If it's connected, we can break into it.   Downloads  |  About Us  |  Contact  |  Careers  |  News  | 

 
 
 Emergency  |  SanityCheck|  Penetration Test |  Risk Assessment | Product Testing | Security Solutions |
  Check your security NOW!
  Latest Security News 
 
"So in war, the way is to avoid what is strong and to strike what is weak."  - Sun Tzu, The Art of War
 
 

Greyhat Windows Security Tips 
 
 
A laptop is stolen every 53 seconds according to the FBI and 97% are never recovered. These stolen or misplaced notebooks, tablets, and UMPCs may expose your personal data. You can try the solutions discussed here to prevent theft and remain secure against computer Identity Theft.  The following information will direct you to some software and hardware tricks on how to guard your computer as well as guard the data residing in the computer.

Computrace LoJack for Laptops is a recovery service that enables law enforcement to recover stolen laptops. When your laptop is protected with this service, software installed on your laptop works behind the scenes to silently and securely contact Computrace Monitoring Center, and if stolen, report its location using any Internet connection.

Security Locks and Hardware approach 
Kablit Security Package kit - A computer slides into the case while a locking bar in front and a security bar in the rear prevent removal. 
You can also use a laptop security cableWe get numerous reports of laptop theft when the owner leaves his or her office or cubicle for just a moment to go down the hall or to get a drink of water. Another time to be cautious is during meetings, laptops are used, a quick break is called and when everyone returns, some of the laptops are missing. Remember thieves have better access than you might think and are very quick.  

Get Insurance for your Notebook and PC
If your notebook or PC is stolen, you'll want to replace it, so think insurance. Check your coverage; you may need a business policy at the office. The alternative is a policy from an insurer that specializes in covering PCs. One choice is
Safeware; with no deductible, the premium on a new $1500 notebook is $90 per year.

Prevent Notebooks theft in Airports, Hotels
$50 Targus DefCon Ultra combines a stainless steel cable, motion sensor technology, and a 95dB alarm to create a combination locking alarm system that easily attaches to your notebook or carrying case in any setting. The locking device sets off a piercing tone if the cable is touched.

Another approach to safeguarding the data on your notebook is the
$120 SecuriKey, a token-based USB dongle. Without a special key from SecuriKey inserted into the USB port, the notebook just won't boot. The CD-ROM drive is locked down, too, so booting from it is impossible. SecuriKey also frustrates computer-savvy crooks who try to boot with a floppy or external drive.

Storage tricks: When traveling, you can keep your notebook's data safe by removing the hard drive and stashing it in another location. If the data it contains is critical, keep it on a flash thumb drive and then load it on your notebook when you need it. A second option is biometrically protected storage, which uses your fingerprint as a password equivalent. ThinkCP's
1GB biometric flash drive costs $289.

Absolute Software has licensed LoJack, the car-theft prevention technology for tracking stolen laptop. It embeds a special agent in a computer's BIOS and when that computer connects to any IP networks, the embedded Computrace agent sends a silent signal to Absolute's Monitoring Center providing its IP address or phone number to identify its physical location. Absolute works with local law enforcement to recover the computer.
 

Why should I worry about notebook theft?

Hundreds of thousands of notebook computers are stolen every year. Which represents nearly 1/4 of the notebooks sold. A statistic too high to ignore. Not to mention the risk of losing the important and sometimes personal data on the notebook, makes it imperative that measures be taken to prevent this from occurring to you. The hot spots for notebook theft are as follows: office, airports, your car, and hotel rooms. Lastly, notebook computers are ideal for a thief. They are portable, valuable, easy to pawn off, and difficult to recover.

What can I do to help prevent my notebook computer from being stolen?

First be sure to backup the data on your notebook regularly. Second, buy a security device to use with your notebook even when you are nearby and don't believe it could be taken from you. Never leave you notebook unattended. When going through airport security, don't put you notebook on the conveyer until it's your turn to walk through the metal detector. Keep your notebook in an inconspicuous case rather than an obvious notebook/laptop case. Record your notebook serial number, or place a UV mark on it so you can identify the notebook if it is ever recovered. Also, be aware that some notebooks/laptops have an IRDA (infrared data-acquisition port built in to them. These port can allow someone to gain access to your computer through that port with out you even knowing about it. By covering the port with either duct tape or Mylar you can prevent this type of hacking.

How do I know if internal PC component's are being stolen?

You may not. A lot of IT shops place orders for replacement memory and processors under equipment maintenance or repair parts. This being the case, you should audit the individual line items of the POs or invoices to see what parts are being ordered. Also, require that all bad parts be turned in before replacements are ordered. 99% of the time, if memory is being replaced, it's not because it was bad, it's because it was stolen. One quick way to monitor the situation, is to see the relationship between your companies new hardware purchases and your maintenance expenses. If they're running about even, you probably have a problem.

Why should I worry about theft, that's why I have insurance?

With six-figure claims more the rule than the exception, insurers are paying more attention to the issue of high-value components. Furthermore, some losses are uninsurable because they result from disappearance or inventory shortage. Then there are the companies that have been hit several times and are now at risk of having their policy canceled.

It was reported that in 1993 Chubb Insurance Group paid less than $3 million to victims of high-tech robbers, while a year later, the figure had surged to $15 million. This year, Chubb expects another clear increase in damage claims. In fact, the increase of high-tech crime has led Chubb to form the Technology Theft Prevention Foundation. This group is focusing insurance, electronics and law enforcement resources at this growing problem.

In the future, look for insurers to increase premiums and start requiring various security measures to be implemented before they issue a policy.

Laptop Travelers Beware!
Your laptop is a prime target for would-be thieves, especially when you travel. Keep it safe by making it as inconspicuous as possible?pack it in a brief case or ordinary piece of luggage.
Make a record of your laptop's serial number! Less than 10 percent of all stolen laptops can be recovered by the serial number because most people do not have a record of them. While you're at it, make a list of all software that is on your laptop. If possible, engrave your company's name and ID on your laptop.
Corporate IS departments should maintain an updated list of all equipment, software and an accurate list of all assignees, assigned equipment and the serial numbers

Special Alert:
Some airports are confiscating steel security cables as a part of their increased security measures. If you are travelling with your notebook computer, we recommend you put your security cable in with your checked luggage rather than take it as a carry-on. Notebook computers themselves are still fine as a carry-on, but they must be removed from their case and put it through the security screen separately.

Laptop Travelers Can Be an Easy Bull's-Eye for Sharp Thieves
Traveling with a laptop might be the latest status symbol for road warriors, but what many don't realize is that those same status symbols have an invisible bull's-eye painted right on them. Thieves work airports, hotels, office buildings and car rental agencies looking for their next bull's-eye score. You do not have to be one of them!

Following some simple steps can prevent your laptop from becoming a statistic.

  • Always keep your laptop in your sight and in front of you. Never put it to your side or on a luggage cart.
  • Consider removing your laptop's hard drive and packing it separately. That laptop won't be much good without its internal hardware.
  • Carry your laptop in a nondescript bag, something that doesn't look like a computer case. The Kensington SaddleBag is a good choice.

Staying in a hotel can make your laptop vulnerable to thieves?don't assume that it will be safe in your room while you are away. If leaving it in a hotel safe or baggage locker isn't possible, lock it up! A Kensington MicroSaver is relatively easy to use and a huge prevention aid, especially to impulse theft. The six-foot cord wraps around an immovable object making it very difficult for it to just "walk away."
 
Another locking device, the SonicLock, is a motion-detecting device that can be a powerful deterrent to thieves. It features a heavy-duty shackle that cannot be easily cut. Plus, it sounds a loud beep if moved before being disarmed.

Car Smart Travel with Your Laptop
If taking your laptop along for the ride, travel smart with these tips:
  • Keep it locked and out of sight.
  • While riding, put your laptop between the driver's seat and the rear seat so it won't slide around.
  • Avoid leaving it in your car in very cold or very hot weather.
  • If you must leave it in your car, consider using a removable hard drive that can be stored separately.
  • Disguise your laptop by putting it in a brief case or another more ordinary carryall.
Remember?a laptop can be sold for up to half of its market value, which makes it a very inviting target for theft. After all, few people carry the equivalent amount of money in their wallets, so laptops are a great return for the would-be thief's minimal investment.
 
Your Data is Priceless? Keep it Safe
Computer security is everyone's business, and preventing it is much easier than dealing with the aftermath of having your computer security breached. A recent survey shows that 41 percent of Fortune 1000 companies have experienced some sort of computer theft, both inside and outside the office.
 
While the equipment itself is expensive, the information stored on it can be priceless. And in the wrong hands, it can be devastating to a company and its employees. So the key is to think about security of the equipment as well as the information stored inside. Fortunately there are locking devices available to keep all your assets safe.
Protect your equipment by locking it up with a Desktop MicroSaver by Kensington. This six-foot cable allows you two options:
  • You can link up to three pieces together, making it difficult to carry off;
  • Or, you can anchor your equipment to an immovable object, thereby preventing theft.
 

Traditional Windows Security Tips 
 
Microsoft Home PC Security Recommendations: link
 
A] Desktop (EndPoint) Fundamental Security Software
 
Essential Security Software
Personal Firewall:
Agnitum Outpost Firewall - free for personal use: link 
Kerio Personal Firewall - free for personal use: link
Microsoft XP SP2 Firewall - free, built-in
Primedius Personal Firewall/Anti-Spy ware - free for personal use: link
Sygate Personal Firewall - free for personal use: link 
ZoneAlarm Firewall - free for personal use: link 
AntiVirus:
AntiVirVPersonal Edition - free for personal use: link
Avast! Home Edition - free for personal use: link
AVG Free Edition- free for personal use: link
BitDefender Free Edition - free for personal use: link
VCatch Basic - free for personal use: link
AntiVirus - HandyBits VirusScan Integrator - free for personal use and launches several A/V solutions: link
AntiSpyware:
Ad-Aware SE Personal Edition - free for personal use: link
Microsoft (formerly Giant) AntiSpyware - free for licensed Windows cutomers:
link
Spybot Search and Destroy - freeware: link

B] Patch Management
Always run WindowsUpdate.or enable Automatic Update: link
 
Do not forget to separately update:
   Microsoft Office: link
   Other standalone software packages.

C] System Hardening
Microsoft Windows XP Security Guide: link 
NSA Security Configuration Guidelines for Windows XP: link 

D] Services
TIPS for Services that Should/Not be Running on XP and 2000: 
 
Windows XP: link
Windows 2000: link

E] Spyware (Adware) & Malware (Virus, Worms, Trojans, and Backdoors)
 
Spyware Advice: link
HOWTO: Remove Bad Spyware or Malware Infection/Hijacking: link

F] Lost Passwords
Lost XP Administrator Password Recovery Instructions:
 
Instruction #1:
Use Passware Kit - Windows XP / 2000 / NT Key is a program to reset Windows XP / 2000 / NT security if Administrator password, secure boot password or key disk is lost: link
*Passware overwrites existing password. This software is not free, but is worth the money.
 
Instruction #2:
Recovery instructions: link
Image writer: link
 
Image files: 
Bootdisk image - 1.4MB - Date 011022:
link
SCSI-drivers - ~700KB - Date 011022:
link
Utility to (re)set the password of any user that has a valid (local) account on your NT system, by modifying  the crypted password in the registrys SAM file:
link

Instruction #3:
Change administrator password on NT/2000, without knowing it.
Bootdisk: link
Image file:
link 
Image writer:
link 

Instruction #4:
http://www.pc-pipeline.com/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=6

Run it to create a boot floppy then follow the instructions. If you choose to do this then you are doing this at your own risk. Just change the admin pw and login then change the account pw's that you desire.

Make sure you have a floppy disk in the floppy drive and let the program create the boot floppy. Now restart the machine a let it boot from the floppy. Now follow what it instructs you to do.

Use it like a bootdisk.
 
Instruction #5: 
If you have a FAT32 file system, just boot to a Win98 bootdisk and rename the SAM file (registry Hive) in the C:WINNTsystem32config folder to something else. Of course this will remove all accounts on the system and you will need to rebuild them. If you are using NTFS then boot to the Win2000 CD and do this from the Recovery console.
 
 
Alternative software:
 
NTAccess can replace the administrator password of a Windows XP, Windows NT or Windows 2000 system by rebooting the computer with a special set of boot disks or CD-ROM (XP only). This is useful if you forgot the administrator password and cannot access the Windows XP/2000/NT system.
http://www.sunbeltsoftware.com/product.cfm?id=265

LC3 - The Password Auditing and Recovery Application 
LC3 is the latest version of the award-winning password auditing and recovery application, L0phtCrack. It provides two critical capabilities to Windows® network administrators:
Free 15 day trial
http://www.atstake.com/research/lc3/index.html

L0phtCrack, The integrated password cracker for NT
http://www.securiteam.com/tools/L0phtCrack__The_integrated_password_cracker_for_NT.html
 
Password Recovery Disk - Take preventive measures against losing user-level passwords
http://www.techtv.com/callforhelp/answerstips/story/0,24330,3356093,00.html
 
 
Greyhat LLC Â© 1998-2005  All Rights Reserved Worldwide   | Is Hacking legal? | WhatisGreyhat | Legal | Privacy |
Updated 09.07.07  dated