<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Arricc &#187; security</title>
	<atom:link href="http://www.arricc.net/tags/security/feed" rel="self" type="application/rss+xml" />
	<link>http://www.arricc.net</link>
	<description>50% IT snippets that I couldn&#039;t readily find existing help on. 50% drivel.</description>
	<lastBuildDate>Wed, 02 Mar 2011 23:44:34 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>Drupal HTTPS images</title>
		<link>http://www.arricc.net/drupal-https-images.php</link>
		<comments>http://www.arricc.net/drupal-https-images.php#comments</comments>
		<pubDate>Wed, 02 Mar 2011 23:44:34 +0000</pubDate>
		<dc:creator>Fizzgig</dc:creator>
				<category><![CDATA[Drupal]]></category>
		<category><![CDATA[Hosting]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[code]]></category>
		<category><![CDATA[https]]></category>
		<category><![CDATA[image]]></category>
		<category><![CDATA[module]]></category>

		<guid isPermaLink="false">http://www.arricc.net/?p=96</guid>
		<description><![CDATA[I was involved with a project for a while which was using Drupal as the CMS. The entire site was being served over HTTPS, which was quite annoying as a large pile of the images that were being posted were being served over HTTP from their respective webservers. Naturally, this resulted in everyone getting very [...]]]></description>
			<content:encoded><![CDATA[<p>I was involved with a project for a while which was using <a href="http://drupal.org">Drupal</a> as the CMS. The entire site was being served over HTTPS, which was quite annoying as a large pile of the images that were being posted were being served over HTTP from their respective webservers. Naturally, this resulted in everyone getting very annoyed at their browser warning about loading unsecured content on a secure page.</p>
<p>So, I came up with this module. I&#8217;ve been meaning to release it for ages, but as I need to clear down the server it was running on it&#8217;s made me take the five minutes to write this post. Still needs a bit of work, but does what it says on the tin.</p>
<p>It identifies non-local images in content, downloads them and serves them from a local cache.</p>
<p>Download the module here: <a href='http://www.arricc.net/wp-content/uploads/img_proxy.tar.gz'>img_proxy.tar.gz</a></p>
<p>If you use Drupal, you should already know the drill &#8211; extract the file to your modules directory and enable it in the modules page. The module is implemented as an input filter, so you will then have to add it to the appropriate input formats at http://your.site.com/admin/settings/filters </p>
<p><strong>Notes</strong></p>
<ul>
<li>Licenced under the GPL version 2.</li>
<li><strong>*** There is nothing in the code that verifies the file being proxied is an image!! ***</strong> (that&#8217;ll be in the next version!)</li>
<li>May not work with sites that check the referer of the request for images.</li>
<li>I&#8217;ve been meaning to release this for ages, but there is sill a lot of debug code thats just commented out.</li>
</ul>
<p>Hopefully I&#8217;m not the only webmaster that ever had this issue and somebody will find this handy.</p>
<p>Maybe one day I&#8217;ll tidy up the code and submit it to the Drupal Module repository!</p>
<p>Enjoy.</p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="mark@arricc.net" /><input type="hidden" name="return" value="http://www.arricc.net/pp-thanks.php" /><input type="hidden" name="item_name" value="Buy Me a Beer for Drupal HTTPS images" /><input type="hidden" name="currency_code" value="GBP" /><input type="hidden" name="amount" value="5" /><input type="image" src="http://www.arricc.net/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="" title="" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=mark@arricc.net&amp;currency_code=GBP&amp;amount=5&amp;return=http://www.arricc.net/pp-thanks.php&amp;item_name=Buy+Me+a+Beer+for+Drupal+HTTPS+images" target="paypal">If you find this article useful, buy me a beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.arricc.net/drupal-https-images.php/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Group Policy to disable Autorun</title>
		<link>http://www.arricc.net/group-policy-to-disable-autorun.php</link>
		<comments>http://www.arricc.net/group-policy-to-disable-autorun.php#comments</comments>
		<pubDate>Wed, 21 Jan 2009 10:59:10 +0000</pubDate>
		<dc:creator>Fizzgig</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[group policy]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Tech]]></category>
		<category><![CDATA[autorun]]></category>

		<guid isPermaLink="false">http://www.arricc.net/group-policy-to-disable-autorun.php</guid>
		<description><![CDATA[Well, its been a while, but I thought I&#8217;d share this little snippet. Theres a big hoo-ha going round at the minute about a number of viruses that are exploiting autorun.inf to spread. You can read all the gorey details over at CERT &#8220;Microsoft Windows Does Not Disable AutoRun Properly&#8221; Essentially, the recommended fix is [...]]]></description>
			<content:encoded><![CDATA[<p>Well, its been a while, but I thought I&#8217;d share this little snippet.</p>
<p>Theres a big hoo-ha going round at the minute about a number of viruses that are exploiting autorun.inf to spread.</p>
<p>You can read all the gorey details over at CERT &#8220;<a href="http://www.us-cert.gov/cas/techalerts/TA09-020A.html">Microsoft Windows Does Not Disable AutoRun Properly</a>&#8221;</p>
<p>Essentially, the recommended fix is to set a registry key. I did read somewhere that this makes windows handle the file as a Win95 ini file but sadly I can&#8217;t find the blog/article where I read that anymore.</p>
<p>Approaching this as a sysadmin and wanting to undertake minimal effort to resolve this issue I&#8217;ve create a Group Policy adm file to solve apply it to all the machines in an Active Directory domain. I&#8217;ve copied the contents below and attached the file to this post.</p>
<p>To use it:</p>
<ol>
<li>Create a new group policy object in your AD</li>
<li>Edit it, right click on the Administrative Templates folder and remove all the default ones listed and add the one below.</li>
<li>Right click on the Administrative Templates folder and change the view filtering to not hide settings that can&#8217;t be fully managed</li>
<li>Group poicy editor will now display the setting to disable autorun which will set the appropriate registry key</li>
</ol>
<p>ADM files are just text. You can either download the one below or copy and paste this (watch for the line wrap on the last line!):<br />
<span id="more-35"></span><br />
<div class="codeblock"><code>; US-CERT Technical Cyber Security Alert TA09-020A -- Microsoft Windows Does Not Disable AutoRun Properly<br />; http://www.us-cert.gov/cas/techalerts/TA09-020A.html<br />;<br />;FIX:<br />;REGEDIT4<br />;&nbsp;  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]<br />;&nbsp;  @=&quot;@SYS:DoesNotExist&quot;<br />;<br />;<br />CLASS MACHINE<br />	CATEGORY !!RegistryFixes<br />		POLICY !!AutoRunInfSYSDoesNotExist<br />	&nbsp; &nbsp; &nbsp; &nbsp; #if version &gt;= 4<br />	&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; SUPPORTED !!SUPPORTED_WindowsXPSP2<br />	&nbsp; &nbsp; &nbsp; &nbsp; #endif<br />	&nbsp; &nbsp; &nbsp; &nbsp; EXPLAIN !!AutoRunInfSYSDoesNotExist_Help<br />	&nbsp; &nbsp; &nbsp; &nbsp; KEYNAME &quot;SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf&quot;<br />	&nbsp; &nbsp; &nbsp; &nbsp; VALUENAME &quot;&quot;<br />	&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; VALUEON &quot;@SYS:DoesNotExist&quot;<br />	&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; VALUEOFF DELETE<br />&nbsp; &nbsp; 	END POLICY<br />&nbsp; &nbsp; END CATEGORY ; DisableRemovableStorage<br />[strings]<br />RegistryFixes=&quot;Registry Settings&quot;<br />SUPPORTED_WindowsXPSP2=&quot;Microsoft Windows XP Professional SP2 or later&quot;<br />AutoRunInfSYSDoesNotExist=&quot;Disable auto handling of Autorun.inf&quot;<br />AutoRunInfSYSDoesNotExist_Help=&quot;As per US-CERT Technical Cyber Security Alert TA09-020A -- Microsoft Windows Does Not Disable AutoRun Properly\n\n\nhttp://www.us-cert.gov/cas/techalerts/TA09-020A.html&quot;<br /></code></div></p>
<p class="buymebeer"><form action="https://www.paypal.com/cgi-bin/webscr" target="paypal" method="post"><input type="hidden" name="cmd" value="_xclick" /><input type="hidden" name="business" value="mark@arricc.net" /><input type="hidden" name="return" value="http://www.arricc.net/pp-thanks.php" /><input type="hidden" name="item_name" value="Buy Me a Beer for Group Policy to disable Autorun" /><input type="hidden" name="currency_code" value="GBP" /><input type="hidden" name="amount" value="5" /><input type="image" src="http://www.arricc.net/wp-content/plugins/buy-me-beer/icon_beer.gif" align="left" alt="" title="" hspace="3" /></form><a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&amp;business=mark@arricc.net&amp;currency_code=GBP&amp;amount=5&amp;return=http://www.arricc.net/pp-thanks.php&amp;item_name=Buy+Me+a+Beer+for+Group+Policy+to+disable+Autorun" target="paypal">If you find this article useful, buy me a beer!</a></p>]]></content:encoded>
			<wfw:commentRss>http://www.arricc.net/group-policy-to-disable-autorun.php/feed</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
	</channel>
</rss>

