Tag Archives: finally

Microsoft patches Windows ALPC flaw exploited in the wild

A Windows ALPC vulnerability that has been exploited in the wild for two weeks was finally patched by Microsoft as part of the September 2018 Patch Tuesday release.

The Windows Advanced Local Procedure Call (ALPC) flaw was disclosed with proof-of-concept exploit code on Aug. 27, 2018, by Twitter user SandboxEscaper. The vulnerability affects the Windows Task Scheduler and can allow an attacker to obtain elevated system privileges.

Microsoft noted the issue would require an attacker to log on to the target system. The vendor labeled the Windows ALPC flaw (CVE-2018-8440) as “important,” but not “critical,” in its Patch Tuesday advisory, despite the vulnerability being actively exploited in the wild.

On Sept. 5, Matthieu Faou, malware researcher for ESET, based in Bratislava, Slovakia, first reported seeing a group called PowerPool exploiting the Windows ALPC vulnerability in the wild over the previous week. Faou noted the group did not reuse the proof of concept released by SandboxEscaper and instead modified it slightly.

Allan Liska, threat intelligence analyst at Recorded Future in Somerville, Mass., said this meant PowerPool added the exploit to their arsenal of tools within 48 hours of the exploit being published on Twitter. But it is still unclear how widespread the attacks have been.

“The challenge is that PowerPool is a relatively new group, and they don’t have a large footprint in terms of exploitation — at least as far as we can tell. So, there isn’t a good way to gauge the extent of the damage,” Liska said via email. “As far as Microsoft’s decision, even though the vulnerability was being exploited in the wild, because it is not a remote access vulnerability, nor a critical one, Microsoft probably made the correct decision not releasing an out-of-band patch.”

Although Microsoft chose not to release an out-of-band patch for the Windows ALPC flaw, a third-party patch from micropatching vendor 0patch was released on Aug. 30. Mitja Kolsek, co-founder of 0patch, noted in a blog post that the patch they released was “functionally identical” to the patch released by Microsoft.

Chris Goettl, director of security product management at Ivanti, based in South Jordan, Utah, said consistency is key with update cycles to help plan maintenance. But “on the flip side, security researchers and threat actors do not have set schedules.”

“An exploit can be developed and be released at any time and cannot be planned for. If a researcher finds a threat and the threat is considerable, there should be some urgency put around getting a resolution in place,” Goettl said via email. “In this case, it seems it should have been reasonable to keep this update in the normal update cycle. If it would have been remotely exploitable without authentication and in a protocol like SMB — think Eternal family of exploits — or something of a similar more dire nature, it would have warranted an out-of-band release.”

For Sale – Mid 2010 17-inch MacBook Pro 2.53 Intel Core i5 SSD

I have owned this since new and after 8 years, have finally retired it in favour of a new MacBook.

Full specs can be seen here MacBook Pro “Core i5″ 2.53 17″ Mid-2010 Specs (Mid-2010 17”, MC024LL/A, MacBookPro6,1, A1297, 2352*): EveryMac.com

Here are the following upgrades that i have done to this machine…

  • Upgraded RAM to 8GB
  • Replaced the 500gb hard drive for a 128gb SSD
  • Took out the DVD drive and put the original hard drive in its place. So boot drive is 12gb SSD and also has 500gb internal storage.
  • DVD drive is now in an external caddy

Charger still works fine, but the rubber on the cable is now very worn at the MagSafe end, still works but could possibly need replacing soon. Battery cycle count is 545, and is currently show “Service Battery” in the status bar, but it still chargers and runs off the battery, although, only for a couple of hours.

Any questions, just ask.

Thanks

Price and currency: £250
Delivery: Delivery cost is not included
Payment method: Bank Transfer or by debit/credit card via monzo.me
Location: York
Advertised elsewhere?: Advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – NZXT Kraken X62 CPU cooler – Brand new

My RMA on my X62 is finally arriving from USA tomorrow. It’ll be a brand new Kraken in retail packaging. I don’t need it however as I had to replace it with another cooler for fear of losing my PC while I waited for them to sort RMA out.

Hence, here it is for sale.

I appreciate I have no pics etc yet, but I’m just gauging interest ready for tomorrow evening when we can hopefully get a sale rolling and the item sent to buyer on Saturday.

Mods – I won’t be taking any money or exchanging any PMs until the goods are received in the delivery tomorrow. I’ll post full pictures of the item as soon as I receive it.

Price and currency: 80
Delivery: Delivery cost is included within my country
Payment method: PPG / Bank transfer
Location: South Wales & Bristol
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – NZXT Kraken X62 CPU cooler – Brand new

My RMA on my X62 is finally arriving from USA tomorrow. It’ll be a brand new Kraken in retail packaging. I don’t need it however as I had to replace it with another cooler for fear of losing my PC while I waited for them to sort RMA out.

Hence, here it is for sale.

I appreciate I have no pics etc yet, but I’m just gauging interest ready for tomorrow evening when we can hopefully get a sale rolling and the item sent to buyer on Saturday.

Mods – I won’t be taking any money or exchanging any PMs until the goods are received in the delivery tomorrow. I’ll post full pictures of the item as soon as I receive it.

Price and currency: 80
Delivery: Delivery cost is included within my country
Payment method: PPG / Bank transfer
Location: South Wales & Bristol
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – NZXT Kraken X62 – Brand new

My RMA on my X62 is finally arriving from USA tomorrow. It’ll be a brand new Kraken in retail packaging. I don’t need it however as I had to replace it with another cooler for fear of losing my PC while I waited for them to sort RMA out.

Hence, here it is for sale.

I appreciate I have no pics etc yet, but I’m just gauging interest ready for tomorrow evening when we can hopefully get a sale rolling and the item sent to buyer on Saturday.

Mods – I won’t be taking any money or exchanging any PMs until the goods are received in the delivery tomorrow. I’ll post full pictures of the item as soon as I receive it.

Price and currency: 80
Delivery: Delivery cost is included within my country
Payment method: PPG / Bank transfer
Location: South Wales & Bristol
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Asus STRIX GTX 970 DirectCU II OC Graphics Card

Won a 1070Ti in a competition last month, and it’s finally arrived and in my PC, so I’m selling my old GFX card.

It’s a Asus STRIX GTX 970 DirectCU II OC 4GB card. I’ve had the card for about 18-24 months (can’t 100% remember when I got it) and it’s been great. Plays all the latest stuff on high-very high (at 1080p60) and I wasn’t thinking of upgrading till Volta finally appears, as for 1080p didn’t see the point, but this compo win got me an upgrade for free, so why not

Card is in great condition, has never been overclocked (except for the factory one), and never used for mining or other such nonsense, just been used to play games in a very well ventilated system.

Full details for the card is available on ASUS’s website here, and if you google it I’m sure you’ll see a lot of very high mark reviews for this card, as it was one of the highest rated GTX970’s. Just take note that it is quite a large card (only dual slot, but is quite tall/long) so make sure it fits in your system, before you buy.

Don’t have original packaging (though I do have the manual/driver stuff) but will be well packaged for delivery, and will send RMSD, fully insured.

Price and currency: £170 Now £150
Delivery:
Delivery cost is included within my country
Payment method: BT Preferred, will consider PPG from established iTraders
Location: Chorley, PR7
Advertised elsewhere?: Advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Asus STRIX GTX 970 DirectCU II OC Graphics Card

Won a 1070Ti in a competition last month, and it’s finally arrived and in my PC, so I’m selling my old GFX card.

It’s a Asus STRIX GTX 970 DirectCU II OC 4GB card. I’ve had the card for about 18-24 months (can’t 100% remember when I got it) and it’s been great. Plays all the latest stuff on high-very high (at 1080p60) and I wasn’t thinking of upgrading till Volta finally appears, as for 1080p didn’t see the point, but this compo win got me an upgrade for free, so why not

Card is in great condition, has never been overclocked (except for the factory one), and never used for mining or other such nonsense, just been used to play games in a very well ventilated system.

Full details for the card is available on ASUS’s website here, and if you google it I’m sure you’ll see a lot of very high mark reviews for this card, as it was one of the highest rated GTX970’s. Just take note that it is quite a large card (only dual slot, but is quite tall/long) so make sure it fits in your system, before you buy.

Don’t have original packaging (though I do have the manual/driver stuff) but will be well packaged for delivery, and will send RMSD, fully insured.

Price and currency: £170 Now £150
Delivery:
Delivery cost is included within my country
Payment method: BT Preferred, will consider PPG from established iTraders
Location: Chorley, PR7
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Asus STRIX GTX 970 DirectCU II OC Graphics Card

Won a 1070Ti in a competition last month, and it’s finally arrived and in my PC, so I’m selling my old GFX card.

It’s a Asus STRIX GTX 970 DirectCU II OC 4GB card. I’ve had the card for about 18-24 months (can’t 100% remember when I got it) and it’s been great. Plays all the latest stuff on high-very high (at 1080p60) and I wasn’t thinking of upgrading till Volta finally appears, as for 1080p didn’t see the point, but this compo win got me an upgrade for free, so why not

Card is in great condition, has never been overclocked (except for the factory one), and never used for mining or other such nonsense, just been used to play games in a very well ventilated system.

Full details for the card is available on ASUS’s website here, and if you google it I’m sure you’ll see a lot of very high mark reviews for this card, as it was one of the highest rated GTX970’s. Just take note that it is quite a large card (only dual slot, but is quite tall/long) so make sure it fits in your system, before you buy.

Don’t have original packaging (though I do have the manual/driver stuff) but will be well packaged for delivery, and will send RMSD, fully insured.

Price and currency: £170 Now £150
Delivery:
Delivery cost is included within my country
Payment method: BT Preferred, will consider PPG from established iTraders
Location: Chorley, PR7
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Asus STRIX GTX 970 DirectCU II OC Graphics Card

Won a 1070Ti in a competition last month, and it’s finally arrived and in my PC, so I’m selling my old GFX card.

It’s a Asus STRIX GTX 970 DirectCU II OC 4GB card. I’ve had the card for about 18-24 months (can’t 100% remember when I got it) and it’s been great. Plays all the latest stuff on high-very high (at 1080p60) and I wasn’t thinking of upgrading till Volta finally appears, as for 1080p didn’t see the point, but this compo win got me an upgrade for free, so why not

Card is in great condition, has never been overclocked (except for the factory one), and never used for mining or other such nonsense, just been used to play games in a very well ventilated system.

Full details for the card is available on ASUS’s website here, and if you google it I’m sure you’ll see a lot of very high mark reviews for this card, as it was one of the highest rated GTX970’s. Just take note that it is quite a large card (only dual slot, but is quite tall/long) so make sure it fits in your system, before you buy.

Don’t have original packaging (though I do have the manual/driver stuff) but will be well packaged for delivery, and will send RMSD, fully insured.

Price and currency: £170
Delivery: Delivery cost is included within my country
Payment method: BT Preferred, will consider PPG from established iTraders
Location: Chorley, PR7
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Asus STRIX GTX 970 DirectCU II OC Graphics Card

Won a 1070Ti in a competition last month, and it’s finally arrived and in my PC, so I’m selling my old GFX card.

It’s a Asus STRIX GTX 970 DirectCU II OC 4GB card. I’ve had the card for about 18-24 months (can’t 100% remember when I got it) and it’s been great. Plays all the latest stuff on high-very high (at 1080p60) and I wasn’t thinking of upgrading till Volta finally appears, as for 1080p didn’t see the point, but this compo win got me an upgrade for free, so why not

Card is in great condition, has never been overclocked (except for the factory one), and never used for mining or other such nonsense, just been used to play games in a very well ventilated system.

Full details for the card is available on ASUS’s website here, and if you google it I’m sure you’ll see a lot of very high mark reviews for this card, as it was one of the highest rated GTX970’s. Just take note that it is quite a large card (only dual slot, but is quite tall/long) so make sure it fits in your system, before you buy.

Don’t have original packaging (though I do have the manual/driver stuff) but will be well packaged for delivery, and will send RMSD, fully insured.

Price and currency: £170
Delivery: Delivery cost is included within my country
Payment method: BT Preferred, will consider PPG from established iTraders
Location: Chorley, PR7
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.