Friday, 18 November 2011

How To: Manage Your Passwords With Credential Manager in Windows 7 or in Vista

Credential Manager is a new SSO solution that Microsoft offers in WindowsServer 2003, Windows XP and also includes in new generation operating systems Windows Vista and in Windows 7.Single sign-on (SSO) is an approach that attempts to reduce the time users spend performing logon tasks and the number of passwords users must remember.Credential Manager is a central store for all of your usernames, passwords, and X.509 certificates. It’s based on a secure client-side credential-caching mechanism.

To use Credential Manager in Windows Vista:
  • Open Control Panel.
  • Open User Accounts.
  • Click Manage My Network Passwords on the Related Tasks panel (on the left side of the window). You’ll get a dialog box listing all of your stored usernames and passwords.
  • Add another username and password, or remove the existing ones or change their properties.
To use Credential Manager in Windows 7:
win7_faq_credentials
Microsoft’s new generation operating system Windows 7(code named as Vienna) will include a system for managing the online IDs, logons, and passwords that you must manage for all of the Web sites you visit.Dubbed Windows Credentials, this feature utilizes a KeyRing for storing online credentials and a Credential Manager user interface. These settings can be backed up to and restored from a secure online vault.

To access Credential Manager in Windows 7 go to Control Panel -> User Accounts -> Credential Manager

Create your own ANIMATED MOVIES for FREE


xtraNormal is a very cool beta web service that lets you create your own animated films using their very slick online moviemaker software.
make animated movie
Here is an example of a video created online by someone using xtraNormal:
http://www.xtranormal.com/watch?e=20081016002442979
Pretty cool eh!? The awesome thing about this site is that you don’t even have to register or create an account to start making your own animated movies. Just click on Make Movies at the top and you’ll be brought to the movie templates page. Here you can choose whether you want one or two actors (that’s the max right now) and if you want black and white or color characters.
make your own animated movie
Once you click on one of the characters, the main editing window comes up. On the left are the tools you can use to direct the action, such as cameras, animations, expressions, looks, pauses, etc. These are basically ways to direct the movie.
direct movie
In the middle is the actual script for the animated movie that you can just type! Yes, the cool thing is that you can just type the text and when you play the movie, the text will be converted into speech automatically for you! So no need to record audio or anything of the like. At the top, you’ll see the characters and you can click on either one to write the script for that particular character.
write movie script
Finally, at the bottom is where you can design the sets, actors and the soundtracks. You can change scenes, change how the actors looks, etc.
design movie scene
In order to create your movie, start by changing your actors and designing your scene at the bottom. When you click Change scene, you can choose from a whole host of template sets.
change movie set
Once you have done that, click Apply to make the changes. You can click the Action button at any time to render your movie and view it while you are making it. To start making scenes, all you have to do is drag and drop the items from the left onto the script boxes. Note that if you have two actors, you should press the + button to create one script box for each actor.
script block
Type the text and drag a camera or animation or expression into the text box. A pop up will appear with all of the different options, such as all of the possible camera angles for the shot.
camera angles
As you can see, this is very cool! You should obviously put a camera angle in first and then type text for the actor. You have to play around with it for a little while, but it only took me about 10 minutes to learn how to make a pretty awesome looking animated movie! Definitely a cool piece of software! Enjoy!

Thursday, 17 November 2011

Bizztrust : The Most Secure Android Phone


With companies these days justifiably concerned about the security of the mobile devices provided to their workforce, many workers find themselves carrying around two mobile phones - one for personal use and another for business. Sure, mobile phones aren't the huge pocket-stretching devices they once were but for the sake of convenience, one is most definitely better than two.

A new German project makes Android phones significantly more secure for business communications--this could change the way people use smartphones, entirely.The Germans are an efficient lot, and when it comes the quality of their automobiles, well Mercedes Benz, BMW and Audi says it all, don’t they? The Swedish are also in with a shout for the safest car in the market, but when it comes to having the world’s most secure Android-powered phone, the Germans have it down pat after discovering a method to develop super-secure virtual “work phones” on Android-powered devices.

A version of Android called BizzTrust creates two partitions in Android--one for personal use and another super-secure one for business. The new product has the potential to create headaches for Research In Motion (RIM), which uses security as a major selling point for BlackBerrys.
Features
  • Protection of business data
  • No restrictions for private use
  • Secure enterprise communication (encryption)
  • Remote management and update
  • Supports bring-your-own-device strategy
  • Automatic policy enforcement
This allows users to install all the potentially dangerous apps they like on the personal partition, while protecting access to business apps and data stored on the other partition. Even if attackers manage to infiltrate an unsecured app, they cannot use it to access company data, and the impact of the attack is confined to the private data on the smartphone.Users are able to switch between work and home functions with two clicks of the touchscreen while a color symbol lets users know whether they're in the business (red) or personal (green) area.

The modified Android software will debut on Tuesday, October 11 at the it-sa computer security show in Germany. Bizztrust is the end result of a joint effort by the Fraunhofer trade group and the Center for Advanced Security Research Darmstadt (CASED).According to CASED's Ahmad-Reza Sadeghi, the Android mod "significantly improves the security of today's mobile terminals at no cost to user-friendliness." Users toggle between their work and personal virtual phones by playing with a touchscreen slider; non-secure personal applications can be installed to their heart's content.

That approach may be convenient to workers, but their interests and those of an IT department can differ. Most employees would likely prefer unlimited use of their smartphones, installing and using whatever programs they like even though that can open the door to hackers seeking to attack a business.

FreeFloat FTP Server - Buffer Overflow Vulnerability


Ashfaq Ansari Reported FreeFloat FTP Server - Buffer Overflow Vulnerability. In computer security and programming, a buffer overflow, or buffer overrun, is an anomaly where a program, whilewriting data to a buffer, overruns the buffer's boundary and overwrites adjacent memory. This is a special case ofviolation of memory safety.Buffer overflows can be triggered by inputs that are designed to execute code, or alter the way the program operates.This may result in erratic program behavior, including memory access errors, incorrect results, a crash, or a breach ofsystem security.

This Exploit helps to gain remote access on FreeFloat FTP using FEAT command. Download Proof of Concept from Here and Exploit is Available here.
[Source]