Windows RunAs Password Length Vulnerability

Monday, January 26th, 2009

The 'RunAs' application included with Microsoft Windows is prone to a local information-disclosure vulnerability that may reveal information about password lengths. A local attacker may exploit this issue to gain information about user passwords. This may aid in further attacks, such as brute-force or dictionary attacks against passwords. An attacker requires local, ...

Firefox Tweaks To Double Your Browsing Speed

Sunday, January 25th, 2009

By tweaking the way Firefox handles some caching functions, you can dramatically improve page load speed and even prevent Firefox from hogging your system resources while minimized. If you don’t currently have any experience playing with your configuration file, don’t be scared. Just follow the simple instructions, take your time ...

Microsoft’s Malicious Software Removal Tool (MSRT) Does Have A GUI Afterall

Friday, January 23rd, 2009

Yes, Microsoft's Malicious Software Removal Tool (MSRT) really does have a GUI and can be run on-demand. On Windows XP, click Start >Run and type mrt and press Enter.  In Vista, click Start and type mrt into the Search box and press Enter.  This launches the GUI for the tool: Press Next ...

Windows worm trickery for Vista

Wednesday, January 21st, 2009

Drives such as USB sticks infected with the virus trick users into installing the worm, according to researchers. The "Autoplay" function in Vista and early versions of Windows 7 automatically searches for programs on removable drives. However, the virus hijacks this process, masquerading as a folder to be opened. When clicked, the ...

Encryption programs open to kernel hack

Thursday, January 15th, 2009

Many popular Windows encryption programs that hide files inside mounted volumes could be fatally compromised by a new type of attack uncovered by a German researcher. According to a paper published by Bern Roellgen, who also works for encryption software outfit PMC Ciphers, such OTFE (on-the-fly-encryption) programs typically pass the password ...