Geek Stuff

New work mobile and new PC!

Posted in Geek Stuff on February 16th, 2011 by Robin – Be the first to comment

Gawd. Still buzzing about having moved up a complete grade at work within 14 months, I found out today that my new desktop (Quad core Intel Core i7 870, with 8GB DDR3) was signed off as approved and my new HTC HD7 phone arrived! It’s such a gorgeous piece of hardware, and the OS is very pretty, but it has a long way to catch up with Android / iOS in terms of usability and functionality. Still, a pretty boss work phone to say the least :) Can’t wait for the desktop to arrive…

Disabling SSL v2 and enabling SSL v3 (and strong ciphers) from the commandline

Posted in Geek Stuff on May 20th, 2010 by Robin – Be the first to comment

@echo “http://forums.iis.net/t/1151822.aspx”
@echo “http://blog.techstacks.com/2008/10/iis-disabling-sslv2-and-weak-ciphers.html”
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 2.0\Server” /v Enabled /t REG_DWORD /d 0 /f
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 2.0\Client” /v Enabled /t REG_DWORD /d 0 /f
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 3.0\Server” /v Enabled /t REG_DWORD /d 1 /f
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 3.0\Client” /v Enabled /t REG_DWORD /d 1 /f
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\TLS 1.0\Server” /v Enabled /t REG_DWORD /d 1 /f
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\TLS 1.0\Client” /v Enabled /t REG_DWORD /d 1 /f
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC2 128/128″
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC4 128/128″
REG ADD “HKLM\System\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\Triple DES 168/168″

Windows Update Multiple Fix Script

Posted in Geek Stuff on January 22nd, 2010 by Robin – Be the first to comment

I made a simple batch file to help fix Windows Update errors on our Windows Servers at work (both 2003 and 2008 / R2). It is based on some advice for various Windows Update errors that were on the internal knowledge base, which was no doubt gathered from information online somewhere. It performs a series of steps, saving a great deal of time over having to perform them manually.

Word of warning: The script will attempt to copy pending.xml before deleting it. If it cannot copy it it will delete it. Personally I have never been able to copy the file; most likely because I have not rebooted the server after taking ownership and granting myself full permissions to the file. I should add however that in all my use of this script I have not suffered any problems when deleting the file. Windows Update will recreate it the next time you/the computer downloads required updates.

:: Windows Update Multiple Fix Script
:: v1.00
@echo off
cd "C:\Windows\WinSxS"
echo Taking ownership of pending.xml
takeown /f C:\Windows\WinSxS\pending.xml
echo;
echo;
echo Granting you permissions on pending.xml
cacls C:\Windows\WinSxS\pending.xml /G %Username%:F
echo;
echo;
echo Attempting to copy pending.xml as pendingbackup.xml
copy "C:\Windows\WinSxS\pending.xml" "C:\Windows\WinSxS\pendingbackup.xml"
echo;
echo;
echo Deleting pending.xml
del "C:\Windows\WinSxS\pending.xml"
echo;
echo;
echo Exporting HKEY_LOCAL_MACHINE\COMPONENTS to C:\HKLM_backup.reg
REG EXPORT HKLM\Components C:\HKLM_backup.reg
echo;
echo;
echo Removing noted problematic registry keys
REG DELETE HKLM\Components /v AdvancedInstallersNeedResolving
REG DELETE HKLM\Components /v PendingXmlIdentifier
REG DELETE HKLM\Components /v NextQueueEntryIndex
echo;
echo;
echo Restarting Windows Update related services...
net stop "Background Intelligent Transfer Service"
net start "Background Intelligent Transfer Service"
net stop "Cryptographic Services"
net start "Cryptographic Services"
net stop "Windows Update"
net start "Windows Update"
echo;
echo;
echo Please try running Windows Update / patching again.
echo;
echo;
PAUSE

Copy the code and save it as a batch file.

Embikes.com – Scam site!

Posted in Daily life, Geek Stuff on April 13th, 2009 by Robin – 10 Comments

I came across Edward Murray bikes whilst searching for Kona Jake The Snake cross bikes. They were offering a seemingly impossible 30% off all orders placed before April 31st 2009 which seemed too good to be true so I decided to investigate.

  1. Using DNStools.com it’s possible to see that the domain was registered on the 18th Feb 2009. Has the site only just appeared? If so, why? They have “blog/news” articles dating back to 2002.
  2. For some reason, the robots.txt has been used to block a whole host of internet search engines. Why? A domain history in the “Way Back Machine” is blocked too.
  3. The checkout process is insecure, carried out entirely over http:// rather than https://
    Take a look at a few of the checkout options:
    embikes-shipping
    Enter your credit card details, over standard http! Haha, I think not.
    embikes-payment
    embikes-creditcard1

  4. They display a truste.org seal on their homepage. On a legitable website clicking this would redirect your browser to the truste.org website, which would subsequently display some kind of seal of approval. On this site however clicking it takes you to a copied version of the truste.org verification page, hosted on their own server. Here it is. Unsurprisingly when searching for seal holders on the truste website Embikes are not there, meaning they do not hold any seal of approval at current.
  5. Almost every product has 1 review, and of course those reviews are always 5 stars.
  6. They have all the bikes in the entire world in stock! Ok, not quite… but they have more than well known online retailers have. For instance, I could apparently choose any size Jake the Snake from the past 3 years (2007-2009 models). Unlikely.
  7. I entered a brief email correspondance with the “owner” about purchasing a bike. As soon as I asked for some reassurance on the authenticitiy of their site (by providing some of the above concerns), all correspondance stopped.
  8. Worryingly I found this site through Google Shopping. I haven’t yet found a way of reporting fraudulent shops but when I do I’ll be sure to send my “evidence” their way.

    Update: Embikes.com no longer appears in Google Shopping results. I wonder how much money they made away with though :/