Diary of a Network Geek

Remember, these are “administrator utilities” not “hacker tools”.

In my business, it pays to make the distinction.
When people call me for help outside the office, the calls usually fall into a couple categories; a virus, a slow computer, a lost password and “how do I do X?”  Sadly, I’ve been doing a lot of virus and spyware removal, but, also, lately, I’ve had a couple of “lost password” calls.  I actually love getting those, for a couple reasons.
First, lost passwords are surprisingly easy to recover if you have physical access to the machine.  It’s funny to me how few people get that.
Secondly, I find recovering passwords fun.  In a way, it was one of the first things that drew me into the business.  I was one of those guys who got hooked by the security bug not by War Games, but by Sneakers.  Yeah, I know, most guys my age especially will tell you it was War Games that really got them hooked.  What can I tell you?  I’ve always been kind of a late bloomer.  And, my dirty, little secret is that after seeing Sneakers, I wanted to be Marty Bishop.  Seriously.

Anyway, my recent experience with Windows password recovery requests gave me an opportunity to refresh my tools.  After Googling a bit, I found a handy About.com page titled “Top 6 Free Windows Password Recovery Tools“.  I downloaded several, most of which were based on bootable CDs of one kind or another.  I like those kinds of toolkits because they don’t require even limited access to operating system, just the ability to reboot the machine from the CD toolkit.
In the end, I tried two; 0phcrack and the Offline NT Password & Registry Editor.

Now, I’m not positive, but I’m pretty sure that 0phcrack is the free, opensource fork of l0phtcrack.  Now, for an old-timer like me, l0phtcrack was THE password cracker to have, back in the day.  Created by a group of well-known hackers, some of whom famously testified before Congress, it was not free.  At least, theoretically.  If you knew where to look, you could get copies.  And, yes, I  them.  But, this version IS free and seems like it had some improvements.
For one thing, the old version had a slightly clumsy text-based interface.  This version has a much nicer interface that seems to use X-Windows.  It’s also far more intuitive to use.  It ran pretty fast, really, though, sadly, didn’t seem to be able to crack the non-dictionary word used as a password on the Windows 7 box I was using it against.

On the other hand, the Offline NT Password & Registry Editor has been around for several years, and had several updates, though it retains the text-based interface.  I don’t remember when I used this the first time, but, so far, it hasn’t let me down in a pinch.  This time was no different.  So, yes, even though it has “NT” in the name, I’ve used it on everything from Windows 2000 through Windows 7 without a hitch.  Of course, your results may vary.  The bonus of this product is also it’s most potentially dangerous drawback; it directly edits the registry and password files.  This is dangerous, in a way, because if something goes wrong, this could, theoretically, lock you out of your machine permanently.  In practice, this has never actually happened to me.
One advantage of this utility is that you can change or simply remove the password for any active user on the system.  Also, you can use it to promote an active user to being an administrator equivalent.  Now, by “active user” what the developers mean is any account that is not disabled.  Though, I think there may be the option to activate a deactivated account.  I’m not positive, though, because I’ve never had to look for it or try to use it.  And, yes, this worked like a charm to simply blank the password on the Windows 7 machine that had apparently forgotten its own password.

So, there you have it.  Two tools to recover lost Windows passwords.
Oh, and, just a quick disclaimer here.  I’m not responsible for any damage you might accidentally do to your machines with these utilities.  Nor am I advocating using them to break into your ex-spouse’s computer to read their adulterous e-mail to their lover.
I’m just sayin’….

Lifehacker loves iPhone apps almost as much as I do!

No, seriously, I use this thing for everything.  Not too long ago, I showed you a ToDo app that makes life easier for you when trying to keep track of all the things you need to do.  I’ve talked about other apps before, and, of course, earlier this week, I mentioned that people are using their iPhone as a security testing tool.  Really, there’s no end to what you can do with today’s smart phones, though I happen to prefer the iPhone, obviously.

In any case, Lifehacker has put together a list of apps that they recommend, most of which are free.  And, the few that aren’t are only a couple of dollars a piece.  If  you’re a heavy iPhone user, it’s worth it to go take a look at their selection of “must have” iPhone apps: Lifehacker Pack for iPhone.

No, this is not a post about sexual performance.
Pervs.

I use my iPhone for a surprising variety of things, even at the office.  For around $14, I threw together a suite of network scanning and testing tools that let me get a pretty good look at any network I manage.  But, that’s another post.
Today, I thought I’d bring to your attention a great blog post by Nicholas M. Petty tittled “iPen: Hacking with the iDevice“.  What he’s got is a set of instructions and tools for turning your iPhone, or, presumably, your iPad, into hand-held computer security penetration testing tool.  Yeah, I know, it still sounds dirty when you say “penetration”.  Grow up.

If you’re into security, whether you own an iPhone or not, it’s worth going to take a look at just to see the thought process and methodology.
Now, as much as I love this idea, I probably won’t actually do it myself because the first step is to “jailbreak” your phone and, frankly, as tight as money is and as important as my phone is to me, I can’t afford to have problems with it.  Still, it is an interesting idea, especially considering how many of these little devices are wandering loose out there and how many wifi access point exist out in the world.  I often wonder how secure any of them really are, especially in corporate environments.

Anyway, this should be something for network managers to think about the next time they see someone in the lobby of their building “playing a game” on their iPhone!

It’s no secret that I love WordPress.

I mean, seriously, I really, really love WordPress as a blogging platform and as an easy-to-understand Content Management System.  But, did you know that I’m one of the three most important people in WordPress? No, for real! And, I have a certificate from Matt Mullenweg himself to prove it!

Okay, so, yeah, I know, I’m not really one of the most important people in WordPress, outside of being one of millions of users who do, in fact, make WordPress a force to be reckoned with. But, we only manage that as a group, as a community. No, that certificate is a joke. Literally. It’s a joke from Matt Mullenweg, founding developer of WordPress, regarding an incident some weeks back involving a theme developer who didn’t want to use the GPL, which is the software license that WordPress uses and all theme developers are required to use. I know people will disagree, but, based on my understanding of the GPL, any derivative works of a product that uses the GPL must also use the GPL.  So, really, for most of their code, theme developers are required to use the GPL.  Honestly, I’ve never worried about it.  I mean, mostly, it’s a bunch of legal speak that means very little to the average end-user.
One of the things that this theme developer claimed, erroneously, was that he was one of the “three most important people in WordPress” because he felt that so many people used his theme.  I think he may have been surprised at how many of those folks jumped ship when they found out there was something wrong with that theme and its license.

In any case, what does matter to us about all this is that Matt took that attention and made a marketing opportunity out of it.  For starters, he started buying people premium themes that didn’t violate the GPL as a kind of protest and a way to draw attention to how serious he is about supporting the GPL.  And lots of people took him up on the offer.  But, apparently, someone griped about not wanting a premium theme or something and so, instead, Matt made a second offer to those of us who didn’t want, or couldn’t decide on, a premium theme.  He offered us free t-shirts.

Well, I’m always up for a free t-shirt, especially one that advertises something I believe in and use, so I was on this offer like white on rice.  Now, I can only imagine how many people also took advantage of this, too, but I went to his website, and filled out the form and sent off my e-mail like a kid sending in his box-tops for his toy surprise.  And, then I forgot about it.  I try to do that, frankly, when I enter contests and such.  Like casting my bread upon the water, I do what I need to do to enter and then forget it.  That way, if something does arrive, I’m pleasantly surprised.  That’s just what I was this past Friday when I found the package from Matt in my mailbox; pleasantly surprised!

As you can see from the picture, the t-shirt came with a few other things.
First of all, there were all kinds of stickers, which I love.  It reminds me of the old days when you got swag at the conventions and covered your laptop in stickers.  But, there was also an iPhone skin and pencils and, of course, the certificate, which made me laugh out loud.
I’ve already worn the t-shirt, which, as you can see, says “Code is poetry” on the front.  What you can’t tell from the photograph is that the t-shirt reads “WordPress.org” and has the official WordPress logo on the back.  Frankly, that’s the part I love.

Now, all I need to do is actually read all those books I’ve gotten on WordPress theme design and get working on it…
Anyway, thanks for all the stuff, Matt!

(Note: This “post” was written over the space of two long waits in airports after gliding through easy and over-hyped security.)

08/11/06

Well, there wasn’t any free wifi at the airport that I could find, even using a cool new tool I found for Linux called Wifi-Radar. Super slick little proggie that scans for available open wifi networks and automagically attaches you to the network of your choice. Pretty cool. Anyway, security was a breeze. As usual, the blood-sucking, bottom-feeders in the alarmist media totally overhyped the delays. I got Hilda checked in, stopped for gas and slipped into the Park-N-Fly by about 10:45 AM. The shuttle got me to the airport no later than 11:15AM and I was checked in and through security in less than 20 minutes. That’s with an eTicket and a driver’s license that still has my last name misspelled with an extra letter. You’d think that would raise a red flag, right? Hell, it doesn’t even raise a damn eyebrow.

Feeling extra secure yet? So, we hear all kinds of stuff about how bad security is going to be, but, as far as I could see, the only thing added to security was that they were restricting fluids on the plane. Yeah, so, no drinks through security, which, of course, means that everyone was buying drinks in the terminal. I didn’t look at how much I was gouged for my bottle of water and masked the whole cost with a couple of magazines. No Maxim, though. Just PopSci, Scientific American, Men’s Health and Real Simple. You know, I may end up getting a subscription to Real Simple instead of Dwell. It’s more my style. Not quite so avant-garde and infinitely less expensive. I was very glad to have gotten my iPod back, though. And, I even managed to sync all of Tristan und Isolde to it before I took off in the morning. Sadly, I didn’t have quite enough time to create a playlist that let me listen to the entire opera in order, but, still, I have it in there. According to iTunes, I have almost three days worth of continuous music on my Nano. Based on the silly media hype, it sounded like I’d need it, so, I was thrilled.

The one interesting thing was that I was almost on the news. No, not because I tried to sneak something dangerous on the plane. Though, God knows, I have done just that so many times it really makes me question the supposed security training they give those TSA agents. Anyway, there was some cute, Hispanic news chic there with her cameraman interviewing passengers about the virtually non-existent security delays and they saw my “Sunguard Secure, Disaster Recovery Experts” shirt. Right away the camera guy is all “So are you a disaster recovery expert?” and I start laughing at them both. I explain that, yes, I am an IT disaster recovery expert, but not the kind they were looking for. Oh, sure, I could have gone on TV and made a credible security expert, but that’s mainly because I’m well read and I’ve spent a lot of time thinking about security for IT, which includes physical security, not because I’m a real anti-terrorist expert. But, why? Why the hell would I want to have my mug all over the TV news? I hate them, the alarmist fear-mongers always whipping the mass of unwashed humanity into a damn frenzy. Idiots. They’re not journalists anymore, just talking heads. It’s all about jumping on that fear-hype bandwagon, not about reporting real information that people can actually learn something from anymore. I don’t know, maybe it’s time to get a subscription to a local paper again. Ha! “A” local paper, that’s funny, isn’t it? It’s either the Chronicle or an out of town paper, like the Chicago Tribune or the Wall Street Journal. Oh, well, it’s almost all bad news anyway….

08/14/06

Well, here I am again, killing time in an airport waiting for my flight after breezing through security. I can’t tell if it’s just the media blowing things so far out of proportion or just people stupid enough to argue with the TSA agents and trying to break the rules. Honestly, I think it’s the TV news media who have to justify their existance by whipping everyone into a frenzy about the terrorists who weren’t even on US soil. Sure, I’ll grant you, getting blown up in a plane would really ruin my travel plans, but we’ve been living with this since 9/11 and, frankly, I think it’s about time we just adjust to higher security than we used to have. I mean, really, compared to most of the world, we’ve been skating along pretty free and easy. They’ve been dealing with terrorists in Europe for years and the British were more relaxed about this last incident than we were, even though it was their countrymen that were going to be blown up! This is just going to be a fact of life from now on. We need to get past the panic and fear and make our adjustments and move on with our lives, otherwise the terrorists have already won. So, in any case, I glided through security, in spite of not shaving, having a scruffy goatee and being loaded down with electronics. I guess it helps to just blank your face and go with the flow. Not like I have a choice, after all, so I might as well just accept the process and go with it. Seems to make things a lot easier. So, crazy security concerns aside, I had a good visit with the family.

Turns out, my parents were wrong and I wasn’t going to be presenting my nephew with his Eagle award, but it really did seem to mean a lot to him that I was there. Actually, it seemed to mean a lot to everyone to see me. I guess I shouldn’t be so surprised, but I never realized how important I was to my family. Of course, I spent some time setting up my parent’s new laptop and transferring settings and files over from the old one. I first thought that I’d be able to do that via a USB thumb drive, but there was just a little too much there to get onto a single one gig drive, so I had to use the network cable and crossover adapter that I’d brought with me. Good thing I have a little bit of experience being an IT consultant on the road and thought to bring some “extra” stuff I probably wouldn’t need, just in case. Sadly, I forgot to bring the copy of Word that I had for Mom and scratched the first CD of the Works install set, so I’ll have to ship them the CD and walk Mom through the install. Oh, the funny thing about her new laptop is the wireless connection. I cranked up that laptop and found five or six networks in the area with at least two that were unsecured, so I used that to piggy-back to the Internet. I think that ease of use just about convinced her to invest in broadband at their new house when the finally move in. They already have digital phone service through their cable, so I’m pretty sure they’d get a discount on the Internet connection, too. That along with a wireless router would really have them in the modern age of computing. And, I think they’d use their laptop more. Well, at least, Mom would. Dad mainly tells her what he wants and sends her off to do it, but he thinks he’s pretty high-tech, which is kind of funny. Actually, if you ever met either of my parents, it’d amuse you think of either of them being all that high-tech.

Though, somehow, they turned out at least two of us that make our living via technology. That’s just one of many things my brother and I have in common, though… It was nice talking with him some, though, I think we both wouldn’t have minded talking more. Eleven years apart and a vast difference in life experience, but we’re still the same in so many ways. Sadly, we both have many of the same things to fight through and over come. Both shy, each in our own way. Soft-spoken, but determined and, often, very single-minded of purpose. I honestly think that my brother has a PhD. because someone told him he couldn’t do it. We’re funny that way. Sometimes, that’s an asset, but not always.
Still, we often have very similar political views and, talking with my sole niece, Rachel, I was surprised to see how well our philosophies about kids meshed. That “little” girl has grown into quite a young woman. Just barely fifteen, but almost as tall as I am and, thankfully, looking more like her mother every day. I sat with her after her brother’s Eagle Ceremony and talked with her a bit, since I realized I didn’t really know her that well these days. The boys all center on me like iron filings on a magnet and that often seems to leave little room for Rachel. The last time I was home, she spent most of the time with Allison, my former step-daughter, and I didn’t get to talk to her. In any case, I took the opportunity to chat with her about a lot of different things, including driving, boys and her future plans. She didn’t have a boyfriend right now, but she’s already had two, which, at fifteen seemed like a good, slow start. She broke up with the last one, she told me, because he’d been smoking marijuana. Smart girl. Already learned that guys who smoke enough dope lose all motivation and ambition. It’s not just a stereotype. So, she was single, but didn’t seem in a big hurry to find the next guy, which I though was a good attitude, too. When I asked her about school and ideas for a career, she told me she wanted to go into nursing. Like I said, smart girl. It’s a good field and she has the right kind of personality for nursing. Even at fifteen, she was worried about her poor, old Uncle Jim standing when everyone else was sitting at the reception. I was glad for the chance to sit and talk with her. I just wish Allison had more of an opportunity to know her former cousin. I think Rachel would have been a good influence on her. Ah, well, maybe they’ll reconnect one day. Stranger things have happened.

Her little brother, Michael, my youngest nephew, is a whole different animal. This poor kid has no small amount of adversity to overcome. As a little guy, he got repeated ear infections and is, as I recall, legally deaf. But, since he was very small, he’s worn a hearing aid in each ear and does quite well. He has a very slight speech impediment, but he seems to make up for that with enthusiasm and volume. He certainly has no trouble making himself understood when he wants to get a point across! But, he also has a fairly rare back and spine condition that will require him to wear an obviously uncomfortable back brace for most of the next three years. He’s a good kid and doesn’t complain much when his parents tell him to get his brace back on, but it can’t be something he likes to do. I don’t know if any of the kids at school give him trouble for it, but I think his mother has already given her permission to pop the little wiseasses if they do sound off. And, if I ever hear about any grief, I tell you, Mike will have a mean uncle from Texas coming up to crack a couple of skulls for him. He’s a good boy and puts up just a tiny fuss at having to deal with all his physical troubles. And, in spite of all his reasons to be unhappy, I’d say he’s the most gregarious and, well, “jolly” of all my nephews. Always smiling and laughing and joking, even when irritation occasionally creases his forehead, it sure doesn’t cloud his world for very long at all. I know quite a few adults that could learn thing or two from this young man.

Then, there was my “redneck nephew”, as I like to call him.
John Dwight is a big kid. He looks slow and ponderous and even sounds a little thick, but he’s not. He’s a smart kid who lives in a town that doesn’t put much stock into “book learnin'” and it shows. Mainly, I think he’s just not very motivated. I think he sees the futility of his situation. He can only go so far in that little town outside of Rockford, Illinois. After that, if he wants more and bigger opportunities, he’ll have to leave. Based on how his mother and father have dealt with that decision, I doubt he’ll leave. Though, he is talking about enlisting in the military. He claims he wants to be a sniper, but with less than perfect vision, I think that’s not going to quite work out for him. He likes to work on cars, though, and seems to think he can bide his time waiting for the sniper program while being a mechanic. I don’t think he understands the military enough to know that once he starts as a mechanic, he’s likely to stay a mechanic, but, at least he’ll have a skill and a way to make a good living after mustering out. It would be a good way for hime to go.
He shadowed me for most of the time I was working on my Mom’s new laptop. I think partly because he wants to get a shiny, new laptop himself, but also because he’s interested. I talked with him about what I was doing and promised to send him one of the super cheap 1 Gig USB thumb-drives I’d found at MicroCenter and was using. He seemed genuinely excited about that. I’ll send that to him after I get back along with a Knoppix CD, so he can learn a little Linux. If he learns Linux and is still interested, I might send him an old Dell laptop with Redhat or Novell’s free OpenSuSE loaded on it. That would be another direction he could go. A little military experience and a couple of professional certifications and he could really go far.

Finally, my oldest nephew and godson, Bill…
As I write this, he’s on his way to his first year of college. He’ll be a Physics Major at Purdue University. Kid’s going to be a genius PhD, like his father. He has a girlfriend, Jenny, who’s nice enough, but tries a little too hard to be liked. When she forgets to work at it and relaxs, though, she’s a nice kid. Bill and I had a little talk on Friday night when his family came over for dinner. (Mom made “creole chicken”, a soulfood recipie that my grandmother picked up on the Southside of Chicago.) He’s so much like his father that it’s almost scary. I was touched Saturday when I figured out that he really just wanted me at the ceremony because he missed his Uncle Jim. I made sure to give him my cell number and told him he could call for anything but bail money. I hope he takes me up on the offer. I gave him the best advice I could for a Freshman going into that big, wide world of college. “Never go into a weekend without twenty bucks and a condom.” I explained that to him, but those stories will have to wait for another time on the blog. My plane is boarding, so I’m shutting down the laptop. Next stop, Houston!

Update:
Made it home safe and sound. Got my poor Hilda from the vet today. Apparently she barely ate, hid from the “keepers” and generally trusted no one. On the upside, she did learn to use the “doggie door” really well! That’s where she ran to get away from the people who were supposed to pamper her. *sigh* She wouldn’t even eat her home-made treats. Apparently, she just didn’t trust the kenel staff enough to take even the yummiest of muffins from them. (In fact, they said they smelled so good they almost ate some themselves!) She was so excited to see me, I could barely get her car harness on her. She wolfed food when we got home. And treats. And attacked a new rawhide chewie bone I’d gotten her. Well, she’s like her old dad, doesn’t trust anyone new and is loyal to a fault. She’s my dog, sure enough.
Glad to be home. And, finally, after all this time and all this trouble, this is home.

Advice from your Uncle Jim:
"The fact that no one understands you doesn't make you an artist."

Wow, classic, retro computing!
Hey, this brings back memories…. I was in high school when the Apple first hit significant production. In fact, we had an Apple I in our fledgling computer lab when I was a Freshman, though it was quickly replaced with an Apple IIe. (Yeah, I’m poor-folk, but I grew up in a pretty affluent neighborhood. Thanks, Mom and Dad!) That was back in the days when there weren’t such things as “floppy drives” or “CD-ROM drives”. Nope, you loaded your programs from tape. Audio tape! Yep, it was the Dark Ages, allright. And I was there to see it. God I feel old all of a sudden….
Anyway, now you can relive those glory days of yesteryear with your very own, home-built AppleI. Yessirree, according to this article on Wired News, there is now a book out that teaches you how to build your very own Apple I. It’d be a challenge for most of us, now that we’ve gotten used to all the fancy bells and whistles, but it could be fun. A neat learning project, or even a science fair project for someone. And, you never know, it might just inspire someone to invent the Next Big Thing in computing!

Besides, it’s Friday and if you’re reading this blog you’re geeky enough to think building your Apple I is cool. Just like me. So, go ahead, indulge your guilty geek pleasure and click the link.

A different kind of “object oriented” computing…

Hey, it’s Friday. Traditional day for slacking and having fun, right? Well, have some digital fun, thanks to TechTV, with BlockCAD. It’s pretty much like the Legos™ that you remember. Bright colors and simple shapes. Just the thing for a Friday after a long complicated work week.

Have fun!

It’s here!

Good or bad, biometrics has hit the retail markets. I’m not talking about those keyboards that have a thumbprint reader to unlock your PC either. I mean that there are retail establishments that are testing pay-by-thumbprint, right now! There’s an entry on Slashdot that has links to both the good, and the bad, side to this technology. Frankly, it’s the dark side that I find the most interesting.
Ever seen Minority Report? If not, you need to see it for just this. Picture being tracked through a shopping mall via biometrics, with advertising targeted to you and calling you by name. To borrow an overused marketing phrase, it’ll take spamming to a “whole new level”. Ubiquitous computing? Forget that. Ubiquitous advertsing. That’s a more likely scenario by far. I shudder at what this will do to our world. And, I can already see a steep rise in amputation related crimes. You thought identity theft was bad in our time? Wait until people are stealling thumbs!

Now, here’s a good use for a Beowulf cluster….

Researchers are using low-cost “super computing” ala Linux to figure out how species differentiate, according to this article on Wired News. They’re also investigating the relationship all these sub-species have to each other currently. It sounds so simple that I think it’s deceptive. They’re inputing tonnes of data, including habitat, diet, and reproduction statistics. Then, they’re analyzing all that for subtle relationships that might not be obvious to human researchers.
But, what’s cool is that they’re doing it on a budget using an Open Source operating system! Truly, we are all standing on the shoulders of giants as we march into this new century of high-technology. And, that, as far as I am concerned, is very, very cool.