Mark Dalby

Microsoft’s patching is going from one extreme to the other. While March had just three bulletins fixing four vulnerabilities, next week 17 bulletins are being issued, fixing 64 different vulnerabilties. This ties with December 2010 as the most bulletins, and takes the clear lead for number of flaws fixed.

Nine bulletins are critical, with all carrying the risk of remote code execution. The remaining eight are ranked important; six of these enable remote code execution, one allows privilege escalation, and the last can lead to information disclosure. Seven of the bulletins have mandatory restarts; the remainder “may” do so.

As well as the typical patches for Windows, Internet Explorer, and Office, a couple of the bulletins include more unusual patches. Specifically, the Office Web Apps and Visual Studio are both receiving fixes this month. Not included in the list of patched software is Internet Explorer 9; this latest browser version is apparently immune to the flaws affecting versions 6, 7, and 8 that will be patched next week.
Hack In The Box

According to Apple the next version of the iPhone 3G and 3GS to be shipped out will have a modified boot rom which is reported to have been hardend against the 24kpwn exploit that so many cracking groups are using to jailbreak your phone (Blackr41n, Purpler4in, Devteam).

I actually find this pretty annoying, I’ve just shelled out for a brand new iPhone (which aint cheap) and I’ll damn well use it how I please!! But not to worry I have faith in “The Scene” to have this broken pretty quickly.

For those of us that already enjoy an unrestricted iPhone it is important that you DO NOT upgrade to the latest firmware.

Hopefully apple will learn that its better to work with these people than against them, Take android for instance, You can run multiple apps at once,  It had copy and paste out of the box and the only complaint I’ve heard is that of bad battery life.  But the next-gen batteries are out soon so that will clear itself up.

Anyway, I’ll make sure to update you guys as soon as the new boot-rom is cracked.

Cheers,

Mark

I seem to do this quite a lot for people,  So I’m thinking it’s time to write some instructions.

Take the following scenario….

I’ve forgotten the Wireless password for my router (WEP / WPA Key).

Ok first up, if your on Sky or O2 broadband there is a sticker under your router so stop being a *#!@$ and do a little manual investigation before googling.

If the sticker is non-existent then follow the below…

1. Plug your computer into your router via a cable (of get on a computer that already has the WEP key installed and is connected)
2. Open your browser of choice (Firefox, Chrome, Safari). If this happens to be Internet Explorer…
   • STOP!
   • Turn off your device.
   • Run a nice cold bath.
   • Chuck it in

   You don’t deserve to use a computer!!!

3. Type the following into your web browser… http://192.168.1.1 or if that doesn’t work try http://192.168.1.254
4. A pop up box should come up asking for a username and password.. this is normally username: admin password: password.  If for some reason this doesn’t work go to http://www.routerpasswords.com/ to get your password.
5. Now once you have logged in you should see a category that says something along the lines of.. “Wireless Security” or sometimes just “Wireless” click on that and voila! there is your WEP Key.

note: there are occasions where the above addresses don’t work, if this is the case please add a comment and i’ll get you the relevant address.

Happy Hacking,

Mark