Tuesday, February 19, 2008

"Online Fraud Threats Show Constant Evolution" provides the perfect example of why you can't regulate software security solutions. The criminals adapt (we are dealing with professionals now.

RSA observes that emerging threats, multi-channel fraud and exploitation of unprotected applications are among the latest patterns and trends this year.

Further more this software has become a business, complete with software subscription plans.

Crimeware is also on the rise—apparently so much so that crimeware developers are even offering upgrade packages to buyers in the fraudster underground. When crimeware becomes detectable by anti-virus providers, developers will deliver a new ‘undetectable’ variant at a minimal cost, the report said.

  And our banks response is to implement Wish-It-Was Two-Factor.  Even legitimate Multi factor Authentications is at risk,

A German-speaking hacker crew is looting commercial bank accounts in four countries using a custom-built Trojan put in place by expertly crafted and extremely focused phishing attacks, a security researcher said today.

The malware's most distinguishing feature, said Don Jackson, a senior security researcher at SecureWorks Inc., is its ability to mimic the steps the human account owner would take to move money  Sophisticated Trojan loots business bank accounts

The best thing the Government can do is regulate a mandatory disclosure policy of all exploits.  This should drive the market in the correct direction.

posted by Aaron Fischer on Tuesday, February 19, 2008 7:57:20 AM (Pacific Standard Time, UTC-08:00)   #    Comments [0]

I have noticed that Flash Player is not working any longer in Internet explorer 7 after my installation of Vista SP1.  Flash player works fine in Firefox.  Any one else notice this?  Reinstalling flash does not work.  This appears to be the same issue Vista had when it first shipped.

Update.

Adobe released a new version of their Adobe Flash Player version 9.0.124.0 after installing this version Flash once again works for me.

posted by Aaron Fischer on Tuesday, February 19, 2008 7:36:17 AM (Pacific Standard Time, UTC-08:00)   #    Comments [4]
 Thursday, February 14, 2008

In .n1.1 a mixed mode MFC 7 application could register for the System::AppDomain::CurrentDomain::UnhandledException event and receive notice of an unhandled exception.  This worked well for logging exceptions ( except a few rare cases were the frame work was dead).  However in .net 2.0 this has changed, according to the new documentation

In the .NET Framework versions 1.0 and 1.1, an unhandled exception that occurred in a thread other than the main application thread was caught by the runtime and therefore did not cause the application to terminate. Thus, it was possible for the UnhandledException event to be raised without the application terminating. In the .NET Framework version 2.0, this backstop for unhandled exceptions in child threads was removed, because the cumulative effect of such silent failures included performance degradation, corrupted data, and lockups, all of which were difficult to debug. For more information, see Exceptions in Managed Threads.

To register an event handler for this event, you must have the required permissions, or a SecurityException is thrown.

Pasted from <http://msdn2.microsoft.com/en-us/library/system.appdomain.unhandledexception(VS.80).aspx>

So rather then being able to log errors with a detailed stack trace we are left with a GPF error message. 

We can overload the WinAPP::Run function and insert a try catch block, but exception we catch will always be the same System.Runtime.InteropServices.SEHException.  Optimistically I opened a Ticket with Microsoft for a recommend way to intercept the real exception details or  find a work around to enable the  UnhandledException event.  Microsoft's response was use a try catch block.  This is not a realistic answer.  There are cases were nullreferance exceptions are raised from unmanaged code.  And as much as I would like to wrap every method in a try catch statement, some how this doesn't sound like a good idea.

My best alternative is to is to register for the win32 SetUnhandledExceptionFilter and allow for the creation of a minidump.  For this I found a nice little library clrdump.

As an aside I find it interesting that the best articles for structured exception handling are from an August 1998 Bugslayer article and January 1997

A Crash Course on the Depths of Win32™ Structured Exception Handling both from the The Microsoft Systems Journal.

posted by Aaron Fischer on Thursday, February 14, 2008 2:48:37 PM (Pacific Standard Time, UTC-08:00)   #    Comments [0]
 Tuesday, January 29, 2008

Sara published a Did you know that i have been looking for for ever how do I customize those toolbars with the functions I deem worthy.

Did you know... you can switch and swap buttons on the toolbars while the Tools - Customize dialog is showing - #139

Thanks for a great tip!

posted by Aaron Fischer on Tuesday, January 29, 2008 9:17:25 AM (Pacific Standard Time, UTC-08:00)   #    Comments [0]
 Sunday, January 27, 2008

It would appear one must have the correct time in order to get the time from time.windows.com.

  Funny I thought i was syncing because I don't have the same time.

image

posted by Aaron Fischer on Sunday, January 27, 2008 8:22:56 AM (Pacific Standard Time, UTC-08:00)   #    Comments [0]
 Wednesday, January 23, 2008

Last night My Linksys WRT54GS had the strangest issue.  All of the wireless systems were getting my full broad band connection speed how ever any of the wired connections were only pulling 1.5-3mb.

I updated my firmware from 1.50.5 to 1.52.2 every thing works fine now.  However I attribute this to the router rebooting itself rather then any thing firmware related.  With a little luck this issue won't come back on the new firmware.

It had to be a strange bug since before the reboot I was speed testing at 1.9mbs and after I received 19mbs. Kind of looks like if forgot to carry a 10 some where.

posted by Aaron Fischer on Wednesday, January 23, 2008 6:42:14 AM (Pacific Standard Time, UTC-08:00)   #    Comments [0]

In June of 2006 I purchased a new HP media center pc( it arrived in August), every thing was great until November when the Video card fan started making loud sounds at start up and an odd raspy sound after that(sounds like the fan's bearings on the video cards are bad).  I guess the 7600 would rather be a race car or airplane.  I had the card replaced ( Horrible customer service from HP first tier of support ). 13 months later December of 2007 the new video card decided it was a race car as well and exhibited all the same symptoms(HP support lost a life long customer after this tech support phone call).  An now when I turned on the pc this card new for only 3 weeks decides it wants to be a race car. I really don't want to call HP and spend another 4 days on a support call.

posted by Aaron Fischer on Wednesday, January 23, 2008 6:30:46 AM (Pacific Standard Time, UTC-08:00)   #    Comments [0]
 Monday, January 21, 2008

Microsoft's new agile pace is just killing me.  I'm glad that sp1 will be out some time in the foreseeable future but.  I don't want thing about upgrading to vs 10 in another 18 months. 

C# Debugging Improvements for VS 2008 SP1- Part 1

 

posted by Aaron Fischer on Monday, January 21, 2008 5:18:07 PM (Pacific Standard Time, UTC-08:00)   #    Comments [0]

When we first started using Ajax we noticed some difficulty getting the resources  to work with our HTTP compression filter.  Now I have a better understanding of what issues are luring thanks to Carloc Ajax resource intermittently not accessible (http compression)

This means that Ajax does support compression for Internet Explorer 7 but it does not support compression for Internet Explorer 6. Why?

Well, the fact is that IE6 has some serious troubles with compressed content, and those issues have been resolved in IE7:

Another release containing several fixes is in the latest Windows Script 5.7 which contains updates for jscript parser:

 

I never realized IE6 had so many compression issues.

posted by Aaron Fischer on Monday, January 21, 2008 11:18:02 AM (Pacific Standard Time, UTC-08:00)   #    Comments [0]
 Tuesday, January 08, 2008

Looks like some documentation has been published for the elusive Point SDK.

http://Dev.CalyxSoftware.com

posted by Aaron Fischer on Tuesday, January 08, 2008 4:23:29 PM (Pacific Standard Time, UTC-08:00)   #    Comments [0]