krypted.com

Tiny Deathstars of Foulness

The summer is upon us. Our users are watching videos like this one: While it’s actually way easier than what they show here, let’s look at stopping people from circumventing our admin goodness using the old school firmware password. Keep in mind, these passwords are somewhat easily reversible as they’re encrypted in a junior varsity way, so don’t use the same password that you use for anything else. To create our password in a script, we’re going to use EFIPW available http://code.google.com/p/efipw. Move the download to somewhere like /usr/local/bin folder. Then, to set the password to supah-secret: efipw_0.2b.py -p supah-secret -m command The client will now be in command mode, unless the password is typed in. This disables booting from anything but internal hard drives. Full mode is a bit more annoying as it requires a password every reboot: efipw_0.2b.py -p supah-secret -m full Now, we can take off our tin foil hats. Disabling EFI passwords is then as easy as sending the following through ARD: nvram -d security-mode nvram -d security-password The above would need to be part of any ARD templates that involve a bless command, etc… Now that we’ve used some of the worse encryption ever, I’ll queue up Dirty Deeds, Done Dirt Cheap and sip some Budweiser. Enjoy.

July 1st, 2011

Posted In: Mac OS X, Mac Security, Mass Deployment

Tags: , , , ,

Sometimes you can bite yourself a little when you experiment around with things. I installed a security plug-in and the next thing you know I couldn’t log into my own website. Ouch. Not a huge deal as it actually led to experimentation with the MySQL tables for WordPress, which oddly enough, I’ve typically just left well enough alone. But this I figured was gonna’ need to be updated eventually (although I relished the opportunity to get caught up on some stuff in the meantime). So first up, SSH into your box. Then fire up mysql:
mysql -u root -p
Turns out there’s a wp_users table in there. For my user I was able to do the following (replacing MYUSERNAME with my actual username):
SELECT MYUSERNAME FROM `wp_users`
Then the following (again assuming MYUSERNAME is the user and now substituting MYPASSWORD with the password you want to use – lucky us that md5 is supported from the mysql CLI now, as that’s what WordPress is gonna’ want us to use):
UPDATE wp_users SET user_pass = MD5(‘”(MYPASSWORD)”‘) WHERE ID = MYUSERNAME
And then viola I was back to writing the same old dribble once again. I had been really busy finishing off some chapters and so hadn’t bothered to figure it out. Now I’ll be back to it. Lucky you, right?!?!

April 13th, 2010

Posted In: Unix, WordPress

Tags: , , , , ,

Some bootable CDs that will perform a variety of tasks for Windows:

January 17th, 2007

Posted In: Windows Server, Windows XP

Tags: , , , ,

Lost the password for your Qlogic?  You can TFTP a new firmware file into a 5xxx switch and then do a factory reset while it’s in maintenance mode (follow the instruction exactly as they are in the latest version of the manual for your switch).  Or if you have a serial adapter you can break the boot sequence by using the space bar during boot.  At the prompt use:

factory 1

If you factory reset it then the default IP address will be 10.0.0.1 again and the default password will be back to password.  If you have the password and just want to reset it back to factory defaults then you can use the following steps:

Sanbox login: prom Password:   0) Exit   1) Image Unpack   2) Reset Network Config   3) Reset Password File   4) Copy Log Files   5) Remove Switch Config   6) Remake Filesystem   7) Reset Switch  Option: 3 OK, password file has been reset to factory defaults.   0) Exit   1) Image Unpack   2) Reset Network Config   3) Reset Password File   4) Copy Log Files   5) Remove Switch Config   6) Remake Filesystem   7) Reset Switch  Option: 7 Are you sure you want to reboot the switch? (y/n) y   0) Exit   1) Image Unpack   2) Reset Network Config   3) Reset Password File   4) Copy Log Files   5) Remove Switch Config   6) Remake Filesystem   7) Reset Switch  Option: 0

May 14th, 2005

Posted In: Xsan

Tags: , , , , ,