Profil von j.teqnikleabout:teqnikleBlogListen Extras Hilfe

j.teqnikle

Beruf
Ort
Interessen
Everythings are system and every relation are networking.

Internet Explorer 7 Beta 3

Hi all,

Microsoft just released IE 7 Beta 3 last Friday. I should have install it since Friday night but after i try to install the installer popup a warning message show that IE 7 already installed on the system. Yeah, I have to uninstall the previous Beta 2 from to system first before install the Latest Beta3.

But the problem is i'd delete the uninstall folder for IE7Beta2 already. So I can't simply remove it from control panel add/remove program panel. This is totally bs in my opinion. Who should keep those floder to waste your valuable HDD space ? Why Microsoft depends on this kind of things ? shouldn't right ? Microsoft has registry to keep many system/applications information within so why need this kind of "temp alike" folders/files for uninstall
?
 
But let's not wasted time much with the problem what's important is the solution, here it is.
 
1. Execute the IE7beta3 installer and let it show the error popup. DON'T CLICK "OK" YET!!.
2. Browse to the temp folder that the installer just created in my case is drive D: with autogenerated number.
3. Simply copy the whole folder to another place. (eg. d:\tmp\IE7Beta3Installer).
4. Click the OK button on the error popup.
 
5. Do the same precedure with your IE7Beta2Installer (rename to d:\tmp\IE7Beta2Installer). (If you'd already delete it simply go and download it back again. ;)
 
6. Open the IE7Beta3Installer/update and IE7Beta2Installer/update then copy "IECUSTOM.DLL" file from Beta2/update folder to Beta3/update folder
 
7. Then in Beta3/update execute "IESETUP.EXE" the installer should run as notthing ever happened.
 
*NOTE*  Your installed IE7Beta3 installed with THIS instruction will not have TAB browsing feature. But i don't care such those bugful tabs. I just enjoy to learn those new things.

*NOTE* Remember, don't delete the uninstall folder from Windows folder, especially if you install Beta version.

I'd like to says big thank to a guys from http://www.9down.com who light up a candle for us all.
J

How to: Bypass .Net over SSL/TLS trust connection.

Hi again ;)

Thanks for the company that give me a lot of free time to learn, do some experimental and enjoy my time. Last Thrusday is another free day, But i don't want to waste it by just keep breating and surfing. So i start to look around finding something that i might possible to pop something inside out. I look at my taskbar and got an idea.

To be honest i'm not a programmer by my instinct. Although, I'm graduated Bachelor of computer science but i don't like to do coding at all. Especially, Windows programming. Why? beause i'm not made for windows my behavior my style is not Windows. I'm once code VB 6.0 for doing a board game during my university. The second one is the "picture vote hack tool" for my colleage. The last one just finish last Thursday the "proxy login tool". You can imagine my coding skill right ? (HA HA HA).
 
Scene,
I'm working at my customer site. Here, everyone has to authenticate to the proxy before you can reach the internet. Normally, customer will provide you a web page to login using the web form add some security mechanism by using SSL over HTTP or HTTPs to encrypt the transaction data. Everytime you login succesfully server will response you with a tiny popup browser that reside in your taskbar and eat that small space. I hate that, i love my single row taskbar but the IE browser can't minimize to traybar. And if sometimes you forget to logout or accidentally got BSOD your session might not close properly so the next time you try to connect you won't possible to get it work.
 
 My objective for this progie is
1. To made a win app that can substitute that web form and can login and logout for me. (simple one)
2. That app must be able to minimized/restore to/from tray bar (like MSN). (I need my taskbar clean!)
3. IF user forget to logout or close the app accidentally the app must be able to logout automatically. (to prevent the session problem and to protect your session from session hijacking widely use in the net.)

Most of the things are just simple HTTP POST and HTTP GET and UI thinggy, nothing much. The major problem I've found is, the error message that pause my proggie to run whenever the proggie try to connect to the server mentioned that.

"The underlying connection was closed: Couldn't establish trust relation for SSL/TLS secure channel"
  
OK, now let's direct in to the story before you close my blog. Don't ask me how and why i just get it from Google and forget the source URL already.

Add this class in your program ..

public class trustedCertificatePolicy : System.Net.ICertificatePolicy

{

public trustedCertificatePolicy() { }

public bool CheckValidationResult (System.Net.ServicePoint sp, System.Security.Cryptography.X509Certificates.X509Certificate certificate, System.Net.WebRequest request, int problem)

{

return true;

}

}


And this line in to the function that you use to post/get the data.

System.Net.ServicePointManager.CertificatePolicy = new trustedCertificatePolicy();

 

Some of this function is obsolete in .Net 2.0 and VS 2005 already so you will get the warning message. But can simply ignore if you're match such case.

Warning 1 'System.Net.ServicePointManager.CertificatePolicy' is obsolete: 'CertificatePolicy is obsoleted for this type, please use ServerCertificateValidationCallback instead.


Sorry that, I can't explain you how this things works. If some visitor know or understand this please leave your comment about it, I'm very appreciated your join.

Microsoft Windows SharePoint Service (WSS) - Disaster Recovery

Hi again,

I'd blog this since last 2 weeks, but because of no time and my phone line got some problem so i can share this with you guys.

The scenario is like this,

Our project Development server install WSS for some purpose. One day one of my colleague accidentally delete some WSS Database. After he delete the database, i instruct him to check all WSS site hosted by that server. The result make me surprise. most of the users still can acccess all the site including download/edit  some shared file from the WSS site. So I only think that the deleted database is obsoleted or maybe not in used anymore. But lucky that i decide to get there the day after.

The day after the deletion, immediately when i'm at the site. I've found that some site can not access with follwing Error "Configuration Database, Cannot be found". I did some short investigate and found that the deleted Database is actually WSS Configuration Database. And it's already cause problem. My phone start to shake, of course some of the users can't access the site. That's all the brief scenario. Oh, I've forget to tell that, there is no backup for all WSS Database.
 
Understand WSS Database.
 
WSS has 2 types of database.
1. Configuration Database : This Database store all the global configuration of every WSS Site you have.
2. Content Databases : These database store specific configuration for specific site. site-by-site.
 
In my scenario the "Configuration Database" was deleted. Thus all the WSS will not be able to access.
 
My Solution.
 
Firstly, I've to says that i'm just a newbie with WSS. The solution found here might be found more officially somewhere else.
 
1. I use the "Sharepoint Central Admintration" site (still can access) to rebuild the "Configuration Database" with just simple click. Then i got the "Configuration DB" back (But at that moment I don't think it will work).
 
 "Set configuration database server"
 
"Here just click "OK" and WSS will create a new blank Configuration Database for you"

Click to enlarge
 
2. Since the content databases of each site still there so i can just leave it there and find to way to restore the data back laters. 
 
3. After Configuration Database is back all the site still can't access because the "Configuration DB" has no host entry registered.(Because it's just created)  
 
4. I try to unregistered previous regitered (still shown in central admin site) and ignore those error show because there is no database.
 
"Configure virtual server settings".

Click to enlarge

"The list of all virtual host with WSS extended click to remove Sharepoint from each site".

Click to Enlarge

select "Remove Windows SharePoint from virtual server" to unregister sharepoint from virtual server.

Click to enlarge

5. Register back the site to the new "Configuration Database". And configure site template to match with those existing sites. 
 
6. After that, I spend sometimes guessing, trying so many way to restore existing "Content Database".   
 
7. Finally, i've found that each site can configure to have more than one content database. So I try add existing database back to the just create site. And unmount the just created "content database".
 
Select "Manage content databases" to manage the database that store content of the site.
Details of each site "Content Database"

Click to enlarge
Click "Add a content database" to register more "content database" to the site.

Click to enlarge
Click on any registered database to remove or configure that database settings.

Click to enlarge

To remove selected content database from site. A confirmation pop-up will alert about deletion.

Click to enlarge 
 
8. Check the site, see everything is working.
 
Hopefully, you will understand what i'm doing. :( Sorry, for my broken english.

Malicious Cryptography (from SecurityFocus)

Hi peoples,

Everyone still can remember my previous issue right the Windows RMS one. This issue realted to technology that RMS using. Yes, i'm going to talk about "Crpytography technology" here in this issue.

I've found this interresting 2 parts article from securityfocus. We're all known about cryptography more or less and the aspect we know about using crytography is to hide our confidential information with many crytology. But, most of us forget about the truth of co-existing of good and evil.

Today, I would like to introduce you to know the malicious use of crytology. Imagine the way we use cryptography in our daily life now a day. The main purpose is as i said above and all of us learnt or heard of it in the air somewhere. Yes, to encrypt and hide your valueable information from malicious thieves all around the cyberspace. But imagine the encrypted virus that can decrypt itself and execute when arrive at the poor victim machine with the most update antivirus software today (no cryptographic scan included).

Follow this 2 links to find it out yourself.
Malicious Cryptography Part 1 (http://www.securityfocus.com/infocus/1865)
Malicious Cryptography Part 2 (http://www.securityfocus.com/infocus/1866)

I would end this issue just here. Follow the links if you need more details, if not just leave it for other. ;)

Whatever, good or bad it's not the technology itself. But it's the human who use it for good or bad purpose. But more further are us who judge things good or bad based on our perspective. How can we ensure that our perspective are universal standard for judging thing good or bad? 

Windows Right Management Service

Continue from yesterday's issue "Live Communication Server & Right Management Service" Training by Microsoft for ISV partners.
 
In this issue i'd like to introduce a PKI technology by Microsoft. For those who's not quite familier with Cryptography or PKI technology please find some basic resource on the internet.
 
Although, in this issue I'll not talk much about the PKI technology used by the MS.RMS but PKI system will become more and more with your life sooner or laters be prepare.
 
Sample scenario.

Your company use Microsoft SharePoint as you intranet portal. And everyone share their document here. There is a documents with high confidential used between 2 department managers but their secretaries also has access to the management portal to help their boss checking the document. One day, one of the secretary was so upset because her boss flamed her to much. Thus she manage to sale that high confidential document to the opponent company. It's just simply as copy it to her thumb drive and sale and every company with Microsoft Office can open and read it. The business secret was sold out and how the company will do?
 
Microsoft know and try to solve this problem by implement this "Right Management Service" built on PKI concept. Next will be the details.
 
Microsoft Right Management Service. (RMS)

As the prefix word "Service". Yes, it's just a Microsoft Windows 2000,2003 System Service. But what's it about, the RMS?
 
It's all about when you just want to keep your document, e-mail or other Microsoft office documents secure. What you can do with RMS is to use it's based on PKI technology to help prevent your high confidential microsoft office documents to be exposed to public. How ?
 
Easily by using PKI protocol you just simply encrypt everything with the receiver public key so that allow only those who has the right key to read it but that's not enough. RMS also manage the way the receiver office suit used to manage the document to be restrict. You can just allow them to read and only read can't print can't capture screen can't forward that e-mail and so on. All with the PKI concept.
 
More further, The RMS is free and publicly available on the net. So you can just download one from microsoft site and try implement on your virtual machine or implement on your test environment. just a simple click and your documents will be more secure. Your company will be able to control their document assets and their confidentials.  
 
Solution with RMS.

From above sample scenario. The 2 managers secure their high confidential document or e-mail with RMS. By assign 2 secretaries with read only permission and change permission to another manager. So even the secretary can copy out the document but she will not possible to open it on any machine out of their company domain (opponent company, or her home PC). Even more,The secretary is in company but she can only read with only her Microsoft Office suite (other appz can view the messy encrypted text), can't print out the hard copy of the document, simple screen capture (Alt+PrintScr) is disable. How can she sell the secret document to the opponent company? (I've got the answer but I should not mention it here).
 
Additional Info.

RMS is like PGP but PGP is not specific to Microsoft Office Suite only thus PGP can not control the right to each human entity related to the assets. PGP can only sign and verify, encrypt & decrypt to those general text, e-mail. But RMS is more specific to microsoft product and use Microsoft PKI topology during implement thus it's extend PGP features more.
 
Conclusion
This product is nice in my opinion. Because, every present day more and more company suffered from the internal thief who live their life by working during work hours spend some hours grabbing company secret in the evening and sell it at night and earn salaray at the end of every month. More, most of the business already use Microsoft Office Suite already. Upgrade to Microsoft Office 2003 Suite and costless implement RMS to your environment. Sure it can help you safeguard your costly information.