<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Crescent City Networking</title>
	<atom:link href="http://ccnetworking.com/wordpress/feed" rel="self" type="application/rss+xml" />
	<link>http://ccnetworking.com/wordpress</link>
	<description></description>
	<lastBuildDate>Fri, 03 Sep 2010 22:01:00 +0000</lastBuildDate>
	
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Parent memory reserve with dynamic memory</title>
		<link>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/03/parent-memory-reserve-with-dynamic-memory.aspx</link>
		<comments>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/03/parent-memory-reserve-with-dynamic-memory.aspx#comments</comments>
		<pubDate>Fri, 03 Sep 2010 22:01:00 +0000</pubDate>
		<dc:creator>Virtual PC Guy</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:10056105</guid>
		<description><![CDATA[<div class="wlWriterHeaderFooter" style="float:none;margin:0px;padding:0px 0px 0px 0px"> tweetmeme_url = 'http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/03/parent-memory-reserve-with-dynamic-memory.aspx';  <br /><br /></div><p>Most people I know who have spent a lot of time with Hyper-V have had the experience of accidentally taking too much memory away from the parent partition.&#160; This happens when they start too many virtual machines – and all of a sudden the performance and responsiveness of the parent partition goes down significantly.</p>  <p>The response from people who hit this is usually to stop the last virtual machine that they started, to reduce its memory, and then start it up again.</p>  <p>This solution has worked in the past – but is no longer an option with dynamic memory.&#160; The reason why this will not work is because if you stop the last virtual machine – you just leave the memory available for your other virtual machines to use – getting you straight back where you started.</p>  <p>For this reason, with dynamic memory we have implemented a new “parent memory reserve” for Hyper-V.&#160; Here we attempt to calculate an appropriate amount memory to keep for the parent partition and ensure that virtual machines with dynamic memory enabled cannot eat into this reserved memory.</p>  <p>That said – this reserve is not perfect.&#160; Specifically – it only accounts for the memory requirements of Hyper-V in the parent partition.&#160; If you are running other workloads in the parent partition (contrary to our best practice guidance) then you may still see parent partition memory starvation.</p>  <p>To help mitigate this issue – we are also providing a new registry entry that lets you override our parent memory reserve with your own static memory reserve.&#160; This registry entry does not exist by default – but if you go to the <strong>HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization</strong> registry key and create a new DWORD entry with a name of <strong>memoryreserve</strong> – you can then set the value to the static amount of memory that you want to reserve for the parent.</p>  <p>You should be warned – if you set this value too low; virtual machines will be able to use too much memory and cause performance issues for you.&#160; Equally – the higher you set this the fewer virtual machines you can run.</p>  <p>That said – I have found this to be very useful on my laptop – where I use Hyper-V like a desktop operating system.&#160; By setting this value to 2048 (on my laptop with 8GB of RAM) I can run multiple virtual machines and know that they will not cause Outlook / Internet Explorer in the parent partition to be affected.</p>  <p>Cheers,   <br />Ben</p><div style="clear:both"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10056105" width="1" height="1"/>]]></description>
			<content:encoded><![CDATA[<div class="wlWriterHeaderFooter" style="float:none; margin:0px; padding:0px 0px 0px 0px;"><script type="text/javascript"> tweetmeme_url = 'http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/03/parent-memory-reserve-with-dynamic-memory.aspx'; </script> <script type="text/javascript" src="http://tweetmeme.com/i/scripts/button.js"></script><br /><br /></div><p>Most people I know who have spent a lot of time with Hyper-V have had the experience of accidentally taking too much memory away from the parent partition.&#160; This happens when they start too many virtual machines – and all of a sudden the performance and responsiveness of the parent partition goes down significantly.</p>  <p>The response from people who hit this is usually to stop the last virtual machine that they started, to reduce its memory, and then start it up again.</p>  <p>This solution has worked in the past – but is no longer an option with dynamic memory.&#160; The reason why this will not work is because if you stop the last virtual machine – you just leave the memory available for your other virtual machines to use – getting you straight back where you started.</p>  <p>For this reason, with dynamic memory we have implemented a new “parent memory reserve” for Hyper-V.&#160; Here we attempt to calculate an appropriate amount memory to keep for the parent partition and ensure that virtual machines with dynamic memory enabled cannot eat into this reserved memory.</p>  <p>That said – this reserve is not perfect.&#160; Specifically – it only accounts for the memory requirements of Hyper-V in the parent partition.&#160; If you are running other workloads in the parent partition (contrary to our best practice guidance) then you may still see parent partition memory starvation.</p>  <p>To help mitigate this issue – we are also providing a new registry entry that lets you override our parent memory reserve with your own static memory reserve.&#160; This registry entry does not exist by default – but if you go to the <strong>HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization</strong> registry key and create a new DWORD entry with a name of <strong>memoryreserve</strong> – you can then set the value to the static amount of memory that you want to reserve for the parent.</p>  <p>You should be warned – if you set this value too low; virtual machines will be able to use too much memory and cause performance issues for you.&#160; Equally – the higher you set this the fewer virtual machines you can run.</p>  <p>That said – I have found this to be very useful on my laptop – where I use Hyper-V like a desktop operating system.&#160; By setting this value to 2048 (on my laptop with 8GB of RAM) I can run multiple virtual machines and know that they will not cause Outlook / Internet Explorer in the parent partition to be affected.</p>  <p>Cheers,   <br />Ben</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10056105" width="1" height="1"/>]]></content:encoded>
			<wfw:commentRss>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/03/parent-memory-reserve-with-dynamic-memory.aspx/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>So, how did they “credit my favor” with $4.5 M if they didn’t know my name?</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/PwAvLBtjitU/so-how-did-they-credit-my-favor-with-45.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/PwAvLBtjitU/so-how-did-they-credit-my-favor-with-45.html#comments</comments>
		<pubDate>Fri, 03 Sep 2010 18:26:00 +0000</pubDate>
		<dc:creator>Tom Kelchner</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-5921700806953809605</guid>
		<description><![CDATA[Are grade schoolers writing the spam these days?What does: “revert ASAP” mean?From: From International Commercial Bank of Ghana [felistax@yahoo.com]Sent: Friday, September 03, 2010 2:15 PMSubject: Attn: Beneficiary, From International Commercial Ba...]]></description>
			<content:encoded><![CDATA[<span style="font-size:130%;"><span style="color: rgb(255, 102, 102); font-weight: bold;">Are grade schoolers writing the spam these days?</span></span><br /><br />What does: “revert ASAP” mean?<br /><br /><span style="font-style: italic;">From: From International Commercial Bank of Ghana [felistax@yahoo.com]</span><br /><span style="font-style: italic;">Sent: Friday, September 03, 2010 2:15 PM</span><br /><span style="font-style: italic;">Subject: Attn: Beneficiary, From International Commercial Bank of Ghana.</span><span style="font-style: italic;"><br /><br />Attn:Beneficiary,</span><span style="font-style: italic;"><br /><br />This is to notify you that $4.5 million has been credited in your favor, contact Mr. James Appiah, with the following information to enable your fund transferred via bank to bank, AS THE CASE MAY BE. </span><span style="font-style: italic;"><br /><br />Your full name, Age, Sex, Nationality, Direct phone number, Residential Address, Occupation.</span><span style="font-style: italic;"><br /><br />Thank you for banking with us</span><span style="font-style: italic;"><br />Revert ASAP</span><span style="font-style: italic;"><br />Regards,</span><span style="font-style: italic;"><br />James Appiah</span><br /><br />You’d think a bank official would have a title and company email instead of a Yahoo account.<br /><br />Tom Kelchner<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-5921700806953809605?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=PwAvLBtjitU:BElDrxai7XM:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=PwAvLBtjitU:BElDrxai7XM:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=PwAvLBtjitU:BElDrxai7XM:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=PwAvLBtjitU:BElDrxai7XM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=PwAvLBtjitU:BElDrxai7XM:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/PwAvLBtjitU/so-how-did-they-credit-my-favor-with-45.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Clearwater backhoe incident: 09/02</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/tla8c_aqXhQ/clearwater-backhoe-incident-0902.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/tla8c_aqXhQ/clearwater-backhoe-incident-0902.html#comments</comments>
		<pubDate>Fri, 03 Sep 2010 14:13:00 +0000</pubDate>
		<dc:creator>Tom Kelchner</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-1959318463014982331</guid>
		<description><![CDATA[GFI Sunbelt Internet connectivity was lost when a fiber optic line was cut in Clearwater, Fla., near the end of the business day yesterday.Service provider Time Warner said the line was accidentally cut by a construction crew near the GFI Sunbelt headq...]]></description>
			<content:encoded><![CDATA[GFI Sunbelt Internet connectivity was lost when a fiber optic line was cut in Clearwater, Fla., near the end of the business day yesterday.<br /><br />Service provider Time Warner said the line was accidentally cut by a construction crew near the GFI Sunbelt headquarters about 4:50 p.m. Service was restored about 11:10 p.m.<br /><br />VIPRE definition Version 6827 was issued at 11:17 p.m. (GMT-5)<br /><br />Alex Eckelberry, general manager of GFI’s Security Business Unit said: “We are currently in the process of reorganizing our data center locations to avoid such an occurrence again.”<br /><br />Tom Kelchner<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-1959318463014982331?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=tla8c_aqXhQ:Cj_-FC_Tuws:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=tla8c_aqXhQ:Cj_-FC_Tuws:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=tla8c_aqXhQ:Cj_-FC_Tuws:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=tla8c_aqXhQ:Cj_-FC_Tuws:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=tla8c_aqXhQ:Cj_-FC_Tuws:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/tla8c_aqXhQ/clearwater-backhoe-incident-0902.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Zombie game inspires scammers to target your brains</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/pJllRwLcCpo/zombie-game-inspires-scammers-to-target.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/pJllRwLcCpo/zombie-game-inspires-scammers-to-target.html#comments</comments>
		<pubDate>Fri, 03 Sep 2010 07:17:00 +0000</pubDate>
		<dc:creator>paperghost</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-8165094944493868379</guid>
		<description><![CDATA[Zombies. Whether they’re shuffling Romero types, the wisecracking “send more cops” variety or even the crumbling Fulci efforts it’s important to be prepared (no, I’m not counting the ones that run. Those are stupid).

As you can see, I’m re...]]></description>
			<content:encoded><![CDATA[Zombies. Whether they’re shuffling Romero types, the wisecracking “send more cops” variety or even the crumbling Fulci efforts it’s important to be prepared (no, I’m not counting the ones that run. Those are stupid).<br />
<br />
As you can see, I’m ready for pretty much anything:<br />
<br />
<img alt="zombie quiz results" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing0.gif" /><br />
<br />
<img alt="quiz results" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing000.gif" /><br />
<br />
<img alt="slightly strange quiz results" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing00.gif" /><br />
<br />
Nobody is immune to the zombie menace, however, so I thought it might be useful to let you go forth and warn friends &amp; relatives about a new zombie scam popping up on the internet.<br />
<br />
Dead Rising: Case Zero has just been released on XBox Live as a standalone chapter for the upcoming <a href="http://en.wikipedia.org/wiki/Dead_Rising_2">Dead Rising 2</a>, and of course scammers want a tasty slice of zombie pie.<br />
<br />
<embed height="350" src="http://www.youtube.com/v/ARP88JzbsEI" type="application/x-shockwave-flash" width="425"></embed><br />
<br />
<br />
Forums and sites such as Youtube (surprise!) are filling up with posts and videos promoting various websites claiming to offer “cracks” and redeemable download codes to let you get your hands on the game for free.<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/deadrsing4.gif"><img alt="don't trust these guys" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing4_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
I’ve also seen a few videos claim to offer up a PC version (lies) and another one offering up a “Wii version” (more lies, these versions of the game don’t exist).<br />
<br />
Here’s a sample:<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/deadrsing5.gif"><img alt="spam vids" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing5_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
I took this screenshot a day or two ago; let’s make a tenuous reference to zombies and say they’re now multiplying uncontrollably, and you’ll probably have to go live in a supermarket or whatever.<br />
<br />
Anyway. The majority of the videos seem to link to one particular website – deadrising2casezero(dot)blogspot(dot)com. Here it is:<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/deadrsing1.gif"><img alt="website of zombie doom" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing1_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
There’s a lot of nonsense on the site about the download being restricted to the first 2,000 users – and the “total downloads so far” indicator seems to be stuck on 354 people. Following a similar pattern to the recent <a href="http://sunbeltblog.blogspot.com/2010/08/dc-universe-online-targeted-by-fake.html">DC Universe Online scam</a>, attempting to download the program will give you some wonderful surveys to fill in.<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/deadrsing99.gif"><img alt="questions galore" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing99_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
I’m almost certain I have more important things to worry about in the middle of a zombie apocalypse than whether or not I’m Justin Bieber’s ideal girl but oh well. Filling in one of the surveys will give you this somewhat unimpressive program on your desktop:<br />
<br />
<img alt="fakey mc fake program" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/deadrsing3.gif" /><br />
<br />
I say unimpressive, because it’s about as much use as slapping a zombie in the face with a wet newspaper. Just like the DC Universe fakeout, the program will “generate” about 20 or so codes that just repeat themselves endlessly.<br />
<br />
A bit like these "free app / here's a survey" scams, perhaps.<br />
<br />
Now if you’ll excuse me, I’m off to meet an ironic doom at the hands of some running zombies. While I’m donating my brains to the undead community, please try to avoid any and all “freebies” related to Dead Rising: Case Zero.<br />
<br />
Christopher Boyd<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-8165094944493868379?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=pJllRwLcCpo:88M6jw4ESvk:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=pJllRwLcCpo:88M6jw4ESvk:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=pJllRwLcCpo:88M6jw4ESvk:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=pJllRwLcCpo:88M6jw4ESvk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=pJllRwLcCpo:88M6jw4ESvk:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/pJllRwLcCpo/zombie-game-inspires-scammers-to-target.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Safe Web Surfing Rule # 1: READ the URL</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/SlJzB9xgerM/safe-web-surfing-rule-1-read-url.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/SlJzB9xgerM/safe-web-surfing-rule-1-read-url.html#comments</comments>
		<pubDate>Thu, 02 Sep 2010 19:54:00 +0000</pubDate>
		<dc:creator>Tom Kelchner</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-355689017300205026</guid>
		<description><![CDATA[Safe Web Surfing Rule # 2: See Rule # 1Email and social networking sites might be a global phenomena, but English remains widely used in URLs and elsewhere on the Internet. In the English verbiage in malicious email, URLs and web sites there are words ...]]></description>
			<content:encoded><![CDATA[<span style="font-weight: bold; color: rgb(255, 102, 102);font-size:130%;" >Safe Web Surfing Rule # 2: See Rule # 1</span><br /><br />Email and social networking sites might be a global phenomena, but English remains widely used in URLs and elsewhere on the Internet. In the English verbiage in malicious email, URLs and web sites there are words that instantly raise red flags to native speakers. However those red flags may not wave for those who speak no English or it is their second language. Here is yet one more example.<br /><br />It starts with a Facebook post with a picture of a cute girl (not shown since the photo might be misappropriated) and a link to what looks like Facebook chat. The hyphens that are used in the URL instead of periods should be one giveaway. The fact that it’s a URL with a country domain TK should be another giveaway (probably in any language). That's Tokelau, a territory of New Zealand in the South Pacific.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_1qLRA96ebog/TIABUKMiTkI/AAAAAAAAAVA/O3gZRGNcEYM/s1600/Albanian_Phish_1.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 400px; height: 66px;" src="http://1.bp.blogspot.com/_1qLRA96ebog/TIABUKMiTkI/AAAAAAAAAVA/O3gZRGNcEYM/s400/Albanian_Phish_1.png" alt="" id="BLOGGER_PHOTO_ID_5512407389747433026" border="0" /></a><span style="font-size:85%;">(click on graphic to enlarge it)<br /><br /></span>So the unwise Albanian Web user, seeking to chat with a pretty girl in Tokelau, possibly thinking she's in  Turkey (country domain "TR" ) , goes to the site:<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_1qLRA96ebog/TIABcBTGp2I/AAAAAAAAAVI/RjbfjX6F0ss/s1600/Albanian_Phish_2.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 400px; height: 80px;" src="http://1.bp.blogspot.com/_1qLRA96ebog/TIABcBTGp2I/AAAAAAAAAVI/RjbfjX6F0ss/s400/Albanian_Phish_2.png" alt="" id="BLOGGER_PHOTO_ID_5512407524798015330" border="0" /></a><span style="font-size:85%;">(click on graphic to enlarge it)<br /><br /></span>The Facebook page is initially grayed out, so the average computer user clicks on it. The gray goes away. However, if he (and you can be sure this would be a he) watches the browser bar, the site has redirected to: http://h1.ripway.com/hacker1992/login.php.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_1qLRA96ebog/TIABmTdZdxI/AAAAAAAAAVQ/iOVU7bNM3hs/s1600/Albanian_Phish_3.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 400px; height: 276px;" src="http://1.bp.blogspot.com/_1qLRA96ebog/TIABmTdZdxI/AAAAAAAAAVQ/iOVU7bNM3hs/s400/Albanian_Phish_3.png" alt="" id="BLOGGER_PHOTO_ID_5512407701471721234" border="0" /></a><span style="font-size:85%;">(click on graphic to enlarge it)</span><br /><br />Oh, that’s just adding insult to injury – actually putting the word “hacker” in the URL – assuming you know enough English to recognize the word “hacker” and know the implications. Of course “ripway.com” is almost as blatant.<br /><br />The ripway.com site was registered yesterday with an address in Highlands Ranch, Colorado.<br /><br />Google Translate says the language is Albanian. You can be sure it’s a scheme to snatch email addresses and Facebook logins of Albanian-speaking Facebook users or get them to set up new accounts AND snatch their information:<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_1qLRA96ebog/TIABzYreciI/AAAAAAAAAVY/We5V3gKxFxY/s1600/Albanian_Phish_4.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 251px; height: 174px;" src="http://2.bp.blogspot.com/_1qLRA96ebog/TIABzYreciI/AAAAAAAAAVY/We5V3gKxFxY/s400/Albanian_Phish_4.png" alt="" id="BLOGGER_PHOTO_ID_5512407926211244578" border="0" /></a><span style="font-size:85%;">(click on graphic to enlarge it)<br /><br /></span>Tom Kelchner<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-355689017300205026?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=SlJzB9xgerM:zItgn1oOD7w:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=SlJzB9xgerM:zItgn1oOD7w:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=SlJzB9xgerM:zItgn1oOD7w:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=SlJzB9xgerM:zItgn1oOD7w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=SlJzB9xgerM:zItgn1oOD7w:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/SlJzB9xgerM/safe-web-surfing-rule-1-read-url.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Guest Paging vs. Virtualization Paging and Negative Memory Availability</title>
		<link>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/02/guest-paging-vs-virtualization-paging-and-negative-memory-availability.aspx</link>
		<comments>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/02/guest-paging-vs-virtualization-paging-and-negative-memory-availability.aspx#comments</comments>
		<pubDate>Thu, 02 Sep 2010 19:08:00 +0000</pubDate>
		<dc:creator>Virtual PC Guy</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:10056052</guid>
		<description><![CDATA[<div class="wlWriterHeaderFooter" style="float:none;margin:0px;padding:0px 0px 0px 0px"> tweetmeme_url = 'http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/02/guest-paging-vs-virtualization-paging-and-negative-memory-availability.aspx';  <br /><br /></div><p>Jeff has discussed this <a href="http://blogs.technet.com/b/virtualization/archive/2010/05/20/dynamic-memory-coming-to-hyper-v-part-5.aspx" target="_blank">at some length</a> over on the virtualization team blog, but as a general rule of thumb we believe that it is much better to have paging occur inside the guest operating system rather than at the virtualization layer (if paging is needed).</p>  <p>The simple reason for this is that the guest operating system has far better understanding of which are the best sections of memory to page out – where as all the virtualization layer can do is to guess at what should be paged out.</p>  <p>In my recent demonstrations of dynamic memory I came upon another interesting angle to consider.&#160; Here is a screenshot of task manager from a virtual machine that is running at –23% memory availability (i.e. it does not have enough memory available and is paging in the guest):</p>  <p><img style="border-bottom: 0px;border-left: 0px;border-top: 0px;border-right: 0px" class="wlDisabledImage" border="0" alt="image" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/3162.image_5F00_14EDC81A.png" width="418" height="463" /></p>  <p>What is fascinating about this screenshot is that even though this virtual machine is significantly short of memory, the guest operating system is still keeping 112mb memory available / as file cache.&#160; The reason for this is that the copy of Windows inside the virtual machine knows that even though it is short of memory – it can provide the best experience for the user of the virtual machine by not using all the memory that it has and by keeping a little bit free to serve as a cache / be there for new applications.</p>  <p>It is exactly this sort of logic that gets lost when paging is done at the virtualization layer instead of inside the guest operating system.</p>  <p>Cheers,   <br />Ben</p><div style="clear:both"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10056052" width="1" height="1"/>]]></description>
			<content:encoded><![CDATA[<div class="wlWriterHeaderFooter" style="float:none; margin:0px; padding:0px 0px 0px 0px;"><script type="text/javascript"> tweetmeme_url = 'http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/02/guest-paging-vs-virtualization-paging-and-negative-memory-availability.aspx'; </script> <script type="text/javascript" src="http://tweetmeme.com/i/scripts/button.js"></script><br /><br /></div><p>Jeff has discussed this <a href="http://blogs.technet.com/b/virtualization/archive/2010/05/20/dynamic-memory-coming-to-hyper-v-part-5.aspx" >at some length</a> over on the virtualization team blog, but as a general rule of thumb we believe that it is much better to have paging occur inside the guest operating system rather than at the virtualization layer (if paging is needed).</p>  <p>The simple reason for this is that the guest operating system has far better understanding of which are the best sections of memory to page out – where as all the virtualization layer can do is to guess at what should be paged out.</p>  <p>In my recent demonstrations of dynamic memory I came upon another interesting angle to consider.&#160; Here is a screenshot of task manager from a virtual machine that is running at –23% memory availability (i.e. it does not have enough memory available and is paging in the guest):</p>  <p><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" class="wlDisabledImage" title="image" border="0" alt="image" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/3162.image_5F00_14EDC81A.png" width="418" height="463" /></p>  <p>What is fascinating about this screenshot is that even though this virtual machine is significantly short of memory, the guest operating system is still keeping 112mb memory available / as file cache.&#160; The reason for this is that the copy of Windows inside the virtual machine knows that even though it is short of memory – it can provide the best experience for the user of the virtual machine by not using all the memory that it has and by keeping a little bit free to serve as a cache / be there for new applications.</p>  <p>It is exactly this sort of logic that gets lost when paging is done at the virtualization layer instead of inside the guest operating system.</p>  <p>Cheers,   <br />Ben</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10056052" width="1" height="1"/>]]></content:encoded>
			<wfw:commentRss>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/02/guest-paging-vs-virtualization-paging-and-negative-memory-availability.aspx/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>U.S. Labor Day: phishers won’t be on holiday</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/wj5rbi4rMm4/us-labor-day-phishers-wont-be-on.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/wj5rbi4rMm4/us-labor-day-phishers-wont-be-on.html#comments</comments>
		<pubDate>Thu, 02 Sep 2010 17:18:00 +0000</pubDate>
		<dc:creator>Tom Kelchner</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-3070588604625981483</guid>
		<description><![CDATA[Holidays are times when we see a big uptick in email retail advertising. They are also a time when we should be especially aware of threats from phishing schemes in all those ads.In that surge of emails promoting holiday sales we can expect fraudulent ...]]></description>
			<content:encoded><![CDATA[Holidays are times when we see a big uptick in email retail advertising. They are also a time when we should be especially aware of threats from phishing schemes in all those ads.<br /><br />In that surge of emails promoting holiday sales we can expect fraudulent messages with links to sites that download malicious software or phishing sites set up to steal personal information.<br /><br />Phishing tracker site Phishtank.com, estimates there are more than 2,900 active phishing web sites currently verified on the internet. Popular social media sites such as Facebook and Twitter are increasingly attractive platforms for holiday-themed attacks.<br /><br />Here are three simple rules that can help you reduce your risk of becoming a victim:<br /><br />-- Make sure your computer is protected against the newest malware threats by installing a combined antivirus and antispyware solution.  This is your first point of protection against dangerous viruses and Trojans – and one without the other is no longer effective.<br /><br />-- Never click on a link in an email to make a credit card purchase.  The email you’ve received may look legitimate, but there’s a high probability that the link will take you to a spoofed site where your credit card information will be stolen by cyber criminals. <br /><br />Instead, navigate to the retailer’s Web site directly through your browser.  The email may look harmless, but it’s better to be safe than sorry.<br /><br />-- Even when you visit a trusted Web site, be vigilant about anything that looks out of the ordinary.  Social networking sites like Facebook, Twitter and MySpace have all served as points of infection recently.  Do not download anything, even from a trusted site, unless you are 100 sure it’s safe.<br /><br />Every Labor Day, we see a wave of phishing attacks taking advantage of consumers’ expectations of increased retail email promotions connected with the holiday<br /><br />Cyber criminals see an opportunity to slip by unnoticed among the legitimate promotions. Along with making sure virus updates and security software patches are current, consumers need to stay vigilant and use common sense in order to avoid any unnecessary headaches that these fraudulent emails look to deliver over the long weekend.<br /><br />Tom Kelchner<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-3070588604625981483?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=wj5rbi4rMm4:DH-Rn6ClFzw:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=wj5rbi4rMm4:DH-Rn6ClFzw:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=wj5rbi4rMm4:DH-Rn6ClFzw:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=wj5rbi4rMm4:DH-Rn6ClFzw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=wj5rbi4rMm4:DH-Rn6ClFzw:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/wj5rbi4rMm4/us-labor-day-phishers-wont-be-on.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Faulty Fiverrs</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/ZFAv1cQB84o/faulty-fiverrs.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/ZFAv1cQB84o/faulty-fiverrs.html#comments</comments>
		<pubDate>Thu, 02 Sep 2010 10:43:00 +0000</pubDate>
		<dc:creator>paperghost</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-7493538045071260212</guid>
		<description><![CDATA[Fiverr is an excellent site that allows you to buy / sell services – all of which cost $5.

There’s all sorts of crazy things on there, but does it attract rogues and individuals who generally want to mess up your day?

You bet. With a little furti...]]></description>
			<content:encoded><![CDATA[Fiverr is an excellent site that allows you to <a href="http://techcrunch.com/2010/03/05/what-would-you-do-for-5/">buy / sell services</a> – all of which cost $5.<br />
<br />
There’s all sorts of crazy things on there, but does it attract rogues and individuals who generally want to mess up your day?<br />
<br />
You bet. With a little furtive digging you can uncover all sorts of dubious antics up for grabs – for the low, low price of $5!<br />
<br />
There’s this guy, who&nbsp;is selling an XBox Live account (not something we’d advise purchasing, as more often than not XBox Live accounts up for sale have been phished):<br />
<br />
<img alt="Ffiverr2" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr2.gif" /><br />
<br />
We also&nbsp;have someone claiming they can “unlock all achievements” in your games. This will be done by using custom made software to tamper with the data on your XBox profile (again, not advisable) and unlock all the gaming achievements artificially.<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/ffiverr1.gif"><img alt="Ffiverr1" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr1_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
Note that unless they do it the “right” way (and this is a very tricky thing to pull off), Microsoft can easily tell which profiles have been fiddled with leading to a banhammer – and there’s no guarantee the seller will give you your account back at the end of it.<br />
<br />
The Playstation network isn’t safe from these kinds of sales either:<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/ffiverr3.gif"><img alt="Ffiverr3" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr3_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
Moving the notch up a little bit, you can find a lot of spreading guides and hacking tutorials (cpalead surveys and i-stealers are popular topics of conversation):<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/ffiverr4.gif"><img alt="Ffiverr4" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr4_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
<img alt="Ffiverr5" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr5.gif" /><br />
<br />
Can we find guidance on how to phish accounts and sell them on for a profit too? You bet:<br />
<br />
<a href="http://www.sunbeltsoftware.com/alex/gblog/ffiverr6.gif"><img alt="Ffiverr6" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr6_thumb.jpg" /></a><br />
Click to Enlarge<br />
<br />
Some users also spend their time offering up “undetectable keyloggers”:<br />
<br />
<img alt="Ffiverr7" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr7.gif" /><br />
<br />
I’m not entirely sure what the deal is with the odd Blue Steel pose there, but if you <i>really</i> want to be&nbsp;annoying you can find people who will happily delete accounts on sites such as Facebook:<br />
<br />
<img alt="Ffiverr8" border="0" src="http://www.sunbeltsoftware.com/alex/gblog/ffiverr8.gif" /><br />
<br />
Ouch.<br />
<br />
I don’t know about you, but I’m going to stick to “Learn to be a Ninja” and “Will sing any song in Hindi for $5”.<br />
<br />
Christopher Boyd<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-7493538045071260212?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=ZFAv1cQB84o:Kdts6OQEyBE:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=ZFAv1cQB84o:Kdts6OQEyBE:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=ZFAv1cQB84o:Kdts6OQEyBE:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=ZFAv1cQB84o:Kdts6OQEyBE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=ZFAv1cQB84o:Kdts6OQEyBE:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/ZFAv1cQB84o/faulty-fiverrs.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>GFI/Sunbelt Labs quarterly briefing is on Web</title>
		<link>http://feedproxy.google.com/~r/SunbeltBlog/~3/0yRYX5--Md4/gfisunbelt-labs-quarterly-briefing-is.html</link>
		<comments>http://feedproxy.google.com/~r/SunbeltBlog/~3/0yRYX5--Md4/gfisunbelt-labs-quarterly-briefing-is.html#comments</comments>
		<pubDate>Wed, 01 Sep 2010 19:38:00 +0000</pubDate>
		<dc:creator>Tom Kelchner</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">tag:blogger.com,1999:blog-10854312.post-3566656548951119618</guid>
		<description><![CDATA[“Turn the Tables on the Bad Guys, Malware Unmasked”The Sunbelt Labs quarterly briefing “Turn the Tables on the Bad Guys, Malware Unmasked” is available for your viewing pleasure.Malware Unmasked 2 from OEM Sales on Vimeo.Schwartzkopf began by d...]]></description>
			<content:encoded><![CDATA[<span style="color: rgb(255, 102, 102);font-size:130%;" ><span style="font-weight: bold;">“Turn the Tables on the Bad Guys, Malware Unmasked”</span></span><br /><br />The Sunbelt Labs quarterly briefing “Turn the Tables on the Bad Guys, Malware Unmasked” is available for your viewing pleasure.<br /><br /><iframe src="http://player.vimeo.com/video/14557116" frameborder="0" height="225" width="400"></iframe><p><a href="http://vimeo.com/14557116">Malware Unmasked 2</a> from <a href="http://vimeo.com/user4613963">OEM Sales</a> on <a href="http://vimeo.com/">Vimeo</a>.</p><br /><br />Schwartzkopf began by describing GFI's recent acquisition of Sunbelt Software.  Schwartzkopf said the move will enable GFI to merge innovative VIPRE technology into GFI’s email and Web security products and move into new markets.<br /><br />The presentation features a 25-minute PowerPoint presentation and 20 minutes of Q&amp;A.<br /><br />In the presentation, Glenn and Jack discuss the details of the TDL 3 (TDSS or Alureon) rootkit and the Sunbelt Labs CWSandbox.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://4.bp.blogspot.com/_1qLRA96ebog/TH6sgrzl40I/AAAAAAAAAUg/x0UwR4KszCk/s1600/Webinar_3.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 400px; height: 192px;" src="http://4.bp.blogspot.com/_1qLRA96ebog/TH6sgrzl40I/AAAAAAAAAUg/x0UwR4KszCk/s400/Webinar_3.png" alt="" id="BLOGGER_PHOTO_ID_5512032671462974274" border="0" /></a><span style="font-size:85%;">(click to enlarge image)</span><br /><br />They credit CWSandbox with VIPRE’s recent showing in Virus Bulletin’s Reactive and Proactive (RAP) analysis of detection rates. VIPRE was evaluated as the AV engine with the highest proactive behavioral detection rate.<br /><br />Glenn and Jack also discussed their analysis of the zero-day Stuxnet exploit, the first malicious code that can infect 64-bit systems running Windows 7.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_1qLRA96ebog/TH6syVXhO6I/AAAAAAAAAUo/ah9_wvmfMg4/s1600/Webinar_4.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 252px; height: 98px;" src="http://3.bp.blogspot.com/_1qLRA96ebog/TH6syVXhO6I/AAAAAAAAAUo/ah9_wvmfMg4/s400/Webinar_4.png" alt="" id="BLOGGER_PHOTO_ID_5512032974677293986" border="0" /></a><span style="font-weight: bold; color: rgb(255, 102, 102);font-size:130%;" >Next webinar: December 8, 9 a.m. and 2 p.m. Eastern Time</span><br /><br />Sign up <a href="http://www.sunbeltsoftware.com/Malware-Research-Analysis-Tools/Sunbelt-CWSandbox/index.cfm">here</a>.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_1qLRA96ebog/TH6y9jo2dkI/AAAAAAAAAUw/IHafd1PWjVg/s1600/Webinar_5.png"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 400px; height: 226px;" src="http://1.bp.blogspot.com/_1qLRA96ebog/TH6y9jo2dkI/AAAAAAAAAUw/IHafd1PWjVg/s400/Webinar_5.png" alt="" id="BLOGGER_PHOTO_ID_5512039764556412482" border="0" /></a><span style="font-size:85%;">(click to enlarge image)</span><br /><br />Tom Kelchner<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/10854312-3566656548951119618?l=sunbeltblog.blogspot.com' alt='' /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=yIl2AUoC8zA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=63t7Ie-LG7Y" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=0yRYX5--Md4:tV9_8hgQVvc:V_sGLiPBpWU" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:wF9xT3WuBAs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=0yRYX5--Md4:tV9_8hgQVvc:wF9xT3WuBAs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=0yRYX5--Md4:tV9_8hgQVvc:F7zBnMyn0Lo" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?d=qj6IDK7rITs" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/SunbeltBlog?a=0yRYX5--Md4:tV9_8hgQVvc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/SunbeltBlog?i=0yRYX5--Md4:tV9_8hgQVvc:gIN9vFwOqvQ" border="0"/></a>
</div>]]></content:encoded>
			<wfw:commentRss>http://feedproxy.google.com/~r/SunbeltBlog/~3/0yRYX5--Md4/gfisunbelt-labs-quarterly-briefing-is.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://www.blogger.com/video-play.mp4?contentId=344331f42a027c34&amp;type=video%2Fmp4" length="0" type="video/mp4" />
		</item>
		<item>
		<title>Looking at Dynamic Memory Performance Counters</title>
		<link>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/01/looking-at-dynamic-memory-performance-counters.aspx</link>
		<comments>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/01/looking-at-dynamic-memory-performance-counters.aspx#comments</comments>
		<pubDate>Wed, 01 Sep 2010 18:56:00 +0000</pubDate>
		<dc:creator>Virtual PC Guy</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:10056048</guid>
		<description><![CDATA[<div class="wlWriterHeaderFooter" style="float:none;margin:0px;padding:0px 0px 0px 0px"> tweetmeme_url = 'http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/01/looking-at-dynamic-memory-performance-counters.aspx';  <br /><br /></div><p>With Windows Server 2008 R2 SP1 we have added a number of new performance counters for dynamic memory.&#160; These counters allow you to get some extra insight into what is actually happening with memory on your Hyper-V server.&#160; The counters are grouped in two categories.&#160; First is “Hyper-V Dynamic Memory VM”:</p>  <p><img style="border-right-width: 0px;border-top-width: 0px;border-bottom-width: 0px;border-left-width: 0px" class="wlDisabledImage" border="0" alt="Untitled" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/8228.Untitled_5F00_51065FB2.png" width="718" height="530" /></p>  <p>These counters allow you to access specific information about dynamic memory inside each of the virtual machines on your system.&#160; The second category is “Hyper-V Dynamic Memory Balancer”:</p>  <p><img style="border-right-width: 0px;border-top-width: 0px;border-bottom-width: 0px;border-left-width: 0px" class="wlDisabledImage" border="0" alt="DM performance counters - 1" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/1108.DMperformancecounters1_5F00_0F1F7A64.png" width="718" height="530" /></p>  <p>These counters allow you to view information about dynamic memory across the entire physical computer.</p>  <p>One thing to note is that unlike the user interface – which uses the concept of “memory availability” (which I <a href="http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/08/31/what-is-memory-availability-as-reported-by-dynamic-memory.aspx" target="_blank">discussed yesterday</a>) – the performance counters instead talk about memory pressure.&#160; This is measuring the same thing as memory availability (i.e. how much memory does the virtual machine have compared to how much memory does it need) but the math is slightly different.&#160; A virtual machine with a pressure of 100 has exactly the amount of memory that it needs (this is equivalent to a memory availability of 0%).&#160; If the virtual machine pressure goes over 100 – it now has less memory than it needs (equivalent to a negative memory availability) and if the virtual machine pressure is under 100 then the virtual machine has more memory than it needs.</p>  <p>Virtual machine pressure is simply calculated by taking the amount of memory the virtual machine wants, dividing it by the amount of memory the virtual machine has and then multiplying the result by 100.</p>  <p>My favorite performance counter is the “Average Pressure” counter under the “Hyper-V Dynamic Memory Balancer” category.&#160; This gives you a very simple view of the overall memory allocation of your system:</p>  <p><img style="border-right-width: 0px;border-top-width: 0px;border-bottom-width: 0px;border-left-width: 0px" class="wlDisabledImage" border="0" alt="DM performance counters - 2" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/5417.DMperformancecounters2_5F00_787D2C1C.png" width="1049" height="785" /></p>  <p>As long as this number is under 100, you know that there is enough memory is your system to service your virtual machines.&#160; Ideally this value should be at 80 or lower.&#160; The closer this gets to 100, the closer you are to running out of memory.&#160; Once this number goes over 100 then you can pretty much guarantee that you have virtual machines that are paging in the guest operating system.</p>  <p>Cheers,    <br />Ben     </p><div style="clear:both"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10056048" width="1" height="1"/>]]></description>
			<content:encoded><![CDATA[<div class="wlWriterHeaderFooter" style="float:none; margin:0px; padding:0px 0px 0px 0px;"><script type="text/javascript"> tweetmeme_url = 'http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/01/looking-at-dynamic-memory-performance-counters.aspx'; </script> <script type="text/javascript" src="http://tweetmeme.com/i/scripts/button.js"></script><br /><br /></div><p>With Windows Server 2008 R2 SP1 we have added a number of new performance counters for dynamic memory.&#160; These counters allow you to get some extra insight into what is actually happening with memory on your Hyper-V server.&#160; The counters are grouped in two categories.&#160; First is “Hyper-V Dynamic Memory VM”:</p>  <p><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" class="wlDisabledImage" title="Untitled" border="0" alt="Untitled" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/8228.Untitled_5F00_51065FB2.png" width="718" height="530" /></p>  <p>These counters allow you to access specific information about dynamic memory inside each of the virtual machines on your system.&#160; The second category is “Hyper-V Dynamic Memory Balancer”:</p>  <p><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" class="wlDisabledImage" title="DM performance counters - 1" border="0" alt="DM performance counters - 1" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/1108.DMperformancecounters1_5F00_0F1F7A64.png" width="718" height="530" /></p>  <p>These counters allow you to view information about dynamic memory across the entire physical computer.</p>  <p>One thing to note is that unlike the user interface – which uses the concept of “memory availability” (which I <a href="http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/08/31/what-is-memory-availability-as-reported-by-dynamic-memory.aspx" >discussed yesterday</a>) – the performance counters instead talk about memory pressure.&#160; This is measuring the same thing as memory availability (i.e. how much memory does the virtual machine have compared to how much memory does it need) but the math is slightly different.&#160; A virtual machine with a pressure of 100 has exactly the amount of memory that it needs (this is equivalent to a memory availability of 0%).&#160; If the virtual machine pressure goes over 100 – it now has less memory than it needs (equivalent to a negative memory availability) and if the virtual machine pressure is under 100 then the virtual machine has more memory than it needs.</p>  <p>Virtual machine pressure is simply calculated by taking the amount of memory the virtual machine wants, dividing it by the amount of memory the virtual machine has and then multiplying the result by 100.</p>  <p>My favorite performance counter is the “Average Pressure” counter under the “Hyper-V Dynamic Memory Balancer” category.&#160; This gives you a very simple view of the overall memory allocation of your system:</p>  <p><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" class="wlDisabledImage" title="DM performance counters - 2" border="0" alt="DM performance counters - 2" src="http://blogs.msdn.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-41-22-metablogapi/5417.DMperformancecounters2_5F00_787D2C1C.png" width="1049" height="785" /></p>  <p>As long as this number is under 100, you know that there is enough memory is your system to service your virtual machines.&#160; Ideally this value should be at 80 or lower.&#160; The closer this gets to 100, the closer you are to running out of memory.&#160; Once this number goes over 100 then you can pretty much guarantee that you have virtual machines that are paging in the guest operating system.</p>  <p>Cheers,    <br />Ben     </p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10056048" width="1" height="1"/>]]></content:encoded>
			<wfw:commentRss>http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/01/looking-at-dynamic-memory-performance-counters.aspx/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
