Microsoft maintains a download page with lots of nifty tools for Exchange 2003. For example, the Archive Sink (which I talk about in ch 9 of the new book) is there, as is ExMerge and a utility for programmatically setting the allow/deny IP list on SMTP virtual servers. Check it out– most of the tools are for Exchange 2000 and 2003, but a few (like MDBVU32) are useful for any version of Exchange.
Exchange 2003 tools center
Comments Off on Exchange 2003 tools center
Filed under General Stuff, Musings
New release: Securing Windows 2000 Server
Kurt Dillard of Microsoft was kind enough to let me know of the re-release of the Securing Windows 2000 Server solutions guide. This guide is a beefed-up revision of the original, released in February. It’s worth your reading time.
Comments Off on New release: Securing Windows 2000 Server
Filed under General Stuff
West Wing marathon
Not that I plan to watch it, but Bravo is planning a Left West Wing marathon on Sunday, 8/17. You may wish to TiVo accordingly. (hat tip: Gartenberg).
Comments Off on West Wing marathon
Filed under General Tech Stuff
Artima, the Buzz, and a new blog
Thanks to a tip from the world-famous Dan Fernandez, I joined the Artima Buzz; in fact, I’m now the only blog in the Windows category, although I don’t expect that to last for long. During my browsing, I found Kimber Staken’s blog, which has a lot of interesting Mac OS X and Tablet PC stuff (here’s my current favorite).
Comments Off on Artima, the Buzz, and a new blog
Filed under General Tech Stuff
Our next house
I’ve found the perfect house for us: an old missile silo. Arlene won’t have much gardening room, but think of the food storage possibilities!
Comments Off on Our next house
Filed under General Tech Stuff
Greater love hath no man
Greater love hath no man than this, that a man lay down his life for his friends. However, this has got to be a close second: a man gave up 60% of his liver to give his wife a transplant. Wow. Talk about love and faith combined.
Comments Off on Greater love hath no man
Filed under Spiritual Nourishment
Attention Kyocera 7135 owners
That would be, at a minimum, Julie and Mike. After seeing this post on SmartphoneSource, I ordered a headset, travel charger, car charger, and battery for the whopping sum of $62– that’s less than the battery alone from Verizon (if they had any, which they don’t.) Everything except the battery arrived yesterday, but I knew the battery was backordered, so no worries there. Everything I got is genuine Kyocera gear and works like it’s supposed to. I’m delighted, and I highly recommend Dan’s Cellular.
Comments Off on Attention Kyocera 7135 owners
Filed under General Tech Stuff
You can have my TiVo…
either when a) you pry it from my cold, dead hands or b) when there’s a similarly capable product that can record and play back HD content. Gartenberg says it’s time to drop TiVo in favor of the Windows Media Center Edition. MCE has some undeniably cool features, but it’s still expensive relative to TiVos (although it can do some stuff that TiVo presently can’t). Something to look at as I consider whether to buy the new Dish PVR (which does HD and also acts as both a satellite and over-the-air HD decoder), the announced-but-still-vaporware HD-capable TiVo, MCE, or nothing at all.
In other TiVo-ish news, there’s a cool blog focusing on personal video recorders; lots of news if you’re interested in that sort of thing. (Hat tip: Gartenberg).
Comments Off on You can have my TiVo…
Filed under Uncategorized
Teeny tiny WiFi card
I just found this review of a new SanDisk combination flash memory/wireless card. Must… resist… credit… card….
Actually, resisting isn’t so hard; from the manufacturer’s site, it looks like the card won’t ship until next week, and won’t have Palm OS drivers until the fall sometime.
Comments Off on Teeny tiny WiFi card
Filed under General Tech Stuff
Tablet PC blog
This guy has an interesting blog, but I’m a little concerned that he named his Tablet “Bonnie”.
Comments Off on Tablet PC blog
Filed under General Tech Stuff
Scoble on Tablet PCs
Scoble has some comments on tablets. He correctly points out that many customers are waiting for Centrino-based tablets from HP, IBM, and so on, instead of buying lesser-known brands like Acer. My Acer experience so far has been terrific: I bought a 9-month-old demo unit, sent it in for warranty service on Monday, and am expecting it back tomorrow (it’s already shipped) with everything fixed. That’s the same speed and accuracy of service I’ve gotten in the past from Apple and IBM. I do like the idea of a faster Centrino-based tablet, but so far the proc speed of the C102 has been acceptable, especially on a price/performance basis.
Comments Off on Scoble on Tablet PCs
Filed under General Tech Stuff
Beatallica!
If you’ve ever wondered what Beatles songs would sound like if performed by Metallica, wonder no more.
Comments Off on Beatallica!
Filed under Musings
Taking the tablet plunge
I’ve been idly considering buying a Tablet PC for a while. I went to Sams’ yesterday to look for toilet paper and paper towels, and I ended up with an Acer TravelMate C102 tablet. This is one of the original Tablet PCs; it has a Pentium-III 800 CPU, a 20 (or maybe 30, I forget) GB drive, and 256MB of RAM. It also had lots of scratches on the case and a little sign saying “last one– $1168”. At that price, and given Sams’ 6-month return policy, that seemed like a pretty good deal. (It turns out that the listed price of $1499 is actually more than what other Sams’ sell the same unit for $1387). Anyway, once I got it home, I was able to bring it right up, install the 27 security patches that WU recommended, and start tableting.
For now, it’s hard to tell whether I’ll keep it. Microsoft Reader is terrific (especially since MS is giving away three free full-length books each week). I love the size and form factor, realizing that this isn’t a replacement for my trusty ThinkPad. On the other hand… this unit is practically obsolete by tablet standards; for another $500 I could get a newer unit with a much faster CPU and more RAM (the C102 I have is limited to a max of 256MB). The keyboard has a terribly sticky space bar, and the rotating latch on which the screen pivots is very loose. Those should be fixable under warranty, though, so I’m going to keep this one for a month or so and see if I use it enough to justify keeping it. If so, then I’ll decide whether to keep it or buy a more powerful version.
Comments Off on Taking the tablet plunge
Filed under General Tech Stuff
John, c’mon down
John, you’re invited to come watch the race.
Comments Off on John, c’mon down
Filed under HDTV and Home Theater
Crack passwords in seconds! Not.
C|Net (and others, but I’m picking on them because their reporter should know better), are breathlessly reporting an allegedly new approach to breaking Windows passwords. The article conveniently ignores the fact that trading space for time is a well-known technique for lots of applications, and it presents without comment the claim that this is a major vuln. It’s not. Here’s why:
- The attack depends on breaking the LM hash, which is known to be weak. You don’t have to store it (read up on the NoLMHash setting); even if you have Win9x clients, you can install the directory services client and use NTLMv2. In fact, if you follow MS’ recommendation of using >15-character passphrases for critical accounts, you’ll find that no LM hash is stored for those passphrases.
- The space/time tradeoff doesn’t scale. Even if you just use upper case, numbers, and symbols, you will get somewhere around 3.37134E+14 different 8-character passwords on a standard US keyboard– you’ll get more if you include Unicode characters, which MS has been recommending for a while. Storing the hashes for that many passwords takes about 5.4 petabytes of space. Even if you manage to store that many password hashes on a disk, it is pretty unlikely that you will find a system fast enough to compare that many passwords in a matter of seconds. The problem still boils down to weak passwords, not to the fact that you can crack weak passwords in 13.6 seconds instead of 1 minute and 41 seconds. Weak passwords are still weak, regardless of how fast you can crack them.
- The only way to mount this attack is to grab the password hashes.
- If you gain physical access to the box, the stored hashes are effectively salted by syskey, so they’re not directly vulnerable.
- If you mount an online attack, you must either be admin or be able to get admin privileges to get the hashes from the LSA so you can attack them. If an attacker can get admin privileges, you have bigger problems than weak passwords.
Comments Off on Crack passwords in seconds! Not.
Filed under Security
