Tom Decaluwé

Voor zij die zo wild zijn van Apple en er stevast van overtuigd zijn dat ze geen last hebben van virussen en andere security issues “Think again”

Op black hat 2009 wordt nog maar eens getoond hoe kwetsbaar software is ongeach of het nu van Apple, htc of microsoft komt.

http://www.standaard.be/Artikel/Detail.aspx?artikelId=DMF20090731_022

grtz

Tom

I usually only post technical content on this blog, but for once I can’t help putting some non tech talk on. The guys down at www.ris.be and ISP owned by a good friend of me setup a blade last week and made some cool pic’s. You gatte want one of these for you home labs ;-)

Sow here is the “Step by step guide on how to setup a blade”

Step1: Fill up a rather big car with as many boxes as physically can be puzzled in

Step2: Make sure you have a trolly to move all the boxes from the car down to the secure room.

Step3: Put the thing together and make sure you don’t mis anything!

Step4: Hook up the smallest laptop you can find and unleash the 22,8 Terrabytes power of the blade center and listen to the Fan’s roaring!

more info on www.ris.be

For those of you that where there yesterday you know we had a great event. The turn was nice and everybody stayed way past the 21h30 target time as Manu just couldn’t stop showing us the great new features in windows deployment.

If you missed the event don’t worry, the slide deck and notes are available for download at:

http://www.it-talks.be/ittalks/

and if you really want to dig in deep, don’t forget our full day event next week saturday.

Date and time: Saturday 25 Juli start at 10u00 – 17u30

Location: Spes Nostra - Koning Albertstraat 50 - 8520 Kuurne

Entry: 15€ for drinks and lunch

Focus: During this event we will focus on hands on practice lab around  automating deployment of windows7 and windows 2008 R2 in your network.

A security bulletin for ISA 2006 was released today. The vulnerability is very specific to people that have a Radius one-time password setup:

Here is some detailed info

Affected Products

ISA server 2006 RTM, Supportability Update, Service Pack 1 that are configured as follows:

· The Web listener is configured for forms-based authentication (FBA) using RADIUS One-Time Passwords (OTP)

· The web publishing rule delegates using Kerberos Constrained Delegation (KCD)

· ISA is configured to allow fallback to HTTP-Basic authentication.

start patching and for more info read:

http://www.microsoft.com/technet/security/Bulletin/MS09-031.mspx

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c4e9b1dd-526d-407b-bc23-ebc2738b1b19

http://blogs.technet.com/isablog/archive/2009/07/13/ms09-031-isa-server-2006-fba-and-radius-otp-bulletin.aspx

If you have been following some of my talks and want to recap, here are two link for you:

- Techdays 2009 => How to make UAC work for you video:

http://www.microsoft.com/belux/techdays/2009/session.aspx?sid=underuac&tid=Client&engine=TechNet

- Communityday 2009 => TMG what a treat Slide deck

http://www.it-talks.be/ittalks/Events/TMGwhatatreat25062009/tabid/92/Default.aspx

If you have not seen it yet, MS released a Zero-Day warning yesterday that might be worth looking in on. It’s high time TMG with NIS comes on the market to help battle this type of issues:

“Microsoft Security Advisory: Vulnerability in Microsoft Video ActiveX control could allow remote code execution”

http://support.microsoft.com/kb/972890

http://www.microsoft.com/technet/security/advisory/972890.mspx

Since many years now the Belgian community has been growing and evolving into a great resource for IT professionals. All this is thanks to the efforts put in by very dedicated people. It’s great when this effort and dedication is recognized by the international community through the MS MVP program.

I would like to congratulate two people that are very active in the Belgian MS communties and were awarded this great title:

Keep up the good work guys!

Tom