<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Eric-Taylor.com &#187; Security</title>
	<atom:link href="http://eric-taylor.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://eric-taylor.com</link>
	<description>Design &#124; Develope &#124; Deploy</description>
	<lastBuildDate>Wed, 09 Sep 2009 09:54:16 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>Judge: Americans can&#8217;t be forced to divulge crypto passwords</title>
		<link>http://eric-taylor.com/2007/12/judge-americans-cant-be-forced-to-divulge-crypto-passwords/</link>
		<comments>http://eric-taylor.com/2007/12/judge-americans-cant-be-forced-to-divulge-crypto-passwords/#comments</comments>
		<pubDate>Sun, 16 Dec 2007 00:57:00 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[In The News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/2007/12/15/judge-americans-cant-be-forced-to-divulge-crypto-passwords/</guid>
		<description><![CDATA[A federal judge in Vermont has ruled that prosecutors can&#8217;t force a criminal defendant accused of having illegal images on his hard drive to divulge his PGP (Pretty Good Privacy) passphrase. U.S. Magistrate Judge Jerome Niedermeier ruled that a man charged with transporting child pornography on his laptop across the Canadian border has a Fifth [...]]]></description>
			<content:encoded><![CDATA[<p>A federal judge in Vermont has ruled that prosecutors can&#8217;t force a criminal defendant accused of having illegal images on his hard drive to divulge his PGP (Pretty Good Privacy) passphrase.</p>
<p>U.S. Magistrate Judge Jerome Niedermeier <a href="http://www.volokh.com/files/Boucher.pdf">ruled</a> that a man charged with transporting child pornography on his laptop across the Canadian border has a Fifth Amendment right not to turn over the passphrase to prosecutors.</p>
<p><a href="http://www.news.com/8301-13578_3-9834495-38.html">read more</a> | <a href="http://digg.com/politics/Judge_Americans_can_t_be_forced_to_divulge_crypto_passwords">digg story</a></p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2007/12/judge-americans-cant-be-forced-to-divulge-crypto-passwords/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How To: Secure Windows XP</title>
		<link>http://eric-taylor.com/2006/01/how-to-secure-windows-xp/</link>
		<comments>http://eric-taylor.com/2006/01/how-to-secure-windows-xp/#comments</comments>
		<pubDate>Thu, 26 Jan 2006 18:23:16 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[Eric's Stories]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[How To]]></category>
		<category><![CDATA[MicroSucks]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/?p=70</guid>
		<description><![CDATA[Securing Windows XP can be a real chore if you do not know what you are doing, but there are some really easy ways to protect yourself. As we all know, Microsoft’s OS (Windows) is really insecure and easily hacked. Microsoft, in my opinion, doesn’t tell there users enough about the operating system, hence making [...]]]></description>
			<content:encoded><![CDATA[<p>Securing Windows XP can be a real chore if you do not know what you are doing, but there are some really easy ways to protect yourself. As we all know, Microsoft’s OS (Windows) is really insecure and easily hacked. Microsoft, in my opinion, doesn’t tell there users enough about the operating system, hence making new users prone to virus, spyware, and hijacking.</p>
<p>So here are some really easy things to do on your computer help protect your computer.</p>
<p><strong>1-Changing your boot sequence, and setting BIOS password.</strong></p>
<p>A person can easily still all the data on your hard drive by sticking in a live CD, like Knoppix, loading it up, and taking anything they want. They do this by putting in the CD to the drive, restarting your computer, changing the boot sequence to CD first, and booting their CD. When the user is in, they can take you SAM.SAM file (Windows Password File), crack it, and know your passwords.</p>
<p>It is really easy to fix this problem, but keep in mind, this will only discourage the hacker, or make slow him down, but it is not impossible to get around… like any other type of security.</p>
<blockquote><p>Restart your computer and wait until the boot diagnostic screen tells you that you can enter the CMOS Config. To enter the CMOS config, hold down the key your boot diagnostic screen says, it will most likely be the DEL, F2, or F12 key.<br />
Once you have entered CMOS, get to your boot loader page (all CMOS Configs are different, so I can’t really say where you will find it on your CMOS) Once located, change the setup to: FIRST= Hard Drive, SECOND= Floppy Drive, THIRD= CD Drive.<br />
Now go in CMOS and find your “Set Supervisor Password” and password protect CMOS so a hacker can not change your boot sequence.<br />
Save all changes</p>
</blockquote>
<p>It is as easy as that, but remember the CMOS password will only slow down the hacker, or discourages him, if he really wants to get into the CMOS, he must pull the battery from the motherboard, or reset the CMOS by using the jumper on the motherboard.</p>
<p><strong>2-Saving only NT Hash passwords</strong></p>
<p>Microsoft for some reason saves two password hash files when you save a password to say… your user. You get a LM hash file, and a NT hash file. The difference is that NT hash is newer, and more secure, and LM hash has been used since Windows 3.1.</p>
<p>The funny thing is that you DO NOT need the LM hash at all! Your computer will run perfectly fine with out it, making your computer more secure.</p>
<p>So let’s get rid of that nasty LM hash <img src='http://eric-taylor.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<blockquote><p>Log in as an Administrator<br />
Go to the “Start” menu and click on “Run”<br />
In the “Open:” text box type in “regedit” and click okay.<br />
On the left hand side of the window you will see a tree menu, click on the folder HKEY_LOCAL_MACHINE.<br />
Then click on SYSTEM, then CurrentControlSet, then Control, and then Lsa.<br />
On the right side you will see the register file called “nolmhash”, double click and open that.<br />
Change the “Value data:” to 0, and hit OK.</p>
</blockquote>
<p>That wasn’t so bad now was it?<br />
<strong><br />
3- CTRL+ALT+DEL Real User Check</strong></p>
<p>Some virus are coded to automatically login and begin to execute their code, we can easily stop them but screwing up there login code by making a user push CTRL+ALT+DEL, before logging in. In addition to that, we can change the login from the click and point to a user, to typing the in the Username, hence making your computer more secure (because the hackers won’t know your username).</p>
<p>In addition, say you have a little kid brother, or sister, and they love to screw with your computer. By doing the Real User Check, you can make it harder for them to login.</p>
<blockquote><p>Log in as an Administrator<br />
Go to the “Start” menu and click on Control Panel. (You may have to type “Control Panel” in your address bar in a explorer window if you do not see it on your start menu)<br />
Go to “User Accounts” Under “Pick a task…” click on “Change the way users log on or off”<br />
Uncheck “Use the Welcome Screen”.</p>
</blockquote>
<p>You will now be switched back to the classic login, which is more secure.</p>
<p><strong>4-Make a Lock Screen Shortcut</strong></p>
<p>It is just one of the many human urges we get when we see someone else’s computer, or user logged in and unattended to. One just loves to get on and dink around with another’s stuff to screw it up.</p>
<p>It is so easy just to log off, but we don’t want to because that means closing apps. and when logging back on we would have to load all of are startup items again. So make a handy shortcut right on your desktop that you can easily click and lock the screen allowing no one to make any changes to your computer while not having to close any apps.</p>
<blockquote><p>Right click on the desktop and click on New> Shortcut.<br />
A wizard will come up and ask you to “Type the location of the item:” Point it to your Windows/System32/rundll32.exe (example: C:\WINDOWS\system32\rundll32.exe) Click Next<br />
Name the shortcut something like… Lock Screen<br />
YOU’RE DONE! That easy!</p>
</blockquote>
<p>Well that was simple.</p>
<p>I hope you found all these tips helpful and trust me, it really does help. Questions are comments may be posted.</p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2006/01/how-to-secure-windows-xp/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Free High speed Internet</title>
		<link>http://eric-taylor.com/2006/01/free-high-speed-internet/</link>
		<comments>http://eric-taylor.com/2006/01/free-high-speed-internet/#comments</comments>
		<pubDate>Mon, 23 Jan 2006 16:27:57 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[Hacking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Software]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/?p=68</guid>
		<description><![CDATA[This simple guide shows you a couple tools helpful to logging into wireless networks whether they have encryption on our not. Read More]]></description>
			<content:encoded><![CDATA[<p>This simple guide shows you a couple tools helpful to logging into wireless networks whether they have encryption on our not.</p>
<p><a href="http://www.sheerboredom.net/modules.php?name=News&amp;file=article&amp;sid=79">Read More</a></p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2006/01/free-high-speed-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Feds want Google search records</title>
		<link>http://eric-taylor.com/2006/01/feds-want-google-search-records/</link>
		<comments>http://eric-taylor.com/2006/01/feds-want-google-search-records/#comments</comments>
		<pubDate>Mon, 23 Jan 2006 16:26:16 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[In The News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/?p=67</guid>
		<description><![CDATA[The Bush administration on Wednesday asked a federal judge to order Google Inc. to turn over a broad range of material from its closely guarded databases&#8230;Nicole Wong, an associate general counsel for Google, said the company will fight the government&#8217;s effort &#8220;vigorously.&#8221; Read More]]></description>
			<content:encoded><![CDATA[<p>The Bush administration on Wednesday asked a federal judge to order Google Inc. to turn over a broad range of material from its closely guarded databases&#8230;Nicole Wong, an associate general counsel for Google, said the company will fight the government&#8217;s effort &#8220;vigorously.&#8221;</p>
<p><a href="http://www.siliconvalley.com/mld/siliconvalley/13657386.htm">Read More</a></p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2006/01/feds-want-google-search-records/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DHS Shows How To Use Hacking Tools</title>
		<link>http://eric-taylor.com/2006/01/department-of-homeland-security-video-shows-you-how-to-use-hacking-tools/</link>
		<comments>http://eric-taylor.com/2006/01/department-of-homeland-security-video-shows-you-how-to-use-hacking-tools/#comments</comments>
		<pubDate>Wed, 18 Jan 2006 15:06:25 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[Hacking]]></category>
		<category><![CDATA[How To]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Videos]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/?p=66</guid>
		<description><![CDATA[The January 4, 2006 Dept. of Homeland Security Daily Infrastructure Report Highlighted a free online video and that shows the viewer the exact tools and procedures they need to hack into a person&#8217;s computer. read more]]></description>
			<content:encoded><![CDATA[<p>The January 4, 2006 Dept. of Homeland Security Daily Infrastructure Report Highlighted a free online video and that shows the viewer the exact tools and procedures they need to hack into a person&#8217;s computer.</p>
<p><a href="http://www.dhs.gov/interweb/assetlibrary/DHS_Daily_Report_2006-01-04.pdf">read more</a></p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2006/01/department-of-homeland-security-video-shows-you-how-to-use-hacking-tools/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How To: Exploit Windows to Your Own Advantage</title>
		<link>http://eric-taylor.com/2005/10/how-to-exploit-windows-to-your-own-advantage/</link>
		<comments>http://eric-taylor.com/2005/10/how-to-exploit-windows-to-your-own-advantage/#comments</comments>
		<pubDate>Wed, 12 Oct 2005 14:52:13 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[Exploits]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[How To]]></category>
		<category><![CDATA[MicroSucks]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/?p=53</guid>
		<description><![CDATA[Finding myself always being asked questions at school about hacking, security, and how to exploit the faults in the schools server, and not being able to answer them because of the simple fact that I’m in Cyber Corp (Geek Squad of the School, like the cyber police.) and how I could get in trouble for [...]]]></description>
			<content:encoded><![CDATA[<p>Finding myself always being asked questions at school about hacking, security, and how to exploit the faults in the schools server, and not being able to answer them because of the simple fact that I’m in Cyber Corp (Geek Squad of the School, like the cyber police.) and how I could get in trouble for letting the information out. It suddenly struck me that I should post these hacks, security issues, and exploits on “MY BLOG!!!? Yup…finally hit me that I could tell you everything you wanted to know about how to crack passwords, and why I hate Microsoft so much…are you ready?</p>
<p>One of the most annoying things about Windows is that in order to have a decent experience, you need to reformat and reinstall Windows once every 6 months at most, or you will have to endure the pain and suffering of all hell breaking loose on your computer, once a year. The reasons behind this are long and complex to an extent, but primarily they stem from the fact that Windows requires software manufacturers to repeatedly overwrite various shared components with their own custom versions, hence making them vulnerable. To make matters worse, software writers are allowed to pitch files all over your hard drive. On a good day an uninstaller will seek and destroy the majority of these files. So the uninstallers, if they don’t fail outright, leave a lot of junk behind. All of this leads to awful performance over time, and an increasing number of crashes and other crap. Since MicroSucks is so stupid and won’t get rid of there registries, and I have no clue why they hold on to them, spyware and viruses are easily tucked away hidden, until you do a spyware search.</p>
<p>So, you are going to reinstall Windows if you know what’s good for you. But if you are like most computer people, you took that stack of manuals and documentation that came with your computer and put it in a safe place, such as a fire, the trash, or even sold it on Ebay for that money you needed to pay that guy off for the bet you placed. Needless to say, that Windows serial number is long gone, or at the very least it is inconveniently located on the back of the machine partying with the elephant sized dust bunnies that have gathered in the darkness. But fear not my little hackers, code crackers, slackers, Eric has an answer! Windows being about as secure as the US-Mexico border will cough up the goods with a little persuasion from <a href="http://www.magicaljellybean.com/keyfinder.shtml">Keyfinder</a>. Best of all, it won’t cost you anything to regain this valuable string of letters and numbers. Of course, I am sure some people will put it to more nefarious purposes. You bad wittle kiddies. <img src='http://eric-taylor.com/wp-includes/images/smilies/icon_evil.gif' alt=':evil:' class='wp-smiley' /> </p>
<p>Speaking of nefarious (cool word huh), have you ever forgotten your administrative password for Windows (or maybe you need to break into your bosses email before he reads that email you accidentally sent to the whole company while drunk on Saturday night documenting his affair with the less-than-runway-super-sized-model, or for us younger tots, you want to show your teacher up for that “F? he/she gave you for proving him/her wrong)? Have no fear, MicroSucks comes to your rescue…again, with a handy knowledgebase article explaining just how one might go about this. (OK, this is another reason why MicroSucks… sucks, they tell you how to retrieve passwords on there own OS, which we all know only leads to the cause of havoc.) <a href="http://support.microsoft.com/?kbid=321305">How to log on to Windows XP if you forget your password or your password expires</a></p>
<p>I know there is still a lot of unanswered questions, and I know a lot of people want to know how I make my “programs? (*cough*viruses) and I know that people want to know how to successfully use NET commands non-remotely, and remotely, but I’m not going to answer those right now, I’ll leave you wanting more <img src='http://eric-taylor.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />  . If you have questions or comments, or need to know how to do something else, let me know in the comments. Until next time, enjoy! <img src='http://eric-taylor.com/wp-includes/images/smilies/icon_cool.gif' alt=':cool:' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2005/10/how-to-exploit-windows-to-your-own-advantage/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How To: Bypass  Windows Genuine Validation</title>
		<link>http://eric-taylor.com/2005/10/how-to-bypass-microsoft%e2%80%99s-windows-genuine-validation/</link>
		<comments>http://eric-taylor.com/2005/10/how-to-bypass-microsoft%e2%80%99s-windows-genuine-validation/#comments</comments>
		<pubDate>Wed, 12 Oct 2005 14:51:54 +0000</pubDate>
		<dc:creator>Eric Taylor</dc:creator>
				<category><![CDATA[Exploits]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[How To]]></category>
		<category><![CDATA[MicroSucks]]></category>
		<category><![CDATA[Notes]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://eric-taylor.com/?p=54</guid>
		<description><![CDATA[I know this is posted around in other places, and this “fix�? has been around ever since the beginning of September, but people still ask me if there is anyway they can get around stupid MicroSucks Windows Genuine Validation services when updating there pirated version of Windows XP. Yes, there is most defiantly a way, [...]]]></description>
			<content:encoded><![CDATA[<p>I know this is posted around in other places, and this “fix�? has been around ever since the beginning of September, but people still ask me if there is anyway they can get around stupid MicroSucks Windows Genuine Validation services when updating there pirated version of Windows XP. Yes, there is most defiantly a way, and I do know it. Let’s first discuss a few things.</p>
<p>1. What is Microsoft’s Windows Genuine Validation?</p>
<p>2. Why did Microsoft do that?</p>
<p>3. How do I bypass it.</p>
<p>Microsoft’s Windows Genuine Validation is basically code that is slipped onto your PC when you update Windows. If you have automatic updates on, it was even more hidden because Microsoft won’t tell you what they are putting on your computer until it’s there. Anyways…what it does is checks your version of Windows XP for a Genuine CD key. So if you have a pirated version of Windows XP on your computer, it is going to tell that your version isn’t genuine. If it isn’t a genuine version of Windows XP, you will not be able to receive any of the updates (like anyone does update anyways).</p>
<p>Microsoft did that because of the fact that they THINK they can stop people from paying for that OS. No one pays for it because of the hell Microsoft puts us through with their OS.</p>
<p>The fact of the matter is that Microsoft thinks they are smart, and they can stop us from pirating versions of there crappy operating system. Once you see the steps of bypassing this you will believe me when I say that “MICROSUCKS SUCKS!!!�?</p>
<p><em>Instructions:</em></p>
<p>Go to the Windows Update page. DO NOT CLICK THE “Custom�? or “Express�? buttons yet!</p>
<p>Copy and paste the following line into the address bar of your browser.</p>
<blockquote><p>javascript:void(window.g_sDisableWGACheck=&#8217;all&#8217;)</p></blockquote>
<p>Press Enter (THE PAGE SHOULDN’T CHANGE!)</p>
<p>Now you may click on one of the buttons “Custom�? or “Express�?</p>
<p>Told you it was so easy that it would make you go crazy. As you can see, it’s a simple JavaScript, by typing that into the browser and hitting enter; you disable that part of the code. <img src='http://eric-taylor.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p><strike><strong>UPDATED:</strong> You may not be able to bypass using that javascript code, but don&#8217;t worry there is another way. In IE go to Tools -&gt; Manage Add-ons -&gt; &#8220;Add-ons that have been used by IE&#8221; -&gt; Windows Genuine Advantage and check &#8220;disable&#8221;. Apply, hit Okay and reload the Microsoft Windows Update page.</strike></p>
<p><strike><strong>UPATED AGAIN: </strong>Because of recent changes of IE and Windows tring to secure paying customers before they release Vista, Microsoft has made these previous ways of getting around not possible, but do not fear, here is the new way.</strike></p>
<p><strike>1- Download all updates including windows genuine valdiation</strike></p>
<p><strike>2- Go to start, run, and type in regedit</strike></p>
<p><strike>3- Locate yourself to HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ policies \ EXT \ CLSID</strike></p>
<p><strike>4. There will be two files, one has no value, and the other one should be set to 1.<br />
Change the file value data that is “1″ to “0″.</strike></p>
<p><strike>5. Open windows update.</strike></p>
<p><strike>6. Select which way you want to go (either custom or express) it doesn’t matter at this point.</strike></p>
<p><strike>7. You will be asked to reinstall the Validation tool. DON’T DO IT! Instead…put the registry data variable string that you deleted back in with a value of 1</strike></p>
<p><strike>8. Click back and then click the update method of choice and voila!</strike></p>
<p><strike>There you go.</strike></p>
]]></content:encoded>
			<wfw:commentRss>http://eric-taylor.com/2005/10/how-to-bypass-microsoft%e2%80%99s-windows-genuine-validation/feed/</wfw:commentRss>
		<slash:comments>107</slash:comments>
		</item>
	</channel>
</rss>

