Binary Expressions

It has come to my attention awhile ago that D-Link Routers have a major security hole and was ignored by D-Link for quite some time. I became aware of this huge security problem when listening to the Security Now podcast episode #52. May I say that this security problem is not to be taken lightly as Steven Gibson explained in Security Now and I quote “This vulnerability allows an attacker to execute privileged code on an affected device. When a specific request is sent to an affected device, a traditional stack overflow is triggered, allowing an attacker complete control of the router. With the ability to execute code on the device, it is then possible to apply modified firmware and ultimately compromise the entire network.”, end quote. D-Link released an update in July. A simple rule to follow is turn of UNPnP (universal plug in play). It’s simply dangerous convince feature to use.

D-Link Routers Affected

---

The D-Link routers that are affected are DI-524 Rev A, DI-524 Rev C, DI-524 Rev D, DI-604 Rev E, DI-624 Rev C, DI-624 Rev D, DI-784 Rev A, EBR-2310 Rev A, WBR-1310 Rev A, and WBR-2310 Rev A. You can identify what router you have by looking at the back (bottom) of the device. Go to D-Link’s support page to help determine what model number and revision number your device has.

How to Apply the Firmware Update

---

The below firmware update instructions will work on any operating system with a web browser.

• Download the latest firmware for your device via D-Link’s support page.
• Open your favorite web browser (ie. Firefox).
• In the browser type in the address of your router. In most cases it’s http://192.168.01/.
• Click on the “Tools” menu at the top.
• Click on “Firmware” on left hand menu.
• Click on the “Browse” button on the page and locate the firmware you just downloaded.
• Click “Apply”.

How to Disable UNPnP

---

• Open your favorite web browser (ie. Firefox).
• In the browser type in the address of your router. In most cases it’s http://192.168.01/.
• Click on the “Misc” menu at the top.
• Locate “UNPnP Settings” and click on “Disable”.
• Click “Apply”.

Note: Refer to the emulators to locate exactly where your settings are to disable UNPNP on the D-Link Support web page.

Source: D-Link Support
Source: Security Now episode #52
Source: eEye Digital Security - Advisory

Introduction

In Windows XP the Windows Picture and Fax Viewer is set as the default image viewer for many file types. Unfortunately there is no Windows interface that provides you the ability to disable or change this applications file associations. Follow the below steps to remove this applications association so one may use a much better alternative application such as XnView.

There is two different solutions to choice from. One is a completely manual solution and the other is a simple registry patch that does it all in one step. It’s your choice and at your own risk. I would recommend strongly to backup your Windows registry just in case.

Registry Patch Solution

• Download registry patch to a temporary location, such as the Windows Desktop.
• Left mouse double click on the registry patch file.
• A dialog will appear. Left mouse click on “Yes” to allow the registry patch to be applied.
• The installation should now be complete and in effect immediately (reboot not required).

Manual Solution

• Run the Registry Editor, Start Menu -> Run -> enter without quotes “regedit” and press enter.
• Navigate to \HKEY_CLASSES_ROOT\ SystemFileAssociations\ image\ ShellEx\ ContextMenuHandlers.
• Delete the ShellImagePreview key.
• Navigate to \HKEY_CLASSES_ROOT\ CLSID\ {e84fda7c-1d6a-45f6-b725-cb260c236066}\ shellex.
• Delete the MayChangeDefaultMenu key.
• Close the Registry Editor when you’re done; the change will take effect immediately.

If at any time you wish to restore Windows Picture and Fax Viewer as the default viewer you may restore your registry backup or follow the “Registry Patch Solution” instructions above but us this registry patch file instead.

I’ve been trying for quite some time now to find information that explains how the Canadian Postal Code system works. With endless hours of searching and searching a co-worker was able to locate it. For anyone else interested in gaining this knowledge here you go.

Source: Wikipedia on Canadian Postal Code
Source: Frank’s Compulsive Guide To Postal Addresses - Canada (All Other Areas)
Source: Canada FSA Map (postal code break down)
Source: GreatData.com (purchase postal/zip code data)
Source: Canada Post - Postal Code Products (purchase postal code data)

• In the menu left mouse click on File -> Import and Export. This will start the “Import and Export” wizard.
• Select Export Favorites and the click on “next.”
• Select Favorites to backup everything or select a specific folder and click on “next.”
• In the next window you can accept the default save directory or choose a new one. I suggest you select “Desktop” so you can easily find the file again. Click on “next.”
• Finally, click on “finish” and your Favorites will be saved to disk.

If you wish to import your bookmarks follow the above steps in reverse and instead of selecting “Import Favorites” select “Import Favorites” instead.

Many as do I find it quite annoying to have applications showing all the documents you have open or also known as child windows in your Windows taskbar. In my mind these child windows should only show within the parent window/application only. Here’s how to make all child windows (documents) in Adobe Reader to not show up in the Windows taskbar and end up with just one task showing.

Steps for Adobe Acrobat Reader version 6.x and version 7.x

• Load Adobe Reader.
• Go to Edit menu -> Preferences.. or press CTRL-K.
• In the preferences dialog go to “General” on the left hand side.
• Under “General” uncheck “Show documents in the taskbar (takes effect after next launch of Acrobat)”.

By default Windows XP uses a welcome screen with a list of active accounts for the users to login, unless login process has been altered. There may become a time that you wish for certain accounts not to show on the welcome screen. You can do this by following the below steps.

NOTE: An account that does not show on the welcome screen does not mean the account is disabled or deleted. The account is just simply hidden visually.

• Start the Registry Editor (Start Menu -> Run -> type without quotes “regedit” and press enter).
• Go to HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ SpecialAccounts \ UserList \.
• Right-click an empty space in the right pane and select New > DWORD Value.
• Name the new value exactly as the account profile name not the user name of the account.
• Leave the Value data as 0 (zero).
• Close the registry editor.

If you want to enable this user again on the Welcome Screen, either double-click the account value, and change the Value data to 1, or delete the record.

I ran across this awesome do it yourself project that tells you how to take an old TV remote parts and then take a NES controller and create yourself an NES controller TV remote.

Source: NES Controller TV Remote

Wondering what all of those HDTV acronyms and terms mean? Want to know the difference between interlaced and progressive? How about brightness and contrast? This list of 35 terms and definitions help bring some basic clarity to high-definition television.

Great informative content!

read more | digg story

This is so hard to under stand but I’m determined to learn it.

read more | digg story

John C. Dvorak has posted a blog explaining how to understand and read a blog. As some maybe surprised many people really do not understand what a blog is and how to read one. I thought this was an excellent article and thought I would pass it on to my readers so they can be more informed about blogs.

Source: Understanding and Reading a Blog (for Newcomers)

This is pretty sweet. It tells you all what you need to know about H.264.

read more | digg story

This is sweet site and show you can email them to tell them what you want to see on the shows next episode. On the site they have a huge list of stuff to choose from to find out how its made.

read more | digg story