When deploying updates for MS13-081, on multiple systems running Windows 7 Embedded SP1 x64, Usbser.sys is not being updated as it should be according to the KB Article.
An affected system reports the update as installed, and will not let me run the installer again without uninstalling first, bu...
The above problem was detected not by any updating system (MS Update, WSUS, and a couple others completely missed it), but by a dedicated vulnerability scanner.
Assuming the "home user" is knowledgeable enough to work through such issues, but not at all inclined to set up such an advanced application/server on their network specifically for checking these things, are there other ways they can monitor for failed updates when Windows itself doesn't recognize them?
The problem here appears to be a bit of naivete on the part of Windows Update. When the update is done running, it just writes a registry key or whatever to say "yup, this update was applied". Then any subsequent attempts to run the update just check for that key and say "nope, my work here is already done - screw off" without actually checking the files or other things that the update was meant to change.
@RоryMcCune well hey, I also dont drink the company kool aid.
or eat the company brownies.
but okay, indeed I havent seen it in a while. It was basically Paros, which while not the worst proxy, was pretty darn awful.
@TerryChia oh yeah, I paid so much cash monies for that.
problem is OWASP, like Apache, has waaay too many projects, the majority of which are either broken, useless, pointless, duplicate, or plain stupid. Or several of these.
@Adnan That's not really accurate. You need to get all the messages in the past 6 months that relate to infosec and see what percentage of that is from me.
I haven't mentioned any use of SHA1 or SHA2. That detail can be easily changed. How do you know what I use to come to that second problem? For the 'same user' problem on different sites, I would use the hashing of not just "user + password" but "serviceName + user + password". It would solve the two problems you mentioned. Note that for problem 2, one can prehash the 'user' or the 'service + user' part, so the second problem is not even a problem. But your answer is the best answer to my question. Many thanks. — randomA5 hours ago
sigh How many times do you have to repeat “don't roll your own” before it gets through?
Oh, well, it could be worse, at least the guy who said “don't use SHA-1, use a secure hash like SHA-2” deleted his answer
I passed CISM in 2008 for fun (flew through it- this is relevant not just boasting) however I didn't have the necessary ISM experience then and didn't get it before the 5 year deadline ran out December last year. And as information security isn't part of my core skill set this didn't bother me to...
@Adnan This is kind of funny, I sent you a message with the appointment time when I booked it, I told you today via message when you have it and I called you 45 min before the appointment that you need to remember it : D
@Adnan Sorry to hear that, love :( Excellent that you got an appointment not too far away from now. And make a calendar entry for the other appointment as well. And I don't mean the one you just received.
hmmm guys in my office says like he was bragging about getting a strip show for 50 cents and i was like man if i had to goto london why just limit yourself to fun?
then my friend said he stood up and took the stand and basically told the girl that hey u got no proof of anything u are saying so call police or anything he is not afraid...but i mean what the f why put urself in this position?
@DavidFreitag heh no that's a northern english accent you're hearing there rather than scottish and I'm not a subaru person, but I thought as others on here were it might be of interest....
@DavidFreitag hey that could've been me driving... if I was any good at driving quickly.. and had ever been to the nurburgring ... and had ever owned a subaru
I will be traveling abroad for several weeks on a business trip as a consultant.
I will carry a laptop with an IDE and all the necessary source code so I can make changes on site (which is the purpose of this trip). The boss is very worried about the source code being stolen.
I have put forward...
Protected status is an often-overlooked feature of Stack Exchange. It’s based loosely on Wikipedia’s semi-protection, and like that tool is meant to be a reaction to persistent abuse from anonymous or unproven participants: when a page attracts a lot of noise or vandalism from outside the community, Protecting it reduces the amount of clean-up needed later on.
Protected questions are not answerable by folks who haven’t earned at least 10 reputation from activity on the site where the question resides. This effectively means you need to have posted an answer somewhere else that’s attracted an up-vote or a question that’s earned two. …
@TerryChia @Xander we seem to have been mod abandoned @AviD is likely sipping a skinny half-caf soy latte whilst reading ruby code on his #shineymac and @RoryAlsop is probably doing 6 monthly HR reviews for his team at $largebank
@LucasKauffman you're not suggesting that people who know the aformentioned absent mod should go to his LinkedIn profile and endorse him for HR are you....
that would be terrible :op
that said "governance" was pre-suggested for him by linkedin which is barely better...
@Iszi lots of spam or low quality answers auto-protects the questions IIRC but the added traffic alone doesn't
I wouldn't mind if it auto-protected all SuperCollider questions on beta sites tho, I get sometimes really annoyed by what crap questions land on there and how many seem to want to answer it yet again in the same way that 10 others before already had
they also represent a nightmare for mods, with influx of new members with some having no problems suggesting what's good for the site and what isn't even though they opened one single page on it in their whole life
actually I'm not even that pissy today as it might sound like, why am I complaining? :)
@RоryMcCune Dude that's nearly 10 MB, if @RoryA is on his mobile he's gonna serve you a can of warm and well shaken stout next time you're at his place
@FEichinger cool I shall take your advice and avoid it :) it wouldn't be whatever is going down on reddit.com/r/gaming/ would it? I saw reference to there being controversy there but avoided visiting.
@Tildal @unpingable is right. Contract 4G no data cap - this is way faster than my home broadband. And I'm still in the venue after seeing Mark Watson!
Ditto, there's so many free hotspots here who needs 3G / 4G anyway ... plus, none of the providers here offer good roaming charges, so I don't care much for them. Ridiculous when you think how small this country is ...
Dear loan applicant,
Getting a legitimate loan have always been a big problem for customer the financial needs. Are you in any financial mess or do you
need funds to start up your own business? Do you need loan to settle your debt. The issue of credit and security is something that
customers are ...
CJam - 13
q~,>{mfW=}$0=
Try it at http://cjam.aditsu.net/
Example input: 2001 2014
Example output: 2002
Explanation:
q~ reads and evaluates the input, pushing the 2 numbers on the stack (say min and max)
, makes an array [0 1 ... max-1]
> slices the array starting at min, resulting in [min ...
@Xander I'm at 92 but not really sure how I can have one two spam flags that weren't considered helpful ... must be from when it was impossible to handle the flags individually
@TildalWave Interesting. I didn't know they ever couldn't be handled individually. I'm a perfect 97 for 97 on spam flags, but on regular flags I have 2 declined, 7 disputed, and 1 that disappeared into the ether. (My total flags count is one higher than active + helpful + declined + disputed) It used to be 2 higher, but has magically moved closer to reconciliation recently.
@TildalWave What gets my goat is when I flag a post as low quality for not answering the question, and then the author comes and improves it, and actually does answer the question, and I have no way to unflag it. I just have to sit and wait for the inevitable reviewed to come through and (rightly) dispute my no-longer-valid flag.
Possible Duplicate:
Flag removal: Is it possible to remove your flag or otherwise indicate it should be unflagged?
Change or reverse flag
I recently flagged a question by accident (I didn't read it properly) and wanted to retract that flag but there is no way to do that. I saw this p...
I will be traveling abroad for several weeks on a business trip as a consultant.
I will carry a laptop with an IDE and all the necessary source code so I can make changes on site (which is the purpose of this trip). The boss is very worried about the source code being stolen.
I have put forward...
CJam - 13
q~,>{mfW=}$0=
Try it at http://cjam.aditsu.net/
Example input: 2001 2014
Example output: 2002
Explanation:
q~ reads and evaluates the input, pushing the 2 numbers on the stack (say min and max)
, makes an array [0 1 ... max-1]
> slices the array starting at min, resulting in [min ...
Possible Duplicate:
Flag removal: Is it possible to remove your flag or otherwise indicate it should be unflagged?
Change or reverse flag
I recently flagged a question by accident (I didn't read it properly) and wanted to retract that flag but there is no way to do that. I saw this p...
