Saturday, August 23, 2008

Dell Primary Drive Not Found


Recently, I had to work on a Dell Dimension desktop. Unfortunately for my customer, the hard drive had the "click of death" even though I tried everything, including tapping the drive with a hammer to free the spindle. Luckily, there was no important data so I simply replaced the drive.

I kept noticing something odd that I had first attributed to the failed drive. I kept getting the following error on reboot:

Primary drive 1 not found
Secondary drive 1 not found
Strike the F1 key to continue, F2 to run the setup utility


That was odd considering that the drives were clearly installed and recognized in the BIOS. I checked jumper switches and everything was set to master and the drives were plugged in the ends of the IDE cables. I checked the BIOS again and the drives were recognized fine.

Thank goodness for Google. Here is the solution:

Boot into the BIOS using [F2]
Hold [ALT] F, then [ALT] E
After the beeping stops [ALT] B

It forces the BIOS to reset and re-recognize the drives.

References:

primary drive 1 not found
http://www.daniweb.com/forums/thread7688.html

Labels: ,

Thursday, August 21, 2008

VZAccess Disconnecting - Linksys Print Server
For over a year now, I've been using Verizon's Broadband Access which uses the EV-DO technology. It's been pretty fast, and overall I'm a big fan of the service. It provides me a backup internet access if my cable connection goes down, plus with my business I need a constant connection.

Yesterday, I attempted to connect while at a customer's home who had lost their DSL connection. I needed to research some information and typically the Broadband Access is perfect in these situations. I even use it to share out the connection (yes you can use Windows ICS and Broadband Access). Anyway, after about 40 seconds of connection, the software went dormat, then disconnected. That was odd considering I had 4 bars of coverage and was well within the coverage area for broadband. I chalked it up to a temporary glitch with Verizon or interference and managed to fix the DSL connection anyway.

Later that evening I attempted to connect again. Same deal - VZAccess Manager connected, 40 seconds later - VZAccess dormant, and disconnect. What the hell I thought?

First thing this morning, I decided to troubleshoot. After all, I rely on the service when I am not at my office. The first thing I did was try and think of anything that had changed between Tuesday and Wednesday on my machine. My laptop runs a very clean installation of XP Pro - and I know every piece of software that is installed.

Linksys Print Server Utility 1.0
On Tuesday, I was at a client's office and we installed a Linksys WPSM54G Print Server, which requires the installation of Linksys Print Server Utility 1.0 and naturally Linksys thinks it has to run at start-up. Typically, I would remove software like that from startup, but in my hurry I just hadn't done it yet.

First thing - stop the software. Second thing, simply exit the software to test. VZAccess stayed connected as long as I wanted it to! As a matter of fact, I'm posting this while connected.

My final resolution was to simply remove the software from startup using MSConfig rather than completely uninstall it. I may need the software for further troubleshooting with my client.

Labels: , ,

Wednesday, August 20, 2008

HughesNet and Bandwidth Caps
From email:
-------------------------
is it possible for use to put a password on our wireless hubs to block out some local hacker that is exceeding our bandwidth?
-------------------------

We've discussed this before - the issue is NOT a local hacker accessing the wifi. The problem is HughesNet gouging and screwing over their customers.

While I'm a definitely an advocate of encrypting WiFi with WPA, because of the wireless mesh system that we are using to get wireless to Bob's house, you can't encrypt the wifi there.

For a "local hacker" to be using your wifi, he would have to be within 500 feet of the house AND know to setup and use a directional antenna. That is very very unlikely - almost impossible - in your area. This is why I've never worried about encrypting your wireless. You actually have "security through obscurity" in your case.

On my last trip there, we discussed this very issue and determined that the bandwidth overages were due to several things:

(1) HughesNet's pathetic rolling bandwidth caps.
(2) Leaving Limewire running on pc's even after songs are downloaded.
(3) Several users watching Youtube, downloading songs, etc - normal surfing habits (see #1)

I'm sorry to say but it is very easy for users to exceed the bandwidth caps from HughesNet even under normal use. Since most ISP's have peering arrangements, HughesNet is NOT doing this for the "quality of their network." It is simply another way to gouge the users. Your real gripe is with HughesNet - it's not a "local hacker."

References (please read):

HughesNet Lowers 'FAP' Caps
Despite New Spaceway 3 satellite
http://www.dslreports.com/shownews/HughesNet-Lowers-FAP-Caps-97011

http://www.broadbandreports.com/shownews/Track-Your-Remaining-HughesNet-Cap-Space-89144

http://www.ripoffreport.com/reports/0/244/RipOff0244913.htm

http://customercare.myhughesnet.com/fap_announce.htm

http://www.dslreports.com/blog?cat=87

http://en.wikipedia.org/wiki/Peering


Reply from Email:
---------------------
There is something funcky going on and I am running out of ideas. Yesterday I upgraded my hughs account to allow another 50 megs og download. All of the computers were turned off except my laptop and our PS3. Withing 40 minutes of the upgrade where they reset all of my usage they said I our server did a 211 meg download and then a 420 meg download.

So now I am using a dialup service to access the internet.

If it isnt the people across the street then somewhere we have a real nasty virus.
----------------------

As an example:

50MBs (megs) = only about 15 songs
Most MS patches or updates are more than 50MB's.
Vista SP1 is 434.5 MBs
XP SP3 is 316.4 MBs
To download the newest Acrobat Reader update requires 20MB's.
An iTunes update requires about 50MBs.

I'm not sure what is going on except that 50MB's is nothing. Plus according to many reports, HughesNet's method for monitoring the traffic (bandwidth) is very slanted towards the benefit of HughesNet - surprise.

You are being screwed over by HughesNet like most of their customers. I'm 99.999% sure it is not a hacker issue - unless your computer is exploited and you are sending spam out in the background - and Vista is not secure either.

The people across the street are a couple hundred yards away. The can "see" your wifi potentially, but they would have to have a directional antenna to transmit back to you since TCP/IP is a 2-way communication - very very unlikely.I will be glad to make a trip up and check things out, but I pretty much guarantee you what the answer will be - HughesNet is sticking it to its customers and getting by with it.

I'm not trying to be complicated or difficult, just giving you the truth about what is going on. You don't have many choices in your location so basically you are dealing with a monopolistic ISP.

Labels: , , ,

iTunes and AAC
From an email:

-----------------------------
The thing that I am having problem with are those damn AAC tags… What the f*** are they, why the f*** are they, and why the f** can I not figure them out I think I understand they are away to control content.
-----------------------------

Well let me try to keep this fairly simple. AAC is a digital audio format that is supposed to be the "next generation" of MP3. However, MP3 is so ubiquitous that it's going to be a while before it gets replaced.

Apple uses their own "version" of ACC with extensions for DRM (digital rights management). That allows them to control the content so that it only plays back under iTunes and specifically under your iTunes account. In short its a pain in the ass. Steve Jobs has publicly stated that the DRM is to appease the RIAA, although I have my doubts since Apple likes to control everything from cradle to grave.

There are basically 2 ways to convert your music in iTunes from AAC to MP3:

(1) By default, iTunes wants to rip (convert) everything to AAC. Click on Edit -> Preferences -> Importing (or Edit -> Preferences -> Advanced -> Importing) then change the Import Using from the default setting to "MP3 Encoder". Click OK to save this setting. Next you can r-click an AAC file in iTunes, and try to "convert selection to MP3". The only problem is that this won't work for purchased AAC music (DRM'ed).

(2) If you must buy audio from iTunes, then your best bet is to setup a playlist, burn it as a music CD, then immediately rip it back to high bit rate MP3. That frees up your music to play on any player. Of course, that could eat up a lot of CD's, so you would probably want to learn to use something like MagicISO, CD Emulator, or NoteBurner to keep from using a ton of CD's.

References:

http://en.wikipedia.org/wiki/Advanced_Audio_Coding

http://www.apple.com/hotnews/thoughtsonmusic/

http://www.salon.com/tech/feature/2007/02/23/itunes/

http://www.engadget.com/2007/02/06/a-letter-from-steve-jobs-on-drm-lets-get-rid-of-it/

Labels: , ,

Sunday, August 10, 2008

White Paper - Security Questions
This "white paper" was created to present to several clients of mine. I'm posting it to my blog so that it can be reviewed and maybe raise some questions as to how you handle your home and business information.

PDF Copy Here

Company policy concerning safety and security of data

  • How important is your data?
  • What is the company policy about sharing data?
  • What workers / contractors have access to what data?
  • What would you do if that data were leaked to a competitor?
  • Do you allow users to surf MySpace, FaceBook, or similar sites? How do you know?

Over 90 percent of the Webpages that are spreading Trojan horses and spyware are legitimate sites, some belonging to household brands and Fortune 500 companies, Sophos reports. Most have been hacked through SQL injection.” - source: Sophos.com

Cross-site scripting

AJAX also increases the possibility of so-called cross-site scripting flaws, which occur when the site developer doesn't properly code pages, experts said. An attacker can exploit this type of vulnerability to hijack user accounts, launch information-stealing phishing scams or even download malicious code onto users' computers, experts have said. Big-name Web companies such as Microsoft, eBay, Yahoo and Google have all experienced cross-site scripting flaws on their Web sites.” - source: Cnet.com

"Certification" method to insure all outside pc's (ex: laptops) are clean and malware free

  • How do you know if the pc's are infected or not?

  • What is the policy on maintaining anti-virus and safe surfing habits?

Secure Backup Method

  • What is your backup method?

  • Have you practiced recovery from disaster?

  • Do you use imaging software to recover the OS and applications?

  • Are your backup files secure?

Data Encryption on Laptops and Remote Devices

  • Are your laptops and remote devices utilizing data encryption?

  • How much is your data worth if it gets into the hands of a competitor or criminal?

There is some evidence that cyber criminals are now specifically targeting laptop users, encouraged to do so by the finding that corporate laptops hold an average $525,000 worth of sensitive data. - source: Bahn, October 2007

Company Email and Consistency

  • Do your workers use their personal Yahoo or AOL accounts for email?

  • Do you want your clients to have an image of your company with potentially suggestive email addresses? (ex: cutiegirl69@yahoo.com)

  • What will you do if a lawsuit and discovery injunction requires that you are able to provide all communications?

Further Resources:

The Growing Importance of E-Discovery on Your Business

http://www.google.com/a/help/intl/en/security/pdf/importance_e_Discovery.pdf


Business Guide to Compliance

http://www.google.com/a/help/intl/en/security/pdf/WP44-BMGuide.pdf


The Impact of the new FRCP Amendments on your Business

http://www.google.com/a/help/intl/en/security/pdf/WP42-FRCP_0107.pdf


Protecting Off-Network/Laptop Users

http://www.google.com/a/help/intl/en/security/pdf/off_network_workers.pdf


2007 Annual Study: Cost of a Data Breach

http://www.ponemon.org/press/PR_Ponemon_2007-COB_071126_F.pdf

Labels: , ,

Sunday, August 3, 2008

Changing Music Folder in iTunes
--------------
Question from email
--------------

I just noticed that my C: hard drive is nearly full. I need to configure iTunes and DVDFab to save and run off of my D: drive.


-------------
Solution
-------------

Here are the steps to move your mp3 files from one drive to another and configure iTunes:
  1. Copy your current music folder (typically "My Music") to your other drive.
  2. Open iTunes -> Edit -> Preferences -> Advanced tab
  3. Click change and select the folder on your new drive.
  4. Click OK to exit from the Preferences.
  5. Close iTunes and then restart iTunes.
Once you have done this, you can then delete the original files from your "My Music" folder. Just make sure that you did copy all the music files over!




Here is how to configure DVDFab:
  1. Start DVDFab
  2. Click Common Settings button -> General
  3. Browse and select the Output Directory
  4. Browse and select the Temporary Directory
  5. Click OK
By the way, DVDFab is an absolutely great application for making legal backups of your movies, or encoding them to iPod format.

Labels: ,

Friday, August 1, 2008

Internet Interruptions
As taken from a recent email conversation with a customer:

There are several issues that can cause internet connectivity issues. If Verizon says that their service is running smoothly, then typically they are correct - although I have seen cases where the ISP states that nothing is wrong with their service and there really is an issue.

As I'm sure you are aware, any downtime in your ability to use the Internet leads to productivity loss and costs you money. It would be well worth your time to contract with me to straighten out your network. For instance, when we first met you were having issues with Outlook Express - and the problem was that you had well over 13,000 emails in your inbox causing OE to choke.

One other very important point to remember is that you really should have a backup system in place. If your pc's go down, you risk losing your data which is far more important than the hardware itself.

http://www.smartergeek.com/blog/2008/07/importance-of-backups.asp

Here are some possible things causing your issue:

-------------------
Zombies
-------------------
Based on the huge number of spam emails that I've seen flow through your email system, it is very likely that one or more computers on your internal office network are infected.
What typically happens is a user opens an email attachment that is untrusted or visits an untrusted website through Internet Explorer and gets exploited. Usually the exploit does not crash the computer, it loads software that runs in the background spewing SPAM out.

Potentially some of these exploits could also be sending information stored on your computers such as client information, etc. Once a machine is exploited all bets are off.

SPAMMers don't have warehouses full of computers. They use exploited PC's - zombies - to send out the spam. That is part of why it is so profitable.

Problem: Zombies are uploading/downloading on your network consuming your bandwidth and causing you to think your Internet service is down.

Resolution: All pc's on your network should be thoroughly checked out, possibly re-imaged, and practices put in place to avoid the problem in the future.

------------------
Email and Spam
------------------

This issue is closely related to "Zombies". Your users receive an inordinate amount of email and much of it is spam. This consumes bandwidth and can cause what appear to be "temporary outages" in your Internet connection.

Problem: Too much inbound spam.

Resolution: Migrate to Google's email service as recommended several times.

-----------------
Users abusing Network
-----------------

This happens much more frequently now. Users tend to want to view MySpace.com or Youtube.com on company time and using up company resources. Video and audio consumes a lot of bandwidth, which can cripple your legitimate traffic.

Resolution: Setup a system to restrict certain domains and websites plus enforce a company policy that prohibits such usage.

--------------------
Hardware Issues
--------------------

Hardware can begin to intermittently fail. There is always a possibility that your router or modem is occasionally having an issue.

Resolution: Replace faulty hardware.

-------------
Additional Resources
-------------

http://www.smartergeek.com/blog/2008/07/why-did-i-get-infected-in-first-place.asp

http://www.smartergeek.com/blog/2008/03/layered-security-basics.asp

http://www.smartergeek.com/blog/2008/02/spam-and-phising-example.asp

http://www.smartergeek.com/blog/2008/06/backing-up-your-system.asp

http://www.smartergeek.com/blog/2008/01/simple-rules-for-your-computing.asp

http://www.smartergeek.com/blog/2008/01/virus-lessons-101-revisted.asp

http://www.smartergeek.com/blog/2008/01/smartergeek-newsletter-1-5-2008.asp

Labels: , , , ,