Monday, July 26, 2021

Windows Elevation of Privilege Vulnerability


Overview

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Test for Vulnerability

To check if your Windows 10 or Windows 11 installation is affected, you can open a command prompt and enter the following command:
icacls c:\windows\system32\config\sam
If the output displays the following permission, your Windows installation is affected by the vulnerability.
BUILTIN\Users:(I)(RX)

Workaround

Restrict access to the contents of %windir%\system32\config

Windows PowerShell (Run as administrator):

icacls $env:windir\system32\config\*.* /inheritance:e

How can I delete Volume Shadow Copies?

To delete all shadow copies of the system drive, run the following command:

 vssadmin delete shadows /for=%systemdrive% /Quiet

To confirm that all shadow copies were deleted, you may run this command again: 

 vssadmin list shadows /for=%systemdrive%

If there are no shadow copies on your system drive, you will receive output that says:

vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2013 Microsoft Corp.
No items found that satisfy the query.

Create a Restore Point
Since all restore points have been erased, you may wish to create a new restore point after you have fixed the vulnerability.

Attributions

Saturday, June 1, 2019

Weather is too nice to program

To be a successful programmer, you need exercise and good nutrition.



https://www.seedsnow.com/collections/herbal-medicine-seed-collection/products/medicinal-herbal-kit

This is everything you need to plant a complete medicinal herb garden. Sedentary programmers are dying from heart attacks, go outside, plant some seeds, pull some weeds, eat healthy, stay alive, stay alert.

Sunday, May 27, 2018

Web Dev - Choose your colors


Choose your colors.

Primary color


    Your choice of colors is very important.


    I want to start with rebeccapurple #663399

Color scheme


Achromatic Color Schemes

The white on black achromatic color scheme is often preferred for smaller devices.
White on black requires less energy (improves battery life) on most display technologies.
I will use this on media screen width 600px and less.

Monochromatic Color Schemes

Monochromatic schemes use different tones from the same angle on the color wheel (the same hue).
This is just too much of the same.

Analogous Color Schemes

Analogous color schemes are created by using colors that are next to each other on the color wheel.
#663399 Analogous #993298#333299
This is better but still not enough variety.

Complementary Color Schemes

Complementary schemes are created by combining colors from opposite sides of the color wheel.
The complement of #663399 is #99cc66 or #659932 (complementary)
Complementary colors can create some striking optical effects. The shadow of an object appears to contain some of the complementary color of the object. For example, the shadow of a red apple will appear to contain a little blue-green. This effect is often copied by painters who want to create more luminous and realistic shadows. Placed side by side as tiny dots, in partitive color mixing, complementary colors appear gray.

Triadic Color Scheme

Triadic schemes are made up of hues equally spaced around color wheel.
#663399 Triad #996632 #329966 

Compound (aka Split Complementary) Color Scheme

Compound schemes are almost the same as complementary schemes.
Instead of using colors that are opposites, it uses colors on both sides of the opposite hue.
#663399 Split Complementary #989932 #329933 

Color Picker

  • Primary #663399 white
  • P-Light #9760ca black
  • P-Dark #36036a white
  • Secondary #996633 white
  • S-Light #cd945e black
  • S-Dark #673b08 white
  • Triad #339966 black
  • T-Light #68cb94 black
  • T-Dark #006a3b white

Compound

  • Primary #663399 white
  • P-Light #9760ca black
  • P-Dark #36036a white
  • Secondary #999933 black
  • S-Light #ccca62 black
  • S-Dark #686b00 white
  • Tertiary #339933 black
  • T-Light #69cb61 black
  • T-Dark #006a00 white

Final Choice

I have not decided. The compound seems more appropriate if side nav will have a different color scheme from content. Triadic is a bit bolder. I have decide to use both. The Triadic for my resume and the split complementary for my blog. Two different sites, two different purposes but related.

   $dsc-primary: rebeccapurple;
    $dsc-primary-text: white;
    $dsc-p-light: #9760ca;
    $dsc-p-light-text: black;
    $dsc-p-dark: #36036a;
    $dsc-p-dark-text: white;
    $dsc-secondary: #993;
    $dsc-secondary-text: black;
    $dsc-s-light: #ccca62;
    $dsc-s-light-text: black;
    $dsc-s-dark: #686b00;
    $dsc-s-dark-text: white;
    $dsc-third: #393;
    $dsc-third-text: black;
    $dsc-t-light: #69cb61;
    $dsc-t-light-text: black;
    $dsc-t-dark: #006a00;
    $dsc-t-dark-text: white;

This is my first pass with the split complementary. I want to verify the text colors, perhaps make them a bit more colorful.

    $dsc-primary: rebeccapurple; 
    $dsc-primary-text: #E5F2D8 ;
    $dsc-p-light: #9760ca;
    $dsc-p-light-text: #18250C ;
    $dsc-p-dark: #36036a;
    $dsc-p-dark-text: #E5F2D8 ;
    $dsc-secondary: #993;
    $dsc-secondary-text: #0C0C25 ;
    $dsc-s-light: #ccca62;
    $dsc-s-light-text: #111236;
    $dsc-s-dark: #686b00;
    $dsc-s-dark-text: #EBEBF8;
    $dsc-third: #393;
    $dsc-third-text: #250C25;
    $dsc-t-light: #69cb61;
    $dsc-t-light-text: #250C25;
    $dsc-t-dark: #006a00;
    $dsc-t-dark-text: #FFD0FE;

Tuesday, February 27, 2018

Event Indoor Yard Sale

Arkadelphia Senior Activity Center
1305 North 10th St
870-246-9871

Indoor Yard Sale

Saturday April 7th  7AM to Noon


  • Table Rentals $10 to $15
  • Sell and buy items
  • Snack food $1@
  • DVDs $1@

Money raised will go to benefit Meals for Seniors

Tuesday, July 14, 2015

Web Page Design Standards and Resources for Designing Web Pages

Standards 

Hardware 

Software 

Tools 

Polymer 

Get it  

Demos 

Bootstrap 

References 

 Legal 

Sunday, August 10, 2014

Universe 4.0

ser·en·dip·i·ty

Learning the Go Programming Language.

I have decades of experience as a C++ programmer but from time to time I like to look at other languages to gain insights to other ways of thinking about things.

My son wanted me to try the Go Programming Language. 

I was wanting to put together a remake of an ancient computer game called Universe, code goes back to 1973, 1984, 1988, 1992.  The original version 1.0 was run on a Wang Statistical Calculator and consisted of a 4 player race to land a space ship.

The 1984 Universe 2.0 was written in Comal and ran on the Apple, IBM, and C64; it had a musical intro with some animated graphics, capable of using dual joysticks, and we did a multi-player version on the C64 that had eight computers linked by serial cables into a crude network. The game in that state was published in Comal Today.

The 1988 Universe 3.0, still in Comal, ran on Amiga and IBM but was never published for a variety of reasons. The multi-player communication protocal sort of morphed into a multi-player game protocol  that was further developed at Sierra On-Line Inc., then sold to AT&T, then to AOL, with a version eventually becoming Sierra Network then ImaginaNation Networks in 1991.

I went on to do engineering AI stuff and used the concepts originally intended for the game in designing the user interfaces for plant operations and engineering documentation. I have had many engineers tell me that my software was like playing a computer game.

Well of course, with modern technology, I might actually be able to complete the game I started so long ago and have it look the way I wanted it to look. The only language to use, would be C++, nothing else has the power, the complexity, the maturity, the support, the history. But my son wanted me to learn Go.

So, I tell my son that I will spike a version of Universe in Go and we will try it out. That was in February of 2014.