February 13, 2004

Samurize : Superfine system monitoring

I like knowing what my system's doing. Bandwidth utilization, processor and page usage, that kinda stuff. I've been using CoolMon from ArsWare for a really long time ... like more than a year. But it's had a couple of bugs that bother me. Not significant problems, just little nuisance ones. Well, last week I came across Serious Samurize and, I've gotta tell ya ... WOO HOO! It has built-in access to quite a few counters but also gives you access to perfmon counters and WMI stats and plug-ins PLUS console-based programs and VB scripts. You can render things as graphs (line, pie chart, histogram, etc) and/or as text. Comes with a configuration editor that's very intuitive. It's donation-ware (free but they ask for a donation) and well worth whatever you wanna throw at 'em. I'm a convert.

Posted by tony at 08:40 AM | Comments (0)

February 10, 2004

ASN.1 and WINS vulerabilities

Today the BBC published one of the most worthless articles on a Windows XP vulnerability (here). Also on the "nearly worthless" list was this one from US-CERT (although it contained quite a bit more technical information). Far and away the best one, though, is this one from Secunia, at least IMHO. Secunia tells you that Kerberos and NTLMv2 authentication can trigger the vulnerability.

Very nearly as scary, at least if you're running a server, is this WINS vulnerability as reported by Secunia.

Update:

OK, I take it back. The US-CERT Technical Alert gives a good technical overview of the ASN.1 vulnerability, adding SSL and TLS to the list (NTLMv2 and Kerberos) that trigger it.

Posted by tony at 05:35 PM | Comments (0)