02 diciembre 2006

Fortificando Windows XP

Entre que quería probar la seguridad del equipo con una configuración similar a la que explico en este artículo (solo que vulnerable a propósito y aderezada con algunos extras) en el HackMeeting 2006 y que en la revista solo me dejaron 2 páginas y he escrito 6, finalmente se publica en el mes de Diciembre.

Esta vez explico como se debe instalar y configurar de forma segura un XP con las opciones que nos ofrece este sistema operativo, lo que se conoce como hardening. Si después deseáis ponerle antispyware, antivirus, antirootkits, etc... ponedlo siempre y cuando sea la última versión, no tenga vulnerabilidades conocidas y esté bien actualizado. Con esta configuración, dificulta en gran medida que pueda ser infectado o atacado con éxito.

Todavía hay gente que formatea su PC y antes de habilitar ningún cortafuegos se conecta a Internet para descargar el Service Pack 2 :D Hay que tenerlos bien puestos para perder 39 minutos de vuestra vida instalando un SO e infectarlo tan rápidamente. (Según mis pruebas, en un rango de IPs de ADSL de Telefónica no llega a los 4 minutos antes de ser vulnerado cualquier equipo con Windows mal configurado).

No he entrado a realizar una securización de navegadores ya que en este momento Daniel G. Ríos está realizando una serie de artículos prácticos sobre IE 7, Firefox 2.0 y Opera en esta misma revista.

En cuanto a los servicios no he querido restringir demasiado los que inicia por defecto el SO ya que algunos usuarios pueden ver mermadas sus funcionalidades dentro de su LAN pero todavía se podría restringir mas.

Todo aquel que utilice los SSOO para usuario domésticos de Microsoft (Windows 95, 98, Me, 2000, XP, Windows Vista) puede extrapolar al suyo estas opciones de configuración. Espero que os ayude a tener un PC menos expuesto a los ataques mas típicos.

ARTÍCULO: FORTIFICANDO WINDOWS XP

27 Comments:

Anonymous Anónimo said...

Hola ANELKAOS,

como ya te he dicho creo que es un articulo muy profesional, aunque creo que sobra citarlo cuando procede de un gran profesional.
Excelente texto para la gente que todavia no sabe como configurar medianamente un WinXP.
Gracias por hacernos la vida "informatica" un poco mas segura.

Nos vemos en elhacker.net

11 de diciembre de 2006, 1:01  
Anonymous Anónimo said...

Jejeje... yo fui uno de los testigos de que todo los expuesto en este artículo permitió a un XP resistir un reto Hacking durante el HackMeeting 2006.

Más de 10 tíos, algunos con bastante nivel, durante todo un finde no consiguieron penetrar en el XP fortificado.

Es cierto que dejaste algún agujero, pero era casi imposible adivinar la solución al concurso. En mi opinión, te pasaste un poco para ser un reto Hacking ;) pero el hardening demostró que es posible proteger un XP frente a la mayoría de ataques.

A ver si me pillo la revista y le echo un ojo al artículo, aunque después de saber que le han metido la tijera indiscriminadamente...

Saludos campeón!

20 de diciembre de 2006, 1:04  
Anonymous Anónimo said...

Veo que sabes mucho...

Saludos

11 de enero de 2007, 20:35  
Blogger Neobius said...

Hola ANELKAOS, parece un articulo muy interesante, pero tengo una pregunta para ti, dices que escribiste 6 paginas, pero que solo te publicaron 2 paginas, no puedes subir un pdf con el articulo entero o con las paginas restantes??

Bueno, de todas formas espero comprar la revista, para leer el articulo.

Saludos ;-)

15 de enero de 2007, 21:33  
Blogger ANELKAOS said...

Hola Neobius

Te cuento, iva a publicarse en el número de Noviembre pero solo me habian dejado 2 páginas para el artículo y no tenian espacio en la edición de ese mes. Finalmente, se publicaron 5 páginas en la revista de diciembre (PC Actual 191) a mi me ocupó 6 pero al editarlo resumieron algunas cosas.

Preguntaré si no hay problema con que lo publique, y si es así, lo pongo en el blog dentro de poco. De todas formas, periódicamente aparecen todos los números anteriores en formato PDF dentro del DVD de la revista.

Un saludo.

16 de enero de 2007, 15:55  
Blogger DaRkY said...

oye!!!a ver si en el foro limpias la bandeja de entrada que no se te puede mandar privados

3 de julio de 2008, 22:20  
Anonymous Anónimo said...

Me ha gustado mucho el artículo, creía que tenía securizado mi windows, pero ahora me doy cuenta que desconocía un montón de cosas, además me ha enseñado buenas prácticas de seguridad.

Una duda, ¿por qué desinstalar windows messenger? Yo la otra vez lo desinstalé, pero a la hora de actualizar aparece para instalar, así que yo creo que lo mejor, es prevenir que se ejecute.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Messenger\Client]
"PreventRun"=dword:00000001

Encontré muy bueno, eso de deshabilitar software para usuarios limitados.

Muy bueno el artículo, investigaré más.
Gracias.

10 de julio de 2008, 21:17  
Anonymous Anónimo said...

[b][url=http://www.uggukwebsite.co.uk/]uggs sale[/url][/b] Like PHDs who must be referred to as Medical doctor. At the College Club or in a symposium. Health care provider is ok. Luckily there are plenty of selections offered for people who are thinking how you can dispose of stretch signifies, although outcomes range as do the prices involved with them. Stretch marks pose unquestionably no health potential risks and do not interfere using your organism's capacity to function. Hence, stretch mark elimination is recognized as a cosmetic treatment.

[b][url=http://www.uggsaustraliaofficialwebsite.com/]www.uggsaustraliaofficialwebsite.com[/url][/b] This is a aspiration for each and every woman to possess at least a person Balenciaga handbag. That is a brand name that may never head out of model. A purse is exactly where luxurious satisfies trend and function. Buyers could now buy these replicas, at considerably lower selling prices as opposed to originals. These faux Louie Vuitton bags can provide the day-to-day particular person exactly the same seem to be the hot shot movie stars to get a portion on the price. While in the U . s ., you will discover intellectual property laws which defend designers as well as other individuals that build distinctive objects.

[b][url=http://www.uggukwebsite.co.uk/]www.uggukwebsite.co.uk[/url][/b] View with the very first glance, it's possible you'll think about this Louis Vuitton Knightsbridge Bag crafted in Damier canvas alternatively dressy due to its shape. To me, I used to be attracted by its name in the really beginning. Can it be some thing related with knight? Later I found out that it takes its identify from a trendy space in London, and its form is impressed by common health practitioner bag..
Meanwhile, what you should really do should be to value his choice and give him room. Continue to be in very good phrases with him and he'll need to hold you as a mate and never stay away from you. If he is open enough to tell you about his new female, then each of the better for you personally given it present that he let his guard down close to you.

[b][url=http://www.uggsoutletonlinemarket.com/]www.uggsoutletonlinemarket.com[/url][/b] Though the undertaker action figures are offered in massive numbers through the entire world. The undertaker remains the beloved of a huge number of people today and that's why they really like to gather the figure toys in the Undertaker. There are lots of various versions of WWE undertaker figures obtainable currently..

[b][url=http://www.bestbagsonlinestore.com/]louis vuitton purses[/url][/b] Like a period of time resolved to go on these kinds of basis as,likely to be the network being required to do with shops pass on throughout intending to be the region aspect Every time a minumum of one entered a from the best way village or perhaps messy city a multi operate large zodiac sign could be the point out gonna be the existence of a department retailer serving intending to be the local community. The popular being required to do with the chain was attributed to learn more on the couple of key components. The planning some other aspect was a significant data that experienced an all in one complete prepared with regards to guidelines that experienced to ensure they are adopted to learn more about planning to be the letter.

11 de diciembre de 2012, 22:00  
Anonymous Anónimo said...

iHxa coach usa
mLcf ugg uk
rTpy michael kors outlet
6tVep cheap uggs
7wRfg chi straightener
5aPtn michael kors sale
3xIqm nfl jerseys
9jLcv coach outlet
3jVki cheap north face
9pGav comprar ugg online
6eGzu mini ghd
2bSvl michael kors wallet
9sEhh nfl shop
3wYej planchas ghd baratas
1oLqw cheap ugg

11 de enero de 2013, 14:19  
Anonymous Anónimo said...

cHis coach usa
zGxa cheap ugg boots uk
bIvu michael kors bags
2wLcf ugg boots
4aSyo chi iron
1rNij Michael Kors
8yIyw nike nfl jerseys
9gOby coach outlet store
9pWxm cheap north face jackets
6bXbe ugg online
1sLcl ghd hair straighteners uk
1mUlr michael kors outlet
2rMqb nfl shop
1yNrp planchas ghd
5iSiz ugg store

11 de enero de 2013, 16:27  
Anonymous Anónimo said...

top [url=http://www.c-online-casino.co.uk/]uk online casino[/url] hinder the latest [url=http://www.casinolasvegass.com/]casino online[/url] autonomous no set aside reward at the foremost [url=http://www.baywatchcasino.com/]free bonus casino
[/url].

22 de enero de 2013, 0:27  
Anonymous Anónimo said...

http://jibees.net/etspenaous/forums/button-romeos-hayflower-cloe-bizu-halton-payday-loans-online

23 de enero de 2013, 5:29  
Anonymous Anónimo said...

Same Day Payday Loans Online http://www.legitpaydayloansonline1.com/ Fundpopog http://www.legitpaydayloansonline3.com Stype [url=http://legitpaydayloansonline1.com]Online Payday Loan[/url] payday loans Do not use payday loans month arguments to must give charging so full disclosure should always provided.

26 de enero de 2013, 19:21  
Anonymous Anónimo said...

February involving 2009 οbѕeгved the plan staying аnnounced
and it ωas adԁed into mоtion a month lаteг
on, in Walk 2009 Μake a few resumes and havе abѕolutely them іmρгove them in place for you
My web-site : paydayloanfor.me.uk

31 de enero de 2013, 17:52  
Anonymous Anónimo said...

Cet article sur anelkaos.blogspot.ru est digne signet à mon avis. Il vaut la peine d'économie pour référence future. C'est une lecture fascinante avec de nombreux points valides pour la contemplation. Je dois d'accord sur presque tous les points faite dans cet article.

7 de febrero de 2013, 0:06  
Anonymous Anónimo said...

woodworking projects , http://woodworkingplans1.com/#Slegmetritred woodworking projects

15 de febrero de 2013, 12:06  
Anonymous Anónimo said...

Hey very nice web site!! Man .. Beautiful .. Amazing .
. I'll bookmark your web site and take the feeds also? I'm happy to search
out numerous helpful info here within the post, we need develop extra techniques in this regard, thank you for sharing.
. . . . .

my homepage - http://www.maxxprofessional.com.au

15 de febrero de 2013, 22:18  
Anonymous Anónimo said...

Customer targeteF visitors with the search engines like yahoo is usually acquireF through natural (organic) or pay-per-click (PPC) search result[url=http://www.germanylovelv.com/]Louis Vuitton Outlet/[/url]
The non-paiF organic search results will be the recorF oF websites (usually ten per website page) returneF when a consumer searches on a precise key phrase or keyworF phrase. KeyworF will be the phrase or phrase that is FeFinitely typeF in[url=http://www.germanylovelv.com/]Louis Vuitton Outlet[/url]
the lookup engine's lookup box.
One with the problems is, where English is a seconF language, Folks tenF [url=http://www.germanylovelv.com/]louis vuitton knolckoffs[/url]
think in their First language anF then translate in[url=http://www.germanylovelv.com/]Louis Vuitton Outlet[/url]
English. Frequently the translation process is Fone subconsciously using the grammar anF other rules oF their primary language. The results tenF [url=http://www.germanylovelv.com/]louis vuitton knolckoffs[/url]
jumble the grammar anF syntax so their English writing becomes stilteF anF awkwarF.
The stanFarF ways oF telling your tale have been static a aFvertising anF marketing brochure or pretty web site with inFo about both you anF your enterprise. To survive in toFays overcrowFeF inFustry, your promoting neeFs [url=http://www.germanylovelv.com/]louis vuitton knolckoffs[/url]
initiate a Fialogue. Films, weblogs, Q&As, interactive tools etc.

16 de febrero de 2013, 12:23  
Anonymous Anónimo said...

woodworking projects , http://woodworkingplans1.com/#Slegmetritred woodworking plans

16 de febrero de 2013, 23:07  
Anonymous Anónimo said...

hi!,I like your writing very much! share we be in contact more about your
article on AOL? I require a specialist on this space to solve my problem.
Maybe that's you! Taking a look forward to see you.

Here is my web blog :: get followers
My website: get followers

21 de febrero de 2013, 1:31  
Anonymous Anónimo said...

What's up i am kavin, its my first occasion to commenting anyplace, when i read this paragraph i thought i could also make comment due to this sensible paragraph.

Also visit my web page: is pinterest social media

21 de febrero de 2013, 5:34  
Anonymous Anónimo said...

If you want to take a good deal from this post then you
have to apply such techniques to your won webpage.



My web page ... build twitter followers
Also see my page :: gain followers on twitter

25 de febrero de 2013, 19:41  
Anonymous Anónimo said...

Somebody essentially lend a hand to make significantly posts I might state.
That is the very first time I frequented your website
page and to this point? I amazed with the analysis you made to make this actual post amazing.
Great process!

My webpage i want more twitter followers

25 de febrero de 2013, 19:50  
Anonymous Anónimo said...

[url=http://www.squidoo.com/longchampsoldesk]sac longchamps[/url] It was just senseless to me to the point of, 'I can't believe this is happening.'"This is not the airline's first snafu involving military personnel. In June 2011, Delta ignited a national firestorm when two We Provide Women Mulberry Lizzie Leather Hobo Bag Black,In Our Mulberry Handbags Outlet Online Store. soldiers posted a YouTube video about their experience catching a connecting flight from Baltimore to Atlanta after an 18-hour layover from Afghanistan. Several in the group of more than 30 people were charged $200 each to check a fourth bag.
[url=http://en.netlog.com/longchamppaschers/blog]sacs longchamps[/url] His trial judge noted: "The intention of anybody possessing a firearm is irrelevant," and gave Mr. Clarke an extended prison sentence. Fortunately, a public outcry eventually resulted in his release.. But this Scripture says that you can take part in leading your friends away from the wrong way, which leads to death, and point them towards the right way, which leads to Jesus. Let's play "Wrong Way, Right Way" to help us learn James 5:20 and see who can get their person (hold up paper plate 2013 Spring Mulberry Women's Bayswater Leather Ostrich Shoulder Purple Bag, and we will offer more discounts on them, there is no doubt that they are good quality. face) to Jesus first. Before playing our game, let's say James 5:20 several times together.
[url=http://saclongchampa.shutterfly.com/]sacs longchamp pas cher[/url] In her car, they found Ruiz' cell phone and wallet. Also, her DNA was a match to a female toe nail found on a victim. Brass questioned her, offering reduced sentence in exchange for her writing a text of the same kind that Pig would write to Hot-Sale Mulberry Women's Standard Bayswater Patent Leather Shoulder White Bag is affordable gather the group. Now, if you are planning of purchasing leather handbags, it is important for you to know about the animals from where these bags came from. Basically, the leather material used comes from the animal s hide. The hide is the most superficial layer of the animal s skin.. You can also search for other featured items related to shoes and low heel sandals in the online marketplace. This is the way by which you can get the product along with its description. Letâ„¢s come back to the matter of luxurious and trendy handbags..

2 de marzo de 2013, 23:41  
Anonymous Anónimo said...

Wow, superb blog layout! How long have you been blogging for?
you make blogging look easy. The overall look of your site is excellent, let alone the content!


Feel free to surf to my web page :: get followers

4 de marzo de 2013, 3:20  
Anonymous Anónimo said...

Hello everyone, it's my first go to see at this site, and article is truly fruitful designed for me, keep up posting these content.

My page: payday loans uk

13 de marzo de 2013, 0:05  
Anonymous Anónimo said...

Veгy goοd info. Luсky me I ran acrοsѕ yоuг sitе by
acciԁent (stumbleuρon). I've book marked it for later!

Also visit my web blog :: diamondlinks review

23 de mayo de 2013, 22:07  

Publicar un comentario

<< Home

Los contenidos de este blog están bajo una licencia de Creative Commons.