Cатсн²² (in)sесuяitу / ChrisJohnRiley

Because we're damned if we do, and we're damned if we don't!

Category Archives: General Life

{QuickPost} Windows 8 Digital Product Key recovery

Recently I’ve started moving over my lab systems from my old faithful Mac Book Pro to a new Lenovo system. After receiving the new Lenovo and booting into Windows 8 pro for the first time, I did what any sane person would… formatted the thing and installed a usable operating system.

After the usual tinkering period and getting everything setup just right, I turned my mind to setting up the various lab VMs I wanted, and quickly realized that my new Lenovo with Windows 8 pro had no license code. No sticker, nothing in the documentation, nothing on the box. Where the F was that little code I needed to get Windows 8 pro running in my VirtualBox lab.

Well, the answer came quickly… it’s in the BIOS. When you installed Windows 8 it checks for a Digital Product Key (DPK) and uses it. Simple, except I’m pretty sure my VirtualBox VM isn’t going to read the key from my BIOS through a thin layer of virtualized hardware (although I could be wrong on that). So, after digging about on the net and finding a whole load of “if you run Windows just do this” type solutions, I started digging around in my BIOS using a few Linux tools (dmidecode and acpidump).

Although dmidecode gives a nice decoded view of most of the data, it didn’t seem to pick out the information I was looking for (still, interesting stuff). In the end I used acpidump to dump the data and comb through it looking for the MSDM section containing my Windows 8 pro DPK.

Walkthrough

sudo acpidump -t MSDM

This will output the hex and ASCII version of the DPK from your system

DPK_blanked

Enjoy!

Links:

Text-based adventures… a retrospective

© Jared von Hindman (http://headinjurytheater.com/) I hope he doesn't crash a plane into my house for using this image ;)

© Jared von Hindman (http://headinjurytheater.com/)

I still remember the first ever text-based adventure I played. No need for high-end graphics cards and kinetic camera systems. Just you against the mind of the creator.

Wether it was Zork, Leather goddesses of Phobos, or any of a thousand spin-off titles, they all remind me of my childhood! It seems like an age ago now, but it went a little something like this.

————————————–

You wake up, bleary eyed in a long darkly light room. Your right arm aches from the injection, at least you think that’s what it was. Memories are hard to grasp as your head spins. The walls are bare and the air has an acrid smell to it that makes you gag.

There is a large oak door to the north and a small gap in the south wall leading off into darkness.

> go north

“I don’t understand what you want me to do”

> n

You go north. Beyond the door is a room of wonders. In the sparse light you see things that you never thought you’d ever see. You are eaten by a grue!

> go south

“I don’t understand what you want me to do”

> s

You breath in and squeeze your way along the ever shrinking tunnel. Just as you think it can’t get any smaller, you’re eaten by a grue!

> look

“look at what”

> look at floor

“It’s a floor”

> go^H^Hw

“You can’t go that way”

> e

“You can’t go that way”

> up

“You can’t go that way”

> down

“You can’t go that way”

> nweweqwqeqwrqwrqwr

“I don’t understand what you want me to do”

> fuck

“What do you want to fuck?”

> you

“I don’t understand what you want me to do”

> se

“Congratulations you’ve found a secret tunnel leading south east corner. The tunnel is long and winds up and down until it comes into the bright midday sun. Your eyes adjust to the harsh light just in time to see yourself getting eaten by a grue!

> exit

“I don’t understand what you want me to do”

> quit

“are you sure you want to quit?”

> Y

“You are eaten by a grue…”

Ctrl+C

On Hiatus

Plagiarism: The death of open information sharing?

Warning: What follows is my uneducated rant on plagiarism and the effects I think it’s having on information exchange within the InfoSec community. I don’t claim to have all the answers, but I do have questions! Take it as you will…

pla·gia·rism

[pley-juh-riz-uhm, -jee-uh-riz-]

–noun

1. the unauthorized use or close imitation of the language and thoughts of another author
     and the representation of themas one’s own original work.
2. something used and represented in this manner.
source: dictionary.com

Maybe it’s just me, but over the last year or so I’ve seen more websites, blogs and news articles talking about plagiarism than ever before! We’ve seen everything from sites being scraped and content reproduced in it’s entirety, through to information sources plundered for content for low quality books… and copied word for word, without thought or care!

In an age were we’re already seeing a serious decline in active blogs in favour of short 140 character tweets, we can hardly afford to be killing off the enthusiasm of those bloggers we do have left! The InfoSec community has always been built on open information sharing. In this industry we live and die by the information we have to hand. Wether that’s something we research ourselves, or something shared in-kind. For every piece of research somebody shares, there were hundreds more they could rely upon being made freely available. This unspoken information sharing pact has made the InfoSec community what it is, and helped to make the most of the researchers time, skills and dedication.

Staff and student perceptions of plagiarism by jobadge

(CC BY-NC 2.0) by jobadge

Not everybody can reverse engineer the latest Zeus Trojan, but you always knew somewhere, somebody would, because that’s what they did! However that information sharing is lessening as the people really doing the research have their hard-earned work stolen out from under them, and posted on one of a myriad of copy sites… without permission.

Those behind the plagiarism, at least those that have a shred of decency (few and far between), talk a lot about giving credit. What they don’t seem to understand is that regardless, taking someone’s hard work, without their permission, and using it for your own uses is plagiarism, full stop. The problem comes when trying to prove these issues in an Internet, and therefore global, context. As an English citizen, living in Austria, with hosting based in the US… who’s laws (if any) are broken when a third-party takes your content? I’m not a lawyer, so I have no idea. All I know is, I didn’t give you permission…

The Internet is a wonderful thing, filled with great information and sources… copying other people’s hard work, research and abusing their dedication to this community is beyond low.

Resources on plagiarism .:

Note .:

Although I’ve occasionally been the target of plagiarism in the form of copied blog posts from these pages, I’m not writing this rant for that reason. There’s no point. I really see this issue as one of the biggest threats to the InfoSec community currently, and it needs to stop. The only problem is… those who are plagiarizing have no respect for the InfoSec community. They’re just out to make a buck, or ten, on the backs of the hard work done by others… History repeating itself in the digital age! Who’d have thought!

</rant>

Feel free to plagiarise this blog post.. it serves to prove the point!

Note 2 .:

After a spirited discussion on Twitter about this post, a friend of mine, @krypt3ia, was nice enough to propose a logo to show your disgust at the increase in Plagiarism… I think it’s a good starting point, so include it here for your use! spread the word!

Follow

Get every new post delivered to your Inbox.

Join 59 other followers