Review: Free DD-WRT network router firmware

Most network routers have fairly basic firmware that limits the hardware's full potential. You can change that.

In most situations, a network router's normal purpose is to facilitate in connecting computers together to form a network, either for internal use or for granting access to the World Wide Web. Admittedly, if you actually want to do anything interesting with the hardware, most routers have fairly basic firmware that limits the hardware's full potential. I know this first hand, as I picked up an ASUS RT-N12 router from a good friend of mine recently to replace my underwhelming Belkin branded one. Although ASUS hardware is mostly of high quality, the firmware felt rather raw and unpolished. With that in mind, I did some research online and found that custom router firmware was available and I decided to give it a try.

DD-WRT

Product Information

• Title: DD-WRT
• Company: NewMedia-NET GmbH
• Product URL: http://dd-wrt.com
• Price: Free

Eventually, I settled on DD-WRT, which is quite honestly one of the best router firmware packages I've ever used. For those who are unfamiliar with it, DD-WRT can be flashed on any compatible router in order to grant the user extra functionality, which hardware manufacturers seem reluctant to include in stock software. Once you flash your router, you probably won't want to go back. You quite literally get everything but the kitchen sink at your fingertips.

For an idea of what DD-WRT can do for you, I will highlight some of my favorite features included with the firmware.
If you wanted to set up an OpenVPN gateway for all systems that connect through the router, you can add your VPN cert and private key, flip a few switches to determine the encryption and tunnel type, and voila! Every computer that connects to the router will pass right into the VPN. No client end VPN software is necessary.
I also like how DD-WRT is extremely verbose on stats, showing you total inbound and outbound traffic to date, as well as router performance information, including free memory and CPU activity. Having access to this panel will give you insights into what kind of traffic you are dealing with and if you need additional hardware down the road.

An example of some of the available router stats

Finally, DD-WRT just seems to improve network performance by a decent margin. For instance, after switching the firmware from stock to custom, surfing web pages and downloads seemed a bit snappier than before. Not to mention, I could be more discriminatory of what protocols (i.e. Bittorrent) could do what it needed to do with the network to improve balance.

Installing takes some research

Now, when it comes to getting DD-WRT installed to the router, there really is no one-size-fits-all method, as hardware from different manufacturers is handled on a case by case basis. There are some routers that are unable to be flashed too, so if you are shopping around for a new router, it would be advisable to refer to the DD-WRT hardware compatibility database first before committing to a purchase.
Fortunately, for my router, installation was as simple as dropping into the firmware upgrade menu, selecting the custom-tailored ROM file for my hardware make and model, and then uploading it over the network. After a several minute upload process, followed by a mandatory router reboot, I was up and running in DD-WRT. In the unfortunate event of an endless reboot or other strange issue that might arise in the process of flashing, I also have the option to boot into the router's low-level recovery mode in order to roll back to the stock firmware and try again.
With all this interest surrounding router modifications, it goes without saying that flashing with un-official custom firmware could invalidate your warranty coverage and cause other problems. If this all sounds too risky, companies like Buffalo actually offer routers with DD-WRT firmware already flashed and ready to go with full warranty coverage. This way, you won't have to worry about accidentally bricking any hardware if you don't feel adventurous.
DD-WRT is available to everyone as freeware under the GNU GPLv2 license. So long as your router make, model, and revision are all listed, you should be good to go. One thing to note: if you have less than 8MB of flash storage space on your router, you won't be able to take advantage of every feature available. Therefore, you will need to choose the mini firmware "edition" that best suits your needs for the hardware.






Review: Free DD-WRT network router firmware - TechRepublic

Rescue a Windows XP installation in Windows 8 with Zinstall XP7

Learn how to get and use Zinstall XP7 to move your Windows XP installation from a hard disk to your Windows 8 system.

A friend of mine got a new Windows 8 system and was running it along side of his old Windows XP box so that he could get used to Windows 8 yet still be able to run his older applications in Windows XP. Everything was going fine with this set up until recently when he called and told me that his Windows XP computer died and wanted to know if I could help him rescue his XP system. After talking with him for a while I discovered that the power supply on the old system had bitten the dust. While the old system would not power on, he said that the last time he used it, the system worked fine and he had shut it down like he normally did. Suspecting that the hard disk was still intact, I told him that we could probably retrieve his data and put it on the new computer. He said that while that would be great, what he really wanted was a way to revive the Windows XP computer. We initially discussed replacing the power supply, but when I told him about Zinstall XP7 and how you could use it to move a Windows XP installation from a hard disk into a virtual environment that could be run in Windows 8, he liked that idea.
Later, we took IDE hard disk out of the old computer, connected it to his new computer via an IDE to USB adapter, and verified that it was still accessible and in good condition. We then used Zinstall XP7 to move the entire Windows XP installation into his Windows 8 system. The entire procedure was very easy and the end result provided such a slick way to switch between operating systems that I thought I should revisit this product and show you how it works in Windows 8. (Back in 2010, I wrote an article about using Zinstall XP7 to perform an in-place migration of Windows XP to Windows 7.)
In this article, I'll show you how get and use Zinstall XP7 to move your Windows XP installation from a hard disk to your Windows 8 system. As I do, I'll explain each step in the procedure.
Note: Even though the product name "XP7" implies a Windows XP to Windows 7 path, it works perfectly in Windows 8.

Overview

Keep in mind that while you can use Zinstall XP7 on two computers and move Windows XP into Windows 8 using a network connection, I am going to cover moving Windows XP into Windows 8 using just the hard disk. Furthermore, while I used an IDE to USB adapter to move my friend's Windows XP installation, on my example system for this article, I simply removed the SATA hard disk from my Windows XP computer and connected it to the second SATA connector in my Windows 8 system.

Getting and installing Zinstall XP7

Zinstall XP7 is a commercial product which sells for $89. You can purchase and download the product from the Zinstall site.
Since I'm going to be moving Windows XP into Windows 8 using just the hard disk, I'll download and install Zinstall XP7 on a Windows 8 system. Once the download is complete, just run the executable file. In a few moments you'll be prompted to enter the serial number you received along with the email address you used to purchase the product, as shown in Figure A.

Figure A 

 

You'll be prompted to enter the serial number you received in order to activate Zinstall XP7.

Performing the transfer

As soon as the installation is complete, Zinstall XP7 will launch and prompt you to identify your migration scenario. Since I am running the program on my Windows 8 system with the Windows XP hard disk connected, I will identify the migration scenario by selecting I only have this PC and the selecting Yes, I am migrating from another hard drive, as illustrated in Figure B.

Figure B

 In this scenario, you select the migrating from another hard drive option.

You'll then see a Zinstall window that will begin searching for the Source and Target computers. When it finds them, the Go button turns green, as shown in Figure C, and you can click it to begin the migration procedure. Here you can see that Zinstall found the 160GB hard disk that contains the Windows XP installation and will migrate it to a folder on my Windows 8 system.

Figure C

 

 

 

 

 

 

When the Go button turns green, you can click it to begin the migration procedure.

The actual migration is a lengthy process involving multiple operations, as shown in Figure D, and can take several hours depending on the size of your Windows XP installation. For instance, my 160GB hard disk took a little over an hour to finish.

Figure D

 

The actual migration is a lengthy process that involves multiple operations.

Working with the two systems

Once you complete the migration step, you'll see a Zinstall icon in the system tray of you Windows 8 system. To access your Windows XP installation, you can just double-click on the Zinstall icon. You can also access your Windows XP installation by right-clicking on the Zinstall icon and selecting the Switch to Guest Desktop command.
When you are in Windows XP, you'll also find a Zinstall icon in the system tray. To go back to your Windows 8 installation, you can just double-click on the Zinstall icon or right-click on the Zinstall icon and select the Switch to Host Desktop command. This process, which Zinstall refers to as switching channels, is illustrated in Figure E.

Figure E 

You can use the Zinstall icon in the system tray to switch between Windows 8 and Windows XP.

You'll also find several shortcuts on your Windows 8 desktop that allow you to initiate the desktop switch and access Windows XP's My Documents folder inside of Windows 8; however, I found both of those shortcuts much more time consuming than simply double-clicking the Zinstall icon and changing to the Windows XP channel.
You'll also discover that Zinstall XP7 places shortcuts to all of your Windows XP applications on Windows 8's Start Screen and each one is prefixed with a Z^ to make it easy to identify. If you find that this makes the Start Screen overcrowded, you can remove all the shortcuts using the Advanced tool.
Right-click on the Zinstall icon and select the Advanced command. When you see the Advanced application, select the Remove shortcuts on Exit check box, as shown in Figure F, and click OK. Then, shut down Windows XP and restart Windows 8. When you get back to Windows 8, you'll see that all of the shortcuts have been removed.

Figure F 

 

You can Remove the Windows XP shortcuts from the Start screen.

To make working with the two systems as easy as working on one system, the Windows 8 and Windows XP environments are fully integrated. This means that you can copy files and text between the two systems just like you copy files between two folders and text between different applications. For example, to copy a file from the Windows 8 environment to the Windows XP environment, just right-click on the file, select Copy, switch to Windows XP, and paste the file.
For larger-scale file copy operations, access your Windows XP environment and go to My Computer where you will find a drive letter Z: under the Network Drives section. When you open it, you will find links to all of the drives on your Windows 8 system as well as a link to the Documents folder on your Windows 8 system.
Network and Internet access is automatically enabled. If Windows 8 has access, so does Windows XP. This works with any kind of connection, wireless included.

What's your take?

Will you use this Zinstall XP7 to migrate your Windows XP system to Windows 8? As always, if you have comments or information to share about this topic, please take a moment to drop by the TechRepublic Community Forums and let us hear from you.

More information

Virtualization has swept through the data center in recent years, enabling IT transformation and serving as the secret sauce behind cloud computing. Now it's time to examine what's next for virtualization as the data center options mature and virtualization spreads to desktops, networks, and beyond.

Also read:

• Get started with Windows 8 Client Hyper-V the right way
• Create a virtual switch in Windows 8 Client Hyper-V
• Run your Windows XP system in Windows 8 with VMware

Rescue a Windows XP installation in Windows 8 with Zinstall XP7 - TechRepublic

Cabling tips

With a little planning and a few best practices, you can avoid the problems and maintenance headaches that come with improper cabling.

Your data center is the heart that pumps the lifeblood of your business. Without it, everything stops. And when it has problems, so does your business. Myriad issues can plague a data center. And although most people don't realize it, improper cabling can be one of those issues. But with some easy planning and work up front, you can maximize the efficiency and reliability of your data center cabling.
I have put together 10 tips to help you get the most out of your data center's cabling. With these tips, you'll have a more reliable data center and your staff will have a much easier time maintaining it.

1: Measure twice, cut once

It's an old adage, but an important one. Not only do you create a tangled mess if you don't carefully measure your cables, you also create a lot of expensive waste. You may think that two feet of wasted cable doesn't amount to much, but those wasted feet add up. In the end, you could save yourself a lot of time, headaches, and money by measuring twice and cutting once.

2: Label, label, label

If you don't label your cables, you're only making more work for yourself. Every cable should have a label on both ends, even short runs and patch cables. Why? Imagine you have to test a bunch of circuits -- quickly. You scramble and unplug a few patch cables and, when it's time to reset them back to their default locations, you have no idea where each cable goes. Avoid this problem by taking a little time to slap a label on each end. Make sure your labeling system is consistent. Don't just go ad hoc with this or you'll confuse yourself and those who work for you.

3: Don't skimp on terminations

Don't buy cheap because they're cheap and don't rush through the process of terminating cables. If you have cables that lose their connection if you wiggle them, you need to redo them. If you can't terminate cables in your sleep, you need to practice. You may think you're saving time and money. But in the end, you're going to wind up with a monstrous headache as you troubleshoot all those terminations.

4: Don't skip the test

After you create a cable, test it! And don't accept "Star Pass" tests (a test that barely passes). If a test doesn't pass 100%, redo that cable. If, after a few tries at termination, the cable still doesn't pass, trash it. And make sure you're using a quality tester for your cables (and that you know precisely how to use it). This simple step can prevent a lot of extra work in the end.

5: Keep patch cables short

You have servers in a rack that are within a foot of each other. Don't slap three-foot patch cables on those servers -- it not only looks bad, it's incredibly inefficient. And if you have an odd length between servers, use your termination (and testing) skills to create patch cables that reach perfectly. With that extra length on your cables, you invite tangles, kinks, and confusion.

6: Color code

This may sound a bit over the top, but stick with a single color for your patch cables and cable runs. The only time you should break that rule is when using a specific color cable for a specific purpose. But don't use colors randomly. Make sure each color has a purpose and stay with it. That will make it easier to follow cable runs and troubleshoot issues. And yes, it also makes for a better-looking data center -- which has its merits.

7: Upsize your conduit

Don't buy conduit sized for what you need NOW. Buy conduit sized for what you will need in the future. You never know when you'll be adding on, and you'll want to be able to make use of already-run conduit. You can't do that if you purchased a size that just barely fits your needs at planning time. Go big or go home.

8: Make your design cable-friendly

When you lay out your data center plans, do so in a cable-friendly way. Don't put a rack in a location where it's impossible to successfully run cable. Otherwise, you'll wind up with cable on the floor or hanging from the ceiling. Plan carefully to avoid later disaster. Also make sure to plan with expansion in mind. Run extra conduit, extra drops -- more than you think you'll need.

9: Separate Cat5 and power lines

Do not run Cat5 and power together. You might think it's too minimal to be of concern, but those power lines can leach signal and cause interference with your Cat5. Yes, bunching a lot of Cat5 together can do the same thing, but not with nearly the ill effect of running them alongside power. Keep power and networking separate at all costs.

10: Keep cables cool

You may think only the servers need to be cool -- but that would be a poor assumption. Cable can get warm as well, and if you have a massive amount of cable, that extra temperature can lead to disaster. Design your data center in such a way as to keep your networking runs cooled, as well as the server racks.

Spaghetti prevention

Cabling is often an afterthought. But when you treat it as such, you are running the risk that you'll find yourself elbow deep in a spaghetti bowl of networking cables, attempting to resolve issues that could have been prevented with just a bit of care up front.

Cabling tips

Snort :: Home Page

Snort :: Home Page

Breach Detection Systems take aim at targeted persistent attacks

You've just been told to get a Breach Detection System in place. Where do you start? How about a buyer's guide created by an independent test facility?

I’ve been asked how to prevent illicit network penetration enough times to realize an esoteric discussion of the recent advances in intrusion detection and firewall protection is not what’s needed. What is needed is a clear picture of available preventative measures, and which of the preventative measures work as advertised.
Getting up to speed, for me, means paying attention to a certain independent test lab. For the past two years, the people at NSS Labs have been testing how well Breach Detection Systems deal with Targeted Persistent Attacks.

Different terminology

It’s entirely understandable if Targeted Persistent Attacks (TPA) and Breach Detection Systems (BDS) are unfamiliar, or appear to be incorrect acronyms. To get that sorted out, I talked to John Pirc, Research Vice President at NSS Labs and published author. Starting with Targeted Persistent Attacks, I asked John why NSS Labs didn’t use Advanced Persistent Threats (APT) like everyone else. “The truth of the matter is that an APT is sometimes made up of known exploits / vulnerabilities that are not that Advanced; so the term APT doesn't define the action correctly. TPA highlights that the actor is going after a specific target such as company X or an entire industry sector like financial services, and will be persistent in attacking the target”
John also mentioned there was a detailed examination of APT versus TPA in this blog. Next, I asked John why NSS Labs prefers to use Breach Detection System instead of Next Generation Intrusion Prevention System and Next Generation Firewall:
“The BDS, NGIPS, and NGFW products are similar in that all three can contain signatures and heuristics for identifying malware. However, a BDS separates itself from the pack with its ability to analyze the patterns of network traffic, identify malicious domains, and model the behavior/impact of files that are being downloaded and executed on an attack surface.
In some cases, BDS vendors are able to detect zero-day malware at various stages of propagation, and provide remediation. The ability to identify still-unnamed malware on your network is almost like having your own zero-day research team on site.”
BDS technology having proactive capabilities plus remediation is significant. I asked John how that was accomplished:
“What separates BDS from IDS/IPS is detecting unknown malware. Breach Detection Systems, unlike IDS/IPS, have the ability to model malware behavior through emulation and sandboxing or a combination of both. This places BDS at a distinct advantage over IDS/IPS; as they can identify the presence of dropped files, analyze them, determine if they are known bad or unknown bad, and monitor for command and control callbacks.”
Now that we’re on the same page, I’d like to look at how NSS Labs goes about testing Breach Detection Systems.

BDS testing

To start, this excerpt from the BDS Test Methodology paper describes what the testers will be looking for:

• Centralized management of multiple devices.
• Breach detection capabilities using one or more of the following methods:
• Malware identification (signatures, heuristics, or both).
• Network traffic analysis (flow monitoring, content analysis, or both).
• Sandboxing that allows for modeling internal systems (workstations and servers).
• Browser emulation.
• Domain reputation to identify malicious domains.
• Response mechanisms (for example, alerting, session termination).
• Reporting.

The remaining 18 pages of the test methodology report go into intimate detail explaining how the engineers at NSS Labs determine whether a BDS device meets expectations or not.

Test results

At the beginning of this article, I mentioned my reliance on NSS Labs to get a clear picture of this complex technology. To get that clarity, besides reading how NSS Labs tests BDS, I also read their annual Breach Detection Systems Buyer's Guide. The 14-page report is chock-full of analysis and recommendations. For example, here are some overall conclusions of the systems tested this year:

• A BDS is able to detect threats by using a network appliance or stand-alone endpoint, or by using a combination of both.
• A BDS can identify pre-existing breaches as well as malware that is introduced to the system through side channels.
• A BDS that is unable to identify side-channel attacks or command and control traffic from infected machines is little more than a network AV device.
• While high-end network core switches will be capable of supporting most BDS requirements, NSS engineers have noted port-spanning issues with many workgroups switches.

Next NSS Labs offered the following advice for those thinking about purchasing a BDS: “Enterprises looking to deploy a BDS should understand that there are differences in the maturity, technology, and scalability of the solutions that are offered by different vendors.”
Both the paper on BDS test methodology, and the BDS buyer’s guide provide an abundance of information, affording IT pros the opportunity to get familiar with Breach Detection Systems.
Here’s a list of vendors that are offering BDS products.

• Check Point
• Damballa
• Fortinet
• McAfee
• Palto Alto networks
• Sourcefire
• Trend Micro

John mentioned that not all of the above vendors have submitted systems for testing as of this post, and to contact NSS Labs to see if there is a test report on a system you are considering.

Final thoughts

With something as complex as Breach Detection Systems, I’m glad there is such a thing as a buyer’s guide. I’d be nervous having to base a decision on one vendor’s market-speak versus another’s.


Breach Detection Systems take aim at targeted persistent attacks - TechRepublic

Restore Windows 8 with System Image Recovery

In a recent series of blog posts, I've shown you how to use two of Windows 8's new recovery tools, Refresh your PC and Reset your PC. While the Reset your PC tool will allow you to essentially start from scratch and the Refresh your PC tool will allow you to install a new copy of the operating system while retaining your data, you may also want to have a backup of your full system - data and applications - on hand, just in case you encounter a catastrophic hard disk failure.
If so, you'll be glad to know that the tried and true System Image tool still exists in Windows 8 and as long as you have created a system image of your hard disk, you can use the System Image Recovery tool to recover your entire system in the event of a hard disk failure. In other words, if your hard disk goes south, you can purchase a new hard disk and use the System Image Recovery tool to restore your system to the state it was in at the time that you created the image.
Now, keep in mind that for this type of backup to be truly effective, you need to regularly create new System Images so that in the event of a recovery, you will have a recent version of your system.
In this edition of the Windows Desktop Report, I'll show you how to use System Image Recovery tool from the Recovery Drive to restore your hard disk. As I do, I'll also show you how to create a System Image on a set of optical discs.
This post is also available as a Slideshow Image Gallery.

What you need

In order to run the System Image Recovery tool as I'll describe in this article, you'll need to have created a Recovery Drive as I showed you in the article Create a Recovery Drive in Windows 8. You'll also need a set of optical discs or on an external drive on which to create a system image of your hard disk.

 

Creating a System Image

As I mentioned, in order to use the System Image Recovery tool you must have created a system image of your hard disk. As such, I'll begin by walking you through the steps required to create a system image.
To create a system image in Windows 8, you'll start by accessing the oddly named Windows 7 File Recovery window. (Why not just call it File Recovery or Windows Backup and leave it at that?) To do so, use the [Windows] + W keystroke to access the Search Settings page. Then, type Windows 7 File in the text box and click Windows 7 File Recovery, as shown in Figure A.

Accessing the Windows 7 File Recovery tool from the Start screen is easy.[Figure A]

In a moment, you see the Windows 7 File Recovery user interface and you should select the Create a system image command on the left side of the screen to launch the creation tool. On the first screen you will need to choose where you are going to create a system image. For my example, I am going to create the system image on a set of DVD+R discs in the DVD RW drive, as illustrated in Figure B.

 

On my test system, I'll create the system image on a set of DVD+R discs.[Figure B]

When you click Next, you will be prompted to confirm your backup settings, as shown in Figure C. As you can see, in addition to the main partition, the System Reserved partition is also selected to be backed up. On my test system, which is pretty bare bones at this point, the system is indicating that the image will take up 36GB of space. (When the operation was complete, the system image, with compression, only required three 4.7GB DVD+R discs.) When you are ready, just click the Start backup button.

 

On the Confirm your backup setting page take a look at the information presented and then click the Start backup button.[Figure C]

As Windows begins preparing for the operation, it will prompt you to label and then insert the first DVD disc This process is illustrated in Figure D.

 

To get started, insert the first disc and click OK.[Figure D]

Once you insert the blank disc, you'll be prompted to format it. Make sure that you select the Don't ask me again for this backup check box before you click the Format button. The operation will then format the optical media, as shown in Figure E.

 

Make sure that you select the Don't ask me again for this backup check box.[Figure E]

As the backup operation gets under way, you'll see progress indicators letting you know the status of the operation, which includes verification of the media once the backup portion is complete. After each disc is verified, you'll be prompted to insert a new disc. This process is illustrated in Figure F.

 

Creating a System Image on DVDs includes a verification operation.[Figure F]

When the System Image creation procedure is complete, you'll be prompted to create a System Repair disc, as shown in Figure G. However, as you may remember, a System Repair disc is the same as the Recovery Drive and if you have already created a Recovery Drive, you can just click No and you will be notified that the backup completed successfully.

 

In Windows 8, the System Repair disc is the same as the Recovery Drive.[Figure G]

Now that you have a System Image backup, you are ready for an emergency situation.

 

Launching System Image Recovery

In the case of a hard drive failure, you can restore Windows 8 by running the System Image Recovery tool from the Recovery Drive. While I am booting from a USB Recovery Drive, you can just as easily boot the Recovery Drive from the optical disc. (As a part of my research for this article, I ran the System Image Recovery tool after booting from an optical disc and the procedure is basically identical.)
After your system boots from the Recovery Drive and you are prompted to choose an option, select the Troubleshoot tile as shown in Figure H.

 

When you are prompted to choose and option, select the Troubleshoot tile.[Figure H]

When you see the Troubleshoot screen, as shown in Figure I, select the Advanced options tile.

 

From the Troubleshoot screen, select the Advanced options tile.[Figure I]

When you see the Advanced options screen, as shown in Figure J, select the System Image Recovery tile.

 

From the Advanced options screen, select the System Image Recovery tile.[Figure J]

You'll then be prompted to choose the operating system that you want to recover, as shown in Figure K. Now, when performing a system image recovery operation, it seems redundant to have to select the operating system, but you must click the Windows 8 tile to get started.

 

Choose Windows 8 [Figure K]

 

 

 

 

 

 

 

The recovery process

As soon as you click the Windows 8 tile, you'll see the Re-image your computer wizard and the tool will immediately begin looking for media containing the system image, as shown in Figure L.

The Re-image your computer wizard will immediately begin looking for media containing the system image.[Figure L]

When it can't find the system image, it will prompt you to insert a disc. Take note that when restoring from DVD, you must first insert the final disc in the set, as shown in Figure M. The reason being is that when you create a system image, information required by the restore operation is saved on the final disc.

Information required by the restore operation is saved on the final disc. [Figure M]

When you insert the final disc, the Re-image your computer wizard will read the information on the final disc and then display the details of the system image, as shown in Figure N. As you can see, my system image is on drive F, it was created on 2/25 at 11:28 PM, and it is the image for the computer named Jovian-8. When you are ready, just click Next.

When Re-image your computer wizard is ready to begin, it will display the system image details.[Figure N]

You'll then see the second screen of the Re-Image Your Computer wizard, as shown in Figure O. As you can see, this screen provides you with several options. If you are restoring to the same hard disk, you don't need to select the Format and repartition disks check box. (For my example, I selected the Format and repartition disks check box, just to see if that changed the process in any way. Other than possibly adding a little time to the process, the steps and the end result were the same.) If you are restoring to a new hard disk, chances are that the Format and repartition disks check box will be selected by default and will be unavailable. If that is the case, there is nothing to worry about as long as the new hard disk is of the same capacity or greater than the old one.

The second screen in the Re-Image Your Computer wizard provides you with a number of options to choose from.[Figure O]

If you have multiple drives you can click the Exclude Disks button and choose the drive(s) you want to leave untouched. If you click the Advanced button, you'll see a dialog box that will present you with two additional options. An Automatically Restart check box will be selected by default and you'll have the option to enable a disk check operation as a part of the procedure. (Now, if none of the options are available on this dialog box, you may have to install drivers for the disks you are restoring by clicking the Install Drivers button.)
When you click Next, you'll see the confirmation screen of the Re-Image Your Computer wizard, as shown in Figure P. To continue, just click Finish.

To complete the Re-Image Your Computer wizard, just click Finish.[Figure P]

Of course, there is one more confirmation to work through, as shown in Figure Q. Just click Yes to get started.

Just click Yes in the final confirmation dialog box.[Figure Q]

You'll then be prompted to insert the first DVD in the set, as shown in Figure R. Once you do so, just click OK.

Once the operation is set to begin, you'll be prompted to insert the first disk in the set.[Figure R]

In a moment, the restore operation will begin and you'll see a progress bar that keeps you apprised of the status of the restore operation. Depending on how big your hard disk is, the restore operation can take a few hours. As each DVD in the set is restored, you'll be prompted to insert the next one.
When the restore operation is complete, you'll be prompted to click the Restart now button. If you happen to be away from your desk when this occurs, your system will restart on its own, as shown in Figure S.

If you happen to be away from your desk when the restore operation is complete, your system will restart on its own.[Figure S]

When, your system restarts, you'll see the familiar logon screen.



Restore Windows 8 with System Image Recovery - TechRepublic

Five free IT tools available in the Apple App Store

For many years, IT professionals have relied on tools that require a PC or a laptop to run; smaller, more portable devices just weren't available. Now, with the advent of nearly-ubiquitous smart phones and the proliferation of tablets, IT professionals can use these types of devices to test their networks and systems to ensure that things are running properly - and without lugging around a full laptop or heading back to the office to use a desktop.
This blog post is also available as a TechRepublic Photo Gallery.

Sign up for TechRepublic's Five Apps newsletter!

In this edition of Five Apps, I take a look at five free IT tools in the Apple App Store which can be used by IT professionals to diagnose problems with their networks and systems. All of these apps are "universal" apps, meaning that the same version can be used on iPhones, iPads, and iPod Touches.

Five Apps

1: IP Network Scanner by 10base-t Interactive

IP Network Scanner quickly scans the local subnet (by default) returning a list of the systems detected and what their IP and MAC addresses are. Additionally, you can view the manufacturer, give the device a custom name and icon, and use several network tools and additional apps on the device all from the right-side pane. The free version is limited to the first five devices found, but you can adjust the scanning range to catch the group of devices you're interested in. The full version is $9.99 and gives you unlimited devices.

2: Speedtest X HD by VeeApps

A speed test app is another must for IT professionals, and Speedtest X HD does an excellent and beautiful job. Free users get access to a limited number of servers to test against while users upgrading to the full version get access to many more. The gauge is simple and easy to read and the app gives you the typical ping, download, and upload results. VeeApps also offers a non-HD version of their app. Both paid versions cost $0.99.

3: NSLookup by Dayana Networks Ltd.

NSLookup does only one thing, but it does that thing well. Simply enter the domain name and it will return a list of name servers and hosts with IPv4 and IPv6 addresses. The few options available allow you to reduce the number of different types of results and make other minor tweaks. The paid version is $1.99 and appears to just remove the ads.

4: Netstat by James Devenish

Another essential IT app is Netstat. The free version will list all currently-open sockets on the device and give several details about those sockets. The paid version ($3.99) goes a little bit further in allowing you to monitor another device's sockets. You can also buy the connection details module for $0.99. One additional stand-out feature of this app is that it exports the results to CSV which you can then sync to iTunes, open with another app, or send as an e-mail attachment.

5: Remote Desktop Lite - RDP by MochaSoft

Finally, no Windows IT professional would be complete without an RDP app. Remote Desktop - RDP is an easy-to-use Remote Desktop client with many options available for advanced configuration; however, basic configuration is as simple as entering the IP address or hostname. Once you connect to a remote Windows system, you can see, zoom, and pan the screen around as needed and use the built-in iOS keyboard or an external one when you need to type. The paid version ($5.99) gives you additional hotkeys on the screen, better mouse support, and removes the ads.

Your picks

What IT Tools have you used from the Apple App Store? Share your recommendations with fellow TechRepublic members in the discussion forum.


Five free IT tools available in the Apple App Store - TechRepublic

Five must-have portable networking tools

Add these apps to your portable toolkit for network troubleshooting, monitoring, and management.

Having all your tools in one place certainly makes your job easier. This is especially true when you need networking tools. These tools can be anything from simple monitoring tools to full-blown portable servers. Regardless of what you need and why you need it, there are plenty of networking tools that require zero installation and can fit on a USB flash drive.
There are quite a lot of portable apps out there--even within the narrowed scope of networking tools. Here are five handy portable network tools that you can add to your on-the-go toolkit.
Note: This list is also available as a photo gallery.

1: ConnectionMonitoring

ConnectionMonitoring (Figure A) is a simple tool that allows you to monitor incoming and outgoing socket connections. With this connection information at hand, you can see whether any unwanted traffic is coming into a machine. And because this app is portable, you don't have to bother with installing the tool -- you'll always have what you need right there. Connection Monitoring scans current connections and then displays the following: Local address/port, remote address/port, TCP UDP protocol/status of those connections.

2: TCPView

TCPView (Figure B) is like Netstat with a power boost. With this portable tool, you can view a detailed listing and the current state of all TCP and UDP endpoint connections, as well as the process name running each endpoint. This tool also contains a command-line version, Tcpvcon, which offers the same features as Netstat.

 

 

 

3: DNS Benchmark

DNS Benchmark (Figure C) allows you to do exactly what the name implies -- benchmark your DNS servers. You can easily determine whether your nameservers are the cause of your networking problems. DNS Benchmark can monitor up to 200 DNS servers and report on their status. You can use a simple configuration file to configure the specific DNS servers you want checked.

4: Pale Moon Portable

Pale Moon Portable (Figure D) is based on the minimalist version of Firefox but is far lighter in weight and far faster in performance. Pale Moon (the creators of the browser) claims a 25% speed increase over Firefox. However, you will find that some Firefox features aren't in Pale Moon. The major missing features are accessibility and parental control. Otherwise, you can expect a full-featured browsing experience in a very mobile package.

5: EasyPHP

EasyPHP (Figure E) allows you to carry around a complete portable WAMP stack on a stick. This tool is mostly useful for developers, but anyone who needs a portable Web server can benefit from having this available. EasyPHP bundles all the usual WAMP tools (Apache, MySQL, PHP) as well as the PhpMyAdmin tool for managing the databases on the server. You will also find Xdebug to aid in your debugging process.

Other good portable networking tools?

Portable tools don't need to be useless. In fact, they can be some of the most valuable tricks up your sleeve. With this short list of portable networking tools, you can enjoy some serious power and manageability -- at your fingertips.


Five must-have portable networking tools - TechRepublic

Five apps for your portable security kit

Portable security apps can come in quite handy in the field. Here are five lesser-known apps worth checking out.

Portable apps do one thing for the system and network administrator -- make the job easier. The better (and more diverse) your portable apps, the more jobs are made easier. Security is one area where portable apps can make a big difference. But there are so many to choose from, it's hard to piece together a collection of tools that best fit your needs. To that end, I want to introduce you to some portable security apps you might never have heard of. Even if you only take away one or two of these tools, your portable security toolkit will have improved significantly.
Note: This list is also available as a photo gallery.

1: SmartSniff

SmartSniff (Figure A) enables you to capture TCP/IP packets traveling on a network adapter and view the packets between source and destination. The TCP/IP conversations can be viewed in ASCII mode (for text-based protocols, such as HTTP, SMTP, POP3, and FTP) or as a hex dump (for non-text based protocols, such as DNS). Having SmartSniff with you allows quick troubleshooting a networking issue from any PC on your network.

2: Omziff

Omziff (Figure B) is an encryption utility that can encrypt, split, and securely delete files (according to DOD standards), create file hashes, and generate random passwords. The encryption allows you to choose from all the standard types (Blowfish, IDEA, Twofish, and more) and even includes a few utilities (random number generator, file append, and a command prompt) that can help you with other tasks.

3: Eraser Portable

Eraser Portable (Figure C) is a secure data removal tool that can remove data from a drive with multiple wipes, pattern writing, and more. The portable version of this tool is based on the full version of Eraser and offers the same features. This tool can erase files, folders, and even previously (insecurely) deleted files. You can also instruct Eraser Portable to automatically restart or shut down a PC.

 

 

 

4: Remove Fake Antivirus

Remove Fake Antivirus (Figure D) should really have a better name. But even with the wacky name, the tool does exactly what it says it does -- checks for any fake antivirus and removes it. The tool removes nearly 50 antivirus variants. This particular tool can be run as a portable app or, with the help of some scripting, can be saved on a drive and run on schedule or at bootup.

5: BleachBit

 BleachBit (Figure E) is one of the best tools for freeing up hard disk space and guarding privacy. This tool works effortlessly to free cache, delete cookies, clear Internet history, shred temporary files, delete logs, and discard various types of junk you may not have known was on a system. BleachBit is available as a portable app as well as an installable for both Windows and Linux.

 

Build your kit

Your portable arsenal is invaluable. Having a set of tools you can carry around with you and run from a USB drive will make you more efficient and keep your end users working without downtime. Give these tools a try and see if one or more of them doesn't wind up in your permanent portable toolkit.


Five apps for your portable security kit - TechRepublic

New strain of ransomware evades detection by AV apps

Learn about a new type of ransomware that has the potential to snare many victims - and it's not even malware.

Since you’re here at TechRepublic’s website, I’m betting you are familiar with ransomware, and how to avoid being conned by it. The trouble is there are millions of people who aren’t. That alone ensures ransomware will continue to cull people of their hard-earned money. To make matters worse, there’s a new version winding its way through the Internet. And, those in the know predict what’s being called HTML ransomware will be more successful than previous versions.

HTML ransomware

I first learned about HTML ransomware from Jerome Segura, Senior Security Researcher at Malwarebytes, and his blog post, "FBI Ransomware Now Targeting Apple’s Mac OS X Users." Initially, I was suspicious; OS X is not vulnerable in the same way Windows operating systems are, so what’s up?
As I continued reading, I learned the only requirements for HTML ransomware to work are JavaScript must be enabled, and the victim’s web browser incorporates the “Recover browser session after a crash” feature, which is part and parcel to all major web browsers -- including Chrome, Firefox, Internet Explorer, and Safari.
Here’s what HTML ransomware has going for it:

• Does not require installation.

• Disabling JavaScript breaks many popular websites; so people aren’t willing to turn off JavaScript, something the bad guys are relying on.
• AV applications, even with current malware signature sets, are of no use against HTML ransomware.

How it works

One way the scam starts is when an unlucky person selects a search result with a falsified link. Instead of the expected web page being presented, the victim’s web browser loads something similar to the following slide (courtesy of Jerome Seguro and Malwarebytes). 

 

Again, you aren’t fooled, but perhaps less computer-savvy friends and relatives might be.
While the victim is coming to grips with the above screen, associated JavaScript code is loading copies of the same screen (150 typically) onto the browser. By creating a 150 iFrame loop, HTML ransomware gives the impression the computer is locked up. Ironically, if the victim is determined, leaving the web page, and revisiting it 150 times will remove the problem.
I doubt I’d even consider reloading the web browser that many times; my inclination would be to reboot the computer, but that doesn’t help either because HTML ransomware taps into the “Recover browser session after a crash” feature I mentioned earlier, bringing the same FBI screen back up.

It’s not malware

Something else that makes HTML ransomware unique: by most definitions, it’s not malware. It is a snippet of JavaScript code readily available on the Internet that digital extortionists use to fool victims by controlling what is visible in the browser window. No other computer function is affected, at least as of this writing, but Jerome mentioned the potential is there, especially for Windows-based computers.
It not being malware is why HTML ransomware is a great idea for the bad guys: simple to set up, easy to move to different domain names, and no concerns on how to install code onto computers. To see if bad guys agreed, I asked Jerome how many instances of HTML ransomware he has seen?
“This ransomware is quite active; bad guys are registering new domain names several times per day. While it is not malicious (as opposed to ransomware that infects your PC), it’s still scaring people.”

How to tell if it’s HTML ransomware

Web browsers lock up for all sorts of reasons, so I asked Jerome how we would know for sure, if HTML ransomware caused the lockup:
“The browser being locked may not be ransomware in all cases. I can think of many sites that use annoying JavaScripts to keep the user on the page (pop-ups that ask ‘are you sure you want to leave this page?’). HTML ransomware is characterized by the following:

• Warning from the police
• Fee to be paid using a voucher
• Computer or browser locked

"If those three elements are in place, it’s HTML ransomware.”

How to get rid of HTML ransomware

Jerome did a thorough job of explaining how to remove HTML ransomware from Safari in his blog post, but missed explaining what those using other operating systems should do. I asked him what others should do:
“I recommend ending the web-browser process(es) after first having disabled JavaScript. Simply killing the web-browser process will recover the ransomware page and put you right back where you started.”
There is a possibility you may not have to worry about HTML ransomware if your antimalware provider is on top of the situation like Malwarebytes. Jerome explains:
“Malwarebytes has a large database of malicious sites that we constantly update. Our PRO users are protected against malicious websites as they pop up. This is due to our ability to blacklist entire IP ranges since we know they are only used for criminal purposes; any new website registered on those will be automatically blocked.”

Final thoughts

At first, I felt that HTML ransomware was not a big deal. But, it did not take long for me to realize darn near everything we do computer-wise involves the web browser. And, if the web browser appears to be locked up, it will seem like a huge deal.
Since this attack is easy to fix, it would be a shame to have those who do not understand what’s going on even for a second consider paying the ransom. So, please, let’s get the word out on HTML ransomware.
Once again, I owe a debt of gratitude to Rebecca Kline and Jerome Segura of Malwarebytes for helping me sort through the intricacies of HTML ransomware.

New strain of ransomware evades detection by AV apps - TechRepublic

Drone Spying Capabilities Are About To Take Another Huge Leap

The fleet of drones that police our skies are about to get an upgrade.
Developed by the Defense Advanced Research Projects Agency and BAE Systems, The $18.5 million Autonomous Real-Time Ground Ubiquitous Surveillance Imaging System (ARGUS) program will be the most advanced surveillance system in the sky.


DARPA's New ARGUS Camera