Remote Assistance service of Windows OS vulnerable to attack

Tuesday, July 19, 2005

Until a patch is issued, Microsoft recommends that users close or block TCP port 3389, the port opened when the Remote Assistance service of its Microsoft Windows operating system (OS) is enabled. The Remote Assistance feature is a service of the OS that allows Internet Technology administrators of corporate workgroups remote access to other desktops to perform maintenance and other configuration tasks from their own computer. It can also be used by on-line tech support sites. A support assistant can go into a user’s machine, if the service is enabled, and themself make changes directly to another person’s computer to resolve an issue.

To initialize the remote assistance feature, the user of the helper computer must first make a request of the user of the target computer. Compliance must be granted by the user of the target machine, which then fully opens the communication port of the target machine to the helper computer. The operator of the helper computer then has control of target computer to make changes at will. The user of the target machine can watch in a separate window the actions of the helper, and either party to the session can end it at any time.

In a telephone conversation with a Microsoft representative Tuesday, it was learned that work to develop a security patch is underway, but when it will be available is unclear. It was cited that a patch must work consistently across multiple platform versions of the OS.

The vulnerability, thought at first to affect only Windows XP SP2, is now believed to affect all current Windows editions, including Windows 2000, Windows XP SP1, Windows XP Professional x64, Windows Server 2003, Windows Server 2003 SP1, and Windows Server x64.

The Remote Desktop Protocol (RDP) is not enabled by default, however if the service is enabled, a Denial of Service attack could cause the OS to restart unexpectedly according to Microsoft, or experience buffer overflows according to Symantec. The RDP is enabled by default on Windows XP Media Center Edition.

Microsoft suggests users block TCP port 3389 (the port used by RDP) on their firewall, or disable Terminal Services or Remote Desktop if not required by the user. The remote desktop connections could also be secured using either Internet Protocol Security or a virtual private network connection until a patch is ready.

To disable Remote Assistance on a Windows XP Edition, the steps are:

1. click ‘Start’, right-click ‘My Computer’, select ‘Properties’
2. select ‘Remote’ tab on top of the ‘Systems Properties’ window, clear checkbox that says “Allow Remote Assistance invitations to be sent from this computer.”
3. click ‘Apply’ button

The group, Internet Storm Center, detected spikes in scanning for port 3389 beginning July 6. Larger numbers of systems scanned were reported on July 13. Crackers may be scanning for vulnerable machines, the group said.

“It’s a kernel vulnerability,” said VP of engineering for Symantec Alfred Huger, “so it will be difficult to exploit reliably. But he [the original discoverer] found the vulnerability with a commonly-used tool, so if he can find it, so can others. I don’t think it will turn it into a large-scale worm, but then, some kernel vulnerabilities have ended up as just that, like the Witty worm.”

[edit]

Thursday, October 18, 2007

It can be difficult to be John Reed.

Christopher Hitchens called him a “Bin Ladenist” and Cathy Young editorialized in The Boston Globe that he “blames the victims of terrorism” when he puts out a novel like Snowball’s Chance, a biting send-up of George Orwell‘s Animal Farm which he was inspired to write after the terrorist attacks on September 11. “The clear references to 9/11 in the apocalyptic ending can only bring Orwell’s name into disrepute in the U.S.,” wrote William Hamilton, the British literary executor of the Orwell estate. That process had already begun: it was revealed Orwell gave the British Foreign Office a list of people he suspected of being “crypto-Communists and fellow travelers,” labeling some of them as Jews and homosexuals. “I really wanted to explode that book,” Reed told The New York Times. “I wanted to completely undermine it.”

Is this man who wants to blow up the classic literary canon taught to children in schools a menace, or a messiah? David Shankbone went to interview him for Wikinews and found that, as often is the case, the answer lies somewhere in the middle.

Reed is electrified by the changes that surround him that channel through a lens of inspiration wrought by his children. “The kids have made me a better writer,” Reed said. In his new untitled work, which he calls a “new play by William Shakespeare,” he takes lines from The Bard‘s classics to form an original tragedy. He began it in 2003, but only with the birth of his children could he finish it. “I didn’t understand the characters who had children. I didn’t really understand them. And once I had had kids, I could approach them differently.”

Taking the old to make it new is a theme in his work and in his world view. Reed foresees new narrative forms being born, Biblical epics that will be played out across print and electronic mediums. He is pulled forward by revolutions of the past, a search for a spiritual sensibility, and a desire to locate himself in the process.

Below is David Shankbone’s conversation with novelist John Reed.

Saturday, October 23, 2010

A helicopter crash in the Mourne Mountains is believed to have killed four people in Northern Ireland.

Just before 4 pm local time (1500 UTC) the police received reports of a “plane in distress” from residents. The helicopter is believed to have crashed in an area called Leitrim Lodge located between Hilltown and Rostrevor. The Democratic Unionist representative for the region has said “the local community was shocked and now feared the worst.”

The local fire services, police and the Mourne Mountain Rescue Team are currently combing the area from the wreckage. The Air Accident Investigation Branch has been notified about the incident.

Thursday, February 24, 2005

A paste containing synthetic tooth enamel can seal small cavities without drilling. Kazue Yamagishi and colleagues at the FAP Dental Institute in Tokyo say that the paste can repair small cavities in 15 minutes.

Currently, fillers don’t stick to such small cavities so dentists must drill bigger holes. Hydroxyapatite crystals, of which natural enamel is made, bond with teeth to repair tiny areas of damage.

Yamagishi and colleagues have tested their paste on a lower premolar tooth that showed early signs of decay. They found that the synthetic enamel merged with the natural enamel. The synthetic enamel also appears to make teeth stronger which will improve resistance to future decay. As with drilling, however, there is still the potential for pain: The paste is strongly acidic to encourage crystal growth and causes inflammation if it touches the gums.

The paste is reported in the journal Nature.

Tuesday, October 3, 2006

Gol Transportes Aéreos Flight 1907 crashed 1,750km (1,100 miles) north-west of Rio de Janeiro killing all people onboard, on Friday September 29. National Civil Aviation Agency (ANAC) has confirmed that the crashed Brazilian airplane did crash into a smaller aircraft. Rescue workers and air force personnel are searching the wreckage for bodies

Thursday, November 8, 2007

India is the latest of the countries where the One Laptop Per Child (OLPC) experiment has started. Children from the village of Khairat were given the opportunity to learn how to use the XO laptop. During the last year XO was distributed to children from Arahuay in Peru, Ban Samkha in Thailand, Cardal in Uruguay and Galadima in Nigeria. The OLPC team are, in their reports on the startup of the trials, delighted with how the laptop has improved access to information and ability to carry out educational activities. Thailand’s The Nation has praised the project, describing the children as “enthusiastic” and keen to attend school with their laptops.

Recent good news for the project sees Uruguay having ordered 100,000 of the machines which are to be given to children aged six to twelve. Should all go according to plan a further 300,000 machines will be purchased by 2009 to give one to every child in the country. As the first to order, Uruguay chose the OLPC XO laptop over its rival from Intel, the Classmate PC. In parallel with the delivery of the laptops network connectivity will be provided to schools involved in the project.

The remainder of this article is based on Carla G. Munroy’s Khairat Chronicle, which is available from the OLPC Wiki. Additional sources are listed at the end.

Tuesday, December 1, 2009

With two by-elections coming up in Australia, many minor parties and independents will be looking to gain a seat in the House of Representatives. Stephen Murphy is one of the independents.

Mr Murphy is a computer programmer from the Melbourne suburb of Brunswick.

“After growing up in South-East Melbourne I studied Science at Monash with first class Honours, worked in Europe for 10 years and have recently returned to Australia. I work in finance as a computer programmer and speak five languages,” Mr Murphy said.

Wikinews reporter Patrick Gillett held an exclusive email interview with Mr Murphy, candidate for the Division of Higgins.

((WN)) Why do you want to get into parliament?

Stephen Murphy: I am standing up for what I believe is the correct course of action on the biggest issue in Australian politics in 100 years – Kevin Rudd’s flawed emissions trading scheme (ETS).

((WN)) What would the three main policies you are taking into this by-election be?

SM: I will oppose the emissions trading scheme, ensure that all government policy is based on accurate scientific evidence and return common sense to Canberra

((WN)) How would you address these policies?

SM: By asking for a Royal Commission into climate change so that the facts (such as that global warming stopped in 2001 and the emissions trading scheme will not change the climate one bit) are openly presented to the Australian people.

((WN)) Sending asylum seekers to Indonesia: good or bad?

SM: Any government policy that does not properly consider all implications (be it emissions trading, or any other issue) is a bad one.

((WN)) Is the Australian dollar’s near parity with the US dollar a sign that the Australian economy is healthy, the US economy in chaos or both?

SM: It’s a sign of both. Many countries around the world look with envy at how well (relatively) Australia is doing, to our credit! It is of concern that the American economy is in such bad shape and that their levels of debt seem unsustainable.

((WN)) How do you rate the governments economic stimulus package?

SM: The economic stimulus package was poorly targeted and poorly carried out. When we could have been building roads, dams, railways and hospitals yet instead we were paying for tattoos, PlayStations and overseas holidays.

((WN)) Should it be wound back?

SM: The question about levels of stimulus spending is a complicated one and requires expertise in economics, however one could say in general terms that all government spending should be well targeted and spent in the most efficient way.

((WN)) Is Kevin Rudd a better Prime Minister than John Howard?’

SM: Australian voters are the best judge of that and we will know in 2019 🙂

((WN)) Is the Carbon Pollution Reduction Scheme an effective solution to climate change? Why?

SM: Absolutely not. The CPRS will not change the climate by any amount that we can measure – it’s just a new tax that will hurt Australians and drive businesses and jobs overseas. Since 2003 there has been mountains of new scientific data which contradicts the popular theory that human carbon dioxide emissions are causing significant global warming. Recently, many of the scientists who wrote the IPCC report (on which the ETS / CPRS is based) have been reported as manipulating scientific data to create scary global warming scenarios. The science is definitely not settled

((WN)) Is there a better solution?

SM: We can very easily refocus the momentum and goodwill that has been generated on climate change and channel this energy into other worthwhile environmental projects in Australia that will make a difference.

((WN)) Why should the electorate vote for you?

SM: I will oppose the ETS and support responsible environmental policies instead of radical environmental policies that could end up costing every Australian taxpayer $4550 per year in new taxes.

Saturday, October 17, 2009

A strong, 6.4 magnitude earthquake stuck Indonesia on Friday, even as recovery efforts continued from the devastating tremors that hit there last month.

The earthquake caused some buildings to sway in the country’s capital, Jakarta; however, there were no reports of injuries. According to officials, the earthquake’s epicentre was in in the Sunda Strait, off the western coast of the island of Java.

The earthquake wasn’t powerful enough to generate a tsunami, according to a Meteorology and Geophysics Agency official, Suhardjono.

On September 30, a powerful magnitude 7.6 earthquake struck Indonesia, causing landslides, destroying buildings, and killing over a thousand people. Cleanup and recovery efforts for that quake are still ongoing. Tremors frequently strike Indonesia and neighbouring vicinities, as it is positioned on an arc of fault lines.