Bruter v1.0

Posted by jasper22 at 12:15 | Tuesday, April 27, 2010

Bruter is a parallel network login brute-forcer on Win32. This tool is intended to demonstrate the importance of choosing strong passwords. The goal of Bruter is to support a variety of services that allow remote authentication.

PasswordCard Hides Mentally Encrypted Passwords in Your Wallet

Posted by jasper22 at 10:53 | Monday, April 26, 2010

You want to use secure passwords, but you can't remember random numbers and letters. You'd also like a fail-safe plan, in case your computer password system goes bad. PasswordCard provides the best of both worlds, offering strong passwords with a wallet-based backup.

The PasswordCard itself is printed in color, and has different symbols heading each column, and a different color for each row.

Russian Hacker Selling 1.5M Facebook Accounts

Posted by jasper22 at 10:47 |

A hacker who calls himself Kirllos has obtained and is now offering to sell 1.5 million Facebook IDs at astonishingly low prices — $25 per 1,000 IDs for users with fewer than 10 friends and $45 per 1,000 IDs for users with more than 10 friends. Looking at the numbers, Kirllos has stolen the IDs of one out of every 300 Facebook users. Quoting: 'VeriSign director of cyber intelligence Rick Howard told the New York Times that it appeared close to 700,000 had already been sold. Kirllos would have earned at least $25,000 from the scam. Howard told the newspaper that it was not apparent whether the accounts and passwords were legitimate, but a Russian underground hacking magazine reported it had tested some of Kirllos' previous samples and managed to get into people's accounts.

Israel Repeals iPad Ban

Posted by jasper22 at 10:46 |

The ban has been lifted: The Communications Ministry announced Saturday evening that starting Sunday it will allow Apple's iPad tablet computer into the country, following two weeks of confiscations and confusion.

Meet WOFF, The Standard Web Font Format

Posted by jasper22 at 10:13 |

On April 8, 2010, Mozilla, Opera and Microsoft submitted the WOFF File Format 1.0 specification to the W3C. The submission was published on Monday, April 19 at http://www.w3.org/Submission/2010/03/.

Browser vendors and a growing number of type foundries now agree on a common encoding format for web fonts, thus closing an era of cross-browser incompatibility that began when IE4 and Netscape 4 first added support for downloadable fonts in 1997.

At the time, both Microsoft and Netscape implemented incompatible proprietary solutions. Netscape supported and later dropped Bitstream’s Portable Font Resource (PFR) format. Internet Explorer’s Embedded Open Type (EOT) supported the sub-setting and compression of fonts, as well as the definition of the origin policy for the font resource within the EOT file itself. Some font vendors have licensed their fonts for web use under EOT.

Ten years later, Apple added support for raw font linking to WebKit and Safari, allowing web authors to refer to raw TrueType or OpenType font files from their CSS stylesheets. Firefox and Opera followed but use of the feature was in practice limited to free fonts and specialist font obfuscation services like Typekit as font vendors were extremely reluctant to allow their intellectual property to be posted as-is on web servers. The typically large size of font files and the challenges involved in compressing HTTP responses for all users added practical challenges.

In March 2008, Microsoft submitted EOT for standardization to the W3C. Despite a large existing EOT-compatible IE installed base, a number of issues prevented consensus from emerging on the suitability of Microsoft’s format as a web font standard. At the W3C’s Technical Plenary that year, Microsoft indicated that a solution type foundries were comfortable with was essential to maximize author choice. In the summer of last year, such a solution emerged from a proposal by type designers Tal Leming and Erik van Blokland and Mozilla’s Jonathan Kew. The Web Open Font Format (WOFF) - an open, compressed encoding for sfnt-based font resources - was born.

Attach mdf file without ldf file in Database

Posted by jasper22 at 10:12 |

Background Story:
One of my friends recently called up and asked me if I had spare time to look at his database and give him a performance tuning advice. Because I had some free time to help him out, I said yes. I asked him to send me the details of his database structure and sample data. He said that since his database is in a very early stage and is small as of the moment, so he told me that he would like me to have a complete database. My response to him was “Sure! In that case, take a backup of the database and send it to me. I will restore it into my computer and play with it.”

He did send me his database; however, his method made me write this quick note here. Instead of taking a full backup of the database and sending it to me, he sent me only the .mdf (primary database file). In fact, I asked for a complete backup (I wanted to review file groups, files, as well as few other details). Upon calling my friend, I found that he was not available. Now, he left me with only a .mdf file. As I had some extra time, I decided to checkout his database structure and get back to him regarding the full backup, whenever I can get in touch with him again.

Technical Talk:
If the database is shutdown gracefully and there was no abrupt shutdown (power outrages, pulling plugs to machines, machine crashes or any other reasons), it is possible (there’s no guarantee) to attach .mdf file only to the server. Please note that there can be many more reasons for a database that is not getting attached or restored. In my case, the database had a clean shutdown and there were no complex issues. I was able to recreate a transaction log file and attached the received .mdf file.

There are multiple ways of doing this. I am listing all of them here. Before using any of them, please consult the Domain Expert in your company or industry. Also, never attempt this on live/production server without the presence of a Disaster Recovery expert.

USE [master]
GO
-- Method 1: I use this method
EXEC sp_attach_single_file_db @dbname='TestDb',
@physname=N'C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\DATA\TestDb.mdf'
GO
-- Method 2:
CREATE DATABASE TestDb ON
(FILENAME = N'C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\DATA\TestDb.mdf')
FOR ATTACH_REBUILD_LOG
GO

Method 2: If one or more log files are missing, they are recreated again.

Posted via email from jasper22's posterous

Network List Manager API wrapped for .NET

Posted by jasper22 at 10:11 |

One important feature in some of the modern application is the ability to interact with networks of various kinds. However, to get the information directly for a local network (the one the computer is connected to) some extensive API work is required. Windows API Code Pack (WACP) for .NET Framework wraps this API in a set of classes that can be used from a managed application, therefore the developer won’t have to use the system API directly.

The entire Network List Manager API in a managed application with WACP is based on the NetworkListManager class. The hierarchy of properties and methods is outlined below:

Accessing webcam in Silverlight application

Posted by jasper22 at 10:07 |

In this article, we will see how to access the webcam from silverlight application.

My XAML code will look like below

Here I have taken one rectangle and two buttons inside the the grid.

First button will start the cam to capture the image and second is used to stop the cam.

How to install a Silverlight Out-of-Browser application (XAP) silently?

Posted by jasper22 at 10:05 |

Silverlight 4 now has support for installing out-of-browser application silently. If you are new to Silverlight Out-of-Browser application development, you can read the complete guide in "How can you implement the Silverlight 3 Out Of Browser feature?" Also have a look into the following article to get the basic understanding of Silverlight 4 Out Of Browser feature "Silverlight 4: How can I create customized OOB Window?"

Hope, you read my previous articles on the Out of Browser application development and have confident building application. In those articles you have seen that I wrote code for installing the OOB application from browser window. Now imagine some scenarios where you want to install the Silverlight application (XAP) using your Installer silently without the user interaction. How can you do that? Silverlight 4 now came up with that feature for you. In this article I will describe it and after reading it you will be able to install your Silverlight OOB Application (XAP) silently in your local drive and can run it from the desktop or startmenu without opening the browser.

How Silverlight Out-of-Browser application works?

Before going to implement the feature we will first discuss how the Silverlight OOB application works. When you install Silverlight plug-in, it also installs an .exe file named "sllauncher.exe" which you can find in your "Program Files\Microsoft Silverlight\" directory. This exe file now has the capability to install your Silverlight OOB application silently without opening the browser window. If you have already installed your OOB application it will create a shortcut to launch the application from desktop or start menu. Right click on the shortcut & go to it's properties. You will notice that, the target location is set to "Microsoft Silverlight" and the target is set to something similar to the following line:

"C:\Program Files\Microsoft Silverlight\sllauncher.exe" 744317312.localhost

Storport ETW Logging to Measure Requests Made to a Disk Unit

Posted by jasper22 at 10:05 |

Greetings NTDEBUGGING community, Bob here again, and today I would like to let everyone know about a new feature implemented in the STORPORT.SYS binaries released in the following KB articles:

· KB 979764 (Windows Server 2008)

· KB 978000 (Windows Server 2008 R2)

Beginning with these new versions, it is now possible to measure timing statistics for requests made to a system’s disk unit. These measurements are taken at the lowest possible level of OS interaction with the storage adapter hardware, making it much easier to diagnose storage performance issues. The measurements are taken from the port driver, STORPORT.SYS, via ETW (Event Tracing for Windows). Windows drivers are implemented in a layered architecture, so in our case the STORPORT driver interfaces directly with the adapter or miniport driver. The STORPORT driver is responsible for managing requests and queues, and providing other upper level functions. Each miniport driver is specific to a particular storage adapter card, and knows how to deliver requests to the disk unit over the transport medium, like fibre channel for instance.

Configuring and Starting STORPORT ETW Logging

To measure storage performance, the user enters a threshold value via the GUI interface. (This can be scripted as well; see KB 978000 for details.) When an I/O time is equal to or greater than the entered threshold, an event 13 is written to the ETW log.

Here is a walkthrough to enable this feature via the GUI:

Click Start, type “perfmon”, and press ENTER to start Performance Monitor.

GetLastError on WinDBG

Posted by jasper22 at 10:03 |

Today, after a series of design posts, we'll be looking at something quite different.

If you happen to be debugging a native application, you may find yourself stepping through code that calls a Win32 API and then never checks the last error, maybe because it's only looking at the result for pass/fail information. The error is there somewhere, as of course GetLastError can get it, but how to get to it?

If you're using WinDBG, part of the Debugging Tools for Windows, there are two debugger extensions you can combine to get this information. The first is !teb. This extension will provide you with information on the current thread, with an output similar to the following. Don't worry if some of the fields don't match your output - the format for this command has changed over time.

0:001> !teb
TEB at 7FFDD000
ExceptionList: 76ffdc
Stack Base: 770000
Stack Limit: 76f000
SubSystemTib: 0
FiberData: 1e00
ArbitraryUser: 0
Self: 7ffdd000
EnvironmentPtr: 0
ClientId: 324.48c
Real ClientId: 324.48c
RpcHandle: 0
Tls Storage: 0
PEB Address: 7ffdf000
LastErrorValue: 2
LastStatusValue: 0
Count Owned Locks:0
HardErrorsMode: 0

Note the LastErrorValue field. This is the value that GetLastError reports; it lives at the thread level, which is how you can call into Win32 APIs from different threads and make sure each one gets its own value - it's a "thread global", if you will.

Особенности национальной… разработки дизайна Silverlight/WPF приложений в Adobe Photoshop

Posted by jasper22 at 10:02 |

В перерывах конференции «Visual Studio 2010: создание приложений будущего» обсуждались различные темы из жизни разработчиков. Один из коллег поднял вопрос о проблеме разработки дизайна Silverlight/WPF приложений. Первый ответ в виде шутки напрашивался сам собой: “Кесарю – кесарево, а Design для дизайна”. Но следующий вопрос заключался в том, почему некоторые дизайнеры рисуют Silverlight/WPF дизайн в Expression Design, а некоторые продолжают это делать в Adobe Photoshop/Illustrator и что с этим делать ?!

На первый взгляд может показаться, что проблемы-то и нет, ведь в Expression Design/Blend есть замечательный инструмент импорта файлов Adobe Photoshop/Illustrator и каждый рисует в том, в чем ему удобно, а в Blend-е импортирует полученное. Я не очень люблю делать обзоры типа “A” vs “B”, тем более продуктов из разной весовой и ценовой категории. И считаю, что каждый человек сам волен выбирать продукты для разработки - на основе здравого смысла (!), поставленной задачи, анализа преимуществ/недостатков, привычек/заморочек, цены и т.д.

Introduction to Security in .NET

Posted by jasper22 at 09:49 |

When working with Security , it is important to understand these 2 terms.

Authentication is the process of determining whether the user can access the system. Commonly used ways of authentication is the username and a password .

Authorization : Once the user is authenticated,this process identifies the level of access allowed to a given user .

Security in .NET can be achieved by

1. Code access security

CAS would determine whether the code has the ability to access the resource / file and whet actions code can take.

Code access securitty in .NET allows different segments of code to be trusted at different levels.

Eg : FileIOPermissions

PrintingPermission

RegistryPermission

2. Role based security

Role based security allows you to specify what permissions a particular user has , often based on the role/windows group . It is about what user can do based on the role or the identity .

Both Code access security and Role based security are based on the Permissions .

Both the above can be implemented via

1. Declarative

Here , Attributes are used to describe the security .The code/Methods are tagged with security attributes that identify the security rules ..NET automatically controls the access based on the security attributes .

It ensures permission demand is executed before the code runs .We can also prohibit the code to execute before it runs .

2. Imperative

Role based security in .NET

Posted by jasper22 at 09:49 |

Role based security needs authenticated information about the user in order to make some decisions about whether the user is authorized.

The 2 most important classes when dealing with Role based security are

1. Identity class that represents the individual user like the individual user name
2. Principal class that represents the roles associated with the user.

In windows, the Roles are much similar to the Windows Groups.

There are 3 types of identity

1. Windows Identity – This is the Commonly used identity class .The windows identity encapsulates the identity of the windows user .This will provide the information like name of the user, is the user authenticated etc.

We could also create our own identities and roles with Generic and Custom identity that are not tied with the windows identity and groups.

2. Generic Identity – accesses user information based on custom methods of authentication that we define and are independent of windows User / windows user groups .

3. Custom Identity – This can be defined by the application as per the needs.

Использование LINQ2SQL с MySQL

Posted by jasper22 at 09:48 |

Как известно, LINQ2SQL поддерживает работу только с СУБД от Microsoft (SQL Server и SQL Server CE). Для работы с другими СУБД (в частности MySQL) приходится использовать сторонние провайдеры. Об одном из них я и хотел бы рассказать.
DbLinq – свободный проект по добавление функционала LINQ к популярным СУБД, таким как Oracle, PostgreSQL, MySQL, Ingres, SQLite и Firebird.
И так, для работы с MySQL нам понадобится:

1) Собственно сам dblinq – (на момент написания поста последняяя версия – 0.20): http://code.google.com/p/dblinq2007/downloads/list
2) MySQL.NET Connector : Http://dev.mysql.com/downloads/connector/net

Скачиваем и распаковываем dblinq. Сразу можно удалить все файлы, кроме:

DbMetal.exe.config
DbLinq.dll
DbLinq.MySql.dll
DbMetal.exe

Копируем в эту же папку файл MySql.Data.dll, из каталога с MySQL.NET Connector.

Use Office 2010 to map a local drive letter to your free 25GB Live SkyDrive

Posted by jasper22 at 09:44 |

Live SkyDrive is an awesome service. 25GB of web storage for free? Yeah, that sounds good to me. Sure, the 50MB per file limit is a little bit of a downside but it's still a great place to store documents, music, and photos.

Heck, if you tell an app like 7zip to chunk big files up into 50MB pieces you can store whatever the heck you want. If only there was a way to access your SkyDrive storage like a local hard drive without an app like Gladinet or SD Explorer...Why, that'd make it like a free Dropbox account x 12.5!

As it turns out, there is a way to do that -- and it's pretty darn easy to do now that Office 2010 is here.

Here's what you'll need to to turn your SkyDrive into your Z: drive (or whatever letter you choose):

* Office 2010 -- a trial version or unexpired beta is fine
* a Windows Live account
* ...the ability to follow directions

That's about it. Let's go!

Customized Kymco scooter has elegance added with 100, 000 Swarovski crystals

Posted by jasper22 at 19:28 | Sunday, April 25, 2010

YouTube opens video rental store with decent prices, decent selection

Posted by jasper22 at 14:39 |

Although YouTube has long since given up on its paid download feature, the popular video site has moved on to something bigger and better: movie rentals. You can now grab a 48-hour rental from YouTube for anywhere between 99 cents and $3.99. YouTube's rental library started back in January, when it offered a selection of movies from the Sundance Film Festival, but it's now expanded into all kinds of Hollywood and indie flicks, and dropped the prices a little bit.

כך תעשו לכם כרטיס microSIM שיתאים ל-iPad

Posted by jasper22 at 14:36 |

למרות שמכשיר ה-iPad בגרסת ה-3G שצפוי להגיע בתחילת חודש הבא לא יהיה נעול למפעילה כלשהי, המכשיר יכלול כניסת microSIM בלבד שעדיין אינה נפוצה בעולם ובטח לא בארץ.

לפי הנתונים שפורסמו עד היום, עדיין לא ברור האם המעבר של אפל לשימוש בכרטיס השונה מכרטיס SIM סטנדרטי נבע כתוצאה מהרצון למנוע את הפריצות של המכשיר והעברתו לרשתות שונות או שהחברה פשוט הייתה מעוניינת לעבור לדור טכנולוגי חדש יותר (אף על פי שאין יתרון משמעותי ל-MicroSIM על ה-SIM עצמו למעט הגודל).

אבל עד שחברות הסלולר יעברו לשימוש ב-microSIM, ישנו פתרון פשוט וקל שיהפוך כל SIM לכרטיס microSIM שימושי.

כרטיס ה-SIM הסטנדרטי נמדד 15×25 מ”מ, בעוד שכרטיס ה-microSIM נמדד 12×15 מ"מ, כך שההבדלים הם רק בגודל. כל מה שצריך לעשות זה לגזור את ה-SIM שלכם לגודלו המקורי של ה-microSIM לפי התרשים ולהכניס את הסים למקומו. כמובן שלאחר השינוי ה-SIM לא יתאים למכשיר הסלולרי שלכם אך הרווחתם את אפשרות להשתמש ב-iPad בתקשורת דור 3. את ההוראות המלאות (באנגלית), תוכלו למצוא כאן. רק נבהיר כי לא בדקנו את הנושא בעצמו ולכן איננו יכולים להתחייב שזה אכן עובד. כמו כן, כל ניסוי כזה או אחר הוא על אחריותכם הבלעדית בלבד.

Windows MultiPoint Mouse Software Development Kit 1.5.1

Posted by jasper22 at 13:25 |

Windows MultiPoint Mouse Software Development Kit (SDK) gives education publishers the ability to build interactive applications that allow multiple students, each with their own mouse, to simultaneously engage on a single PC.

Jasper22.NET