goodfellowsmansfield.com

Sunday, June 5, 2005

The latest album of hit British band Coldplay is due to be released worldwide this Monday (in Europe) and Tuesday (in North America) amid rife anticipation among fans. The album, called X&Y, is the band’s third, following Parachutes which came out in 2000 and A Rush of Blood to the Head which appeared in 2002. Combined sales of the first two albums are above 20m copies, making Coldplay one of the biggest bands of recent years.

The majority of music critics have given the album a good review, claiming that the band’s songs have become ‘tougher’ and ‘more diverse’. Radio listeners have already sampled some of the new songs such as Speed Of Sound, and the full album has been leaked onto Internet file-sharing networks.

The album, which features 13 tracks collectively accounting for 62 minutes of music, has topped Amazon.com‘s music sales chart since March thanks to thousands of pre-orders, breaking the record for internet pre-orders previously held by Dido’s Life For Rent.

Sunday, March 22, 2009

After an early morning fire began, four out of the nine people living at the Riverview Individual Residential Alternative group home located in Wells, New York were killed by the blaze. The Sunmount Developmental Disabilities Services Office, which supervises the home, told the media that the fire started at approximately 5:30 AM Eastern Daylight Time. Two staff members were at the home at the time, who safely evacuated four of the five survivors.

The names of the residents killed in the fire were not able to be released due to New York’s Mental Hygiene Law, but are able to be identified as two adult men, aged 32 and 52, and two adult women, aged 43 and 60. A 71-year-old male was injured in the fire, and was taken to a hospital in Utica, a nearby city. The other four residents have been relocated to an unnamed group home. Both staff members are also being examined at the hospital.

“On behalf of all New Yorkers, I wish to extend my heartfelt condolences to the families, loved ones and friends of the four victims and to continue to pray for the full recovery of those five people and two staff members who survived this incident. I also want to express my thanks and appreciation for the first responders and volunteers who worked swiftly and diligently to respond to this tragedy,” David Patterson, the governor of New York, said to the media.

The exact cause of the fire has yet to be determined. However, the New York Civil Liberties Union stated that “the blaze appears to have been an electrical fire and the sprinkler system was knocked out immediately.” They also called for “an immediate investigation into the causes of and contributing factors of the fire.”

The New York State Department of State Office of Fire Prevention and Control is currently investigating the causes of the blaze, with help from New York State Police Bureau of Criminal Investigation and the New York State Commission on Quality of Care and Advocacy for Persons with Disabilities.

Tuesday, July 19, 2005

Until a patch is issued, Microsoft recommends that users close or block TCP port 3389, the port opened when the Remote Assistance service of its Microsoft Windows operating system (OS) is enabled. The Remote Assistance feature is a service of the OS that allows Internet Technology administrators of corporate workgroups remote access to other desktops to perform maintenance and other configuration tasks from their own computer. It can also be used by on-line tech support sites. A support assistant can go into a user’s machine, if the service is enabled, and themself make changes directly to another person’s computer to resolve an issue.

To initialize the remote assistance feature, the user of the helper computer must first make a request of the user of the target computer. Compliance must be granted by the user of the target machine, which then fully opens the communication port of the target machine to the helper computer. The operator of the helper computer then has control of target computer to make changes at will. The user of the target machine can watch in a separate window the actions of the helper, and either party to the session can end it at any time.

In a telephone conversation with a Microsoft representative Tuesday, it was learned that work to develop a security patch is underway, but when it will be available is unclear. It was cited that a patch must work consistently across multiple platform versions of the OS.

The vulnerability, thought at first to affect only Windows XP SP2, is now believed to affect all current Windows editions, including Windows 2000, Windows XP SP1, Windows XP Professional x64, Windows Server 2003, Windows Server 2003 SP1, and Windows Server x64.

The Remote Desktop Protocol (RDP) is not enabled by default, however if the service is enabled, a Denial of Service attack could cause the OS to restart unexpectedly according to Microsoft, or experience buffer overflows according to Symantec. The RDP is enabled by default on Windows XP Media Center Edition.

Microsoft suggests users block TCP port 3389 (the port used by RDP) on their firewall, or disable Terminal Services or Remote Desktop if not required by the user. The remote desktop connections could also be secured using either Internet Protocol Security or a virtual private network connection until a patch is ready.

To disable Remote Assistance on a Windows XP Edition, the steps are:

1. click ‘Start’, right-click ‘My Computer’, select ‘Properties’
2. select ‘Remote’ tab on top of the ‘Systems Properties’ window, clear checkbox that says “Allow Remote Assistance invitations to be sent from this computer.”
3. click ‘Apply’ button

The group, Internet Storm Center, detected spikes in scanning for port 3389 beginning July 6. Larger numbers of systems scanned were reported on July 13. Crackers may be scanning for vulnerable machines, the group said.

“It’s a kernel vulnerability,” said VP of engineering for Symantec Alfred Huger, “so it will be difficult to exploit reliably. But he [the original discoverer] found the vulnerability with a commonly-used tool, so if he can find it, so can others. I don’t think it will turn it into a large-scale worm, but then, some kernel vulnerabilities have ended up as just that, like the Witty worm.”

[edit]

Sunday, April 24, 2005