Reverse-Engineering Exploits from Patches

Wednesday, April 23rd, 2008

The automatic patch-based exploit generation problem is: given a program P and a patched version of the program P', automatically generate an exploit for the potentially unknown vulnerability present in P but fixed in P'. In this paper, we propose techniques for automatic patch-based exploit generation, and show that our ...

New Ultimate Extras Released

Wednesday, April 23rd, 2008

If you're running Windows Vista Ultimate and noticed two new Ultimate Extras have shown up on Windows Update - don't worry, your eyes do not deceive! Today we released two new Ultimate Extras: Windows Sound Schemes and Windows DreamScene Content Pack #3. Windows Sound Schemes is a pack of 2 new ...

Troubleshooting Windows Update Issues with Vista

Monday, April 21st, 2008

If you are having problems getting certain updates installed on Vista, there are two places you can look to troubleshoot: %windir%\windowsupdate.log, a log file for Windows Update events %windir%\Logs\CBS\CBS.log, a log file that tracks events to the servicing stack These log files include the following fields: Time/Date Stamp, Message Severity, Message Source, Operation ...

Find all encrypted files

Monday, April 21st, 2008

You can use the EFSINFO tool to find all encrypted files on a volume. This tool is found in the Windows Server 2003 Support Tools on your product CD. To use this tool to find encrypted files, run the following from a command prompt: efsinfo /s:c: | find ": Encrypted" Why would ...

Disabling UAC for Only Administrators

Monday, April 21st, 2008

You can disable the—sometimes annoying—User Account Control (UAC) prompts for members of the Administrators group, while leaving them active for limited user accounts. This is great if you don’t want others accessing or changing system settings. Disabling the alerts, however, requires editing the Windows Registry: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Name: ConsentPromptBehaviorAdmin Type: REG_DWORD Value: 0 ...