Browse by Tags

All Tags » General Security » Windows 7 (RSS)

UDP and DTLS not a performance improvement.

Saw this update in my Windows Update list recently: http://support.microsoft.com/kb/2574819 As it stands right now, this is what it says (in part): OK, so I started off feeling good about this – what’s not to like about the idea that DTLS, a security...

Immutable Security Laws and Windows Sidebar Gadgets

Immutable Security Law number 1 : If a bad guy can persuade you to run his program on your computer, it's not your computer anymore I love the Immutable Security Laws – they strike a chord deep within me, and they’re a “go to” resource every time...

2ndAuth released for Windows 7, Windows Server 2008 R2

I’ve given some hints at what we’ve been working on lately, by my choice of article topics. Credential Providers have been my headache for a couple of months now, not least of which is because Microsoft haven’t quite provided all the working code they...

Command Line MD5 hash

A colleague asked me the other day what the command-line tool was for calculating MD5 hashes in Windows. In a moment of sanity, I told him that the usual tool was FCIV, the Microsoft File Checksum Integrity Verifier , but that you had to download it....

Starting to build your own Credential Provider

If you’re starting to work on a Credential Provider (CredProv or CP, for short) for Windows Vista, Windows Server 2008, Windows Server 2008 R2 or Windows 7, there are a few steps I would strongly recommend you take, because it will make life easier for...

Weird virus / anti-virus behaviour

My wife and I pent a while this weekend trying to figure out how to rescue a Media Center that seemed to be going a little loopy. The Windows Media Center application itself worked fine, as did Windows Media Player, Calc, etc. Only Internet Explorer was...

TLS Renegotiation attack – Microsoft workaround/patch

Hidden by the smoke and noise of thirteen ( 13! count them! ) security bulletins, with updates for 26 vulnerabilities and a further 4 third-party ActiveX Killbits (software that other companies have asked Microsoft to kill because of security flaws),...