Wednesday, April 8, 2009

Public Computers Made Safe - Security Tools and Tips

No matter how good a PC you have at home, there are often times that there is no other way but to use a public computer to get the work done.

When I say public computers I refer to computers at airports, cyber cafes, libraries or even a friend’s computer. Beware the computer may be spying on you!

This guide applies to those situations where you have to use anything but your own PC. So I invite you to Make Use Of these:

Tip 1: Use portable software or LiveCD wherever possible

Here are some of the tools you might want to consider:

Mojopac - Sits on your USB drive and gives you your very own operating environment.

Portable Firefox - The Web Browser is your door to the Internet, so first and foremost secure it. Use the portable version of Firefox from you USB drive as opposed to the browser on the public computer.

Portable IM solution - Use portable Miranda or Pidgin (I know not very handy and fun to use, but we are talking security here!)

Web Messengers - Or you can use Yahoo Messenger for the Web, Meebo,Google Talk.

Use LiveCDs - Ubuntu, Knoppix are some good options.

Tip 2: Choose a computer where there is less interruption

Something like a computer in the corner will be just fine. This not only helps you to concentrate but more importantly from a security point of view it keeps shoulder surfers away from you. Needless to say don’t enter passwords when some one is standing next to you, how uninterested he or she may pretend.

Tools for this - Something that sits between your ears!

Tip 3: Don’t leave any downloaded or newly created file on the hard disk

Tools for this - Although a simple Shift + Delete (please don’t just delete) will do the trick but if you want to be totally sure that no one can access it then use: UltraShredder (It’s Portable too) - or maybe you know of a better program that you can recommend?

Tip 4: Entering Login Information and Passwords

The computer you use may have a keylogger software on it that may record the passwords as you type, but some tools and steps can be taken to minimize the damage.

Tools for this - Use Windows On-Screen Keyboard (press Win + U and select On-Screen Keyboard) to enter the passwords or you can use KeePass Password Safe to store your passwords and then you can directly insert the password or copy/paste from KeePass so that you fool the keylogger.

Or you can type the password randomly in a text file and then copy paste from there in random order. e.g to type MyPassword you could write rdPasswoMy and then copy paste in correct order(requires some work, I know).

Tip 5: Clear theTraces

Delete the History, Temporary Internet files, and stored passwords and cookies from within the browser.

Internet Explorer 7 - Click Tools and then Delete Browsing History > Delete All

Internet Explorer (Older versions) - Click Tools and then Internet Options. On the General tab, under Temporary Internet files, click Delete Files, and then click Delete Cookies. Under History, click Clear History. Delete all the files in the temporary folder of your user account which you can find by browsing to C:\Documents and Settings\username\Local Settings\Temp.

Firefox - Click Tools then click Clear Private Data.

Clear the Pagefile

You will need to access the Local Security Policy, To access Local Security Policy, open Control Panel, double-click on Administrative Tools, and double-click on Local Security Policy. Then, click Security Options in the right-hand pane and scroll down to Shutdown: Clear Virtual Memory Pagefile. Double-click that item and make sure it’s enabled.

Tip 6: Always Logout

As elementary as it may seem, many people for one reason or another can leave one or another account logged in. This is easy to do if you are using IMs, Browser, FTP, etc.

Tip 7: Don’t buy or give personal information

No matter how much of a geek you are, lets face it some information must NEVER EVER be given when on public computers. This includes credit card numbers, paypal accounts or any other personal information.

Tip 8: When you are done - Do a reboot

Reboot the computer when you are done using the computer and have taken care of all the above steps, this will not only clear the RAM, it will also clear the pagefile.

Have I forgotten anything? Let me know in the comments!

Wednesday, April 1, 2009

How to reset Forgotten Password in XP

Can't Log On to Windows XP?

If that’s your only problem, then you probably have nothing to worry about. As long as you have your Windows XP CD, you can get back into your system using a simple but effective method made possible by a little known access hole in Windows XP.

This method is easy enough for newbies to follow – it doesn’t require using the Recovery Console or any complicated commands. And it’s free - I mention that because you can pay two hundred dollars for an emergency download of Winternals ERD with Locksmith which is a utility for unlocking lost Windows passwords. See here: It is on the Winternals site.

ERD is an excellent multi purpose product, but you should know it is not a necessary one if you have a healthy system and your sole problem is the inability to logon to Windows due to a forgotten password. Not necessary because you can easily change or wipe out your Administrator password for free during a Windows XP Repair. Here’s how with a step-by-step description of the initial Repair process included for newbie’s.

1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair.

It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”

Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”

9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

I tested the above on Windows XP Pro with and without SP1 and also used this method in a real situation where someone could not remember their password and it worked like a charm to fix the problem. This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor, for example. And its gui access with mouse control. Of course, a Product Key will be needed to continue with the Repair after making the changes, but for anyone intent on gaining access to your system, this would be no problem.
And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.

Online Operating System.

Link:
http://www.oos.cc/login.html

Your Personal Online Desktop

Get your free Online Operating System account now and experience the next generation of the World Wide Web with your personal online desktop. Gain access to an entire operating system running in your browser.

A Multiplicity of Applications
Even at this early stange, OOS already provides an amazing number of useful applications and services: Organize your files, documents and personal data from anywhere around the world.

Online Collaboration
Our primary goal is to provide our users with the highest level of usability and all necessary means to facilitate online collaboration. For instance, intuitive drag and drop operations are used wherever they are expedient and you can share your data with other users.

Your Personal Website
Every activated OOS account comes with 1 GB of disc space for your online photo album and your public homepage. Both are easily accessible for everyone via your personal domain http://.oos.cc.