Posted under Blogging
“firliana putri”
Posted under Blogging
“firliana putri”
Posted under Blogging
Posted under Blogging
Kita memang tertinggal dengan bangsa lain terutama dalam hal pendidikan. Ironis kenapa mutu pendidikan hanya dinilai dari sekedar waktu. Buat apa cape-cape belajar. Kedepannya hanya perlu belajar 3 mata pelajaran saja karena pelajaran lain tidak diperlukan untuk menjadi seorang lulus sekolah. Ironisnya lagi, siswa yang lulus malah merayakannya dengan cara mabuk-mabukan, pelecehan seksual. Bangsa ini memang mendidik orang-orang zalim.
Lalu, jika tidak lulus jadi apa mereka kelak?
Banyak pula yang tidak lulus dalah kalangan tidak mampu. Untuk ujian paket C itu merupakan hal yang sulit untuk dicapai karena biaya yang tidak sedikit yang harus dikeluarkan. Yang tidak mampu? Hanya akan menambah angka pengangguran dan juga angka kesejahteraan rakyat. Kenapa? Saat ini, yang punya Ijazah S1 juga banyak yang menganggur apalagi tidak lulus SMA yang berarti pendidikan terakhir mereka adalah SMP.
Bagaimana kita bisa meningkatkan mutu pendidikan?
Mari kita musyawarah bersama.
Posted under Blogging
The FBI is investigating the stolen information, which was discovered on a password-protected FTP server in the U.S. and is believed to be connected to a Trojan horse that is installed from the Web site teens7(dot)com. The information, organized by country, includes names, phone numbers, social security numbers, and user log-ins and passwords for tens of thousands of Web sites, according to information provided to InfoWorld by Webroot.
The discovery is just the latest evidence of rampant identity theft by online criminals who use malicious Web sites, common software vulnerabilities, and keylogging software to harvest information from unsuspecting Web surfers.
The Trojan was discovered on April 25 by Dan Para, a member of Webroot’s Threat Research Team, who was investigating one of a number of malicious files installed using “drive by downloads” from the Web site. In drive by downloads, software vulnerabilities in Web browsers are exploited so that malicious software can be pushed down to the machine running the Web browser, usually without any warning to the computer’s owner.
The Rebery malicious software is an example of a “banking” Trojan, which are programmed to spring to life when computer owners visit one of a number of online banking or e-commerce sites, said Gerhard Eschelbeck, CTO at Webroot.
FBI Notified
Webroot notified the FBI after it discovered the stolen information, which had been groomed and organized in folders by country where it was “ready to be sold,” Eschelbeck said. The stolen data was hosted on an FTP server hosted by nLayer Communications in New York, according to Webroot. However, the company does not know who is behind the scam, Eschelbeck said.
“It’s probably an individual who set it up,” said Eschelbeck. However, it is unlikely that the individuals running the Web site or hosting the FTP server have any direct knowledge of the scam, he said.
Rebery is still “running wild” on the Internet, Webroot said. The company believes there are more than 12,000 systems infected with the Trojan, 1,200 of them in the U.S.
The stash of stolen identities is just one of many that have been uncovered in recent months, as identity theft has evolved into a lucrative operation for online criminal groups.
Researchers at antispyware firm Sunbelt Software have also uncovered stashes of stolen information harvested by keyloggers on more than one occasion, and company employees have, in the past, informed some consumers that their identities have been stolen.
Catching the perpetrators is a different matter, however. Often, criminals conduct their affairs from afar, connecting to their servers through one or more compromised machines, which are often scattered around the globe, making criminal investigation and enforcement difficult, experts say.
Posted under Blogging
A worm that spreads through Yahoo Instant Messenger is hijacking browsers and leading users to a site that installs spyware on their computers in a sign that instant messaging threats are becoming more malicious and powerful, security firm FaceTime Communications said Tuesday.
FaceTime Security Lab researchers said the self-propagating worm is currently rated as low-risk because it hasn’t spread widely but it can be malicious.
The worm infects the PC in two stages. In the first step, it installs a “safety browser” and hijacks the Internet Explorer home page, which is the first incidence of a malware installing its own web browser on a computer without the user’s permission, researchers said.
The worm then spreads the infection to Yahoo Messenger contacts on the infected PC by sending a web site link during a conversation that when clicked restarts the cycle.
“This is one of oddest and more insidious pieces of malware we have encountered in years,” said Tyler Wells, senior director of research at FaceTime Security Labs. “This is the first instance of a complete web browser hijack without the user’s awareness. Rogue browsers seem to be the hot new thing among hackers.”
The threat was first noticed on Friday by the India research arm of FaceTime Security Labs through a “honeypot” or a trap set by security companies to detect viruses, worms, and spyware. Most users who are infected by the threat are likely to get it when visiting a Yahoo chat room, said Mr. Wells.
Shining the Spotlight on IM
The latest threat, despite its low-risk rating, is an indication of how the instant messaging security market has been steadily growing over the last few years, said experts.
Instant messaging is no longer a consumer tool and has been widely adopted by corporate organizations. About 93 percent of businesses in North America use instant messaging in the workplace, according to consulting firm Osterman Research.
About 80 percent of these organizations use consumer IM products, which leaves them susceptible to attacks from hackers. Consumer IM products lack strong security and protection features that many businesses need.
And that’s where startups like FaceTime Communications and the San Diego, California-based Akonix step in. “If you look at the statistics, then there has been a 1600 percent rise in IM threats in 2005 over 2004, which shows that the segment is getting a lot of attention from hackers,” said Michael Osterman, principal of Black Diamond, Washington-based Osterman Research.
Larger security players like Symantec too have bought into the potential of the market. In January, Symantec acquired the Waltham-Massachusetts based IMlogic for an undisclosed sum (see Symantec Acquires IMlogic).
With about 100 employees, IMlogic had raised $34 million in venture funding. Key investors in the company include Crosslink Capital, General Catalyst Partners, Goldman Sachs, Kodiak Ventures, Venrock Associates, and Wilson Sonsini Goodrich & Rosati.
Broadening Reach
The acquisition has also meant startups like FaceTime are looking to broaden their reach beyond just IM and protect enterprises from a range of threats like peer-to-peer file-sharing networks, web conferencing, and spyware.
The Foster City, California-based FaceTime Communications is just one of the many startups that is trying to get a piece of the pie. FaceTime, which was founded in 1998, has about 200 employees now. So far, it has raised $40 million in funding over three rounds from investors including BA Venture Partner, JK&B Capital, and Sutter Hill Ventures.
FaceTime has partnered with most public and private IM network providers, including AOL, Google, Microsoft, Yahoo, Bloomberg, Jabber, and Reuters to help assess the security levels on the network and protect users.
“They have multiple businesses looking at not just threats but also providing enterprise-grade features in consumer IM clients, which makes the business quite viable,” said Mr. Osterman.
Posted under Blogging
Final customer notification about the end of Windows 98, Windows 98 Second Edition, and Windows Millennium Edition Extended Support
Support for Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (Me) ends on July 11, 2006. Microsoft will end public and technical support by this date. This also includes security updates. Microsoft is providing final notifications to customers to end the extended security update support for these products.
Microsoft is ending support for these products because they are outdated and these older operating systems can expose customers to security risks. We recommend that customers who are still running Windows 98 or Windows Me upgrade to a newer, more secure Microsoft operating system, such as Windows XP, as soon as possible.
Key dates:
Posted under Blogging
There are three distinct steps to any Phishing attack for the sake of making this simple let’s just call them Casting the Bait, Reeling in the Catch and Stealing the Prize.
Casting the Bait – since the initial goal of the phisher is to get you to go to their web site the first thing to do is to deliver you a URL in an email message. This email has to convince you that not only is it from a real company but that you should take the additional action of clicking on the link it contains. We’ve all seen the “there has been a change in your account details and we need you to verify them” email, complete with nice graphics and company logo’s from a familiar company. The first few times we see these we naively click on the link and off we go to who knows where to try and verify our account details. Of course given the amount of spam we all receive it’s not surprising that at times it’s hard for us to tell the good mail from the bad. In recent years many efforts have been made to reduce the amount of spam and as the junk mail filters have become more sophisticated we are weeding out a lot more than we used to, but there is still more work to be done.
Reeling in the Catch – have you ever thought about how easy it is to fake a web site, think about that for a moment if I go up to any webtsite today I bet I can copy half their logo’s and art work straight off of their home page. In no time at all a half decent web designer could mock up a site that is close enough to the real thing to fool 90% of the people who saw it. In fact that’s what Researchers at Harvard University and UC Berkeley did in order to do some research on Phishing. Now compare that with how hard it is to fake a real brick and mortar business, say a bank or a book store. One of the reasons so many people get phished is because it is very hard for most users to tell the difference between a fake site and the real site. In fact many users today have no idea what any of the so called security measure’s we have in place today even mean. Ask some of your non-technical friends to explain what an SSL certificate is and how they can tell when a site has one. Now ask them how they know that’s a real cert and not one that was issued to a spurious company in Nigeria. On the whole we as an industry have come up pretty short in terms of protecting our users from going to sites that they can’t identify.
Stealing the Prize – in many cases the prize is your username and password. Firstly this is because the Phisher can now get access to the site that they faked, secondly the chances are you also use that username and password other places, and they are going to go after those too. But wait I hear you cry, I have several password that I use on different sites depending on the value associated with an account. So imagine this, you get tricked into going to a fake site, it asks you for your username and password, you type them in and “User Authentication Failed, please try again”. So you think to yourself maybe I used one of my other username and password pairs, so you try again, failed. Eventually you think maybe I just typed the password wrong the first time! So you re-enter it and the site lets you in (and redirects you to the real site), now the Phishing site not only has the username and password for the site they faked, but chances are they also stole the other 4 combinations you use. And yes this happened to someone I know, oops. So username and passwords aren’t solving the problem today of how we get users to authenticate to our sites. And we need to keep it simple enough that all users from the technically savvy to novice users can just as easily and securely authenticate, without the need for username and password.
So as you can see the method of attack is pretty straight forward and if wasn’t for the fact that we prefer to operate on the right side of the law, I’m sure we could all make a pretty decent living doing it. One of the big challenges for us as an industry is that it covers multiple technologies email clients, browsers, SSL certificates and user authentication systems, all of which may be provided by different vendors, any one of which doesn’t feel like they can solve the problem. Over the next few weeks I’m going to cover each of these topics and explain the work that we are doing here at Microsoft to address these issues and in addition other industry wide efforts I come across. I’m not saying that we can stop these attacks completely but by changing the rules a little we can at least start to fight back. Lets face it we are dealing with some pretty sophisticated criminals intent on stealing from all of us if they can, we just have to make it a lot harder for them to do their job.
Posted under Blogging
I have a favorite utility program, a piece of software that has been included with every shipping Microsoft operating system since the earliest versions of DOS. I’m talking about Debug, of course, the DDT of MS-DOS. (DDT, or Dynamic Debugging Tool, was a Debug-like programmer for CP/M, the operating system DOS was largely based upon.)
With all the focus on security in Vista, I thought Debug would be long gone. In fact, geek that I am, I had some notes about a possible post called “Debug, RIP” that I thought I’d write up when I got my hands on Vista. I was already feeling a sense of loss.
But late last night, I was pleasantly surprised to find DEBUG.EXE in c:\Windows\System32, just sitting there like a loaded gun on the floor of a maximum security prison. So I picked it up and shot out some windows. Great fun. I had meant to look at some more esoteric aspects of Vista, but how can a guy stay focused when Debug is around?
Debug has been around a long time. If you were writing assembly language in the 80s (and all the really cool guys were), then Debug was by your side night and day. It was the fastest way to write and test a little program, or to check some values in memory, or to trigger an interrupt or a million other things. You could use like a hex editor to edit a file with complete control of every byte. you could disassemble executables (as in the screen shot above), and you could also write quick and dirty little .COM programs that would only take up a few bytes. You could use it to write directly to the video RAM on your display card, or any other area of memory for that matter.
And you can still do all these things with Debug, even under Vista. For example …
Writing to Video RAM
Hacking Files with Debug
Debug is also fun for editing files. With Debug, you load the file into memory, then you can search the bytes in the file and overwrite them as needed. And you can change any file that will fit in memory. (Well, the memory Debug can address, which is a messy topic now that computers have over a megabyte of RAM so we won’t get into it).
You can change EXE files, for example. Think about it. Sure, these days there’s so damn much security in everything that it’s hard to change bytes in a program without corrupting it or setting off an alarm of some kind. But it wasn’t always so.
The command prompt program, for example. Back in DOS days, it was simply Command.com, located in the root directory of your C: drive. This was the program that put a C:\> prompt on the screen and interpreted commands from the user; DOS itself, from the user’s perspective. And since Command.com was a simple COM file (the executable format before EXEs, and based on CP/M’s executable format that loaded the code in at offset 100 in the current memory segment), you could just hack it up all you wanted in debug.
And I did. For example, I once went into CompUSA in Chicago in the 80s, and just for fun I hacked up the Command.com on a few of their DOS-based laptops that were on display. I searched for the string “invalid command or filename” and replaced it with “Shop at Elek-Tek and SAVE!”
The cool thing about this trick was that the bogus error message didn’t appear until after the computer had been rebooted, so even if a friendly little salesman snuck up on me, I could play dumb, say I got lost in something, and the computer seemed to work fine. But the next day, when the salesman made a mistake showing off some feature to a customer, up came that replacement message I had entered for him.
Dave-DOS
Another thing I did once, after a few too many Black Russians at a guy named Dave’s house, was modify his Command.com to make it create formatted disks with an interpreter named Dave.com instead of Command.com. I think I may have had to modify a SYS file or something to do this one, I don’t remember for sure. Anyway, whenever Dave formatted a bootable floppy disk, it had Dave.com in the root, but it still ran DOS programs fine and everything worked like normal. But since Dave.com was a copy of the hacked up Command.com, it had the same quirk, so any time you booted off a Dave.com disk you’d keep spreading the virus.
We got away with so much in the 80s. I’m much more mature now, of course. The things I plan to do with the DEBUG.EXE in Vista will be altruistic, wholesome, and help make the world a better place.
Posted under Blogging
We got a few bug reports this week from customers who have installed Windows Vista beta 2 and tried to use Windows Media Center. If you have the My Movies add-in installed on Windows Vista beta 2, and checked the box during My Movies setup to add it to the Media Center Start menu, you will see Media Center crash when you try to launch it.
How to workaround this crash
If you have Windows Vista beta 2 installed and are running into this crash, you can workaround it in one of 2 ways:
1. Remove the registry value that causes the crash by doing the following:
2. Uninstall My Movies by doing the following:
Root cause within Windows Media Center
We investigated and tracked this down to a regression in Media Center functionality introduced in Windows Vista. We are receiving an exception while trying to load the Start menu items, and it isn’t being caught and silently ignored like it used to in Windows XP Media Center Edition 2005. You can see the exact exception by looking at the file %windir%\ehome\ehshell.crash in a text editor such as notepad on a system that experiences this crash.
Root cause within My Movies
While looking more deeply at this issue, we also found that the root cause of the exception that is being thrown is actually a bug in the My Movies setup. They have a custom action in their setup MSI that registers My Movies for the Media Center Start menu. I cannot tell what this custom action does because it is a DLL that takes command line parameters and from there it is a black box to me. However, the end result is that the registration for My Movies that gets created at HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Extensibility\Categories\Start Menu\{GUID} where GUID is the GUID for the My Movies application contains a TimeStamp registry value contains a REG_SZ string value that looks like “DWORD:086f4354.”
Media Center expects the TimeStamp value to be a REG_DWORD. In previous versions, it silently ignored this value, but in Windows Vista beta 2, it caused an invalid cast exception and then Media Center crashed. We have fixed the crash in our code this week, but the underlying bug in the My Movies setup is still there in the public version on their download site. I will have to try to get a hold of the author and let them know about this issue so they will hopefully fix their setup bug in the future as well.