Posts by Wayneh_nz

Stop us if you've heard this one before: Exchange Server zero-days actively exploited

Re: Or is it?

It's available through standard 443.

If you want to test if your exchange server is vulnerable edit this. If you see an auth window you are. If you get denied you are not.

https://owa.contoso.com/Autodiscover/autodiscover.json@PowerShell

Exploitable?

If you want to test if your exchange server is vulnerable edit this. If you see an auth window you are. If you get denied you are not.

https://owa.contoso.com/Autodiscover/autodiscover.json@PowerShell

To mitigate it you can follow these steps

Import-Module WebAdministration

Invoke-WebRequest -UseBasicParsing -Uri 'https://download.microsoft.com/download/1/2/8/128E2E22-C1B9-44A4-BE2A-5859ED1D4592/rewrite\_amd64\_en-US.msi' -OutFile "$env:windir\temp\rewrite.msi"

Start-Process -FilePath "$env:windir\system32\msiexec.exe" -ArgumentList '/i', "$env:windir\temp\rewrite.msi", '/qn'

Start-Sleep -Seconds 15

$name = 'Block AutoDiscover 0-Day'

$inbound = '.*autodiscover\.json.*\@.*Powershell.*'

$site = 'IIS:\Sites\Default Web Site\Autodiscover'

$root = 'system.webServer/rewrite/rules'

$filter = "{0}/rule[@name='{1}']" -f $root, $name

Add-WebConfigurationProperty -PSPath $site -filter $root -name '.' -value @{name = $name; patternSyntax = 'Regular Expressions'; stopProcessing = 'False' }

Set-WebConfigurationProperty -PSPath $site -filter "$filter/match" -name 'url' -value $inbound

Set-WebConfigurationProperty -PSPath $site -filter "$filter/action" -name 'type' -value 'CustomResponse'

Set-WebConfigurationProperty -PSPath $site -filter "$filter/action" -name 'statusCode' -value 403

Set-WebConfigurationProperty -PSPath $site -filter "$filter/action" -name 'statusReason' -value 'Forbidden'

QR-code based contact-tracing app brings 'defining moment' for UK’s 'world beating' test and trace system

Here in New Zealand, our QR code contact tracing app, provided by the government does a couple of things differently, the data is stored on your device, the QR Code is registered to the physical location, the app sends the business name and user name to the contact tracing provider, once there has been a notification that the contact tracing needs to contact some one that has been to that location, they then get the app to notify the contact tracing of the day and time that a particular user has been, if it does not correspond with the timeline requested, the data is purged, and the people that match get a phone call, and told to take a test and isolate.

All public transport has a card, (like an oystercard in the UK) and all vehicles have a unique code, so we can trace individual travel,

and like Scott26 above, we have gotten good enough, that I have seen someone scanned someones else's phone, while they were scanning the code at the door.

Support whizz 'fixes' screeching laptop with a single click... by closing 'malware-y' browser tab

Set fire to the rain?

That would be a Samsung device, not a Dell. Remember when there was the recall on Samsung washing machines because there was a malfunction in the rinse cycle. Where the machine would catch fire. Only Samsung can set fire to water like that.

DBA drifts into legend after inventive server convo leaves colleagues fearing for their lives

Re: My boss was demonstrating the instrusion sensors on our building

Expanding foam in the sirens dulls the sound a bit. Spraying a little cooking oil into the sirens stops the expanding foam from sticking, as demonstrated by the burglars that broke into my neighbors house and got expanding foam all over themselves, trying to quieten down the siren.

Click this link and you can get The Register banned in China

Or, to meta two threads, "my family name Bing, is welsh, it means dinner is ready"

Developers' timezone fail woke half of New Zealand

sitting in an extinct caldera.

We had one of those too. Lake taupo dropped enough stuff to cover the whole of England 200m deep about 26,000 years ago. In auckland our last big pop was only about 600 years ago, and we are overdue for another one.

"The nation is famously tectonically tenuous"

Big countries get their own version of monopoly, we get our own version of Jenga.

The biggest city in New Zealand sits on >40 extinct volcanoes. What could possibly go wrong.

Fighter pilot shot down laptops with a flick of his copper-plated wrist

How to bear it quietly?

Rubber hammer

Maybe South African, their country their language they can spell it how they like

Afrikaans is one of the languages spoken there. Note, no C.

When is just a simple mistake. Maybe from a phone, do you know how many I had to fix just typing this? Probably missed one or two.

Re: The Middle of Nowhere is not in Cumbria

And nothing there wants to kill you. Any country where the spiders can carry a mouse up a refrigerator is one you want to think twice about.

Installing disks is basically LEGO, right? This admin failed LEGO

Re: HTFU?

or you can take a concrete pill to HTFU