Category Archives: news

News on main page.

WSUS and “Cannot save configuration because the server is still processing a previous configuration change”?

For future reference…

If WSUS starts responding with the message: “Cannot save configuration because the server is still processing a previous configuration change”, run this SQL command:

UPDATE tbSingletonData SET ResetStateMachineNeeded = 0

And in the long term, consider this:

https://community.spiceworks.com/scripts/show_download/2998-wsus-automated-maintenance-formerly-adamj-clean-wsus

MS Exchange 2010 and NTFS block size

THIS IS AUTOMATIC TRANSLATION…

Because Im looking for these information quite often…

Description Recommended Value
Storage Track Boundary 64K or Greater (1MB Recommended)
NTFS Allocation Unit/Cluster Size 64KB (Database & Log Partitions)
RAID Stripe Size 256KB or Greater

 

And command for disk format:

Format <DriveLetter>: /q /y /fs:ntfs  /v:<VolumeName> /a:64K

mutex/ocfipreoqyfb/mutex

Just as in the title: “mutex/ocfipreoqyfb/mutex”. I will leave it here for future reference…

That is all for now. I will not write anything more… no way… oh, I will not even add any tags…

Remote code execution on DNA sequencers…

…using properly synthesized DNA code as the medium…

A noteworthy paper by researchers from the University of Washington:

The rapid improvement in DNA sequencing has sparked a big data revolution in genomic sciences, which has in turn led to a proliferation of bioinformatics tools. To date, these tools have encountered little adversarial pressure. This paper evaluates the robustness of such tools if (or when) adversarial attacks manifest. We demonstrate, for the first time, the synthesis of DNA which ? when sequenced and processed? gives an attacker arbitrary remote code execution. To study the feasibility of creating and synthesizing a DNA-based exploit, we performed our attack on a modified downstream sequencing utility with a deliberately introduced vulnerability. After sequencing, we observed information leakage in our data due to sample bleeding. While this phenomena is known to the sequencing community, we provide the first discussion of how this leakage channel could be used adversarially to inject data or reveal sensitive information. We then evaluate the general security hygiene of common DNA processing programs, and unfortunately, find concrete evidence of poor security practices used throughout the field. Informed by our experiments and results, we develop a broad framework and guidelines to safeguard security and privacy in DNA synthesis, sequencing, and processing.

Source: http://dnasec.cs.washington.edu/dnasec.pdf

Remote Desktop Session Hijacking

THIS IS AUTOMATIC TRANSLATION…

I do not know how people get so excited … It is obvious that the SYSTEM can get into memory each process so why such WoW, that having the SYSTEM account, you can switch to a different logged-on user?

Can dlatemu, that you can have more privileges (e.g. Domain Admin). However, please note that:

  1. To use the method of switching on the SYSTEM you must be an administrator for the server on which this account is obtained.
  2. M $ and not only say that you should work with the lowest possible privileges so why anyone sane would sign such as the Enterprise permissions on these permissions are not the computer where the Admin’a needs and that can be compromised? Read: https://technet.microsoft.com/en-us/library/cc700835.aspx and quote: “Do not use service administrator accounts for day-to-day administrative tasks, such as account and member server management; Instead, use your regular user account. “” D[..]omain Admins credentials are required to perform the following steps: [..]”

But what what do you mean?

  1. We find the computer on which we have Admin and logged inadvertently Admin domain. We can help you with: query user
  2. change the permissions on the SYSTEM:
    PsExec-s \localhost cmd
  3. lists sessions (we remember our session and the session name of the victim), of course, better to the victim’s session has been inactive;-P
  4. Switching on the victim’s sessions:
    TSCON <numer naszej="" sesji="">/dest:<nazwa sesji="" ofiary=""> </nazwa> </numer>
  5. We look forward to;-)

And for those who prefer movies here’s a YouTube version: