Bienvenido! - Willkommen! - Welcome!

Bitácora Técnica de Tux&Cía., Santa Cruz de la Sierra, BO
Bitácora Central: Tux&Cía.
Bitácora de Información Avanzada: Tux&Cía.-Información
May the source be with you!

Tuesday, July 14, 2009

Synergie or KVM

Source
Patches

Running Synergy
Synergy lets you use one keyboard and mouse across multiple computers. To do so it requires that all the computers are connected to each other via TCP/IP networking. Most systems come with this installed.
Step 1 - Choose a server
The first step is to pick which keyboard and mouse you want to share. The computer with that keyboard and mouse is called the "primary screen" and it runs the synergy server. All of the other computers are "secondary screens" and run the synergy client.
Step 2 - Install the software
Second, you install the software. Choose the appropriate package and install it. For example, on Windows you would run SynergyInstaller. You must install the software on all the computers that will share the mouse and keyboard (clients and server). On OS X you'll just have a folder with some documentation and two programs. You can put this folder anywhere.
Step 3 - Configure and start the server
Next you configure the server. You'll tell synergy the name of the primary and secondary screens, which screens are next to which, and choose desired options. On Windows there's a dialog box for setting the configuration. On other systems you'll create a simple text file.
Note that when you tell synergy that screen A is to the left of screen B this does not imply that B is to the right of A. You must explicitly indicate both relations. If you don't do both then when you're running synergy you'll find you're unable to leave one of the screens.
Windows
On Windows run synergy by double clicking on the synergy file. This brings up a dialog. Configure the server:
  • Click the Share this computer's keyboard and mouse (server) radio button
  • Click the Screens & Links Configure... button
  • Click the + button to add the server to the Screens list
    • Enter the name of server (the computer's name is the recommended name)
    • Optionally enter other names the server is known by
    • Click OK
  • Use the + button to add your other computers
    • Using a computer's name as its screen name is recommended
    • Choose desired screen options on the Add Screen dialog
  • Use the controls under Links to link screens together
    • Click (once) on the server's name in the Screens list
    • Choose the screen to the left of the server; use --- if there is no screen to the left of the server
    • Choose the screens to the right, above and below the server
    • Repeat the above steps for all the other screens
  • Click OK to close the Screens & Links dialog
  • Use Options... to set desired options
  • If the server's screen name is not the server's computer name:
    • Click Advanced...
    • Enter the server's screen name next to Screen Name
    • Click OK

Now click Test. The server will start and you'll see a console window with log messages telling you about synergy's progress. If an error occurs you'll get one or more dialog boxes telling you what the errors are; read the errors to determine the problem then correct them and try Test again. See Step 5 for typical errors.
Step 5 - Test
Clients should immediately report a successful connection or one or more error messages. Some typical problems and possible solutions are below. See the troubleshooting and the FAQ pages for more help.

  • failed to open screen (X11 only)
    Check permission to open the X display;
    check that the DISPLAY environment variable is set
    use the --display command line option.

  • address already in use
    Another program (maybe another copy of synergy) is using the synergy port; stop the other program or choose a different port in the Advanced... dialog. If you change the port you must make the same change on all of the clients, too.

  • connection forcefully rejected
    The synergy client successfully contacted the server but synergy wasn't running or it's running on a different port. You may also see this if there's a firewall blocking the host or port. Make sure synergy is running on the server and check for a firewall.

  • already connected
    Check that the synergy client isn't already running.

  • refused client
    Add the client to the server's configuration file.

  • connection timed out
    Check that server-host-name is correct.
    Check that you don't have a firewall blocking the server or synergy port.

  • connection failed
    Check that server-host-name is correct.

If you get the error "Xlib: No protocol specified" you're probably running synergy as root while logged in as another user. X11 may prevent this for security reasons. Either run synergy as the same user that's logged in or (not recommended) use "xhost +" to allow anyone to connect to the display.
When successful you should be able to move the mouse off the appropriate edges of your server's screen and have it appear on a client screen. Try to move the mouse to each screen and check all the configured links. Check the mouse buttons and wheel and try the keyboard on each client. You can also cut-and-paste text, HTML, and images across computers (HTML and images are not supported on OS X yet).
Step 6 - Run
Once everything works correctly, stop all the clients then the server. Then start the server with the Start button on Windows and without the -f option on Unix and Mac OS X. Finally start the clients similarly. On Windows before clicking Start you may want to set the Logging Level to Warning so the logging window doesn't pop up (because you currently can't close it, just minimize it).
You can also configure synergy to start automatically when your computer starts or when you log in. See the autostart guide for more information.

Kon-Boot on a USB Flash Drive

Source
This is a place holder till I get the time to do a proper write up. Kon-boot is a cool tool you can download from http://www.piotrbania.com/all/kon-boot/ that boots from a CD or floppy and modifies memory to let you login without knowing a local account password in both Windows (even up to Windows 7) and Linux (not all distros). Kon-Boot is sort of a boot loader that let's you bypass having to use valid credentials when the OS finishes booting. Unfortunately, CDs are hard to put in your pocket, and many machines don't have floppies any more. What I needed was to be able to put Kon-Boot on my pico USB thumbdrive. I found some details online about how to get it on a thumbdrive using the floppy image and Unetbootin, but I had some problems with it doing an infinity loop when I tried to use Kon-Boot from a USB flash drive (worked fine on the same box from a CD). I read some of the comments on Raymond's blog, and someone pointed out the problem but did not really give the file changes to fix it (which I will give below). It seems when you boot Kon-Boot from a USB device, the USB device becomes hd0, but then Kon-Boot tries to pass on the booting process to hd0 (when the internal drive is most likely hd1 at that point) so you get the infinity loop or gray screen. I modified the syslinx.cfg to get it to work. Here are the steps to get Kon-Boot to work from a USB pen-drive:

1. Follow the directions at http://www.raymond.cc/blog/archives/2009/05/11/burn-iso-image-to-usb-flash-pen-drive-kon-boot-to-usb/ using the floppy image and Unetbootin.

2. Extract the files in the following zip to the root of your thumbdrive:

http://www.irongeek.com/downloads/irongeekusbkonbootfiles.zip

3. Tell your BIOS to boot from a USB drive (F12 on most Dell's brings up this boot device menu).

4. When the syslinux menu comes up, choose "1st Kon-Boot" first and step through it.

5. The 2nd time the syslinux menu comes up, choose the option "2nd try boot from drive C: as hd1".

6. If hd1 does not work, try hd2 and so forth until you get in. If you have a a multi-boot system you may get a boot error, but it still worked for me after I confirmed past it.

7. On Linux login as kon-usr at the terminal (not GDM/KDM/XDM). On Windows use any valid local user name and a blank password (or even gibberish, anything you type in as a password seems to work).

Thanks to the Pauldotcom guys for letting me know about Kon-Boot.

Kon-Boot

Source

Kon-Boot is an prototype piece of software which allows to change contents of a linux kernel (and now Windows kernel also!!!) on the fly (while booting). In the current compilation state it allows to log into a linux system as 'root' user without typing the correct password or to elevate privileges from current user to root.
For Windows systems it allows to enter any password protected profile without any knowledge of the password.

It was acctually started as silly project of mine, which was born from my never-ending memory problems :)
Secondly it was mainly created for Ubuntu, later i have made few add-ons to cover some other linux distributions.
Finally, please consider this is my first linux project so far :) Entire Kon-Boot was written in pure x86 assembly, using old grandpa-geezer TASM 4.0.

Additional notes:
Typical usage scenario:

LIWaP usage scenario:

1. Boot with Kon-boot CD or Floppy

2. When Linux is fully booted go to the console mode

3. Type 'kon-usr' as login, if it works you should be now in the system

4. !Remember! to restore the system when you are leaving, you can do this by typing 'kon-fix' as login again.

Sample console output:

Ubuntu 8.04 torpeda tty1
torpeda login: kon-usr
# id uid=0(root) gid=0(root)
# whoami root

Logging problem?

torpeda login: kon-usr
/bin/sh: Can't open kon-usr

FIX: type 'kon-fix' as login

:: Using Kon-Boot - Method type 2 - Setreuid privilege elevation

Use this instructions

:: Current Kon-Boot features

Feature

Supported

Disk access filtering (IVT)

Yes

System Address Map fixing for buggy BIOSES ('SMAP' entries)

Yes - basic

Multiple kernel signatures + no hardcoded kernel address

Yes

Deprotecting memory regions

Yes - basic through fixing cr0

Syscalls filtering

Yes

Finding kmalloc()

No - currenty omitted
NEW LINUX AND WINDOWS VERSION:

Kon-Boot Windows&Linux

Download



Floppy image:
DOWNLOAD

CD-ISO:
DOWNLOAD

Panda USB & autorun vaccine

Download
The Microsoft Windows Operating Systems use the AUTORUN.INF file from removable drives in order to know which actions to perform when a new external storage device, such as a USB drive or CD/DVD, is inserted into the PC. The AUTORUN.INF file is a configuration file that is normally located in the root directory of removable media and contains, among other things, a reference to the icon that will be shown associated to the removable drive or volume, a description of its content and also the possibility to define a program which should be executed automatically when the unit is mounted.

The problem is that this feature, widely critizised by the security community, is used by malware in order to spread by infecting as soon as a new drive is inserted in a computer. The malware achieves this by copying a malicious executable in the drive and modifying the AUTORUN.INF file so that Windows opens the malicious file silently as soon as the drive is mounted. The most recent examples of this are the W32/Sality, W32/Virutas and also the W32/Conficker worm which, in addition to spreading via a vulnerability and network shares, also spreads via USB drives.

Monday, July 13, 2009

UAC in Vista

How to disable the "User Account Control" in Windows Vista
  1. Open Control Panel.
  2. Under User Account and Family settings click on the "Add or remove user account".
  3. Click on one of the user accounts, for example you can use the Guest account.
  4. Under the user account click on the "Go to the main User Account page" link.
  5. Under "Make changes to your user account" click on the "Change security settings" link.
  6. In the "Turn on User Account Control (UAC) to make your computer more secure" click to unselect the "Use User Account Control (UAC) to help protect your computer". Click on the Ok button.
  7. You will be prompted to reboot your computer. Do so when ready.

Mic in track

Mic in track (as well as Line in track and Mixer in track) was the default name of a file created after recording with the program MusicMatch Jukebox. In the late 1990s and early 2000s, Mic in track files began appearing on file-sharing networks such as Napster, usually without the knowledge of their creators. Because of the unique name, voyeurs could easily search for the files and listen to audio of unknowing individuals performing karaoke or joking around with friends. Several websites are devoted to cataloging and featuring their favorite Mic in track files.
They represent unique examples of audio vérité.

Theft Recovery Software

Preyproject.com
READ
When you install Prey, you set up an email address and optionally a URL
(i.e. http://mypage.com/stolen_laptop).
Prey runs at a specified interval and checks the URL you previously defined. If the URL exists, Prey will gather the information and send it to the email address you set up. You can also not define a URL and in that case the program will send the data every time it runs.
Of course, Prey needs to have an active Internet connection to send the information. If the computer isn’t connected, Prey will attempt to connect to the first public Wifi access point available.
Installation
Linux users
Just download the package, unzip it and run the install script:

$ chmod +x install.sh
$ ./install.sh


Mac users
Just download the DMG package, mount it and run the installer.

Windows users
First of all, if you’re using XP or lower you need to make sure you have the .NET framework installed. You can download it directly from Microsoft’s web site.
After downloading the package, unzip and execute as an administrator PreyConfig.exe. Fill in all the fields, tick the “Activar Prey” checkbox and then click on “Activar”.
Installation notes

  • We recommend you use the default installation path for your system, since it’ll make it easier for updating or removing Prey in the future.
  • You should use the full URL in Prey’s setup, such as http://preyproject.com (not just preyproject.com).
  • If you are using Gmail as your SMTP server (smtp.gmail.com), the correct port is 587 an you need to activate SSL.

Updating
Same as above, just download the package and run the installer.
In both systems, the installer checks if there’s already a Prey installation in your computer and allows you to skip the configuration. However we recommend you configure the data again since the new version may have new features to configure.
Información recopilada:
  • La dirección IP pública y privada de donde esté conectado el ordenador.
  • El IP del gateway de la red (router, puerta de enlace) que está usando para salir a Internet.
  • La dirección MAC de la tarjeta o controlador de red por el cual esté conectado a la Red.
  • Si está conectado a una red WiFi, el nombre e ESSID de esta.
  • Un listado de conexiones activas en el momento en que se ejecuta el programa.
  • Cuánto tiempo lleva encendido el aparato.
  • Número de usuarios activos.
  • Un listado con los programas en ejecución.
  • Un listado con los archivos modificados en un periodo configurable por el usuario.
  • En caso que el ordenador tenga cámara, una foto de lo que en ese momento esté viendo la cámara.
  • Un pantallazo del escritorio, para poder ver qué está haciendo la persona que lo está usando.
--------------------------
LocatePC is free software, and runs unobtrusively on your computer, with no icons, popups or saved emails. If your computer is stolen then the thief will not even know that LocatePC is running, and as soon as they connect to the internet a secret email is sent to you containing the details that you need to track your hardware.
Requirements
LocatePC is designed to work with the majority of systems, however you will need to set up your email account so that it works with LocatePC.
  • LocatePC runs on Windows Vista/XP/Me/98
  • You will need to have a POP email account for LocatePC to send you email. You can get a free POP account that works with LocatePC from AOL, Bluebottle, Gawab or @inMail24.
  • LocatePC can only send email if a user is logged in to the PC, and the PC is connected to the Internet.
  • LocatePC does not support HTTP proxy servers, mail servers that use SSL or SPA or IMAP (including Gmail and Hotmail), or email accounts that only work when the PC is connected to a specific ISP.
---------------------------------
http://www.thelaptoplock.com/

LaptopLock protects the data and aids in the recovery process of a computer if it's stolen. The LaptopLock can:

  • Delete files (secure data wiping now available)
  • Encrypt files
  • Show a message to the user
  • Execute a program
  • Play a sound
  • Visible or hidden from user
How do I setup The LaptopLock?
Sign up for a free account to register the computer(s). Install the LaptopLock agent for Windows 2000/XP/Vista. Complete the setup wizard.
How does The LaptopLock work?
If the computer is stolen, login into your account, mark the computer status as stolen. As soon as that machine connects to the Internet, the actions you set during setup will execute. The LaptopLock will also try to find out as much as possible about the connection to help in recovery of the machine.
THE LAPTOPLOCK DOES NOT MONITOR OR RECORD USER ACTIONS. THE LAPTOPLOCK DOES NOT ALLOW ANYONE ACCESS TO YOUR COMPUTER OR DATA. THE LAPTOPLOCK CAN ONLY EXECUTE ACTIONS THE USER HAS PRE-PROGRAMMED IT WITH.

What if there is no internet connection?
If after a while LaptopLock has been unable to connect to the Internet, it could ask the user to verify their identity by asking for a password. This option is set during installation and depends on how visible LaptopLock's presence should be.
It's free for now.
It comes with no adware or spyware.
The LaptopLock agent is now at version .94, last updated 2/05/2007.