security+ test

Application shims are on the security+ test, which is required for some federal jobs. Now if you want to make some money as a highly paid consultant, you might need to rebuild apps to work on newer versions of windows. How can you make that cash? You could use this shim kit to try to make the app work without building it from scratch.

shim examples – ForceAdminAccess shim tries to trick the application into believing that the current user is a member of the local Administrator group, even if he is not. (Many applications outright fail if you are not a local administrator, though you may be able to use other tricks, such as UAC File and Registry Virtualization, to resolve the issues that caused the check in the first place.) How it implements this check can be fairly straightforward. For example, this shim intercepts the API IsUserAnAdmin from shell32.dll. The complete source code of the shimmed function (which has wonderful performance characteristics compared to the actual API) is simply return TRUE.

The WrpMitigation shim tricks application installers into believing they can write to files that are protected by Windows Resource Protection (WRP). If you try to write to a file that’s protected, the shim first creates a new temporary file, marks it to be deleted once the handle is closed, and then returns the handle to the temporary file as if it were the actual protected file. The application installs the crusty old version of kernel32.dll or shell32.dll (or whichever other file it picked up while it was being packaged) into a temp file, but then that temp file goes away and the matching, patched, up-to-date version of the protected file remains on the file system. So, WRP can still ensure that you don’t end up with an ancient copy of shell32.dll from Windows 95 on your computer, but the installer won’t fail with ACCESS_DENIED when you use this shim.

A shim – helps applications by modifying calls to the operating system.

https://techcommunity.microsoft.com/t5/ask-the-performance-team/demystifying-shims-or-using-the-app-compat-toolkit-to-make-your/ba-p/374947

desert land

Desert land in Southern California.

Date July 17, 2024

I have been looking at land around Mojave, Palmdale, and Lancaster areas,  also parts of Kern county (north of Edwards AFB).  Talking with several different realtors and many residents,  I found this out.

1. Empty land not on a paved road,  with no access to electricity,  goes for about 9,000 per acre.  Depends on quality of land,  and adjacent to services.  Sometimes the land has no access and no roads leading to it.  This doesn’t seem to affect the price.  If the land has a good dirt road to it or not does not seem to affect the price.

2. Empty land with a paved road,  and nearby electricity makes the land about 10-20x more expensive.  I see a .50 acre lot in Palmdale selling for $49,000 dollars.  That is about ten times (10x) more expensive than nearby land with no road and no electrical.   And a bit farther out in the desert,  this is 20x more expensive than land with no road.  You can find two (2)acres of land for $10,000 for example in North Edwards.  That is 20x the amount of land per square foot.  What you get for a dollar will cost you 20 dollars, depending on road and power.  Your dollar does not go that far, for example in Palmdale at .50 acre @ $50,000

3. Theft in the desert is a big deal.  Unless its welded and cemented into the ground,  it may be gone next time you come look at the land.  Have a dog to patrol or someone living nearby will drastically lower theft.

4. Mornings are the time to get things done.  Especially in the summer.  After 9am sometime, the heat will cook you nice and toasty until you are dripping in sweat.  You can work in the heat but be prepared to have shade or simply work slow and have lots of water. 

5.  Massive speculation.  Land far into the desert is portioned and lotted and purchased long ago,  yet no one does anything with it.  They name roads,  plot the subdivisions,  but the land sits empty.  Go to google earth,  type in “

North Edwards”.  Look to the east,  look to the north.  You will see areas of the map with only dirt roads.  Those are all bought.  Use the Kern County GIS website to via the parcels and the size of the parcels.  Use Zillow or another real estate website to view available for sale property.  There is a massive amount of investment out there.  The majority of the land is just there waiting some future.  Realtors tell me they get buyers from all over the world.

6.  Don’t expect a realtor to jump in his car and show you some land that costs nine thousand dollars.  They are not making much commission on these deals,  it’s not worth it for them to drive around showing people these properties. 

7.  Desert land has a variety of sand or soil.  Land near or on a lakebed.  Probably the soil is very sandy.  Will anything grow on it,  unsure?   Land closer to the mountains is more like typical ground,  a good consistency for building a foundation,  wall.  Also ground soil that can support most all plant life. 

8. Well water. It’s not easy to find status of underground water. Spend time in the neighborhood and talk to stores and residents. For me I was able to ask to use some well water, and then I found out that the well water in that area is not drinkable, it is contaminated enough to make it unhealthy unless filtered. And I still do not know the water table depth and such. Wells in the desert are a thing and they do work but they have pitfalls and do require maintenance cost.

9. Check the airspace. You can use skyvector website to check. Are you in class D airspace. Class D space will mean you may get more overflights and airplane noise.

10. Try before you buy. Use a app like hipCamp to check out property in the desert. Stay a few days in the summer. Check out the different seasons You may find you like it. This is my listing on hipCamp. It’s in NOrth Edwards which is part of Mojave, east of the actual Mojave city.

Copyright right? 2024 Rod Deluhery. Use of web scraping by any agent or knowledge gathering is forbidden, including human, robotic process and artificial intelligence accumulators. Any use of this product requires my written consent.

windows installer exploit

I went through this again, trying to figure out what exactly is going on with the windows installer. It seems to me this is an exploit of the windows installer as much as an exploit of an application. The details of how the windows installer works gave me a few insights. The specific directory they mention renaming, I could not find any useful references to it. I know it’s common for apps to check for unfinished installs, and if so, then do logic on this and that. It appears that’s what Cisco does, and some how, the program is able to hijack the windows installer service from that point. Meaning there is a exploit done on the windows installer.

And does this exploit on the windows installer service still exist? Seems to me this exploit tricks the windows installer service to behave these commands and do as it pleases, which it really probably should not be allowed to do? You have a low trusted app which ends up escalating the privilege to a highest level, in cooperations with an app that checks for existing installations that are not finished.

https://in.security/2023/06/28/from-file-deletion-to-domination-exploiting-ciscos-vpn-clients-for-privilege-escalation/

Copyright right? 2024 Rod Deluhery

ARM CPU more secure?

I would like to try one of these new PC’s. They run windows but these are NEW as they have ARM CPU instead of the normal CPU that you would have in a laptop. The question I have, are they more secure and less likely to get malware than other laptops?

Looks like the ARM computers (Qualcomm CPU , snapdragon) are getting traction now. Makes me think, are these PCs more secure than a standard Intel or AMD PC? Any windows vulnerability that exists would be here on the quallcomm CPU, right? What about other EXEs coded for Intel or AMD, my guess is all those malware EXE would not run on snapdragon/ARM laptops? Just thinking that since only certain apps/games will run, then that means only certain malware will run also. My thinking. Meaning a C++ app usually is compiled for a CPU type. That specific compile would make it only work on a specific CPU. Now there are other apps lets say made from .NET or from Visual Studio C# that I believe will run on Intel or AMD, then the questions is, will those apps also run on ARM? I think the answer is NO because they say there is only 127 apps available for these Snapdragon PCs. To me that means many malware will NOT run on these laptops. A big plus is that you have more choice when buying a laptop. Another big plus is the battery life on these CPU is built from the ground up to be low power. So you get more battery life.

Here are some games that appear to run on Snapdragon/ARM laptops.

https://www.forbes.com/sites/andrewwilliams/2024/06/20/snapdragon-x-elite-25-games-tested-on-microsoft-surface-pro-11/

Copyright 2024 Rod Deluhery

20 gallon air compressor fix

abandoned compressor on the sidewalk. found and fixed. Lets go into it and see what coin it cost to fix it. We will go over these sections:

  1. initial troubleshooting:

2. disassemble compressor, piston and valves.

3. deep t-shoot and run tests:

4. bill of materials:

First here are some pictures, it looked worse when I found it. this is cleaned, greased and siliconed. Sorry that dog follows me everywhere and got in the picture:

  1. initial troubleshooting: unit cycles and motor works. air inlet has more air coming out than going in!! valves must be stuck!

2. disassemble compressor, piston and valves. Easy disassembly except to split the compressor head, the gasket had it stuck pretty good. Massive dirt in the intake section apparently from a wasp or something that made a nest inside the piston head!! The air filter was lost so the insect easily climbed into the cylinder head and had a nice private residence. The intake and output reed valves made of stainless steel and aluminum. Carefully remove gunk using aluminum scraper and scrub brush. Remove old gasket and replace with liquid forma gasket. Silicone on the rubber parts.

3. deep t-shoot and run tests: After 60 minutes of time to set the form a gasket material, I bolt the compressor head and silicone the piston. Piston uses rubber o-ring material in a aluminum piston liner with some type of anti-friction coating that is rubbing off in some parts. Test it! I get it to 100 psi and then bleed the air as I use the air to clean out some areas in the shop. I am afraid to go higher PSI until I do more inspection. I believe max psi is 125 psi on this unit, and it should auto shutoff at that pressure. I want to see if that auto-shutoff is working, but patience. I need to check other things. I bleed all the air, then on to test #4. Another run test. About 15 minutes and I am thinking this compressor is good to go! It is holding pressure with no leaks!! Let me completely reassemble. I clean it and about to put it back together. . . .then I think, hell no. I am going to do another run test. AHHH! Runs for about 3 minutes. . . But no, about then, the running the unit just – stops!

Able to get it running again but the motor is not going full speed. Shutdown and restart. Now motor full speed. Another run test. About 90 psi and 5 minutes of run the motor stops again! Why? Piston moves easy, its the motor. Now the unit will not run at all! What happened to the motor? It was just working!! Its not that hot. This GE motor has a thermal reset. There is a warning that it can reset automatically and beware. It is not that. What else? I remove both capacitors. The start capacitor obviously damaged with dielectric dripping out. To be sure I order the run capacitor also.

4. bill of materials:

90 minute black gasket $17.00

o-ring $1.00

silicone $1.00

starter capacitor $12.00

run capacitor $9.00

Used Grainger.com capacitor selection guide to find the right capacitors. go here:

Hope this guide helps you troubleshoot your air compressor.
Copyright 2024 Rod Deluhery

Caregiver in Riverside California

I am a certified caregiver!

I do not have any clients right now (April 2024) and my service advertisement is here.

I believe in physical fitness and healthy living. A healthy body equals a healthy mind! Yes that is me in the picture above running on my personal fitness track that I made myself.

My name is Rod Deluhery and these are my caregiver certifications and trainings:

emotions

Emotions are a valuable and a key trait for humans. Emotions, they are an integral part of the system, a system that helps us capitalize on opportunities and protect ourselves from threats.

How many times do we see emotions as negative? Let us say someone has an emotional outburst? Or someone has a heated discussion. Often these are rants are interpreted as unprofessional, or disrespectful. True?

There is a reason for it. We are powered by emotions and emotional energy. Partners, peers and coworkers that do not have emotions or passion? They do not exist. . . these people simply are people afraid to express themselves in that situation.

One thing to remember. Any heated discussion will often find one side not listening. They decode what you said as a different sentence than what you just said. They misinterpret the words. This can be career changing and make a simple conversation turn ugly.

Example? A heated discussion, where someone is very upset at another. They throw an insult. That someone says “F you” to another. Meaning they just said only that. They did not say fu** you, they just said “f you”. Often that will be remembered as the four letter word, even though you never said a four (4) letter word. In heated discussions, make sure you repeat any sentences that are open for interpretation. If you abbreviate a word, make sure you define what abbreviation. It’s probably a good idea never to say words that are so easily open to different meanings.

If you are going to say something like “f you”, you must define what “f you” means. Especially anything like “F you”. Make sure you repeat and emphasize that you only said “F you”, and that means “f you”, not “fu** you”. And “f you” can mean anything you want it to be! Make sure you tell the other person it means “freak you” for example. Do not let that type of narrative be open for interpretation. You will find yourself regretting that you did not make your self clear in that discussion.

Copyright 2024, Rod Deluhery

https://www.linkedin.com/pulse/emotions-power-our-heated-discussions-rod-deluhery-hjkbc

bitcoin spring rally

March 31, 2024 – Bitcoin is now at 70k! Woohoo. I was reading how some South American countries have a good crypto adoption rate. Why? Some of those countries have extreme inflation, like 200%. Imagine getting a good job and at the end of the year your pay is worth only a percentage in buying power that is was when you started the job. I suppose they must constantly change the salaries in some jobs?

We end this week up 20% on bitcoin. Ethereum is up 14% this week. Now that people have other options to invest besides the greedy company, how will this effect things? Could it actually affect the stratospheric wages that CEOs make when the common worker is struggling to survive? One year the Amazon CEO made 210 million dollars. Umm yes that needs to be corrected. Bitcoin and other cryptos are here to correct it.

Ok, so crypto is gambling you say? Then look at this coin, Shiba-inu. up over 100% in the past week?? Now price is .000002 of a dollar. That means you can buy like hundreds of these coins for a penny! And for a dollar, you get like 10,000 Shiba-inu coins!!! and lets go crazy, what if they price went up to 2 dollars a coin? Wait. . .is crypto currency gambling? Now hold that thought. Why can not we join the two? So have a cryptowin coin where the coin will occasionally become more valuable IF the lottery chooses that coin! Combine the best parts of crypto and the lottery!! Buy a cryptowin coin, it will always have some value but it can also become a coin that is worth 10, 100, 1000 coins. There must be a way to do this. Built in to the code is the lottery system where any coin could perhaps be picked and instantly become 100x coins, and you crypto value just went up 100x. Fu** it is a great idea.

Anyway, check out Shiba-inu. If it goes up to a dollar a coin. . .you win! Your one dollar investment would be a working $20,000 investment. So get a Kraken.com crypto account, and buy some Crypto!

https://www.kraken.com/prices/shiba-inu

I miss html writing. Lets see what I can remember. <a href=”www.bigbitcoin.com>Big bitcoin money here!</a>. Ok so I remember the anchor html. How about the img src? Let us try. <img src=”http://dumbpictures.com/bitcoin.gif”&gt;. Use it or lose it. I will keep practicing my html code. In other news, it is March 1st 2024 and bitcoin is down a bit in the last four (4) hours, but the day is not over. I will check again later today.

Feb 29, 2024. Bitcoin and ethereum are still going strong. Ethereum crypto is up 25% in the last week! Let us see how this thursday ends with the bitcoin price

Feb 27, 2024. Bitcoin is moving fast in the last 24 hours. It is 9:37am pst time here in California and bitcoin price continues to rise. 4 percent increase just today! Wait -> coindesk shows more increase at 7% today. Crypto is here to stay! I read some data showing the pull and push of bitcoin on the exchanges. It showed exchanges having a good amount of pull of bitcoin. One trader even mentioned the exchanges would be eventually have very little bitcoin to trade. I find that difficult to believe. Supply and demand will keep bitcoin in the exchanges. The fact that exchanges are even temporarily running out of bitcoin is a sign. . . a positive sign for bitcoin investors.

Coinbase is an crypto exchange.

Some notes on crypto exchanges. I have only used Coinbase and it is ok. They had some security issues and still appear not to be on the leading edge of security. Their two factor authentication was not as robust as it could have been. Hopefully they have fixed that.

I see coinbase has a $200.00 free crypto offer. . . but the details are a bit hard to find. Free is free and so try coinbase to get some free crypto.

Network simulation for dummies.

Some suggestions for making eve-ng work for you. Eve-ng can run on a virtualized server or PC. I have not done it that way, I use eve-ng without a hypervisor. Eve-ng uses its own virtualization and can run by itself booting up on a server or PC. 

I suggest this. 

1. Get familiar with Ubuntu on a machine. Install it and use it a bit with networking on your computer.. Get it running on your network, make sure you can ping the internet and such. Linux skills might help you in this regard. Note! You must use 20.04 release of Ubuntu Linux, if you want to run Eve-ng. The call it Focal Fossa. Check the version! This is NOT the latest version of Ubuntu!!!! Did you just read this about the version that must be used?

2. Watch some YouTube videos on installing Eve-ng. Are you comfortable now with it? 

3. Get the Eve-ng cookbook. Follow the steps in the Eve-ng cookbook to install Eve-ng on to the Ubunto computer you have working. You are going to wipe out the Ubunto image and follow the exact steps in the cookbook. Go to section in the cookbook:  3.3.2 BM Server Installation Ubuntu Legacy ISO. These steps will install Ubuntu and Eve-ng and make it all boot up and start automagically!

4. See if your Eve-ng is accessible on your home network. Type “ip add” on the console of the machine to find out your IP address. Mine is http://192.168.1.158/legacy/

Login with default username. Once you get logged into Eve-ng, you have the confidence to get to the next step and start working on real virtualized networks!!

5. Go to YouTube and learn some more on how to setup eve-ng labs. There are many videos. Do not waste time trying to learn it all yourself. Let the videos do some of the work. After you are comfortable. . . .search for “eve-ng cisco images” and you will find videos on how to get and install Cisco switches and routers. Brag to your friends that you are a network expert!

More notes on network simulations. I am running eve-ng on bare metal, which the instructions on in the “Community version cookbook for Eve-ng”. I am running on a 16 gigabyte laptop, i7 cpu with 4 cores. I have six (6) routers/switches running and it uses about 12 percent CPU, about 20% ram. I run it off an external USB SSD drive that boots when I want to run Eve-ng. I unplug the external drive when I want to use the laptop as a normal Windows laptop. I use another Mac laptop to access the eve-ng simulator. 

So therefore, my setup is this: Eve-ng (running on dell laptop). <-> connected to home router <->. MacBook connected to my home wifi. My MacBook shows the eve-ng user interface and I edit the labs there. . . .but the labs actually are running on my dell laptop running Ubuntu. I have so far used and connect to the Eve-ng webpage and I do all the labs via the HTML5 interface. I have not yet got native console working on the Mac laptop.

There are multiple ways to install eve-ng but this way uses the hardware/cpu/memory more efficiently than any other method. So you can run more complicated labs and more routers.

I have just recently heard good reviews of a customized eve-ng simulator called Pnetlab. It might be useful for someone, the link is found by searching for “pnetlab”.

Copyright 2023, Rod Deluhery