ProFox February 2016

profox@leafe.com

56 participants
80 discussions

Re: [ADMIN] Moving leafe.com and dabodev.com servers
by Ken Dibble 15 Feb '16

15 Feb '16

Yes, TW is accepting some email from the lists and delivering it too. I'm subuscribed to prolinux, propython and dabo-users as well. I got the messages (on Jan 12) that were sent on Jan 8 to prolinux and propython (can't recall if I got any at dabo-users right now). But I am NOT getting anything from profox-tech. Other folks using other email providers have reported they aren't getting profox-tech either. It's therefore unlikely to be a problem at the receiving end. And there may be several more people who also aren't getting that list and who, like me, did not think of checking the archives to see if they shouId be expecting anything. Ken

8 13

Re: [NF] WIFI Blues
by Mike Copeland 14 Feb '16

14 Feb '16

Symmetrical 200Mbps -------- Original message -------- From: Ken Dibble <krdibble(a)stny.rr.com> Date: 02/13/2016 9:35 PM (GMT-06:00) To: profoxtech(a)leafe.com Subject: Re: [NF] WIFI Blues >"Bring your tablets! Connect your cell! Come one come all! Connect >all day, stay all night!" >works a lot better than fighting and searching for rogue hardware >that has been plugged in to USB ports. What does this do to your internet bandwidth? In my experience just a few people streaming Pandora or Netflix can bring a network to its knees unless there is a buttload of bandwidth. Seriously, what speed is your internet? Ken Dibble www.stic-cil.org _______________________________________________ Post Messages to: ProFox(a)leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/3C.0B.17124.B55FFB65@cdptpa-oedge02 ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious. Report [OT] Abuse: http://leafe.com/reportAbuse/3C.0B.17124.B55FFB65@cdptpa-oedge02

2 2

[NF] WIFI Blues
by Mike Copeland 14 Feb '16

14 Feb '16

Anyone else having problems with WIFI WAPs starting to refuse connections to iPhones? I manage several building networks that have WAP devices, and I've started getting complaints in the last couple of months about "my cellphone won't connect." It seems that the connection happens, but the data won't route. From what I can tell it's a DNS issue. (The WAP is on an isolated network with a DHCP server that provides an IP, gateway, and DNS settings when connected.) I've Googled this and read for hours, and I have found some "fixs" that didn't work when tried. Mostly it's iPhone 6's but a couple of Android phones, too. No idea what flavor of Android. It is happening with both Cisco WAPs (Aironets) and Netgear. And once a device connects, it's happy happy to come and go, reconnecting as needed. Any WIFI gurus in the crowd? Thanks! Mike Copeland

7 18

VFP to Xojo Converter
by Kevin Cully 13 Feb '16

13 Feb '16

Hello Fox Fans, I've been toying with a VFPtoXojo converter. It can convert (very) simple VFP forms to Xojo project format. It can convert some VFP code to Xojo code. I've released it for free and open-sourced use. It's not a serious tool. It won't convert your Visual Maxframe OO project that's subclassed to the Nth level, but it's a start. https://bitbucket.org/kcully/vfptoxojo Screen shots? https://bitbucket.org/kcully/vfptoxojo/src/6af68438bc24e381f56a26b5a2464ad7… https://bitbucket.org/kcully/vfptoxojo/src/6af68438bc24e381f56a26b5a2464ad7… There's a sister project that helps keep the Xojo template up to date called Xojo_VacumeControls. https://bitbucket.org/kcully/xojo_vacumecontrols (I've been misspelling 'vacuum' for years. It's one of my greatest flaws.) NOTE: You'll need to get FoxBin2PRG to re-constitute the binary files: PJX and SCX. Please don't yell at me because it doesn't work on your project. You've got the code. Make it work for you. Have fun. -Kevin -- CULLY Technologies, LLC http://cullytechnologies.com http://cully.biz

2 2

[NF] Two modems on the same network
by Joe Yoder 11 Feb '16

11 Feb '16

I want to increase Internet access bandwidth on a network I manage. The only unmetered broadband available in the area is DSL so my only option appears to be a second DSL modem. Ideally the two modems would equally share the load but I understand to do that properly requires a bonding modem and possibly support by the ISP. It seems a simpler approach might be to split the traffic between the terminal services server and the machines connected to the server. This would mean that when a user accesses the Internet while in an RDP session the traffic would go through the server modem. If the user accesses the Internet from a browser running on the local machine, the traffic would be on the non server modem. My question relates to how one configures such a setup. Is it as simple as setting up the second modem with its own static IP address and using that address as the gateway address for the server and leaving everything else the same? Anything else? Thanks in advance for any input! Joe --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html ---

3 4

Re: [NF] CryptoPrevent, was: Phishing and security in general.
by Ted Roche 11 Feb '16

11 Feb '16

Mike: I think you meant CryptoPrevent, not "-Blocker" which is easily confused with "-Locker" the malware. This looks like a promising tool. Have you been able to install it without running into program conflicts? I'm poking around trying to find some 3rd party reviews of it, especially reliable security sites, but haven't had a lot of luck. On Thu, Feb 11, 2016 at 12:00 AM, Mike Copeland <mike(a)ggisoft.com> wrote: > Peter, > > I've been using CryptoBlocker, which is supposed to block the methods used > by the Cryptolocker trojan. You can read about the methodology here... > https://www.foolishit.com/cryptoprevent-malware-prevention/ > > It looks good to me and I've been installing it on all of the systems I > manage for a couple of years now. > > I did have 1 client who experienced an attack/infection, paid the ransom and > got his files back. I think it was $600 US. That's the first encounter I've > had with it and I came across CryptoBlocker -after- that occurrence. > > From what i could tell, the infection came from a zip-file attachment sent > to my client, supposedly by a business contact. As it turned out, the > website that the email originated from had been compromised and actually was > the source. > > Since then, I send out a "do not open any email attachment" warning to my > clients about every 6 months. So far, knock on wood... > > I hope this helps. > > Mike Copeland > > > Peter Cushing wrote: >> >> Hi, >> >> We got hit with a crytolocker/bitlocker attack last week. Fortunately we >> have good backups so were able to restore, although 3gb of data took some >> time to do. >> What I want to do is go over what happened and see what approaches other >> people have for these threats. >> >> First thing we noticed was on Friday morning when somebody pointed out >> that their files had been mashed. Here's a few examples of what the files >> got changed to: >> /data/admin/misc files/FACTORY INFORMATION/fnwih0ocf.hoo7 >> /data/admin/misc files/FACTORY INFORMATION/g99q1kfz5.p9k0 >> /data/admin/misc files/FACTORY INFORMATION/og0u9pb.0gd >> /data/admin/misc files/FACTORY INFORMATION/tb4qz.775x0 >> /data/admin/misc files/FACTORY INFORMATION/znxis7hgu.k7h >> /data/admin/misc files/fi19fgq2r.69t >> /data/admin/misc files/fjs6r76n.8gup >> /data/admin/misc files/h2c0ew6pr.1gpd >> /data/admin/misc files/h8jgb.c4v9 >> /data/admin/misc files/Halls Fashion/535p0e.ugc5a >> /data/admin/misc files/Halls Fashion/halorr3vet.s9 >> /data/admin/misc files/Halls Fashion/nbhqgk5.a8ihp >> /data/admin/misc files/hs93hlb9.9p >> /data/admin/misc files/hxplu62l.mc9 >> /data/admin/misc files/i4jden.y7kx7 >> /data/admin/misc files/jaiytu55s.w2 >> /data/admin/misc files/kmp49j76.4b >> >> Looking at the logs we soon found which machine it was although that >> person had gone home on the Thursday and was not due back until the Tuesday. >> Restored data and when the user got back we booted the machine up (not >> connected to network!) and have since done scan using AVG, Superantispyware, >> Avira, spybot search and destroy, kaspersky and malware bytes and still >> found nothing. We don't know if the virus was just memory resident or how >> it worked but obviously want to find out. Scanned all his emails and >> nothing (his files stored in IMAP folders). Nothing obvious in internet >> logs. Checked all processes running, startup programs, network setup etc >> etc. We'll probably just wipe the machine and start again but would be nice >> to know what happened. >> >> Lately we have been getting more and more phishing emails from random >> users (pretending to be say DHL or some other company) with say an >> attachment invoicexxx.doc or perhaps .docx .xls etc (where xxx is a random >> number) which will turn out to be infected but not at the time the email was >> received. I.e the virus is too new to be detected. We have run lots of >> these through our own virus scanner (AVG) and say >> https://www.virustotal.com/ >> and they have come up with nothing until hours later (which could be too >> late). Some show infected a couple of hours later and some maybe next day. >> This latest development is very difficult to defend against if you cannot >> scan the file and confirm it is infected. Our mail server as AV software >> which scans files but didn't pick these up and even if users are really >> conscientious and scan before opening it does not show up as infected. >> We have now started implementing a white list of people who can send in >> invoicexxx.doc files. Anyone not on the list then the attachment is removed >> and put a message in to inform the user. >> >> We are now reviewing procedures to defend against a machine with admin >> rights being infected. >> >> What is important is to be able to detect ASAP when files are starting to >> get renamed. I have just developed a standalone APP that will scan network >> drives and look at file names. I got a list of known extensions off the >> internet and put them in a table. The app compares the file extension with >> the list and emails you anything different. If these files are safe you can >> load them into an exclusion table. If you run this regularly it should pick >> up these names very quickly. >> >> What other security approaches are you using? >> >> TIA >> > > [excessive quoting removed by server]

2 6

[NF] Windows 3.1 in the browser.
by Alan Bourke 11 Feb '16

11 Feb '16

So archive.org has Windows 3.1 running in the browser. This is (I believe) DosBox, compiled to JavaScript with Emscripten. Some productivity tools: https://archive.org/details/softwarelibrary_win3_productivity?&sort=-downlo… No Fox or dBase, but here's WinDbase: https://archive.org/details/win3_windbase Win 3.1 stock installation: https://archive.org/details/win3_stock Cool. Maybe even useful for some people. -- Alan Bourke alanpbourke (at) fastmail (dot) fm --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html ---

1 0

[NF] Phishing and security in general.
by Peter Cushing 11 Feb '16

11 Feb '16

Hi, We got hit with a crytolocker/bitlocker attack last week. Fortunately we have good backups so were able to restore, although 3gb of data took some time to do. What I want to do is go over what happened and see what approaches other people have for these threats. First thing we noticed was on Friday morning when somebody pointed out that their files had been mashed. Here's a few examples of what the files got changed to: /data/admin/misc files/FACTORY INFORMATION/fnwih0ocf.hoo7 /data/admin/misc files/FACTORY INFORMATION/g99q1kfz5.p9k0 /data/admin/misc files/FACTORY INFORMATION/og0u9pb.0gd /data/admin/misc files/FACTORY INFORMATION/tb4qz.775x0 /data/admin/misc files/FACTORY INFORMATION/znxis7hgu.k7h /data/admin/misc files/fi19fgq2r.69t /data/admin/misc files/fjs6r76n.8gup /data/admin/misc files/h2c0ew6pr.1gpd /data/admin/misc files/h8jgb.c4v9 /data/admin/misc files/Halls Fashion/535p0e.ugc5a /data/admin/misc files/Halls Fashion/halorr3vet.s9 /data/admin/misc files/Halls Fashion/nbhqgk5.a8ihp /data/admin/misc files/hs93hlb9.9p /data/admin/misc files/hxplu62l.mc9 /data/admin/misc files/i4jden.y7kx7 /data/admin/misc files/jaiytu55s.w2 /data/admin/misc files/kmp49j76.4b Looking at the logs we soon found which machine it was although that person had gone home on the Thursday and was not due back until the Tuesday. Restored data and when the user got back we booted the machine up (not connected to network!) and have since done scan using AVG, Superantispyware, Avira, spybot search and destroy, kaspersky and malware bytes and still found nothing. We don't know if the virus was just memory resident or how it worked but obviously want to find out. Scanned all his emails and nothing (his files stored in IMAP folders). Nothing obvious in internet logs. Checked all processes running, startup programs, network setup etc etc. We'll probably just wipe the machine and start again but would be nice to know what happened. Lately we have been getting more and more phishing emails from random users (pretending to be say DHL or some other company) with say an attachment invoicexxx.doc or perhaps .docx .xls etc (where xxx is a random number) which will turn out to be infected but not at the time the email was received. I.e the virus is too new to be detected. We have run lots of these through our own virus scanner (AVG) and say https://www.virustotal.com/ and they have come up with nothing until hours later (which could be too late). Some show infected a couple of hours later and some maybe next day. This latest development is very difficult to defend against if you cannot scan the file and confirm it is infected. Our mail server as AV software which scans files but didn't pick these up and even if users are really conscientious and scan before opening it does not show up as infected. We have now started implementing a white list of people who can send in invoicexxx.doc files. Anyone not on the list then the attachment is removed and put a message in to inform the user. We are now reviewing procedures to defend against a machine with admin rights being infected. What is important is to be able to detect ASAP when files are starting to get renamed. I have just developed a standalone APP that will scan network drives and look at file names. I got a list of known extensions off the internet and put them in a table. The app compares the file extension with the list and emails you anything different. If these files are safe you can load them into an exclusion table. If you run this regularly it should pick up these names very quickly. What other security approaches are you using? TIA -- Peter Cushing IT Department WHISPERING SMITH Brave Soul at Pure London 14th-16th Feb Stand F44 Mens and Womens SS16 Stock and AW16 Preview This communication is intended for the person or organisation to whom it is addressed. The contents are confidential and may be protected in law. Unauthorised use, copying or disclosure of any of it may be unlawful. If you have received this message in error, please notify us immediately by telephone or email. www.whisperingsmith.com Whispering Smith Ltd Head Office:61 Great Ducie Street, Manchester M3 1RR. Tel:0161 831 3700 Fax:0161 831 3715 London Office:17-19 Foley Street, London W1W 6DW Tel:0207 299 7960

7 14

RE: [NF] Two modems on the same network
by Mike 11 Feb '16

11 Feb '16

Also look into collocation or even Amazon's server terminal program. You'll see better performance, better uptime, and perhaps comfortable costs. And a reduction in hassle if there are hardware problems! Mike Sent from my Verizon Wireless 4G LTE smartphone -------- Original message -------- From: Joe Yoder <joe(a)wheypower.com> Date: 02/10/2016 5:51 PM (GMT-06:00) To: profoxtech(a)leafe.com Subject: [NF] Two modems on the same network I want to increase Internet access bandwidth on a network I manage. The only unmetered broadband available in the area is DSL so my only option appears to be a second DSL modem. Ideally the two modems would equally share the load but I understand to do that properly requires a bonding modem and possibly support by the ISP. It seems a simpler approach might be to split the traffic between the terminal services server and the machines connected to the server. This would mean that when a user accesses the Internet while in an RDP session the traffic would go through the server modem. If the user accesses the Internet from a browser running on the local machine, the traffic would be on the non server modem. My question relates to how one configures such a setup. Is it as simple as setting up the second modem with its own static IP address and using that address as the gateway address for the server and leaving everything else the same? Anything else? Thanks in advance for any input! Joe --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html --- _______________________________________________ Post Messages to: ProFox(a)leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/CABQeDnWciO4gYRe0KEYJq2_RK3KY7_Xdxmn… ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious. Report [OT] Abuse: http://leafe.com/reportAbuse/CABQeDnWciO4gYRe0KEYJq2_RK3KY7_XdxmnYuhSjNqafR…

1 0

RE: [NF] Two modems on the same network
by Mike 11 Feb '16

11 Feb '16

You are correct, but I'm not sure you'll see the gains you hope for. See if you can get the 2nd dsl on a trial.Mike Sent from my Verizon Wireless 4G LTE smartphone -------- Original message -------- From: Joe Yoder <joe(a)wheypower.com> Date: 02/10/2016 5:51 PM (GMT-06:00) To: profoxtech(a)leafe.com Subject: [NF] Two modems on the same network I want to increase Internet access bandwidth on a network I manage. The only unmetered broadband available in the area is DSL so my only option appears to be a second DSL modem. Ideally the two modems would equally share the load but I understand to do that properly requires a bonding modem and possibly support by the ISP. It seems a simpler approach might be to split the traffic between the terminal services server and the machines connected to the server. This would mean that when a user accesses the Internet while in an RDP session the traffic would go through the server modem. If the user accesses the Internet from a browser running on the local machine, the traffic would be on the non server modem. My question relates to how one configures such a setup. Is it as simple as setting up the second modem with its own static IP address and using that address as the gateway address for the server and leaving everything else the same? Anything else? Thanks in advance for any input! Joe --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html --- _______________________________________________ Post Messages to: ProFox(a)leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/CABQeDnWciO4gYRe0KEYJq2_RK3KY7_Xdxmn… ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious. Report [OT] Abuse: http://leafe.com/reportAbuse/CABQeDnWciO4gYRe0KEYJq2_RK3KY7_XdxmnYuhSjNqafR…

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

ProFox February 2016