<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>1st Byte Solutions &#187; Security</title>
	<atom:link href="http://www.1stbyte.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.1stbyte.com</link>
	<description>Company site for Greg Fischer { GregTheGeek }</description>
	<lastBuildDate>Tue, 09 Mar 2010 07:52:43 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Rootkit from fes.sk/files</title>
		<link>http://www.1stbyte.com/2010/02/09/rootkit-from-fes-skfiles/</link>
		<comments>http://www.1stbyte.com/2010/02/09/rootkit-from-fes-skfiles/#comments</comments>
		<pubDate>Wed, 10 Feb 2010 04:53:39 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Antivirus]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[PC Repair]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2010/02/09/rootkit-from-fes-skfiles/</guid>
		<description><![CDATA[I had a client recently that had their browsers hijacked. Everything they typed in the browser ended up redirecting them to some test_s.php file at “www.fes.sk”.&#160; (Don’t open that, or you might end up with a virus!&#160; I just wanted people to find this in case it might help clean this bug off!)
Not sure what [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2010/02/09/rootkit-from-fes-skfiles/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Microsoft Security Essentials MsMpEng.exe using high CPU Time</title>
		<link>http://www.1stbyte.com/2010/02/01/microsoft-security-essentials-msmpeng-exe-using-high-cpu-time/</link>
		<comments>http://www.1stbyte.com/2010/02/01/microsoft-security-essentials-msmpeng-exe-using-high-cpu-time/#comments</comments>
		<pubDate>Mon, 01 Feb 2010 20:16:14 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Antivirus]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows 7]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2010/02/01/microsoft-security-essentials-msmpeng-exe-using-high-cpu-time/</guid>
		<description><![CDATA[I have Windows 7 Ultimate x64, but I think this might be problem in any version. I keep having issues with MsMpEng.exe hogging the cpu.  Basically, using a large amount of resources, like 100%!  It&#8217;s eating the CPU time and a lot of memory.  The system will work just fine, even after running for hours, [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2010/02/01/microsoft-security-essentials-msmpeng-exe-using-high-cpu-time/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ZFS CIFS and ACL Inheritance</title>
		<link>http://www.1stbyte.com/2009/07/24/zfs-cifs-and-acl-inheritance/</link>
		<comments>http://www.1stbyte.com/2009/07/24/zfs-cifs-and-acl-inheritance/#comments</comments>
		<pubDate>Fri, 24 Jul 2009 23:39:50 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[OpenSolaris]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[ZFS]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/?p=184</guid>
		<description><![CDATA[This is just another one of those things that didn&#8217;t make any sense and only partially does now.  At least NOW I know there is more at play here than the simple solutions in Samba using create mask and create directory mask.  In Linux, that&#8217;s how I would get around the issues of [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2009/07/24/zfs-cifs-and-acl-inheritance/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Folder redirection user permissions block access to Administrators</title>
		<link>http://www.1stbyte.com/2008/03/19/folder-redirection-user-permissions-block-access-to-administrators/</link>
		<comments>http://www.1stbyte.com/2008/03/19/folder-redirection-user-permissions-block-access-to-administrators/#comments</comments>
		<pubDate>Wed, 19 Mar 2008 19:52:55 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows Server]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2008/03/19/folder-redirection-user-permissions-block-access-to-administrators/</guid>
		<description><![CDATA[When using Folder Redirection on a Windows 2003 server, the default policy is allow only ownership and permissions to the user.   No admin account would have access to this folder.  For example, you create a Group Policy to redirect user&#8217;s My Documents folders to a home directory on the server.  Once [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2008/03/19/folder-redirection-user-permissions-block-access-to-administrators/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Resetting NTFS permissions are not taking effect on child objects</title>
		<link>http://www.1stbyte.com/2008/03/19/resetting-ntfs-permissions-are-not-taking-effect-on-child-objects/</link>
		<comments>http://www.1stbyte.com/2008/03/19/resetting-ntfs-permissions-are-not-taking-effect-on-child-objects/#comments</comments>
		<pubDate>Wed, 19 Mar 2008 19:04:08 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows Server]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2008/03/19/resetting-ntfs-permissions-are-not-taking-effect-on-child-objects/</guid>
		<description><![CDATA[Recently I went to reset a user&#8217;s home directory permissions on the server to allow them full control over each file/folder in their home directory.  I setup all the normal accounts and of course the actual user account, with Full Control.  I then went into Advanced and selected &#8220;Replace permission entries on all [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2008/03/19/resetting-ntfs-permissions-are-not-taking-effect-on-child-objects/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Is a hardware firewall really a software firewall anyway?</title>
		<link>http://www.1stbyte.com/2008/03/05/is-a-hardware-firewall-really-a-software-firewall-anyway/</link>
		<comments>http://www.1stbyte.com/2008/03/05/is-a-hardware-firewall-really-a-software-firewall-anyway/#comments</comments>
		<pubDate>Wed, 05 Mar 2008 20:26:14 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2008/03/05/is-a-hardware-firewall-really-a-software-firewall-anyway/</guid>
		<description><![CDATA[I love how people always say that a software firewall like IPCop is a &#8220;lesser&#8221; product than a hardware system.  I ran into one site speaking of Netsentron as a hardware solution.  I&#8217;d also include Endian Firewall and Untangle when we talk about a &#8220;linux based hardware firewall&#8221;.  Well here&#8217;s my thought. [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2008/03/05/is-a-hardware-firewall-really-a-software-firewall-anyway/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Fixing Grub and IPCop boot on Linux after cloning a hard drive</title>
		<link>http://www.1stbyte.com/2007/10/22/fixing-grub-and-ipcop-boot-on-linux-after-cloning-a-hard-drive/</link>
		<comments>http://www.1stbyte.com/2007/10/22/fixing-grub-and-ipcop-boot-on-linux-after-cloning-a-hard-drive/#comments</comments>
		<pubDate>Tue, 23 Oct 2007 02:44:56 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[PC Repair]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2007/10/22/fixing-grub-and-ipcop-boot-on-linux-after-cloning-a-hard-drive/</guid>
		<description><![CDATA[First thing, when you clone your Linux hard drive with Ghost or Drive Image (or any other imaging software) you might not be able to load Grub.  Usually just running some Grub commands off a Linux System Rescue CD will fix it.  I think most any bootable Linux Live CD will work.  [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2007/10/22/fixing-grub-and-ipcop-boot-on-linux-after-cloning-a-hard-drive/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IPCop 1.4.15 with PPTPd would not run because of libpcap link</title>
		<link>http://www.1stbyte.com/2007/10/03/ipcop-1415-with-pptpd-would-not-run-because-of-libpcap-link/</link>
		<comments>http://www.1stbyte.com/2007/10/03/ipcop-1415-with-pptpd-would-not-run-because-of-libpcap-link/#comments</comments>
		<pubDate>Wed, 03 Oct 2007 06:36:55 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows Vista]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2007/10/03/ipcop-1415-with-pptpd-would-not-run-because-of-libpcap-link/</guid>
		<description><![CDATA[I fought with this one for a while, like several hours.   I installed the pptp addon for IPCop, which, by the way, you must Google for.  I installed version 0.2.9 (pptpd_0.2.9.tar.gz) and found that on a forum somewhere.  If you go to the addon&#8217;s from IPCop, you will only find 0.2.6, [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2007/10/03/ipcop-1415-with-pptpd-would-not-run-because-of-libpcap-link/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Open file security warning on mapped drive</title>
		<link>http://www.1stbyte.com/2007/07/06/open-file-security-warning-on-mapped-drive/</link>
		<comments>http://www.1stbyte.com/2007/07/06/open-file-security-warning-on-mapped-drive/#comments</comments>
		<pubDate>Fri, 06 Jul 2007 08:07:41 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows Server]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2007/09/01/open-file-security-warning-on-mapped-drive/</guid>
		<description><![CDATA[When opening files on the network over mapped drive OR UNC, you receive a &#8220;publisher&#8221; or &#8220;security&#8221; warning before running the file.  Very annoying.

In IE, you add the server or domain to your &#8220;local intranet&#8221; security zone.  In my case, my server was: main.domain.localIt was mapped on O: drive.


 
So in the zone I [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2007/07/06/open-file-security-warning-on-mapped-drive/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Self-Signed IIS SSL Certificates using OpenSSL</title>
		<link>http://www.1stbyte.com/2007/06/18/self-signed-iis-ssl-certificates-using-openssl/</link>
		<comments>http://www.1stbyte.com/2007/06/18/self-signed-iis-ssl-certificates-using-openssl/#comments</comments>
		<pubDate>Mon, 18 Jun 2007 18:58:45 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows Server]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2007/09/01/self-signed-iis-ssl-certificates-using-openssl/</guid>
		<description><![CDATA[Gregs Uberfast version:

Linux:

openssl genrsa -des3 -out CA.key 1024openssl req -new -key CA.key -x509 -days 3650 -out CA.crtchmod 400 CA.keychmod 400 CA.crt

(the above made a new CA, you want to install the crt into IE&#8217;s trusted certs.)

Win:

Make cert request in IIS – take to Lin.

Linux:

(All one line)openssl x509 -req -days 3650 -in certreq.txt -CA CA.crt-CAkey CA.key [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2007/06/18/self-signed-iis-ssl-certificates-using-openssl/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Things I do not like about EFS and a better solution called Truecrypt</title>
		<link>http://www.1stbyte.com/2007/02/19/things-i-do-not-like-about-efs-and-a-better-solution-called-truecrypt/</link>
		<comments>http://www.1stbyte.com/2007/02/19/things-i-do-not-like-about-efs-and-a-better-solution-called-truecrypt/#comments</comments>
		<pubDate>Mon, 19 Feb 2007 12:45:09 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Backup]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows Server]]></category>
		<category><![CDATA[Windows Vista]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2007/08/30/things-i-do-not-like-about-efs-and-a-better-solution-called-truecrypt/</guid>
		<description><![CDATA[ I am not expert on these things (encryption), but I have done some reading and found some issues with Encrypted File System I don&#8217;t like. I may not describe the issues correctly, so this is just my opinion more than anything.
1. In Windows 2000, don&#8217;t even bother. It can be bypassed with their recovery [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2007/02/19/things-i-do-not-like-about-efs-and-a-better-solution-called-truecrypt/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Remote ssh rsync linux backups with certificates and no passwords</title>
		<link>http://www.1stbyte.com/2006/10/25/remote-ssh-rsync-linux-backups-with-certificates-and-no-passwords/</link>
		<comments>http://www.1stbyte.com/2006/10/25/remote-ssh-rsync-linux-backups-with-certificates-and-no-passwords/#comments</comments>
		<pubDate>Wed, 25 Oct 2006 18:13:42 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Backup]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Scripting]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2006/10/25/remote-ssh-rsync-linux-backups-with-certificates-and-no-passwords/</guid>
		<description><![CDATA[ Uber quick howto:  (based on Debian)
1. Make sure ssh, rsync and sudo are installed and working.
2. Add a user account,  on remote system.
2.a Add a certificate with openssl or ssh-keygen (look that up elsewhere)
2.b Make sure the cert is unencrypted with no password. Yes,  that is a slight security concern, HOWEVER, if you are [...]]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2006/10/25/remote-ssh-rsync-linux-backups-with-certificates-and-no-passwords/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Terminal Server without VPN for remote access</title>
		<link>http://www.1stbyte.com/2005/03/20/terminal-server-without-vpn-for-remote-access/</link>
		<comments>http://www.1stbyte.com/2005/03/20/terminal-server-without-vpn-for-remote-access/#comments</comments>
		<pubDate>Sun, 20 Mar 2005 16:00:47 +0000</pubDate>
		<dc:creator>Greg</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Internet]]></category>

		<guid isPermaLink="false">http://www.1stbyte.com/2005/03/20/terminal-server-without-vpn-for-remote-access/</guid>
		<description><![CDATA[I was wondering, though, why use a vpn to tunnel a terminal server connection? Isn't terminal server encrypted already? Here's a couple things that I *think* are important:]]></description>
		<wfw:commentRss>http://www.1stbyte.com/2005/03/20/terminal-server-without-vpn-for-remote-access/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
