Ghacks is running on a linux rootserver. It should be fairly secure but there is always a chance that someone might get access to it and comprimise the system. One of the biggest threats is the installation of a root kit which will be used to access the system at a later time and clean tracks of logins that might have occured.

The article “How to scan your Linux-Distro for Root Kits” walks you through all steps of downloading and running a script that is able to detect some root kits.  Everything is explained in detail that even beginners will be able to follow the steps and check their system for possible root kits. If you don´t feel like compiling the script yourself you could try and use google to find a precompiled version and download that instead.

continue reading "How to scan your Linux-Distro for Root Kits"

It seems that the method that I previously posted is not working really well. If you rename the files windows will try and install the update again. Therefor one has to find another way to disable this, what we do is disable the execute bit on wgalogon.dll. That way, winlogon can’t call it as a notification package at boot, and since WgaLogon is responsible for running and maintaining WgaTray.exe, no more tray popups either. (source)

continue reading "How to disable Microsofts new Anti-Piracy Program Update"

Microsoft Windows users who are living in the U.S.,  U.K., Malaysia, Australia or New Zealand have to deal with Microsofts next step in their fight against piracy. A user who opted for automatic security updates might recieve the new anti-piracy tool which will install itself and ask for a reboot. After that reboot the license of your windows operating system is checked. You might see the following message:

This copy of Windows is not genuine; you may be a victim of software counterfeiting

Brian Krebs got some answers from Microsoft about this procedure, here are the interesting tidbits.

continue reading "Microsoft expands anti-piracy program"

You probably read my article about the bank heist in London where the robbers used a hardware keylogger to recieve sensitive information that allowed them to perform wireless transfers. The bank made the decision to super glue every cable to the back of the personal computer making it impossible to add the keylooger between the keyboard and the computer.

Well, there is another possibility which means more work for the user: Onscreen Keyboards. Microsoft Windows comes preinstalled with an onscreen keyboard, open up the run dialog and enter osk.exe.

continue reading "Defeating Hardware Keyloggers"

The study “password security: what users know and what they actually do” was conducted by the department of psychology from the Wichita State University. The study investigated the common password generation practices of online users. All participiants took part in a survey querying (1) the types and number of different password protected accounts maintained; (2) actual practices used in generating, storing and using passwords; (3) practices believed they should use in generating and storing passwords; and (4) general demographic information.The results are interesting:

• The average length of time users have maintained their primary personal use password was reported as 31.07 months
• How frequently do you change your password on a regular basis when not required by the system?â€? 52.7% (166) responded “Neverâ€?

continue reading "Password Security: What Users Know and What They Actually Do"