Jerry Bryant's Security Blog

jbmsft said:

Hello Mr. Jerry. What's your opinion on people who write viruses?

# October 8, 2003 11:50 AM

jbmsft said:

I don't have an opinion on the individuals who write them. The activity itself however is illegal and those who break the law should be delt with as the law dictates.

# October 9, 2003 6:09 AM

jbmsft said:

Way to go Jerry! I think your blog will be a great resource for all admins!

# October 9, 2003 10:09 AM

jbmsft said:

Is writing a virus illegal in the states? And should it be? They are just programs after all.

What I have a problem with is not people who write viruses but those who release them.

# October 9, 2003 11:26 AM

jbmsft said:

Robert, I suppose you are more correct. That is more of what I meant to imply. It's the release that is what's illegal. All though who knows how that might change.

# October 9, 2003 7:56 PM

jbmsft said:

Hi Jerry,

Thnx for this blog.

Here is ours in French : http://www.msmvps.com/XPditif/

All of the best,

JacK
MVP WindowsXP French

# October 12, 2003 12:43 AM

jbmsft said:

http://www.wilders.org/ and its forum

Advise on securing PC, etc...

Best Regards,

JacK

RSS Feed http://msmvps.com/xpditif/Rss.aspx

# November 2, 2003 11:54 PM

jbmsft said:

Provides security management services. Provides email notification of all published vulnerabilities on all platforms.

# November 10, 2003 2:11 PM

jbmsft said:

So this scroll bar bug everybody's complaining about doesn't warrant any special effort? I feel unloved!

# December 11, 2003 3:36 PM

I think everybody misunderstands why there were no patches. It wasn't so we could just give everyone a break or that we are not working on issues. It's because we will not release a patch until it's been tested as much as possible. For December, we didn't have anything that met the release criteria so nothing has gone out. Believe me, we love you! Just look at my face! :-)

# December 11, 2003 6:35 PM

jbmsft said:

I wasn't assuming that you guys were taking the month off. But viewed from outside, this situation is extremely disturbing. It's not just the delay, though that's bad enough. It's the fact that this bug has existed for so long without any official acknowledgment. No knowledge base article, no bulletin, nothing. If people outside of Microsoft hadn't traced down the origin of the bug, I wouldn't even know what patch to associate it with. And if you hadn't made that post at dslreports, I wouldn't even know for sure that MS was actually aware of the bug!

This is all on top of a large number of bug fixes that have themselves turned out pretty buggy. I think you'll forgive the user community for being concerned. If Microsft had any real competitors, they'd be sharpening their knives right now.

# December 12, 2003 8:38 AM

jbmsft said:

A bit chatty at first but now much more moderated. There's been some interesting discussions on having teams in your firms be [what I call] canaries... people who are your internal beta testers for your firm and your environment.

# December 18, 2003 8:11 PM

jbmsft said:

This will only affect user data passed at the beginning of the URL, correct? For example, if I have data such as a user's e-mail address placed in the arguments of an URL (http://testsite.com?page=Login&email=user@mail.com), then that usage will still be valid?

# February 2, 2004 7:59 AM

TrackBack said:

# February 2, 2004 1:50 PM

jbmsft said:

Correct. It only applies to URLs in this format:

http://username:password@www.microsoft.com

# February 4, 2004 6:47 PM

TrackBack said:

# February 5, 2004 9:40 PM

TrackBack said:

# February 8, 2004 10:51 AM

TrackBack said:

Security Guidance Center

# February 29, 2004 6:25 AM

jbmsft said:

You can disable this feature. (Quote from http://support.microsoft.com/?kbid=834489)

How to disable the new default behavior for handling user information in HTTP or HTTPS URLs
To disable the new default behavior in Windows Explorer and Internet Explorer, create iexplore.exe and explorer.exe DWORD values in one of the following registry keys and set their value data to 0.

* For all users of the program, set the value in the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
* For the current user of the program only, set the value in the following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE

# March 1, 2004 6:03 AM

TrackBack said:

[Docs] Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2

# March 19, 2004 5:41 AM

TrackBack said:

Exchange Security Best Practices

# March 19, 2004 5:47 AM

TrackBack said:

Exchange Security Best Practices

# March 19, 2004 5:48 AM

TrackBack said:

[Docs] Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2

# March 19, 2004 6:44 AM

TrackBack said:

Windows XP SP2 RC1 is now available to everyone

# March 22, 2004 5:55 AM

TrackBack said:

Windows XP SP2 RC1 is now available to everyone

# March 22, 2004 6:02 AM

TrackBack said:

# April 15, 2004 2:17 PM

jbmsft said:

cool site

# April 20, 2004 5:23 AM

TrackBack said:

# April 21, 2004 10:56 AM

TrackBack said:

# April 23, 2004 6:18 AM

TrackBack said:

# April 27, 2004 9:38 PM

TrackBack said:

[Site] TechED Bloggers

# April 29, 2004 4:16 PM

TrackBack said:

[Site] TechED Bloggers

# April 29, 2004 4:17 PM

TrackBack said:

Security in Longhorn: Focus on Least Privilege

# May 8, 2004 2:21 AM

TrackBack said:

Security in Longhorn: Focus on Least Privilege

# May 8, 2004 4:40 AM

jbmsft said:

I hope there emerge lots of application that do not require high privileges when users use... That kind of thing kills sysadmins. Really bunches of hall of shames out there...

PS: Jerry, please add my JP blog whose address is here to "other mvp blogs" section, too.

# May 9, 2004 1:21 AM

TrackBack said:

# May 11, 2004 12:51 PM

TrackBack said:

# May 13, 2004 12:14 AM

jbmsft said:

With technology like SUS err WUS, keeping your Windows networks patched is pretty darn easy. It makes you wonder why so many systems remain unpatched :(

# May 18, 2004 6:51 AM

TrackBack said:

Help: I Got Hacked. Now What Do I Do?

# May 19, 2004 7:29 AM

TrackBack said:

Help: I Got Hacked. Now What Do I Do?

# May 19, 2004 7:32 AM

jbmsft said:

LWN?
what's LWN?

# June 10, 2004 1:05 AM

jbmsft said:

thanks~:)

# June 10, 2004 1:13 AM

jbmsft said:

thank:)

let me look!

# June 10, 2004 1:14 AM

jbmsft said:

Favorite full system online AV scanner is Housecall - http://housecall.antivirus.com/housecall/start_corp.asp

Favorite single file online AV scanner (suspicious file - limit: 1 MB), I go to http://www.kaspersky.com/remoteviruschk.html

:)

# June 12, 2004 11:21 AM

jbmsft said:

http://www.virustotal.com

Let's you check a file against several antivirus engines (InnocuateIT, NOD332, F-Prot, AVP, McAfee, Norman, Panda, BitDefender, Antigen, Norton and TrendMicro)

# June 12, 2004 1:39 PM

jbmsft said:

Another good free online scanner is Panda:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

# June 12, 2004 3:57 PM

jbmsft said:

McAfee FreeScan:

Should viruses be found, FreeScan provides links to give you more information about the virus and what you can do to clean your system.
Doesn't clean/delete the virus(es)

http://us.mcafee.com/root/mfs/default.asp?cid=9914

# June 14, 2004 4:49 AM

jbmsft said:

Don't forget about AntiVir at http://www.free-av.com

# June 22, 2004 5:58 PM

jbmsft said:

buy the cd that are for sale here. then you learn to protect yourself and alternative hack back... but beware the 1337 h4x0r5..

# June 25, 2004 4:03 PM

jbmsft said:

Where do I get it free...

# July 4, 2004 9:55 PM

jbmsft said:

That's cool Jerry. Many users are using the freeware Doc Scrubber by Javacool - http://www.docscrubber.com/ to remove hidden datas in Word 97, 2000, and XP only but not with Excel, and PowerPoint files.

# July 13, 2004 2:07 AM

jbmsft said:

My Realtek RTL8029(AS) based ethernet Adapter is unable to get an Ip address from my di-604 router and windows said product not supported, what could be the cause

# July 24, 2004 10:36 AM

jbmsft said:

This was recently updated to version 1.1.

# July 29, 2004 1:44 PM

TrackBack said:

# July 30, 2004 10:32 AM

TrackBack said:

# July 30, 2004 10:39 AM

TrackBack said:

# August 7, 2004 4:07 PM

TrackBack said:

# August 7, 2004 4:18 PM

jbmsft said:

MSDN had it up yesterday, I already downloaded it from there twice.

Best regards
Beau

# August 7, 2004 11:08 PM

TrackBack said:

# August 8, 2004 12:29 PM

TrackBack said:

# August 8, 2004 11:39 PM

TrackBack said:

# August 8, 2004 11:41 PM

TrackBack said:

Froosh. Stuff. » Windows XP SP2 Release … soonish …

# August 8, 2004 11:57 PM

jbmsft said:

free download IIS 6.0

# August 15, 2004 5:39 AM

jbmsft said:

I think that for Windows users the GUI utility may be more handy - http://www.accuhash.com :).

# August 17, 2004 5:30 AM

jbmsft said:

Download XP SP2

# August 18, 2004 3:26 PM

jbmsft said:

jerry u r so k0000!

# August 25, 2004 12:18 PM

TrackBack said:

# August 27, 2004 4:28 PM

jbmsft said:

Armor2net Personal Firewall software provides a complete spectrum of Internet security and Internet privacy for computers. The program protects the computer from hackers, data thieves, and other Internet-based dangers.
For more information, please visit: <a href=“http://www.armor2net.com”>http://www.armor2net.com</a>

# September 6, 2004 1:36 AM

jbmsft said:

what see you correo

# September 8, 2004 9:34 AM

jbmsft said:

This key is valid ONLY for SP2 or for all new updates until April 12, 2005 ?

Tks in advance,

Jorge

# September 11, 2004 4:35 PM

jbmsft said:

Interesting!

# September 12, 2004 6:22 AM

jbmsft said:

Only for Windows XP SP2. If set correctly, WU/AU will not offer SP2. Once the end date have been reached, the key will be ignored.

# September 12, 2004 9:02 PM

jbmsft said:

We have installed SP2 on a total of 4 machines. 3 dell desktops and one HP notebook. We are having a problem inside our network with the new firewall enabling itself upon startup. We select to turn it off but with in 20 mins of doing work on the PC that involves using the internet our desktop users cannot get out to the internet. Now we can ping Websites, Our Main Server, ETC. But nothing can be surfed. Any ideas??

# September 16, 2004 6:19 AM

jbmsft said:

I have the same type of problem... After SP2 I loose Inet connection for 1-2 min. with 15-20 min. intervals. The connection returns but this is rather troublesome for me since I play a MMORPG alot :-). Any clue as to what is causing this behaviour would be most welcome!

-Dbj

# September 22, 2004 11:08 AM

jbmsft said:

This is cool! Thanks for offering this up.

I've taken this key and created a policy template file, to use to deploy the restriction. See http://tfl09.blogspot.com/2004/09/configuring-usb-devices-to-be-readonly.html for my 1st attempt at an .adm file! I hope I got the key values the right way around!

Out of curioisity, why wasn't this key put into the policies subkey? Makes management harder this way.

# September 25, 2004 11:22 AM

jbmsft said:

How can I use this document to prevent non-domain computer from access domain resource (ex. share folder..)

# September 28, 2004 5:56 PM

jbmsft said:

:')

# October 6, 2004 2:19 PM

jbmsft said:

this is about Flash not displaying on Internet Explorer showing error

THe flash script you are generating is now being blocked for security reasons by Microsoft Windows for anyone who seems to have loaded the Service Pack 2.

# October 11, 2004 1:53 AM

jbmsft said:

I have also noticed this in our corporate enviroment and at home, I lose connection every 15 mins at home to irc and aim, the only viable solution I have found is to Enable the firewall and add exceptions for programs I am using.

Even disabled it appears the firewall is still active and in the corporate enviroment has caused slowdowns in outlook. Hope this helps

# October 13, 2004 11:15 AM

jbmsft said:

Works just fine and fast on Belgian DSL network

# October 22, 2004 7:36 AM

TrackBack said:

IE Security

# October 23, 2004 4:14 AM

jbmsft said:

I got the same problem but how I fix it. I use the mozilla firefox browser and it can´t conect either and windows messenger service is death.

# October 27, 2004 6:09 AM

TrackBack said:

# October 30, 2004 1:52 PM

jbmsft said:

i recently downloaded sp2 and since then when i go to open links from a web page the screen opens up clear and with no real evidence of opening this may be a settings problem please help me for some reason links from web pages will not open.
emial: jokerjames1@yahoo.com

# November 6, 2004 8:25 AM