your dns settings. This could happen in the host file or at a lower 
level which will be harder to detect.

Thanks,

--
Tallyho ! ]:8)
Taglines below !
--
Take the bull by the hand, and don't mix metaphors.




 Protected by Websense Messaging Security -- www.websense.com 


RE: [H] packet sniffer

2007-11-09 Thread Mesdaq, Ali
If you like to be geeky and bleeding edge check out Analyzer
http://analyzer.polito.it/ . Its written by the guys that wrote winpcap.
The main advantage it has over other sniffers is that its built ontop of
netpdl which is xml based protocol definitions and dissectors. This is
good if you want to create your own protocol dissector or modify
existing ones.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of DHSinclair
Sent: Friday, November 09, 2007 1:19 PM
To: Hardware Group
Subject: [H] packet sniffer

Do not know how good this is, but the Brother Guru's asked me to use
this 
to TS what I  believe is a printer problem.  The printer is
hitting/logging 
my router's log every 11-12 minutes.
The router posts an entry saying, LAN access denied to a device with
mac 
address 00.
The mac address is my printer.. :)
Anyway, thought you might like to play... The code is at
http://www.wireshark.org/

hth,
Duncan



 TO REPORT THIS AS SPAM, PLEASE CLICK THE FOLLOWING LINK: 
https://www.mailcontrol.com/sr/MKdX+ZkhIau+oOTShGObwNJ9Epdnk7A+idI6fIdGM
WoBWvRG3lGYSVah1!MicEb0QHTZ9xa!mHe9Bun8NbMyVrkZmBuhofqMGgjK3kdiCm2YUG4du
fpa8nTgYP0+TWXBlFXQ9hIkUUN!xWiiCtQScpMolyLfXqISTyve54F4TSwqEyEo0lRW8yTgm
6c5Zx1MM5HTD8qohsnvIAFkij0w8EgJ3lWxm5Cl  



[H] Dual Monitor Video Card

2007-10-26 Thread Mesdaq, Ali
Hey All,

Looking for some quick advice on which video card to request at work. I
have 2 LCD screens that are both DVI and analog inputs. So obviously I
would prefer a card that is good for business applications and supports
DVI natively. Another thing I like to do is put my monitors in portrait
mode so that I get more top to bottom real estate. But I have noticed
that kills video performance. I am assuming its from redrawing
everything on screen instead of at a lower level so a card that could do
that natively would be great. Oh yeah one more thing it can't be a $500
card since I have to get my work to approve it.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--



RE: [H] restoring policy's ?

2007-10-02 Thread Mesdaq, Ali
Is it really worth it to try to clean? Are you sure a nice clean
re-install wouldn't be better? I always suggest people stay away from
remediation because your only depending on tools and their signatures
and trust me even the best AV doesn't have very good coverage. Most
malware these days are also web based so they download newer versions
from the web. So 1 piece of malware will usually result in 5-10 new
pieces of malware downloaded.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Tuesday, October 02, 2007 9:43 AM
To: hardware@hardwaregroup.com
Subject: [H] restoring policy's ?

Have a REALLY screwed up one. Spyware or something has basically locked
out everything. While I did get the control panel back none of the
applets run. gpedit.msc says file not found.

can not manage users. Was able to fix this a little and it is better but
some of this needs to be restored. I suspect a whole system restore is
needed to be honest but I always respect a challenge. :-D

Any suggestions will be helpful. ( or tools ) fp

--
Tallyho ! ]:8)
Taglines below !
--
Nobody home but the lights, and they're out too.





RE: [H] restoring policy's ?

2007-10-02 Thread Mesdaq, Ali
I don't know about accessing add/remove programs directly but to
uninstall most applications that were installed via installshield there
is regkeys that save information about the uninstall string.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
you can just paste the uninstall strings into the run box and proceed
that way. 

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FP
Sent: Tuesday, October 02, 2007 12:35 PM
To: The Hardware List
Subject: Re: [H] restoring policy's ?

FWIW even in safe mode countrol panel applets do not work.
Anyway to access add remove programs directly ?
fp

- Original Message -
From: FORC5 [EMAIL PROTECTED]
To: The Hardware List hardware@hardwaregroup.com
Sent: Tuesday, October 02, 2007 10:32 AM
Subject: RE: [H] restoring policy's ?


 thanks Tim
 Been removing stuff but hadn't even though of safe mode. ( my bad )

 Biggest baddy is something called avsystemcare. Have gotten rid of
some of 
 the pop ups but without control panel access and add remove programs. 
 crap. I got control panel ( registry nocontrolpanel 0 ) but it
vanished 
 again but when I had it non of the applets worked.

 real bad one. I'm sure my head will be sore b4 I do what I know needs
to 
 be done. :-[
 thanks
 Fred
 At 10:00 AM 10/2/2007, Tim \The Beave\ Lider Poked the stick with:

Does the computer run in safe mode?  If so you can see if anything
runs
there.  Also, Check the Task Manager and see if there is any software
running that looks fishy (Pun intended).

There is a lot of Spyware that locks computers down and do not let you
run
certain utilities.  I have seen this in the past.  The funny thing is
the
person who owns the computer has no idea how they got in there.

Good luck,

Tim The Beave Lider
E-mail: [EMAIL PROTECTED]
MSN: [EMAIL PROTECTED]


 -- 
 Tallyho ! ]:8)
 Taglines below !
 --
 Laws are like sausages, it is better to not see them made


 





RE: [H] FF default text ?

2007-07-19 Thread Mesdaq, Ali
In the address bar type about:config

Then filter with the text font. Then double click the font.size.x.x you
want to modify. I think its font.size.variable.x-unicode but I might be
wrong so play around with it. I hope that helps.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Thursday, July 19, 2007 11:16 AM
To: hardware@hardwaregroup.com
Subject: [H] FF default text ?

any way to make the default text larger ? every time I start FF I have
to make it a notch bigger, seems like no matter where I go. 

Thanks


--
Tallyho ! ]:8)
Taglines below !
--
Sex is hereditary. If your parents didn't, you won't.





RE: [H] Server changes ip addy

2007-07-18 Thread Mesdaq, Ali
What OS, version, ip configuration your using, etc. 

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of DHSinclair
Sent: Wednesday, July 18, 2007 10:05 AM
To: Hardware Group
Subject: [H] Server changes ip addy

Is there some function in a server, or, some external malicious code
that can cause a server to change its' assigned ip address to some other
address?

Somehow my server's ip addy got changed ~2200hrs last Monday and it took
me about 36hrs to find (stumble on actually!) the changed ip addy.  Very
odd.

The server is now changed back and scanned for virus/malware.  None
found.
Best,
Duncan


This email scanned for Viruses and Spam by ZCloud.net 




RE: [H] Server changes ip addy

2007-07-18 Thread Mesdaq, Ali
Well by config I meant like how is your server configured? Static IP?
Static DHCP IP? Do you set your IP at start up or is it done via config
(applies to linux only). But what did your IP change to? Have you lost
connectivity from your ISP or from your networking hardware at all? 

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of DHSinclair
Sent: Wednesday, July 18, 2007 12:28 PM
To: The Hardware List
Subject: RE: [H] Server changes ip addy

Ali,
using win2k server os at sp4 and all current winUpdates.
please explain ip configuration your using?

on-board intel 82557 nic.  original ip was 10.0.0.x/255.255.255.0.
connection to www is via 56k dialup via courier external and DUN.
HTH,
Duncan
At 13:12 07/18/2007 -0400, you wrote:

What OS, version, ip configuration your using, etc.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of DHSinclair
Sent: Wednesday, July 18, 2007 10:05 AM
To: Hardware Group
Subject: [H] Server changes ip addy

Is there some function in a server, or, some external malicious code 
that can cause a server to change its' assigned ip address to some 
other address?

Somehow my server's ip addy got changed ~2200hrs last Monday and it 
took me about 36hrs to find (stumble on actually!) the changed ip addy.

Very odd.

The server is now changed back and scanned for virus/malware.  None 
found.
Best,
Duncan
snip


This email scanned for Viruses and Spam by ZCloud.net 




RE: [H] Homemade DVR suggestions

2007-06-26 Thread Mesdaq, Ali
This is great info. But I definitely think that you're a much bigger
hardware freak than me because I was thinking of replacing the COX DVR
box I have with something equivalent but with more of a coolness factor.
I also wanted something where I could expand and add features to myself.
I like these Linux software solutions that can be installed on a pc.
Some of the features I wanted to add would be to install apache and
build a web interface to feed the box torrent files and it would go
download them and display in the dvr list when complete. As far as what
it NEEDS to do is just basic dvr stuff. I can't live without dvr even
though torrents are a good thing but nothing beats having a show ready
to watch right when you get home.

As I buy the hardware and start setting it up I will keep posting to the
group to give everyone my opinions on the software or related items.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Thursday, June 21, 2007 1:37 PM
To: The Hardware List
Subject: Re: [H] Homemade DVR suggestions

This assumes you aren't contemplating a Media Center and strictly want
to record TV... and we are not talking HD.

The most important thing here is the CPU, and a Intel P4 or above is the
only one for this job. For encoding the faster the better. AMD just
doesn't do as well with this. For basic recording and editing out
commercials 2GB of RAM, and a quick 72K drive works great. You don't
need RAID unless you are planning on making your own movies with your
own 3D graphics... that sort of thing.

Any decent video card will do for TV recording, and commercial editing.
I am still using a Matrox G450 for exactly this job, and it works great
with a P4 3.4Ghz and 2GB of RAM, a Hauppage TV tuner and
USB2 DVR with 1.6TB of drive space in four drives. The great thing about
the Matrox is DVDMAX. When enabled on a dual head all you do is play
video from any media app and it will output perfectly to your TV. No
adjusting ..nothing. Perfect every time.

I also use a dual Xeon 3.056Ghz with 4GB of RAM, a AIW 800XT and Raptor
drives but there is no real difference in the output 
other then encoding speed, of course.

For regular TV broadcast recording I use a collection of AIW and  a
USB2 Hauppage TV tuner. Surprisely there is very little difference
between the ATI and the Hauppage. What does make a difference is the
souce. Recording from a Digital cable box into the Line In Jacks does a
superior job to any PC turner out there. Things like  Hardball, Charlie
Rose I record on the Hauppage or AIW to watch on the PC or outputted to
my TV. Things I want to keep and turn into a DVD I recorde from the
Digital Cable box into the In Jacks of the All in Wonder.

Just about any name brand PC TV turner will come with it's own remote.
They all suck but start there because maybe that is all you will need.

One thing you will want is a huge amount of storage space. DVR is a
black hole of GBs. Get it now, or get it as you go along, but you will
get it.

Operating system you want XP PRO or better. AIW only works with XP so
you can pick one up used cheap.

However, if you want to build a video editing workstation that is second
to none then consider this 12k baby!

http://www.extremetech.com/article2/0,1697,2145632,00.asp

June 13, 2007
Build a Content Creation Workstation
By Loyd Case

Creating content is a huge business. Whether it's developing special
effects for Hollywood blockbusters, video and PC games, or just the web,
productivity is the key.

We'll be discussing how to build your own content creation workstation.
Along the way, we'll build one very high-end system, but we'll also
discuss alternatives along the way to either reduce cost, improve
flexibility, or target specific types of applications.

The focus today, though, is on content creation. While the system we
build may be well suited for CAD (computer aided design) or CAE
(computer aided engineering), it's not optimized for those applications.
Rather, we're going to talk about 3D content creation, with an added
side trip discussing video editing and rendering.



Most of the applications we'll be looking at are optimized for
multi-threading, and can generally take advantage of multiple CPU cores.
We'll also take a look at the effect of using accelerated 3D (versus
software rendering) for actual creation and editing. Pure rendering of
the final scenes, of course, are software generated. 
That may change over time, as high end graphics accelerators begin to
look more like general purpose CPUs. Today, however, the traditional
model means creating and editing interactively, then rendering offline.

With these thoughts in mind, let's take a look at the components first,
discuss the building process, then talk about 

[H] Homemade DVR suggestions

2007-06-21 Thread Mesdaq, Ali
I am sure some of you guys have made some homemade DVR computers. I am
looking for suggestions for hardware, software, and anything else
related. I have never made one and pretty much have no idea of what's
required except I am pretty sure a HD is needed haha. Not looking to
break the bank but if there were cool enough features I might spend more
if its worth it. Right now I have a cox rented DVR and it integrates
with the channel guide which is a pretty big thing so I would want that
functionality. I also like the idea of accessing the videos/control
remotely like on my phone or laptop.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--



RE: [H] take off search list

2007-05-16 Thread Mesdaq, Ali
That's a good question. I know at Websense our crawler can still find
those pages and it PISSES some people off. Some people watch their logs
very closely and see our crawlers and hitting it and they spaz out
because they think they are the only people in the whole universe that
know of that pages existence. We can find those pages if it gets sent to
us by our customers via a opt in mechanism.

So if a crawler has no other source of data then yes that page should
not get indexed. But in the case of google, yahoo, msn, etc they have
many many sources of data for URL's not just what they can discover via
a crawl. They COULD (not saying they do or don't) register all URL's
they see with their toolbars, emails they host, or other data sources.

But if you just want to hide a page just password protect the page or
directory and even use a self signed ssl cert to encrypt it if your
after privacy.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of j maccraw
Sent: Tuesday, May 15, 2007 2:28 PM
To: The Hardware List
Subject: Re: [H] take off search list

If a web server does not allow directory browsing, you don't use a
common name filename, and don't link to it, does it still get indexed?



Mesdaq, Ali wrote:
 Sorry for not getting back earlier I totally forgot
about this. But I
 have never actually used the robots.txt file but I
looked at their spec
 and you seem to have it correct. I also saw that
html elements are also
 used in some cases.  



   

Choose the right car based on your needs.  Check out Yahoo!
Autos new Car Finder tool.
http://autos.yahoo.com/carfinder/



RE: [H] take off search list

2007-05-15 Thread Mesdaq, Ali
Sorry for not getting back earlier I totally forgot about this. But I
have never actually used the robots.txt file but I looked at their spec
and you seem to have it correct. I also saw that html elements are also
used in some cases.  

META NAME=ROBOTS CONTENT=NOINDEX, NOFOLLOW

I was looking at: http://www.robotstxt.org/wc/exclusion.html

Hope that helped you some.

--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Wednesday, May 09, 2007 12:09 PM
To: The Hardware List
Subject: RE: [H] take off search list

At 11:57 AM 5/9/2007, you wrote:
Robots.txt file. Google it it's a spec most search engines follow but 
they don't have to. There are also other techniques like writing the 
page with javascript instead of having it written when served. I can go

into details depending on if that robots.txt is sufficient.

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--


Yes this is all I need, thanks. In fact, it is a personal site and it
would be fine just to do the whole site. So if I just create a robot.txt
file with

User-agent: *
Disallow: /

in it and put it in the root directory will that be enough to
prevent Google and most other sites from indexing me? 




RE: [H] take off search list

2007-05-09 Thread Mesdaq, Ali
Robots.txt file. Google it it's a spec most search engines follow but
they don't have to. There are also other techniques like writing the
page with javascript instead of having it written when served. I can go
into details depending on if that robots.txt is sufficient. 

Thanks,
--
Ali Mesdaq
Security Researcher II
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Wednesday, May 09, 2007 11:54 AM
To: hardware@hardwaregroup.com
Subject: [H] take off search list

Is there a way, other then password protection, to keep a page from
appearing in any web searches?




[H] Sendmail question

2006-11-29 Thread Mesdaq, Ali
Hey anyone here a sendmail pro? Does anyone know what exactly the mqueue
is used for on sendmail? Is it a queue of both incoming and outgoing
mail or just for incoming? I am seeing the queue get pretty big on a
box. But before I dig deep and check all the settings I just wanted some
feedback from the borg collective :-)
Thanks,
--
Ali Mesdaq
Security Researcher
Websense Security Labs
http://www.WebsenseSecurityLabs.com
--




RE: [H] MP3 players...

2006-11-13 Thread Mesdaq, Ali
Yes that's when the 1gb worth of Sade and Morcheeba come into a endless
loop! LOL Anthony your hilarious man.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Anthony Q.
Martin
Sent: Monday, November 13, 2006 12:51 PM
To: The Hardware List
Subject: Re: [H] MP3 players...

Bobby Heid wrote:
:: Ok, ok!  I'll look at the Ipods again too.  LOL.
::

Just carefully consider what you'd really do with it.  Personally,
though, I 
don't think you'll really know until after you've waste some money on
Mp3 
players in general.

One thing I do use my old 30G iPod forget a set of iPod speakers,
put it 
in a bedroom.  Set up some playlists, and you're all ready when it's
time to 
knock boots!

:)




RE: [H] Linux server case sensitive

2006-11-10 Thread Mesdaq, Ali
Well there are several ways to avoid it like using dynamic content based
links or using SEO techniques but I probably need some more info to give
a good suggestion. Can you give some examples of the links? But in
general files on Linux are case sensitive and that's where the root of
your problem is. By the way godaddy is the worst host on the net.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Friday, November 10, 2006 1:00 PM
To: hardware@hardwaregroup.com
Subject: [H] Linux server case sensitive

I recently switched my Godaddy web hosting server from windows to 
Linux in order to had htaccess support. Unfortunately, this resulted 
in case sensitive links. This does not work well in a business 
environment because people often don't remember to pay attention to 
case. Is there an easy work around for this, like just turning off 
case sensitivity?




RE: [H] Linux server case sensitive

2006-11-10 Thread Mesdaq, Ali
Well I guess I am just very critical. But goDaddy sucks as a host but
their I use their registrar service all the time. Companies that are not
in America where I can actually go and meet someone are not even
considered when I do business unless of course it's a customer. But the
hosting company I use is aplus or Dreamhost just because its more geared
towards power users. Godaddy is good if you want to pay 4 bucks a month
and get the most bang for your buck but not do anything too advanced. I
myself and several colleagues and friends have used godaddy before and
we all do some type of development or advanced work and godaddy
basically sucked for all of us. You can pretty much get the feeling that
godaddy is making a bunch of money and just got into hosting to make
money on it but didn't really plan for their growth in that arena. You
can definitely feel a major performance hit when comparing with the
other two hosts I mentioned. Because when I was moving off godaddy I was
so surprised how much faster things happened even basic network stuff
like file uploads.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Friday, November 10, 2006 2:48 PM
To: The Hardware List
Subject: RE: [H] Linux server case sensitive

At 02:28 PM 11/10/2006, you wrote:
But in general files on Linux are case sensitive and that's where the
root of
your problem is.

yeah, I realize that, They easiest solution is to put my primary 
domains back on Windows servers, and keep one on Linux for htaccess
support.

  By the way godaddy is the worst host on the net.

why do you say that, it has been great for me, and my domains, which 
handle my business interests.
  Very good price, I've never had a failure, or a serious problem 
they didn't go out of their way to solve. Lots of options, and 
choices. It is easy to mange, and configure things on line.

  When I call for questions, or help, an American I can 
understand  answers the phone, within a few minutes, and they let me 
turn off the music, if I do have to wait. Plus 24/7 availability. 
They are a very customer oriented company, and very customer responsive.

The founder CEO is a ex marine Vietnam vet, which I can relate to, 
and the company is in America, run by Americans, and I like that. In 
fact, when they go public I will probably buy a few thousand shares. 
They are currently a number one hosting company and I think they are 
going to stay there ... because they know what is important in a
business.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Friday, November 10, 2006 1:00 PM
To: hardware@hardwaregroup.com
Subject: [H] Linux server case sensitive

I recently switched my Godaddy web hosting server from windows to
Linux in order to had htaccess support. Unfortunately, this resulted
in case sensitive links. This does not work well in a business
environment because people often don't remember to pay attention to
case. Is there an easy work around for this, like just turning off
case sensitivity?




RE: [H] New yahoo webmail

2006-10-24 Thread Mesdaq, Ali








It looks like my outlook web access has looked
like for the past 5 years.











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Zulfiqar Naushad
Sent: Friday, October 20, 2006
5:59 PM
To: hardware@hardwaregroup.com
Subject: [H] New yahoo webmail









All I have to say is WOWZA!!!

If web 2.0 is this good, then I would say that by 4.0 or 5.0 we will be kissing
the OS and standalone apps good bye!!!














RE: [H] New yahoo webmail

2006-10-24 Thread Mesdaq, Ali








Well I was trying to also point out that
these email for the masses companies have still not caught up to MS as far as
presentation is concerned. I would think that the team that google, yahoo, etc
have dedicated to develop their email application is not as big of a team that
MS dedicated to making a small feature in their product. I would really like to
see gmail or yahoo really step it up and have a super interface. Personally I
use gmail for my personal stuff but it SUCKS in my opinion. I hate labels and I
hate the way it combines emails into conversations even when its not intended
to be the same conversation. Very annoying. And the only way you can find
emails is by searching which sucks. Sometimes you dont know enough to
search on but you know enough to sort on and start looking which gmail does not
do. Oh wow just noticed I was ranting on a tangent for a bit.











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Zulfiqar Naushad
Sent: Tuesday, October 24, 2006
1:29 PM
To: The
 Hardware List
Subject: Re: [H] New yahoo webmail









Yes, you are right.
However, this is for the masses. Not for people who work for corporations
that have purchased Exchange.

Also, you get all the pizzazz of OWA without using IE. Have you tried
using OWA without IE? Utter junk!



- Original Message

From: Mesdaq, Ali
[EMAIL PROTECTED]
To: The Hardware List
hardware@hardwaregroup.com
Sent: Tuesday, October 24, 2006 10:25:43 PM
Subject: RE: [H] New yahoo webmail



It looks like my outlook web access has
looked like for the past 5 years.











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Zulfiqar Naushad
Sent: Friday, October 20, 2006
5:59 PM
To: hardware@hardwaregroup.com
Subject: [H] New yahoo webmail









All I have to say is WOWZA!!!

If web 2.0 is this good, then I would say that by 4.0 or 5.0 we will be kissing
the OS and standalone apps good bye!!!


























RE: [H] Secure web page

2006-10-09 Thread Mesdaq, Ali
What kinda information are you trying to put up? Maybe there is a
alternate solution. Also by secure how secure do you want to be? As
secure as ftp? i.e. plaintext passwords?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Sunday, October 08, 2006 12:05 PM
To: hardware@hardwaregroup.com
Subject: [H] Secure web page

I want to put up a web page, of an excel file, on my site that is log on

only, and is secure. I have never understood why Frontpage doesn't have 
this built into it as a tool. I could use a password for the excel file
but 
that is not secure. Any ideas? 




RE: [H] Secure web page

2006-10-09 Thread Mesdaq, Ali
But just because it opens up in my browser window doesn't mean the file
is not on my hard drive. But since your using another method to encrypt
the file you should be ok. I mean its not full proof by any means and
someone that wants that info will get it but if you're just trying to
avoid the casual snooper you should be ok.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Monday, October 09, 2006 7:30 AM
To: The Hardware List
Subject: RE: [H] Secure web page


At 06:59 AM 10/9/2006, you wrote:
What kinda information are you trying to put up? Maybe there is a
alternate solution. Also by secure how secure do you want to be? As
secure as ftp? i.e. plaintext passwords?


Well, from time to time I need to share sensitive financial information 
from a spread sheet. I currently encrypt the file with blowfish, but
then 
it has to be downloaded, opened, and run. It would make things a lot 
easier, and more secure, if I could just have a password protected to 
folder to put the excel file in where it opened on line and was not on 
somebodies hard drive.

I checked with Godaddy, the hosting company, and they told me that they
do 
support .htaccess ,so I am trying to set up a password protected folder,

but it isn't working.

My site has FP extensions. I have created the .htaccess file using this 
tool  http://www.tools.dynamicdrive.com/password/ and put it in new
folder 
secure. I have then put the .htpasswd file in the _private folder.

Anything I put into the folder should be protected by the user name and 
password but that isn't happening. I am not seeing the log in box at all

 no security.

Anybody know what I am doing wrong?

   




[H] Stop those stupid bubbles

2006-10-09 Thread Mesdaq, Ali
How do you stop xp's stupid bubbles things from popping up? Like the one
for take a tour of xp and the one when you turn off automatic updates? 



RE: [H] Stop those stupid bubbles

2006-10-09 Thread Mesdaq, Ali
Yeah that's the worse of all

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christopher
Fisk
Sent: Monday, October 09, 2006 1:44 PM
To: The Hardware List
Subject: Re: [H] Stop those stupid bubbles

On Mon, 9 Oct 2006, Mesdaq, Ali wrote:

 How do you stop xp's stupid bubbles things from popping up? Like the
one
 for take a tour of xp and the one when you turn off automatic updates?

And the Unused Desktop Icons!


Christopher Fisk
-- 
You might want to comment on that, Honorable.
George W. Bush, July 15, 2000
Governor Bush was speaking to the New Jersey Secretary of State, 
Honorable DeForest Soaries.  Reported by the Washington Post.



RE: [H] iMac arrived today...

2006-10-04 Thread Mesdaq, Ali
Well let me take a shot at answering your question. 
Why would I buy OSX to run on my PC when there are a million Windows
apps out there that won't run on it?

Although I don't own a mac I would say that there are enough
applications that do the same thing on macs as they do on windows.
Email, web browsing, games, office productivity, graphics, video
editing, etc. I used to make that same argument all the time but I
personally cant think of anything that I use that can't be done on a
mac. I don't play many games and I am aware it is lacking full support
there. But can you name a few type of apps that are not available on
macs?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stan Zaske
Sent: Tuesday, October 03, 2006 11:28 PM
To: The Hardware List
Subject: Re: [H] iMac arrived today...

That's a crap answer Bryan (lol) and you know it! Instead of showing 
your bias why not answer my ? instead. You can't argue with market share

Einstein! ;-)


Bryan Seitz wrote:
 On Mon, Oct 02, 2006 at 11:42:43PM -0500, Stan Zaske wrote:
   
 I don't get it! Why would I buy OSX to run on my PC when there are a 
 million Windows apps out there that won't run on it? Am I missing 
 something here? Do Window's apps run on OSX?
 

 Cause windows is a giant flaming turd that has been shined up 
 over the years.  It's still a turd.

   



RE: [H] iMac arrived today...

2006-10-04 Thread Mesdaq, Ali
GPS as in the navigation? Or am I wa off on that?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ben Ruset
Sent: Wednesday, October 04, 2006 7:53 AM
To: The Hardware List
Subject: Re: [H] iMac arrived today...

GPS apps are lacking for Mac's. That's about the only thing I think I 
would miss.

Mesdaq, Ali wrote:
 Well let me take a shot at answering your question. 
 Why would I buy OSX to run on my PC when there are a million Windows
 apps out there that won't run on it?
 
 Although I don't own a mac I would say that there are enough
 applications that do the same thing on macs as they do on windows.
 Email, web browsing, games, office productivity, graphics, video
 editing, etc. I used to make that same argument all the time but I
 personally cant think of anything that I use that can't be done on a
 mac. I don't play many games and I am aware it is lacking full support
 there. But can you name a few type of apps that are not available on
 macs?



RE: [H] iMac arrived today...

2006-10-04 Thread Mesdaq, Ali
Oh that's really cool. If it were me I would dump to xml then just
create a webpage with google's api and write a little script to import
and superimpose onto google map. That way its platform independent. But
that's cool that your gps can do that.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ben Ruset
Sent: Wednesday, October 04, 2006 8:40 AM
To: The Hardware List
Subject: Re: [H] iMac arrived today...

Well, GPS as in let me connect my Garmin GPS to my computer and 
download all of my waypoints and tracks, superimpose them on a topo map 
or satellite photos, etc.

Something like what I can do with USA Photomaps.

Mesdaq, Ali wrote:
 GPS as in the navigation? Or am I wa off on that?
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Ben Ruset
 Sent: Wednesday, October 04, 2006 7:53 AM
 To: The Hardware List
 Subject: Re: [H] iMac arrived today...
 
 GPS apps are lacking for Mac's. That's about the only thing I think I 
 would miss.
 
 Mesdaq, Ali wrote:
 Well let me take a shot at answering your question. 
 Why would I buy OSX to run on my PC when there are a million Windows
 apps out there that won't run on it?

 Although I don't own a mac I would say that there are enough
 applications that do the same thing on macs as they do on windows.
 Email, web browsing, games, office productivity, graphics, video
 editing, etc. I used to make that same argument all the time but I
 personally cant think of anything that I use that can't be done on a
 mac. I don't play many games and I am aware it is lacking full
support
 there. But can you name a few type of apps that are not available on
 macs?
 
 



RE: [H] iMac arrived today...

2006-10-04 Thread Mesdaq, Ali
Really? When looking at the API it looked super simple and very
flexible. What exactly do you want to do? A map of directions you
traveled? Or a dot of places you were? I would create different ones for
different purposes. You could probably pretty easily write a trip
selection thing so that it just maps your trips for you.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ben Ruset
Sent: Wednesday, October 04, 2006 9:43 AM
To: The Hardware List
Subject: Re: [H] iMac arrived today...

It's kind of a bitch to get Google Maps working with topo maps, which 
are the most important thing for me.

Mesdaq, Ali wrote:
 Oh that's really cool. If it were me I would dump to xml then just
 create a webpage with google's api and write a little script to import
 and superimpose onto google map. That way its platform independent.
But
 that's cool that your gps can do that.



RE: [H] iMac arrived today...

2006-10-02 Thread Mesdaq, Ali
One advantage apple has over MS and keep in mind this is a HUGE
advantage is tight integration with hardware. As soon as they open it up
they will lose major stability. Now imagine you buy your apple software
and its thrown onto to some crappy hardware and it starts having
problems just like any OS would you really think osx is that cool? The
things that make apple cool in these days is runs *nix, tight
integration with hardware means its super stable, looks cool, and just
works (hardware related again). 

I do like the options of throwing it on a super setup but I think that
should be something offered by apple.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, October 02, 2006 6:51 AM
To: hardware@hardwaregroup.com
Subject: RE: [H] iMac arrived today...

I personally think it will come sooner then most expect.

Apple are pretty silly (IMO) to not sell the OS for all PC users as they
are
letting everyone know that their new Macs are just PCslook we have
Intel
CPUs and you can load Windows XPbut its still a Mac...

Other then the Apple badge and OSX, there is nothing to differentiate an
Apple from a generic PC now and IMO, that can and will undermine the
whole
Apple idea.

Also, with more and more ppl looking at Hackintoshes and with EFI
motherboards due for release, they may find that its better to sell the
OS,
rather then have lots of ppl pirating it and running it on non-Apple
hardware.

Regards,

Jason Tozer
Database Analyst
London
Ext 1131 - 3SC.5


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Anthony Q.
Martin
Sent: 02 October 2006 14:46
To: The Hardware List
Subject: Re: [H] iMac arrived today...


I'm confused.if OS/X runs on the same hardware as what you call PCs
why 
haven't they already captured this slice?

Oh, you mean they should just sell the OS standlone on the shelf or
licence 
it to vendors to sell with PCs.  But then there would be no APPLE.

I think that's decidedly anti-APPLE thinking. :)

No point in being frustrated and don't expect changes until Jobs dies.
:)


Chris Reeves wrote:
:: I'll tell you this, the more time I spend with Vista, the more
:: convinced I am that Apple is wrong.  Not because Vista is great, but
:: because if Apple would get off it's high horse and decide to be a
:: software maker, it could sell immense volumes of OS/X for the PC
:: market, and be an instant competitor.
::
:: Apple's closed system is what f*( them, not Microsoft.  I've played
:: with OS/X 86 (legitimate, through a legitimate local developer) and
:: the thing runs on virtually anything as long as I put the PCI card
:: from them in.  I've seen it run on AMD, old Dells, whatever.  The
:: thing works and runs smooth on most hardware, because at it's heart,
:: it's linux type core still handles it.
::
:: Which is what kills me about apple.  They could have a significant
:: slice of the overall PC market if they wanted it.  Yes, I know they
:: do well (6% of total market, which is not bad) but if OS/X were to
:: be an option for any PC owner, they could capture a big slice of it
:: as they'd have a lot more adopters of their product.
::
:: CW
::
::: -Original Message-
::: From: [EMAIL PROTECTED] [mailto:hardware-
::: [EMAIL PROTECTED] On Behalf Of Bryan Seitz
::: Sent: Sunday, October 01, 2006 12:50 PM
::: To: The Hardware List
::: Subject: Re: [H] iMac arrived today...
:::
::: On Sun, Oct 01, 2006 at 09:45:52AM -0400, Chris Klein wrote:
 1)  The older G5s just weren't powerful enough to run some of our
 more demanding applications.  We have since moved all of our high
 end applications over to Precision 690s.
:::
::: right, the new ones are core duo based or in the  case of the g5,
::: Dual Xeon.
:::
 2)  One of our major problems is with Mac profiles.  For instance
 Jane Doe gets married, and Jane's last name changes to Robinson.
 The Macs would shit themselves over the name change and everything
 would go haywire.
:::
::: Yeah lol.
:::
 We still run them for the Viewmaster group.  They have G5s, and 30
 inch LCDs.
:::
::: Unf.
:::
::: --
:::
::: Bryan G. Seitz 


***

This message and any attachment are confidential and may be privileged
or otherwise protected from disclosure.  If you are not the intended
recipient, please telephone or email the sender and delete this message
and any attachment from your system.  If you are not the intended
recipient you must not copy this message or attachment or disclose the
contents to any other person.

For further information about Clifford Chance please see our website at
http://www.cliffordchance.com or refer to any Clifford Chance office.

This firm is not authorised by the Financial Services Authority.
However, we are included on the Register maintained by the Financial
Services Authority so that we can carry on insurance mediation activity
in the UK, which is broadly the advising 

RE: [H] iMac arrived today...

2006-10-02 Thread Mesdaq, Ali
Well image how much testing you have to do when your only hardware is
about 10 different configurations as compared to 1 million different
configs. The real reason windows has those really bad crashes ie
bluescreens and what not is because of driver level (ring 0) code that's
running on the machine. If everything was in the userland windows can
very easily manage that and simple apps that crash will only crash
themselves as is the case right now with userland apps. But its those
drivers that suck that bring down systems. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Anthony Q.
Martin
Sent: Monday, October 02, 2006 8:08 AM
To: The Hardware List
Subject: Re: [H] iMac arrived today...

I think that's a good point, if it really holds up.  Does the hardware 
really make that much difference? I thought it was better to have a
layer 
between the OS and the hardware to make hardware transparent (did they
ever 
really happen?).  Back in the old days (DOS), having a close connection 
between software and hardware was a big problem if you changed hardware,
so 
it would *seem* this is a good point.

Mesdaq, Ali wrote:
:: One advantage apple has over MS and keep in mind this is a HUGE
:: advantage is tight integration with hardware. As soon as they open
:: it up they will lose major stability. Now imagine you buy your apple
:: software and its thrown onto to some crappy hardware and it starts
:: having problems just like any OS would you really think osx is that
:: cool? The things that make apple cool in these days is runs *nix,
:: tight integration with hardware means its super stable, looks cool,
:: and just works (hardware related again).
::
:: I do like the options of throwing it on a super setup but I think
:: that should be something offered by apple.
::
:: -Original Message-
:: From: [EMAIL PROTECTED]
:: [mailto:[EMAIL PROTECTED] On Behalf Of
:: [EMAIL PROTECTED]
:: Sent: Monday, October 02, 2006 6:51 AM
:: To: hardware@hardwaregroup.com
:: Subject: RE: [H] iMac arrived today...
::
:: I personally think it will come sooner then most expect.
::
:: Apple are pretty silly (IMO) to not sell the OS for all PC users as
:: they are
:: letting everyone know that their new Macs are just PCslook we
:: have Intel
:: CPUs and you can load Windows XPbut its still a Mac...
::
:: Other then the Apple badge and OSX, there is nothing to
:: differentiate an Apple from a generic PC now and IMO, that can and
:: will undermine the whole
:: Apple idea.
::
:: Also, with more and more ppl looking at Hackintoshes and with EFI
:: motherboards due for release, they may find that its better to sell
:: the OS,
:: rather then have lots of ppl pirating it and running it on non-Apple
:: hardware.
::
:: Regards,
::
:: Jason Tozer
:: Database Analyst
:: London
:: Ext 1131 - 3SC.5
::
::
:: -Original Message-
:: From: [EMAIL PROTECTED]
:: [mailto:[EMAIL PROTECTED] Behalf Of Anthony Q.
:: Martin
:: Sent: 02 October 2006 14:46
:: To: The Hardware List
:: Subject: Re: [H] iMac arrived today...
::
::
:: I'm confused.if OS/X runs on the same hardware as what you call
:: PCs why
:: haven't they already captured this slice?
::
:: Oh, you mean they should just sell the OS standlone on the shelf or
:: licence
:: it to vendors to sell with PCs.  But then there would be no APPLE.
::
:: I think that's decidedly anti-APPLE thinking. :)
::
:: No point in being frustrated and don't expect changes until Jobs
:: dies. :)
::
::
:: Chris Reeves wrote:
 I'll tell you this, the more time I spend with Vista, the more
 convinced I am that Apple is wrong.  Not because Vista is great,
 but because if Apple would get off it's high horse and decide to
 be a software maker, it could sell immense volumes of OS/X for the
 PC market, and be an instant competitor.

 Apple's closed system is what f*( them, not Microsoft.  I've
 played with OS/X 86 (legitimate, through a legitimate local
 developer) and the thing runs on virtually anything as long as I
 put the PCI card from them in.  I've seen it run on AMD, old
 Dells, whatever.  The thing works and runs smooth on most
 hardware, because at it's heart, it's linux type core still
 handles it.

 Which is what kills me about apple.  They could have a significant
 slice of the overall PC market if they wanted it.  Yes, I know they
 do well (6% of total market, which is not bad) but if OS/X were to
 be an option for any PC owner, they could capture a big slice of it
 as they'd have a lot more adopters of their product.

 CW

: -Original Message-
: From: [EMAIL PROTECTED] [mailto:hardware-
: [EMAIL PROTECTED] On Behalf Of Bryan Seitz
: Sent: Sunday, October 01, 2006 12:50 PM
: To: The Hardware List
: Subject: Re: [H] iMac arrived today...
:
: On Sun, Oct 01, 2006 at 09:45:52AM -0400, Chris Klein wrote:
:: 1)  The older G5s just

RE: [H] One giant blunder for mankind: how NASA lost moon pictures

2006-08-10 Thread Mesdaq, Ali
This will fuel the conspiracy theory that the moon walk was faked even
more. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Thursday, August 10, 2006 9:42 AM
To: hardware@hardwaregroup.com
Subject: [H] One giant blunder for mankind: how NASA lost moon pictures

http://www.smh.com.au/news/national/one-giant-blunder-for-mankind-how-na
sa-lost-moon-pictures/2006/08/04/1154198328978.html

One giant blunder for mankind: how NASA lost moon pictures

HE heart-stopping moments when Neil Armstrong took his first tentative 
steps onto another world are defining images of the 20th century:
grainy, 
fuzzy, unforgettable.

But just 37 years after Apollo 11, it is feared the magnetic tapes that 
recorded the first moon walk - beamed to the world via three tracking 
stations, including Parkes's famous Dish - have gone missing at NASA's

Goddard Space Centre in Maryland.

A desperate search has begun amid concerns the tapes will disintegrate
to 
dust before they can be found.

It is not widely known that the Apollo 11 television broadcast from the 
moon was a high-quality transmission, far sharper than the blurry
version 
relayed instantly to the world on that July day in 1969.

Among those battling to unscramble the mystery is John Sarkissian, a
CSIRO 
scientist stationed at Parkes for a decade. We are working on the 
assumption they still exist, Mr Sarkissian told the Herald.

Your guess is a good as mine as to where they are.

Mr Sarkissian began researching the role of Parkes in Apollo 11's
mission 
in 1997, before the movie The Dish was made. However, when he later 
contacted NASA colleagues to ask about the tapes, they could not be
found.

People may have thought 'we have tapes of the moon walk, we don't need 
these', said the scientist who hopes a new, intensive hunt will locate
them.

If they can be found, he proposes making digitalised copies to treat the

world to a very different view of history.

But the searchers may be running out of time. The only known equipment
on 
which the original analogue tapes can be decoded is at a Goddard centre
set 
to close in October, raising fears that even if they are found before
they 
deteriorate, copying them may be impossible.

We want the public to see it the way the moon walk was meant to be
seen, 
Mr Sarkissian said.

There will only ever be one first moon walk.

Originally stored at Goddard, the tapes were moved in 1970 to the US 
National Archives. No one knows why, but in 1984 about 700 boxes of
space 
flight tapes there were returned to Goddard.

We have the documents to say they were withdrawn, but no one knows
exactly 
where they went, Mr Sarkissian said.

Many people involved had retired or died.

Also among tapes feared missing are the original recordings of the other

five Apollo moon landings. The format used by the original pictures
beamed 
from the moon was not compatible with commercial technology used by 
television networks. So the images received at Parkes, and at tracking 
stations near Canberra and in California, were played on screens mounted
in 
front of conventional television cameras.

The quality of what you saw on TV at home was substantially degraded
in 
the process, Mr Sarkissian said, creating the ghostly images of
Armstrong 
and Aldrin that strained the eyes of hundreds of millions of people 
watching around the world.

Even Polaroid photographs of the screen that showed the original images 
received by Parkes are significantly sharper than what the public saw. 
While the technique looks primitive today, Mr Sarkissian said it was the

best solution that 1969 technology offered.

Among the few who saw the original high-quality broadcast was David
Cooke, 
a Parkes control room engineer in 1969.

I can still see the screen, Mr Cook, 74, said. I was amazed, the
quality 
was fairly good.




RE: [H] OT - Al Jazeera

2006-07-31 Thread Mesdaq, Ali
I have listened to her speech before and its quite interesting. Although
I disagree with her in overall concept but her ideas are very good and
should be looked into. I am muslim and I don't believe I am a danger to
anyone unless someone is breaking into my house about to harm my family
then they should worry but who isn't in that case. And that guy that
said there is no point in arguing with her is exactly the problem with
the muslims of the world. They are not open minded and don't consider
anything else except their view as having any validity. 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
Sent: Saturday, July 29, 2006 1:13 PM
To: hardware@hardwaregroup.com
Subject: Re: [H] OT - Al Jazeera

From: warpmedia [EMAIL PROTECTED]
Reply-To: The Hardware List hardware@hardwaregroup.com
To: The Hardware List hardware@hardwaregroup.com
Subject: Re: [H] OT - Al Jazeera
Date: Sat, 29 Jul 2006 13:06:19 -0700


Don't see her rant helping much without a lot of other Muslims taking
the 
same POV, speaking up and risking bodily harm. Nothing tougher to fight

than mob mentality, esp. with religion telling them they are righteous.

Oh you mean like a real martyr? As opposed to the subhuman filth who
blow 
themselves up in order to take a few babies with them? What a concept to
the 
muslim world.





RE: [H] Book on Java?

2006-07-27 Thread Mesdaq, Ali
How to Program Java by Deitel  Deitel

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Weeden
Sent: Thursday, July 27, 2006 3:14 PM
To: hwg
Subject: [H] Book on Java?

I am getting into some web programming, specifcally writing an app in
Java and then using the Google Toolkit to export it into HTML and
javascript for use in an AJAX site.  I know some C programming and
HTML/CSS with a little bit of JavaScript.

I was looking for a good book to learn Java and there are like
hundreds out there - any that the list can recommend?

-- 
Brian



RE: [H] OT - Family Tree web progamming

2006-07-25 Thread Mesdaq, Ali
Yes actually there is a very good one. 
http://www.netvis.org/
This will really be showing off

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Weeden
Sent: Tuesday, July 25, 2006 5:13 PM
To: hwg
Subject: [H] OT - Family Tree web progamming

I have a pretty extensive family tree that I want to put online.  Of
course I could just slap some  html and links up there but I gotta
show off my html skills to the family :)  Are there any open source
templates or css code snippets out there that anyone knows of?

Basically I am thinking of something like a map you can scroll in all
directions around the tree and when you mouseover a name it brings up
a window with photo and details.  Bonus points would be if the details
pop-up could be wiki'd by my family members :)

-- 
Brian



RE: [H] OT - Family Tree web progamming

2006-07-25 Thread Mesdaq, Ali
Hardware list rule number 1 - Thou shall overkill all requirements to
over compensate for any short comings one might have

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Weeden
Sent: Tuesday, July 25, 2006 5:51 PM
To: The Hardware List
Subject: Re: [H] OT - Family Tree web progamming

Very, very cool software but I think that might be a bit overkill.

On 7/25/06, Mesdaq, Ali [EMAIL PROTECTED] wrote:
 Yes actually there is a very good one.
 http://www.netvis.org/
 This will really be showing off

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Brian Weeden
 Sent: Tuesday, July 25, 2006 5:13 PM
 To: hwg
 Subject: [H] OT - Family Tree web progamming

 I have a pretty extensive family tree that I want to put online.  Of
 course I could just slap some  html and links up there but I gotta
 show off my html skills to the family :)  Are there any open source
 templates or css code snippets out there that anyone knows of?

 Basically I am thinking of something like a map you can scroll in all
 directions around the tree and when you mouseover a name it brings up
 a window with photo and details.  Bonus points would be if the details
 pop-up could be wiki'd by my family members :)

 --
 Brian




-- 
Brian



RE: [H] AV SW Again ?

2006-07-20 Thread Mesdaq, Ali
What is your exact environment like? Are you running it on lots of pc's
or just one? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Thursday, July 20, 2006 7:16 AM
To: hardware@hardwaregroup.com
Subject: [H] AV SW Again ?

What does THG use for AV ?

I use Symantec Corp but it is getting old and think it needs updating. 
Thoughts on Panda, Invircible and ?
do need something that will scan LAN drives
fp
thanks

-- 
Tallyho ! ]:8)
Taglines below !
--
The eventual supremacy of reason should be accepted.




RE: [H] AV SW Again ?

2006-07-20 Thread Mesdaq, Ali
Not sure about the mapped drive feature but I would use Nod32,
Kaspersky, Panda, Trend, Norman, etc. But you just have to understand
all of them probably have about a 60% coverage. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Thursday, July 20, 2006 12:39 PM
To: The Hardware List
Subject: RE: [H] AV SW Again ?

small 3 to 4 system LAN. One main workstation, one is FTP server and
other is basically redundant for backup. Like to be able to scan
customer box but they only go on the LAN after a few sweeps.
FWIW running Symantec Corp 9, have 10 but heard it had some problems. My
only real complaint is how long the scans take, have never really had
any problems with it. Been putting Norton 6 month trial from google in
customer boxes.

May run some free trials. I did a Kaspsersky trial once and liked it
other then no lan scans of mapped drives.
fp

At 10:37 AM 7/20/2006, Mesdaq, Ali Poked the stick with:
What is your exact environment like? Are you running it on lots of pc's
or just one? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FORC5
Sent: Thursday, July 20, 2006 7:16 AM
To: hardware@hardwaregroup.com
Subject: [H] AV SW Again ?

What does THG use for AV ?

I use Symantec Corp but it is getting old and think it needs updating. 
Thoughts on Panda, Invircible and ?
do need something that will scan LAN drives
fp
thanks

-- 
Tallyho ! ]:8)
Taglines below !
--
Did my ancestors inbreed? My genes seem tight.




RE: [H] Malware - Support Alert newsletter

2006-07-19 Thread Mesdaq, Ali
I have been suggesting using vm images for a while now. Its definitely
the way to go. Mess around with your torrents and p2p all you want then
just revert and feel nice and safe. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert Turnbull
Sent: Wednesday, July 19, 2006 12:19 PM
To: hardware@hardwaregroup.com
Subject: [H] Malware - Support Alert newsletter


 From the Support Alert newsletter of July 20-06: (Not posted on the
site yet)
http://www.techsupportalert.com/issues/back_issues.htm

By the time this series is completed, I'll have some specific 
recommendations for you on the best way to protect your computer against

the latest generation of threats. These recommendations will be based on

facts rather than vendor hype or commercial affiliation.

Even now, two things are already clear to me.

First, it's almost impossible to defend your PC from a modern malware 
program that is allowed to run on your PC with full admin privileges.
The 
problem here is not with the security programs. The problem is with
Windows.

Second, it looks like virtualization techniques such as those used by 
VMWare, Sandboxie and the newcomer GreenBorder (see section 2.1 below) 
offer the best option for preventing infection.

Here's my interim recommendation: If you are using Windows 2000 and
later I 
strongly recommend you always surf using one of these virtualization 
products. It needn't cost you a cent either; SandBoxie is free and 
GreenBorder is free for the next 12 months.


Robert Turnbull, Toronto, Canada




[H] Did you all see this

2006-07-19 Thread Mesdaq, Ali
http://www.sysinternals.com/blog/2006/07/on-my-way-to-microsoft.html




RE: [H] Network, Internet Problem

2006-04-25 Thread Mesdaq, Ali
I believe what's happening is that since they are both on the same
network address you basically have 2 default gateways on each card. How
would the OS know which one to go out on if it's on the same range?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of rls
Sent: Tuesday, April 25, 2006 10:59 AM
To: 'The Hardware List'
Subject: [H] Network, Internet Problem

I have 2 network cards in my computer. One connects to a cable
modem/router
the other card connects to a DSL router. 

Each router is set up with networks using 192.168.2.x. 

When I have both cards enabled I cannot connect to the internet. When I
disable either card I can connect.

What's going on?

Would things improve if I changed the network addresses range on either
router?






RE: [H] Linux imaging

2006-04-18 Thread Mesdaq, Ali
Depending on the imaging solution. DriveImage or whatever before
Symantec used to do sector cloning by default. Ghost has almost always
done file ghosting except when explicitly given the sector cloning flag.
To do real sector cloning is a pretty huge and inefficient process. Its
only good for forensics.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harry McGregor
Sent: Tuesday, April 18, 2006 12:47 PM
To: The Hardware List
Subject: Re: [H] Linux imaging

Ben Ruset wrote:
 Tar is taking files out of a compressed (well, if it's gzipped) 
 archive and recreating them on your system.
:)
 Imaging is doing a sector by sector copy, archival, compression, and 
 sector by sector restore on another machine.
Not necessarily.  Ghost under Fat32/NTFS does not do sector copy, it 
does file copy, and recreation.

 Now, if you were dd'ing disks, I'd say you were imaging.
DD works well for forensics work, dd-rescure is better.
 BTW, we do tar restores of our Linux boxen here. :)

   Harry



RE: [H] Ransomware

2006-04-17 Thread Mesdaq, Ali
We were the first to discover Ransomware :-) way back about half a year
or more ago

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Monday, April 17, 2006 4:27 PM
To: hardware@hardwaregroup.com
Subject: [H] Ransomware


http://www.foxnews.com/story/0,2933,187845,00.html

Computer Virus Demands Ransom for Encrypted Files
Wednesday, March 15, 2006
By Ryan Naraine

Virus hunters have discovered a new Trojan that encrypts files on an 
infected computer and then demands $300 in ransom for a decryption
password.

The Trojan, identified as Cryzip, uses a commercial zip library to store

the victim's documents inside a password-protected zip file and leaves 
step-by-step instructions on how to pay the ransom to retrieve the
files.

It is not yet clear how the Trojan is being distributed, but security 
researchers say it was part of a small e-mail spam run that successfully

evaded anti-virus scanners by staying below the radar.

While this type of attack, known as ransomware, is not entirely new,
it 
points to an increasing level of sophistication among online thieves who

use social engineering tactics to trick victims into installing malware,

said Shane Coursen, senior technical consultant at Moscow-based
anti-virus 
vendor Kaspersky Lab.

The LURHQ Threat Intelligence Group, based in Chicago, was able to crack

the encryption code used in the Cryzip Trojan and determine how the
files 
are encrypted and the payment mechanism that has been set up to collect
the 
$300 ransom.




According to a LURHQ advisory, Cryzip searches an infected hard drive
for a 
wide range of widely used file types, including Word, Excel, PDF and JPG

images.
Once commandeered, the files are zipped and overwritten by the text: 
Erased by Zippo! GO OUT!!!
The Trojan then deletes all the files, leaving only the encrypted file
with 
the original file name, followed by the _CRYPT.ZIP extension.
A new directory named AUTO_ZIP_REPORT.TXT is created with specific 
instructions on how to use the E-Gold online currency and payment system
to 
send ransom payments.

The instructions, which are marked by misspellings and poor grammar, 
contain the following text: Your computer catched our software while 
browsing illigal porn pages, all your documents, text files, databases
was 
archived with long enought password. You can not guess the password for 
your archived files - password lenght is more then 10 symbols that makes

all password recovery programs fail to bruteforce it (guess password by 
trying all possible combinations).

The owner of the infected machine is warned not to search for the
program 
that encrypted the data, claiming that it simply doesn't exist on the
hard 
drive.

If you really care about documents and information in encrypted files
you 
can pay using electonic currency $300, the note says. Reporting to
police 
about a case will not help you, they do not know password. Reporting 
somewhere about our E-Gold account will not help you to restore files.
This 
is your only way to get yours files back.

The Trojan author uses scores of E-Gold accounts simultaneously to get 
around potential shutdowns, according to LURHQ, which published the 
complete list of E-Gold accounts in the advisory.

Officials from E-Gold, which operates out of the Caribbean island of
Nevis, 
were not available for comment.
Infection reports are not widespread, so it is not believed this is a
mass 
threat by any means, LURHQ said.
However, the company said social engineering malware is typically more 
successful when it is delivered in low volume to get around anti-virus 
detections.
[M]ore attention means the likely closing of the accounts used for the 
anonymous money transfer, LURHQ said.




RE: [H] MS Makes VirtualServer 2005 R2 Free

2006-04-13 Thread Mesdaq, Ali
Isn't the only advantage of ESX that it can run on hardware directly
with no OS installed? And isn't that only true with certified hardware?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
Sent: Wednesday, April 12, 2006 9:28 PM
To: The Hardware List
Subject: Re: [H] MS Makes VirtualServer 2005 R2 Free

Well...
1. VMware started it by offering GSX for free.
2. MS still has nothing to compare to ESX server. ESX is all I would
ever 
use in a (virtual) production environment.

Greg

- Original Message - 
From: Stan Zaske
To: The Hardware List
Sent: Wednesday, April 12, 2006 11:23 PM
Subject: Re: [H] MS Makes VirtualServer 2005 R2 Free


Free? Only until MS drives VMWare out of business!


Chris Reeves wrote:
While they contend not in response to VMWare, etc. it's still the same
end 
result: the product has been made free of charge for use.

http://www.microsoft.com/windowsserversystem/virtualserver/default.mspx

CW

No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.4.1/309 - Release Date: 4/11/2006
 





RE: [H] MS Makes VirtualServer 2005 R2 Free

2006-04-13 Thread Mesdaq, Ali
What do you run it on and what are the typical uses? I am working on a
virtualization project so I am pretty interested in your experience.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
Sent: Thursday, April 13, 2006 11:13 AM
To: The Hardware List
Subject: Re: [H] MS Makes VirtualServer 2005 R2 Free

Yes and I imagine so, however, your usage of only severely 
underappreciates the value of being able to run directly on the
hardware. 
Not only are the performance and scalability enhancements very
significant, 
but the ease of patch management and reduced risk from exposure are
quite 
substantial as well.

ESX Server is the only virtualization solution that is suitable for 
production level deployment IMO.

Greg

- Original Message - 
From: Mesdaq, Ali [EMAIL PROTECTED]
To: The Hardware List hardware@hardwaregroup.com
Sent: Thursday, April 13, 2006 12:41 PM
Subject: RE: [H] MS Makes VirtualServer 2005 R2 Free


 Isn't the only advantage of ESX that it can run on hardware directly
 with no OS installed? And isn't that only true with certified
hardware?


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
 Sent: Wednesday, April 12, 2006 9:28 PM
 To: The Hardware List
 Subject: Re: [H] MS Makes VirtualServer 2005 R2 Free

 Well...
 1. VMware started it by offering GSX for free.
 2. MS still has nothing to compare to ESX server. ESX is all I would
 ever
 use in a (virtual) production environment.

 Greg

 - Original Message - 
 From: Stan Zaske
 To: The Hardware List
 Sent: Wednesday, April 12, 2006 11:23 PM
 Subject: Re: [H] MS Makes VirtualServer 2005 R2 Free


 Free? Only until MS drives VMWare out of business!


 Chris Reeves wrote:
 While they contend not in response to VMWare, etc. it's still the same
 end
 result: the product has been made free of charge for use.


http://www.microsoft.com/windowsserversystem/virtualserver/default.mspx

 CW

 No virus found in this incoming message.
 Checked by AVG Free Edition.
 Version: 7.1.385 / Virus Database: 268.4.1/309 - Release Date:
4/11/2006




 





RE: [H] Microsoft Says Recovery from Malware Becoming Impossible

2006-04-05 Thread Mesdaq, Ali
Exactly what we were debating a few weeks ago. Where are those I can
clean any infection guys at now?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Winterlight
Sent: Tuesday, April 04, 2006 5:03 PM
To: hardware@hardwaregroup.com
Subject: [H] Microsoft Says Recovery from Malware Becoming Impossible

http://www.eweek.com/article2/0,1895,1945808,00.asp?kc=ewnws040406dtx1k0
000599

Microsoft Says Recovery from Malware Becoming Impossible
April 4, 2006

By  Ryan Naraine
LAKE BUENA VISTA, Fla.-In a rare discussion about the severity of the 
Windows malware scourge, a Microsoft security official said businesses 
should consider investing in an automated process to wipe hard drives
and 
reinstall operating systems as a practical way to recover from malware 
infestation.

When you are dealing with rootkits and some advanced spyware programs,
the 
only solution is to rebuild from scratch. In some cases, there really is
no 
way to recover without nuking the systems from orbit, Mike Danseglio, 
program manager in the Security Solutions group at Microsoft, said in a 
presentation at the InfoSec World conference here.

Offensive rootkits, which are used hide malware programs and maintain an

undetectable presence on an infected machine, have become the weapon of 
choice for virus and spyware writers and, because they often use kernel 
hooks to avoid detection, Danseglio said IT administrators may never
know 
if all traces of a rootkit have been successfully removed.

He cited a recent instance where an unnamed branch of the U.S.
government 
struggled with malware infestations on more than 2,000 client machines.
In 
that case, it was so severe that trying to recover was meaningless. They

did not have an automated process to wipe and rebuild the systems, so it

became a burden. They had to design a process real fast, Danseglio
added.

Danseglio, who delivered two separate presentations at the
conference-one 
on threats and countermeasures to defend against malware infestations in

Windows, and the other on the frightening world on Windows rootkits-said

anti-virus software is getting better at detecting and removing the
latest 
threats, but for some sophisticated forms of malware, he conceded that
the 
cleanup process is just way too hard.

Microsoft says stealth rootkits are bombarding Windows XP SP2 machines. 
Click here to read more.

We've seen the self-healing malware that actually detects that you're 
trying to get rid of it. You remove it, and the next time you look in
that 
directory, it's sitting there. It can simply reinstall itself, he said.


Detection is difficult, and remediation is often impossible, Danseglio

declared. If it doesn't crash your system or cause your system to
freeze, 
how do you know it's there? The answer is you just don't know. Lots of 
times, you never see the infection occur in real time, and you don't see

the malware lingering or running in the background.

He recommended using PepiMK Software's SpyBot Search  Destroy, Mark 
Russinovich's RootkitRevealer and Microsoft's own Windows Defender, all 
free utilities that help with malware detection and cleanup, and urged
CIOs 
to take a defense-in-depth approach to preventing infestations.

Are virtual machine rootkits the next big threat? Click here to read
more.

Danseglio said malicious hackers are conducting targeted attacks that
are 
stealthy and effective and warned that the for-profit motive is much
more 
serious than even the destructive network worms of the past. In 2006,
the 
attackers want to pay the rent. They don't want to write a worm that 
destroys your hardware. They want to assimilate your computers and use
them 
to make money.

At Microsoft, we are fielding 2,000 attacks per hour. We are a constant

target, and you have to assume your Internet-facing service is also a
big 
target, Danseglio said.

Next Page: Human stupidity.

Danseglio said the success of social engineering attacks is a sign that
the 
weakest link in malware defense is human stupidity.

Social engineering is a very, very effective technique. We have
statistics 
that show significant infection rates for the social engineering
malware. 
Phishing is a major problem because there really is no patch for human 
stupidity, he said.

Ziff Davis Media eSeminars invite: Is your enterprise network truly
secure? 
Join us April 11 at 4 p.m. ET as Akonix demonstrates best practices for 
neutralizing threats and securing your network.

The most recent statistics from Microsoft's anti-malware engineering
team 
confirm Danseglio's contention. In February alone, the company's free 
Malicious Software Removal Tool detected a social engineering worm
called 
Win32/Alcan on more than 250,000 unique machines.


According to Danseglio, user education goes a long way to mitigating the

threat from social engineering, but in companies where staff turnover is

high, he said a company may never recoup that investment.

The easy way to 

RE: [H] Microsoft Says Recovery from Malware Becoming Impossible

2006-04-05 Thread Mesdaq, Ali
As long as there are operating systems that allow people to run
applications as ring 0 there will always be social engineering tricks to
get a system so messed up re-imaging will be necessary. 

Supposedly the next version of MS will not allow anymore ring 0 apps
unless certified by MS. 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thane
Sherrington (S)
Sent: Wednesday, April 05, 2006 12:31 PM
To: The Hardware List
Subject: RE: [H] Microsoft Says Recovery from Malware Becoming
Impossible

At 03:04 PM 05/04/2006, Mesdaq, Ali wrote:
Exactly what we were debating a few weeks ago. Where are those I can
clean any infection guys at now?

I'm still not convinced that the only response to any infection is a 
total reinstall.  But I haven't read the article completely yet, so 
perhaps I'll come around.  But if MS is right, then it's time for 
everyone, and I mean everyone, to abandon ship and switch to Apple or 
*nix now because if the maker of the product says it's unsafe and 
unfixable, then we are nuts to be using it.

T 




RE: [H] compile Python script

2006-03-13 Thread Mesdaq, Ali
Maybe I am missing something but you don’t need to compile scripts like python, 
perl, etc. You just run it in the interperter

-Original Message-
From: Winterlight[EMAIL PROTECTED]
Sent: 3/12/06 8:02:47 PM
To: hardware@hardwaregroup.comhardware@hardwaregroup.com
Subject: [H] compile Python script

How would I compile this Python script ? Thanks

-

a=IntControl(31,0,0,0,0)  ;return list of ids of explorer windows
 c=ItemCount(a,@TAB)
 switch c
case 0
   run(explorer.exe,)
   while FindWindow(ExploreWClass)==;wait for it to come up
 Yield
   end while
   ;Fall into case 1

case 1
   TimeDelay(0.5)
   run(explorer.exe,)
   break
case c   ; 2 or more
   break
 endswitch
 d=1
 while c2  d500
a=IntControl(31,0,0,0,0)
c=ItemCount(a,@TAB)
d=d+1
 endwhile
 if c2 then exit
 id1=ItemExtract(1,a,@TAB)
 id2=ItemExtract(2,a,@tab)
 TimeDelay(0.75)
 WinPlaceSet(@NORMAL,id2,500 0 1000 900)
 WinShow(id2)
 Yield
 Yield
 WinPlaceSet(@NORMAL,id1,0 0 500 900)
 WinShow(id1)

  exit




RE: [H] PC for Gaming Center

2006-03-10 Thread Mesdaq, Ali
CPU $201 AMD 64 3500+ Venice 1ghz HT Socket 939
Mother Board$103 AOpen nCK804Ua-LFS
Video   $529 ATI 100-435801 Radeon
Memory  $281 DDR 400 PC 3200
Hard Drive  $109 Western Digital 250GB
==
Total   $1223

Items still left for groups opinions. I mainly want to know the main
monitor type you guys use for gaming. 
Monitor
Case
Power supply
Keyboard
Mouse
Sound Card



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thane
Sherrington (S)
Sent: Thursday, March 09, 2006 4:39 PM
To: The Hardware List
Subject: Re: [H] PC for Gaming Center

At 07:17 PM 09/03/2006, Anthony Q. Martin wrote:
Mesdaq, Ali wrote:
Wow ok that's half the price of the intel chip I had on that list.
What
is a good board and memory to get with that?
Computer Cost Breakdown
ITEMPRICE   Description
Monitor $250.00 .25 dot pitch crt
Motherboard $200.00 ASUS board
CPU $160.00 AMD 3200
Memory  $400.00 1 gig rambus
Case$100.00 ?
Power Supply$100.00 ?
Hard Drive  $150.00 ?
CD/DVD  $130.00 ?
Keyboard$40.00 Zboard Merc edition
Mouse   $80.00 Razr gaming mouse
Network Card$40.00 Intel Gigabit card
Other Hardware
OS  $100.00 XP
Other software  $300.00 Top games
Total   $2,050.00

Ok, here's a possible system:
AMD 64 3500+
AOpen nCK804a-LFS
Radeon X1900XT 512MB
1 GB PC3200
250GB Western Digital KS
DVDR
XP Pro

You'd need the monitor, etc, but that would bring you in around $1734 
CDN /and you'd kick the heck out of Dell's XPS 600.  And you be 
getting two year warranty at a minimum.

T





RE: [H] PC for Gaming Center

2006-03-10 Thread Mesdaq, Ali
Oh ooops the memory I saw on new egg was ECC no wonder why it was so
damm high. I thought I had completely lost touch with memory prices.

CPU $201 AMD 64 3500+ Venice 1ghz HT Socket 939
Mother Board$103 AOpen nCK804Ua-LFS
Video   $529 ATI 100-435801 Radeon
Memory  $131 DDR 400 PC 3200 Corsair xms 2x512
Hard Drive  $109 Western Digital 250GB
==
Total   $1073



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of CW
Sent: Friday, March 10, 2006 4:32 PM
To: The Hardware List
Subject: RE: [H] PC for Gaming Center

How the hell much memory are you putting in this thing?  4G?  2GB of
Corsair even XMS will run you about $170, where did the $281 come from?
Yeesh!

Otherwise, looks good.

-Original message-
From: Mesdaq, Ali [EMAIL PROTECTED]
Date: Fri, 10 Mar 2006 17:39:32 -0600
To: The Hardware List hardware@hardwaregroup.com
Subject: RE: [H] PC for Gaming Center

 CPU   $201 AMD 64 3500+ Venice 1ghz HT Socket 939
 Mother Board  $103 AOpen nCK804Ua-LFS
 Video $529 ATI 100-435801 Radeon
 Memory$281 DDR 400 PC 3200
 Hard Drive$109 Western Digital 250GB
 ==
 Total $1223
 
 Items still left for groups opinions. I mainly want to know the main
 monitor type you guys use for gaming. 
 Monitor
 Case
 Power supply
 Keyboard
 Mouse
 Sound Card
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Thane
 Sherrington (S)
 Sent: Thursday, March 09, 2006 4:39 PM
 To: The Hardware List
 Subject: Re: [H] PC for Gaming Center
 
 At 07:17 PM 09/03/2006, Anthony Q. Martin wrote:
 Mesdaq, Ali wrote:
 Wow ok that's half the price of the intel chip I had on that list.
 What
 is a good board and memory to get with that?
 Computer Cost Breakdown
 ITEMPRICE   Description
 Monitor $250.00 .25 dot pitch crt
 Motherboard $200.00 ASUS board
 CPU $160.00 AMD 3200
 Memory  $400.00 1 gig rambus
 Case$100.00 ?
 Power Supply$100.00 ?
 Hard Drive  $150.00 ?
 CD/DVD  $130.00 ?
 Keyboard$40.00 Zboard Merc edition
 Mouse   $80.00 Razr gaming mouse
 Network Card$40.00 Intel Gigabit card
 Other Hardware
 OS  $100.00 XP
 Other software  $300.00 Top games
 Total   $2,050.00
 
 Ok, here's a possible system:
 AMD 64 3500+
 AOpen nCK804a-LFS
 Radeon X1900XT 512MB
 1 GB PC3200
 250GB Western Digital KS
 DVDR
 XP Pro
 
 You'd need the monitor, etc, but that would bring you in around $1734 
 CDN /and you'd kick the heck out of Dell's XPS 600.  And you be 
 getting two year warranty at a minimum.
 
 T
 
 
 
 



RE: [H] Failure Cars Standard with Wings was....

2006-03-09 Thread Mesdaq, Ali
Not allowing women to wear scarf's to cover their hair while going to
school is oppression to me. Especially a country with the majority of
its population as muslims. 

Man this topic sucks so bad this is not the forum for this. How about we
all meet up at E3 and see if anyone is in the mood to talk world
politics and religion haha.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thane
Sherrington (S)
Sent: Thursday, March 09, 2006 12:19 PM
To: The Hardware List
Subject: RE: [H] Failure Cars Standard with Wings was

At 02:25 PM 09/03/2006, Mesdaq, Ali wrote:
Turkey is a great example of religious oppression not religious
freedom.

Compared to the West, maybe.  Compared to all other Muslim countries, 
it's a shining example.

T 




RE: [H] PC for Gaming Center

2006-03-09 Thread Mesdaq, Ali
What do you think is a good sweet spot for good performance?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
Sent: Thursday, March 09, 2006 1:57 PM
To: hardware@hardwaregroup.com
Subject: RE: [H] PC for Gaming Center

Intel P4 chips are not the best for top gaming performance. Haven't been
for 
years. If you insist on dual core get an X2, but since this will be
pretty 
much a single app running machine (the game) get the highest clocked A64
you 
are willing to afford.


From: Mesdaq, Ali [EMAIL PROTECTED]
Reply-To: The Hardware List hardware@hardwaregroup.com
To: The Hardware List hardware@hardwaregroup.com
Subject: [H] PC for Gaming Center
Date: Thu, 9 Mar 2006 13:51:17 -0800

Guys putting together some specs for a PC for a PC Gaming Center.
Basically a place for people to go to place pc games like a lan party.
Here is a rough estimate I put together I would like everyones input on
it specifically on what the best gaming item would be. Also what are
the
best games on the market and how much are they. Like what would be a
good mix of games on a system to get good coverage of whats out in the
market.


Computer Cost Breakdown
ITEM   PRICE   Description
Monitor$250.00 .25 dot pitch crt
Motherboard$200.00 ASUS board
CPU$400.00 Intel dual core
Memory $400.00 1 gig rambus
Case   $100.00 Aluminum
Power Supply   $100.00 ?
Hard Drive $150.00 ?
CD/DVD $130.00 ?
Keyboard   $40.00  Zboard Merc edition
Mouse  $80.00  Razr gaming mouse
Network Card   $40.00  Intel Gigabit card
Other Hardware
OS $100.00 XP
Other software $300.00 Top games(??)
Total  $2,290.00


Thanks
Ali






RE: [H] PC for Gaming Center

2006-03-09 Thread Mesdaq, Ali
Wow ok that's half the price of the intel chip I had on that list. What
is a good board and memory to get with that? 

Computer Cost Breakdown
ITEMPRICE   Description
Monitor $250.00 .25 dot pitch crt
Motherboard $200.00 ASUS board
CPU $160.00 AMD 3200
Memory  $400.00 1 gig rambus
Case$100.00 ?
Power Supply$100.00 ?
Hard Drive  $150.00 ?
CD/DVD  $130.00 ?
Keyboard$40.00 Zboard Merc edition
Mouse   $80.00 Razr gaming mouse
Network Card$40.00 Intel Gigabit card
Other Hardware
OS  $100.00 XP
Other software  $300.00 Top games
Total   $2,050.00 

I got a few questions though. What is a good monitor to go with LCD or
CRT? Whats a good case and power supply? What about hard drive? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
Sent: Thursday, March 09, 2006 2:06 PM
To: hardware@hardwaregroup.com
Subject: RE: [H] PC for Gaming Center

Any Rev E past 2.0Ghz (actual speed) will get you flying. I'd start with
the 
3200 (priced under $160) and go from there.

Of course there's overclocking, but I don't meddle in that.

It's better to get the fastest 7900GTX/X1900XTX $500+ PCIe card than
divert 
money to higher mhz if you want to maximize framerate per buck.

From: Mesdaq, Ali [EMAIL PROTECTED]
Reply-To: The Hardware List hardware@hardwaregroup.com
To: The Hardware List hardware@hardwaregroup.com
Subject: RE: [H] PC for Gaming Center
Date: Thu, 9 Mar 2006 13:58:28 -0800

What do you think is a good sweet spot for good performance?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
Sent: Thursday, March 09, 2006 1:57 PM
To: hardware@hardwaregroup.com
Subject: RE: [H] PC for Gaming Center

Intel P4 chips are not the best for top gaming performance. Haven't
been
for
years. If you insist on dual core get an X2, but since this will be
pretty
much a single app running machine (the game) get the highest clocked
A64
you
are willing to afford.


 From: Mesdaq, Ali [EMAIL PROTECTED]
 Reply-To: The Hardware List hardware@hardwaregroup.com
 To: The Hardware List hardware@hardwaregroup.com
 Subject: [H] PC for Gaming Center
 Date: Thu, 9 Mar 2006 13:51:17 -0800
 
 Guys putting together some specs for a PC for a PC Gaming Center.
 Basically a place for people to go to place pc games like a lan
party.
 Here is a rough estimate I put together I would like everyones input
on
 it specifically on what the best gaming item would be. Also what are
the
 best games on the market and how much are they. Like what would be a
 good mix of games on a system to get good coverage of whats out in
the
 market.
 
 
 Computer Cost Breakdown
 ITEM PRICE   Description
 Monitor  $250.00 .25 dot pitch crt
 Motherboard  $200.00 ASUS board
 CPU  $400.00 Intel dual core
 Memory   $400.00 1 gig rambus
 Case $100.00 Aluminum
 Power Supply $100.00 ?
 Hard Drive   $150.00 ?
 CD/DVD   $130.00 ?
 Keyboard $40.00  Zboard Merc edition
 Mouse$80.00  Razr gaming mouse
 Network Card $40.00  Intel Gigabit card
 Other Hardware
 OS   $100.00 XP
 Other software   $300.00 Top games(??)
 Total$2,290.00
 
 
 Thanks
 Ali
 








RE: [H] PC for Gaming Center

2006-03-09 Thread Mesdaq, Ali
Those are actually some good questions. That's kinda why I want the
collective to help me out here because I haven't played a video game in
about 5 years on a PC. 

Duh I cant believe I forgot the video card. Whats a good one to go with
these days? 

And I don't need a separate network card just put it in here. I was
considering flat panels but how are they for gaming? 

Headphones will be used for sound. 

And are these Dells really worth it? Are the legit good gaming PC's?
They use media center PC is that the best os for gaming?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Anthony Q.
Martin
Sent: Thursday, March 09, 2006 3:17 PM
To: The Hardware List
Subject: Re: [H] PC for Gaming Center

Do you need a separate network card?  How much space will there be?  For

a center, I'd consider flat-panels.  Are you going to use headphones for

sound?
Your vidcard will add to the cost, and what about UPS. 

Why not just buy a fleet of these Dell Hard Core Gaming rigs

http://www1.us.dell.com/content/products/features.aspx/gaming_xpsdt?c=us
cs=19l=ens=dhs

:)

Mesdaq, Ali wrote:
 Wow ok that's half the price of the intel chip I had on that list.
What
 is a good board and memory to get with that? 

 Computer Cost Breakdown
 ITEM  PRICE   Description
 Monitor   $250.00 .25 dot pitch crt
 Motherboard   $200.00 ASUS board
 CPU   $160.00 AMD 3200
 Memory$400.00 1 gig rambus
 Case  $100.00 ?
 Power Supply  $100.00 ?
 Hard Drive$150.00 ?
 CD/DVD$130.00 ?
 Keyboard  $40.00 Zboard Merc edition
 Mouse $80.00 Razr gaming mouse
 Network Card  $40.00 Intel Gigabit card
 Other Hardware
 OS$100.00 XP
 Other software$300.00 Top games
 Total $2,050.00 

 I got a few questions though. What is a good monitor to go with LCD or
 CRT? Whats a good case and power supply? What about hard drive? 

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
 Sent: Thursday, March 09, 2006 2:06 PM
 To: hardware@hardwaregroup.com
 Subject: RE: [H] PC for Gaming Center

 Any Rev E past 2.0Ghz (actual speed) will get you flying. I'd start
with
 the 
 3200 (priced under $160) and go from there.

 Of course there's overclocking, but I don't meddle in that.

 It's better to get the fastest 7900GTX/X1900XTX $500+ PCIe card than
 divert 
 money to higher mhz if you want to maximize framerate per buck.

   
 From: Mesdaq, Ali [EMAIL PROTECTED]
 Reply-To: The Hardware List hardware@hardwaregroup.com
 To: The Hardware List hardware@hardwaregroup.com
 Subject: RE: [H] PC for Gaming Center
 Date: Thu, 9 Mar 2006 13:58:28 -0800

 What do you think is a good sweet spot for good performance?

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
 Sent: Thursday, March 09, 2006 1:57 PM
 To: hardware@hardwaregroup.com
 Subject: RE: [H] PC for Gaming Center

 Intel P4 chips are not the best for top gaming performance. Haven't
 
 been
   
 for
 years. If you insist on dual core get an X2, but since this will be
 pretty
 much a single app running machine (the game) get the highest clocked
 
 A64
   
 you
 are willing to afford.


 
 From: Mesdaq, Ali [EMAIL PROTECTED]
 Reply-To: The Hardware List hardware@hardwaregroup.com
 To: The Hardware List hardware@hardwaregroup.com
 Subject: [H] PC for Gaming Center
 Date: Thu, 9 Mar 2006 13:51:17 -0800

 Guys putting together some specs for a PC for a PC Gaming Center.
 Basically a place for people to go to place pc games like a lan
   
 party.
   
 Here is a rough estimate I put together I would like everyones input
   
 on
   
 it specifically on what the best gaming item would be. Also what are
   
 the
 
 best games on the market and how much are they. Like what would be a
 good mix of games on a system to get good coverage of whats out in
   
 the
   
 market.


 Computer Cost Breakdown
 ITEMPRICE   Description
 Monitor $250.00 .25 dot pitch crt
 Motherboard $200.00 ASUS board
 CPU $400.00 Intel dual core
 Memory  $400.00 1 gig rambus
 Case$100.00 Aluminum
 Power Supply$100.00 ?
 Hard Drive  $150.00 ?
 CD/DVD  $130.00 ?
 Keyboard$40.00  Zboard Merc edition
 Mouse   $80.00  Razr gaming mouse
 Network Card$40.00  Intel Gigabit card
 Other Hardware
 OS  $100.00 XP
 Other software  $300.00 Top games(??)
 Total   $2,290.00


 Thanks
 Ali

   

 



   



RE: [H] READ! was Failure Cars Standard with Wings was....

2006-03-09 Thread Mesdaq, Ali
THANK YOU

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jim Edwards
Sent: Thursday, March 09, 2006 3:47 PM
To: The Hardware List
Subject: [H] READ! was Failure Cars Standard with Wings was

DYE DYE DYE DYE DYE DYE End of thread.


Thank you




RE: [H] PC for Gaming Center

2006-03-09 Thread Mesdaq, Ali
Now for hard drives is the 10k rpm sata drives the best?

Also what would you guys suggest for reimagining software. I would
imagine reimaging these machines atleast once in the morning and
possibly twice a day depending on performance and stuff.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thane
Sherrington (S)
Sent: Thursday, March 09, 2006 4:39 PM
To: The Hardware List
Subject: Re: [H] PC for Gaming Center

At 07:17 PM 09/03/2006, Anthony Q. Martin wrote:
Mesdaq, Ali wrote:
Wow ok that's half the price of the intel chip I had on that list.
What
is a good board and memory to get with that?
Computer Cost Breakdown
ITEMPRICE   Description
Monitor $250.00 .25 dot pitch crt
Motherboard $200.00 ASUS board
CPU $160.00 AMD 3200
Memory  $400.00 1 gig rambus
Case$100.00 ?
Power Supply$100.00 ?
Hard Drive  $150.00 ?
CD/DVD  $130.00 ?
Keyboard$40.00 Zboard Merc edition
Mouse   $80.00 Razr gaming mouse
Network Card$40.00 Intel Gigabit card
Other Hardware
OS  $100.00 XP
Other software  $300.00 Top games
Total   $2,050.00

Ok, here's a possible system:
AMD 64 3500+
AOpen nCK804a-LFS
Radeon X1900XT 512MB
1 GB PC3200
250GB Western Digital KS
DVDR
XP Pro

You'd need the monitor, etc, but that would bring you in around $1734 
CDN /and you'd kick the heck out of Dell's XPS 600.  And you be 
getting two year warranty at a minimum.

T





Re: [H] Antivirus

2006-03-03 Thread Mesdaq, Ali
Where did you hear that because its definitely not the case

-Original Message-
From: Greg Sevart[EMAIL PROTECTED]
Sent: 3/3/06 10:16:07 AM
To: The Hardware Listhardware@hardwaregroup.com
Subject: Re: [H] Antivirus

I can confirm.
SAV-CE is a completely different codebase from the crap consumer grade stuff 
that is Norton branded.
10.0.2 is taking 33MB of memory on thix box (I have 2GB), which I don't 
consider very bad.

I still argue it is among (if not the) best AV scanner available--it just 
isn't available to the average consumer. Most people (for good reason) hate 
the Norton consumer stuff, and assume that the corporate stuff is 
related...but nothing could be further from the truth.

Interestingly, I've heard that SAV-CE10 also is the most effective malware 
scanner out there--but it runs slower than anything else at this task.

Greg

- Original Message - 
From: Hayes Elkins [EMAIL PROTECTED]
To: hardware@hardwaregroup.com
Sent: Friday, March 03, 2006 11:18 AM
Subject: RE: [H] Antivirus


 The latest Symantec AntiVirus corporate edition client (10.0.2.2020) takes 
 about 30MB of memory footprint these days. It does however do a much 
 better job than the retail home user version (norton), however it will get 
 more false positives.


From: Jin-Wei Tioh [EMAIL PROTECTED]
Reply-To: The Hardware List hardware@hardwaregroup.com
To: The Hardware List hardware@hardwaregroup.com
Subject: RE: [H] Antivirus
Date: Fri, 03 Mar 2006 10:54:49 -0600

At 02:28 PM 3/2/2006, you wrote:
Norton is definitely not even close to kaspersky in detection accuracy.

Not to mention that it seems to be more resource heavy. Always hated
the startup time degradations with Norton. Much improved after I
switched to Kaspersky.

--
JW



 





RE: [H] Antivirus

2006-03-03 Thread Mesdaq, Ali
Well I see malware daily as part of my job and I see the results of AV
vendors against those pieces of malware and Symantec is terrible from
what I have seen. And what I have seen is definitely things in the wild
regardless if its on the wild list or not. 

And like I said earlier scanning a system for malware and seeing which
vendors catch what is not a very accurate test because you actually
don't know what is on the system and how many pieces of malware are
there. So the fact that some other scanner caught 10 and then Symantec
comes and finds 2 is not good because you don't know if both scanners
are missing 100 pieces of malware. You only know what the scanners are
reporting to you and there has even been a controversy in that because
some scanners report false positives on purpose so that their scanning
can seem more accurate. But that happens more with the anti spyware
scanners.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
Sent: Friday, March 03, 2006 3:10 PM
To: The Hardware List
Subject: Re: [H] Antivirus

Have you used it? It has caught malware on my machines that many of the 
other popular anti-spyware tools missed...

That test link someone provided also shows it does a nice job at 
anti-malware.

So, care to qualify your statement?


- Original Message - 
From: Mesdaq, Ali [EMAIL PROTECTED]
To: hardware@hardwaregroup.com
Sent: Friday, March 03, 2006 2:02 PM
Subject: Re: [H] Antivirus


 Where did you hear that because its definitely not the case

 -Original Message-
 From: Greg Sevart[EMAIL PROTECTED]
 Sent: 3/3/06 10:16:07 AM
 To: The Hardware Listhardware@hardwaregroup.com
 Subject: Re: [H] Antivirus

 I can confirm.
 SAV-CE is a completely different codebase from the crap consumer grade

 stuff
 that is Norton branded.
 10.0.2 is taking 33MB of memory on thix box (I have 2GB), which I
don't
 consider very bad.

 I still argue it is among (if not the) best AV scanner available--it
just
 isn't available to the average consumer. Most people (for good reason)

 hate
 the Norton consumer stuff, and assume that the corporate stuff is
 related...but nothing could be further from the truth.

 Interestingly, I've heard that SAV-CE10 also is the most effective
malware
 scanner out there--but it runs slower than anything else at this task.

 Greg

 - Original Message - 
 From: Hayes Elkins [EMAIL PROTECTED]
 To: hardware@hardwaregroup.com
 Sent: Friday, March 03, 2006 11:18 AM
 Subject: RE: [H] Antivirus


 The latest Symantec AntiVirus corporate edition client (10.0.2.2020) 
 takes
 about 30MB of memory footprint these days. It does however do a much
 better job than the retail home user version (norton), however it
will 
 get
 more false positives.


From: Jin-Wei Tioh [EMAIL PROTECTED]
Reply-To: The Hardware List hardware@hardwaregroup.com
To: The Hardware List hardware@hardwaregroup.com
Subject: RE: [H] Antivirus
Date: Fri, 03 Mar 2006 10:54:49 -0600

At 02:28 PM 3/2/2006, you wrote:
Norton is definitely not even close to kaspersky in detection
accuracy.

Not to mention that it seems to be more resource heavy. Always hated
the startup time degradations with Norton. Much improved after I
switched to Kaspersky.

--
JW







 





RE: [H] Antivirus

2006-03-03 Thread Mesdaq, Ali
We use the most up to date av products

-Original Message-
From: Hayes Elkins[EMAIL PROTECTED]
Sent: 3/3/06 9:04:12 PM
To: hardware@hardwaregroup.comhardware@hardwaregroup.com
Subject: RE: [H] Antivirus

v10.0.2? (there is a significant difference in 10 vs the past versions)


From: Mesdaq, Ali [EMAIL PROTECTED]
Reply-To: The Hardware List hardware@hardwaregroup.com
To: The Hardware List hardware@hardwaregroup.com
Subject: RE: [H] Antivirus
Date: Fri, 3 Mar 2006 16:39:00 -0800

Yes it's the corporate edition

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hayes Elkins
Sent: Friday, March 03, 2006 4:28 PM
To: hardware@hardwaregroup.com
Subject: RE: [H] Antivirus

Are you specifically testing SAVCE, not Norton AV, but the latest SAVCE
client v10.0.2?


 From: Mesdaq, Ali [EMAIL PROTECTED]
 Reply-To: The Hardware List hardware@hardwaregroup.com
 To: The Hardware List hardware@hardwaregroup.com
 Subject: RE: [H] Antivirus
 Date: Fri, 3 Mar 2006 15:59:55 -0800
 
 Well I see malware daily as part of my job and I see the results of AV
 vendors against those pieces of malware and Symantec is terrible from
 what I have seen. And what I have seen is definitely things in the wild
 regardless if its on the wild list or not.
 
 And like I said earlier scanning a system for malware and seeing which
 vendors catch what is not a very accurate test because you actually
 don't know what is on the system and how many pieces of malware are
 there. So the fact that some other scanner caught 10 and then Symantec
 comes and finds 2 is not good because you don't know if both scanners
 are missing 100 pieces of malware. You only know what the scanners are
 reporting to you and there has even been a controversy in that because
 some scanners report false positives on purpose so that their scanning
 can seem more accurate. But that happens more with the anti spyware
 scanners.
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Greg Sevart
 Sent: Friday, March 03, 2006 3:10 PM
 To: The Hardware List
 Subject: Re: [H] Antivirus
 
 Have you used it? It has caught malware on my machines that many of the
 other popular anti-spyware tools missed...
 
 That test link someone provided also shows it does a nice job at
 anti-malware.
 
 So, care to qualify your statement?
 
 
 - Original Message -
 From: Mesdaq, Ali [EMAIL PROTECTED]
 To: hardware@hardwaregroup.com
 Sent: Friday, March 03, 2006 2:02 PM
 Subject: Re: [H] Antivirus
 
 
   Where did you hear that because its definitely not the case
  
   -Original Message-
   From: Greg Sevart[EMAIL PROTECTED]
   Sent: 3/3/06 10:16:07 AM
   To: The Hardware Listhardware@hardwaregroup.com
   Subject: Re: [H] Antivirus
  
   I can confirm.
   SAV-CE is a completely different codebase from the crap consumer
grade
 
   stuff
   that is Norton branded.
   10.0.2 is taking 33MB of memory on thix box (I have 2GB), which I
 don't
   consider very bad.
  
   I still argue it is among (if not the) best AV scanner available--it
 just
   isn't available to the average consumer. Most people (for good
reason)
 
   hate
   the Norton consumer stuff, and assume that the corporate stuff is
   related...but nothing could be further from the truth.
  
   Interestingly, I've heard that SAV-CE10 also is the most effective
 malware
   scanner out there--but it runs slower than anything else at this
task.
  
   Greg
  
   - Original Message -
   From: Hayes Elkins [EMAIL PROTECTED]
   To: hardware@hardwaregroup.com
   Sent: Friday, March 03, 2006 11:18 AM
   Subject: RE: [H] Antivirus
  
  
   The latest Symantec AntiVirus corporate edition client
(10.0.2.2020)
   takes
   about 30MB of memory footprint these days. It does however do a
much
   better job than the retail home user version (norton), however it
 will
   get
   more false positives.
  
  
  From: Jin-Wei Tioh [EMAIL PROTECTED]
  Reply-To: The Hardware List hardware@hardwaregroup.com
  To: The Hardware List hardware@hardwaregroup.com
  Subject: RE: [H] Antivirus
  Date: Fri, 03 Mar 2006 10:54:49 -0600
  
  At 02:28 PM 3/2/2006, you wrote:
  Norton is definitely not even close to kaspersky in detection
 accuracy.
  
  Not to mention that it seems to be more resource heavy. Always
hated
  the startup time degradations with Norton. Much improved after I
  switched to Kaspersky.
  
  --
  JW
  
  
  
  
  
  
  
  
 
 
 








RE: [H] Antivirus

2006-03-02 Thread Mesdaq, Ali
I am not quite sure what is on the wild list but we get stuff in our
honeypot which is definitely in the wild and compare that against most
vendors 60% is pretty accurate. I mean a piece of malware usually is
covered by at least one vendor but no one vendor covers most malware
that good.

You should also be careful with which files you copy over. I would say
if your checking email and someone sends you a file and its non
executable that's ok to copy over if you scan it on www.virustotal.com .
You really can't trust a machine that is completely exposed for a
unknown amount of time. But if you have a vmware image that you know is
clean and you start it up and you know you haven't run any rouge
processes then that's a lot more trust worthy. Of course its still
possible you could have been infected with a worm exploiting a backdoor
but chances are very low for that.

Oh by the way vmware has free software for desktops now so everyone
should be running a vmware session for all their other stuff. Maybe even
run a linux desktop and windows in a vmware session.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thane
Sherrington (S)
Sent: Thursday, March 02, 2006 3:53 AM
To: The Hardware List
Subject: RE: [H] Antivirus

At 12:42 AM 02/03/2006, Mesdaq, Ali wrote:
Oh I love these types of topics. Right off the bat I would say there is
NO AV that gives that great of coverage. Kaspersky(verified) has good
coverage and NOD32(unverified) has good coverage. The bad part is even
of these good AV vendors their coverage is maybe 60%. What is

So you're saying that the Wildlist isn't an accurate count of the 
viruses out there?

always revert your images to a clean state after. And only copy files
over when you're totally sure they are clean

How can I be totally sure they are clean if the AV software is only 
60%?  Do you have some suggestions for looking at all the processes 
on a computer and finding out what they are?

T 




RE: [H] Antivirus

2006-03-02 Thread Mesdaq, Ali
Well if it were feasible to do that I personally would run kaspersky, nod32, 
trend, and bit defender. But I rather approach it like don’t run anything 
unless I want it to run. But I am not sure av can live happily together on the 
same machine

-Original Message-
From: Thane Sherrington (S)[EMAIL PROTECTED]
Sent: 3/2/06 10:27:49 AM
To: The Hardware Listhardware@hardwaregroup.com
Subject: RE: [H] Antivirus

At 02:15 PM 02/03/2006, Mesdaq, Ali wrote:
I am not quite sure what is on the wild list but we get stuff in our
honeypot which is definitely in the wild and compare that against most
vendors 60% is pretty accurate. I mean a piece of malware usually is
covered by at least one vendor but no one vendor covers most malware
that good.

So you're saying that if I ran enough different AVs, then at least 
one of them would catch the Malware?  Which AVs would you recommend running?

T





RE: [H] Antivirus

2006-03-02 Thread Mesdaq, Ali
Norton is definitely not even close to kaspersky in detection accuracy.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
Sent: Thursday, March 02, 2006 12:20 PM
To: 'The Hardware List'
Subject: RE: [H] Antivirus



 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mesdaq, Ali
 Sent: Thursday, March 02, 2006 11:18 AM
 To: hardware@hardwaregroup.com
 Subject: RE: [H] Antivirus
 
 Well if it were feasible to do that I personally would run kaspersky,
nod32,
trend, and bit defender. But I rather approach it like don't
 run anything unless I want it to run. But I am not sure av can live
happily
together on the same machine

Running more than one AV engine on machine is not advisable. There is no
significant evidence that I've found that running multiple scanners
provides
better protection. But even if it did, the performance degradation on a
machine
running multiple AV engines is significant. Google that one and read
some of the
stories.

http://service1.symantec.com/SUPPORT/nav.nsf/docid/231316555206

For the last several years, it's been a horse race between Kaspersky,
NOD32 and
Norton. They are neck and neck, while many feel NOD32 offers slightly
better
virus detection while of the three, Kaspersky has the best Trojan
detection.

Here's the February 2006 AV Comparatives:

http://www.av-comparatives.org/seiten/ergebnisse_2006_02.php

Bill










[H] Some stats about infected machines

2006-02-16 Thread Mesdaq, Ali
Here is a quote from a white paper from the University of Washington. 

In the span of just a few years, spyware has become the
Internet's most popular download. A recent scan performed
by AOL/NCSA of 329 customers' computers found
that 80% were infected with spyware programs [2]. More
shocking, each infected computer contained an average of
93 spyware components. The consequences of spyware infections
can be severe, including inundating the victim with
pop-up ads, stealing the victim's financial information or
passwords, or rendering the victim's computer useless.

I only mention this because of our recent conversation about tools and
philosophy about infected machines. Now I don't know about the rest of
you but I don't feel like hunting down 93 components and cleaning that
out. But when we discussed cleaning vs reformatting I want to make clear
that I only would reformat on an end users computer that was not under
my control. If I had a computer that got infected with something that
was very specific and I knew there was only one piece of malware on it
then I would definitely prefer cleaning rather than reformatting. It's
only in cases where the computer has been infected for long periods of
time and was never protected to begin with.

The white paper is good and is the type of projects we work on at work.
Pretty fun stuff you can read the paper here
http://www.cs.washington.edu/homes/gribble/papers/spycrawler.pdf




RE: [H] Suggested tools for helping a friend with badvirus infestation

2006-02-15 Thread Mesdaq, Ali
Because I have gotten pieces of malware and checked against virustotal and no 
on got it but reverse engineering it showed it was definitely a virus

-Original Message-
From: Thane Sherrington (S)[EMAIL PROTECTED]
Sent: 2/13/06 6:41:54 AM
To: The Hardware Listhardware@hardwaregroup.com
Subject: RE: [H] Suggested tools for helping a friend with badvirus 
infestation

At 10:03 AM 13/02/2006, Mesdaq, Ali wrote:
Its not a company I work for its a tool we use. You can upload a 
file and check it against all av pretty sad coverage because no av 
ever gets it all or even close

How do you know that?  According to their charts, it appears that if 
they scan with all the AVs then then catch all the malware, but no 
one program gets them all.

T 




  1   2   >