Is Windows Vista really superior to all predecessor Windows operating systems? Well Microsoft is beating the old drum of Vista as the most secure Windows platform available since the introduction of the operating system.

source: news.softpedia.com

When I was looking at the documentation for the registry and keys associated with the command processor I came across this:

Hmm. For the fun of it I opened up the key and put ‘notepad.exe’ in the AutoRun value.(To see how this actually worked)

Any time I opened a console application, or a command prompt window notepad would launch - and the command processor would not start until it was closed. This includes the users login script.

So. This means whatever program I put in this key will execute, and the command processor will wait for it to finish before continuing.

This is perfect for something I was trying to do a few months back. I wanted to dynamically set a few environment variables - and have them available to any console based application. I tried putting it in the logon script, but that didn’t work since the environment variables only lasted for that session.

I ended up using the CALL command within each batch file I had. This was difficult because the batch files were part of an aging third party application - There were hundreds of them. Also some of them were automatically generated from time to time by the application, so the solution was not perfect.

I went back and setup my “set environment variables” batch file in the AutoRun key of the registry (Side note - make sure you put quotes around the full path of the filename in this key…or it will get lost on the first space it sees).

Then I removed my added call commands. Now when I ran any command prompt my custom environment variable script executed dutifully.

Better yet, since it is a registry key I was able to write a quick login script that updated all the clients on the network with the new setting.

I am not sure how often most administrators will need to use this registry key, since usually a login script will work for what you need. Still - the AutoRun key for the command prompt has its purpose. Now that you know it is there you have the option to use it when needed.

• Microsoft Releases “Administrative Templates” for Windows Vista
  If you have Vista machines in an Active Domain, here are the templates you need to manage them via GPO.
  (tags: GPO Domain )
• VIA HD Audio Driver Package v4.0a
  For Windows Vista, Windows Vista 64-Bit, Windows XP 64-Bit, Windows 2000, Windows XP Compatible with VIA HD Audio Codec VT1708 paired with VT8237A/VT8251 ( VT1708 )
  (tags: Audio Drivers )

Windows Vista operates external hard drives that are connected with USB differently than internal drives. Write caching is disabled so that you can safely remove the drive at almost any time. This is a great feature for USB thumb drives that are frequently inserted and removed from your computer. But if you have a large hard drive that is in an external enclosure that you never disconnect from your computer, write caching is also disabled which can decrease performance.

This tweak is going to show you how to increase the performance of your external hard drives by turning write caching back on as well as activating advanced performance. Let’s get started:

1. Click on the start button, then right click on Computer and select Manage.
2. Click on Device Manager on the side menu.
3. Expand Disk drives and locate your external drive from the list.
4. Right click on the drive and select Properties.
5. On the Policies tab, select Optimize for performance.
6. Next, check Enable write caching on the disk and Enable advanced performance as shown below.

7. Hit OK and reboot.

Enjoy the increased performance!

News Source: www.tweakvista.com

Well this entry deals with the current security setup I have on my computer.
And explains why I have them installed.

Security comes in several layers I’m not talking about OSI.

1. Router Firewall / NAT.
2. Software Firewall (Application based firewall)
3. Hostbased Intrusion Protection (HIPS)
4. Antivirus.
5. Anti Spyware.

1. The first one is pretty simple either you have it or you don’t.
My router I got with my broadband comes with NAT but no Firewall.
NAT = Network Address Translation.
NAT offers a nice first layer of defense for hackers, because they need to figure out what the internal network is.

The internal network can be easy to figure out on a specially crafted website, there are several websites that show your internal IP address on your network.

eg. http://ip-lookup.net/lan-address

You see its easy to get your local lan address.
Here are some Apache logs, I had apache running locally for MRTG and I had NOT done any portforwards on my router so my apache should not get any attempt from outside. (so why the hell did this happens on my system??, luckily the attempts are all unsuccessful)

[Wed Jan 31 23:00:33 2007] [error] [client xxx.xxx.xxx.xxx] File does not exist: c:/mrtg/wwwroot/scripts/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/winnt/system32/cmd.exe
[Wed Jan 31 23:00:33 2007] [error] [client xxx.xxx.xxx.xxx] File does not exist: c:/mrtg/wwwroot/scripts/../../../../../../../..//winnt/system32/cmd.exe
[Wed Jan 31 23:00:33 2007] [error] [client xxx.xxx.xxx.xxx] File does not exist: c:/mrtg/wwwroot/iisadmpwd/../../../../../../../..//winnt/system32/cmd.exe
[Wed Jan 31 23:00:33 2007] [error] [client xxx.xxx.xxx.xxx] File does not exist: c:/mrtg/wwwroot/msadc/../../../../../../../..//winnt/system32/cmd.exe
[Wed Jan 31 23:00:33 2007] [error] [client xxx.xxx.xxx.xxx] (2)No such file or directory: script not found or unable to stat: c:/mrtg/apache/cgi-bin/../../../../../../../../

Now that looks like a nice attempt by a script kiddie.

2. This could have been prevented if had installed an application based firewall.
Currently I run Comodo version 3.0.7.208 (which is beta) and should not be used because sometimes the configuration goes a wall. But you can save your config file if its ok and when it goes a-wall you simply reload the config file. This is a bit of a hassle but hey you get something nice back.

Comodo 3.0.7.208 (current beta = 3.0.8.214)
The new beta will address the config loss problem.
Opening a port on comodo can be quite tricky and this might be a problem for the regular home user who only wants to download a nice torrent file.

This option has been put away under firewall settings / advanced / network security / global rules. Took me 15 minutes to find it.

Comodo beta comes also equipped with defense+ which is an HIPS (Host based intrusion protection) This feature can work on your nerves as it really can ask your ears off.
But that is quite easy to solve by adjusting the settings.

3. Comodo comes equipped with a HIPS but I now run Threatfire on my PC. (because comodo asks your ears off)
Threatfire was formerly known as the artist Cyberhawk.
I love it, it tells you when something fishy is going on. It doesn’t ask your ears of like comodo defense+. I really think this is a necessary addon to your security.

4. Antivirus, most people do have an antivirus solution but forget to let it update.
Or they let the subscription run out, leaving the system open for new virusses.
I run Avast on my machine, you can request a free serial for updates.
Avast runs pretty flawlessly on my system and doesn’t render my pc useless when doing a scan like Kaspersky does.

5. Anti Spyware, I run Spyware Terminator and I’m really pleased about it.
There isnt much you can say about other then it really protects your system.
Hmm I went in again in the settings and it seems that it has now suddenly gained an HIPS as well. I’ve turned it on and I’ll see if it is any good.
I will let you know in a few hours.

All of these security doesn’t take more then 25 mb of memory which is quite acceptable.

I hope this makes your pc and home network a bit safer without crippling your systems.

Links.

Comodo Firewall.
www.personalfirewall.comodo.com
Threatfire
www.threatfire.com
Spyware Terminator
http://www.spywareterminator.com/
Avast
www.avast.com/eng/avast_4_home.html

Remember the video of a Ferrari crashing (lightly) when filming the new Project Gotham Racing 4 advertisement from a few months back? Well here’s the final version of the ad for PGR4 which features the non-crashing version of the stunt. Notably the company behind the visual effects, Method Studios, also produced the recent jaw-dropping Halo 3 “Believe” videos.

If anyone’s interested in the “making-of”, a few YouTube videos from bystanders have surfaced showing exactly what happened on the road.