Archive

Archive for March, 2010

Note to self: Registry hack for faster Windows 7 taskbar navigation

The below registry hack will allow you to Open applications with multiple windows / tabs with single click. Single clicking will open the last active tab, while hovering mouse over the program icon will show all open tabs – like before.

Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Go to Edit->New->DWORD (32-bit) Value
Name the value LastActiveClick
Hit enter to assign the value and change it to 1
Restart Explorer and you’re good to go

Categories: Windows Tags:

Watch out for “verify that file exists”

Just wanted to share one thing I noticed at work recently.

When you add a wildcard application map in IIS 5/6, there’s a checkbox called “Verify that file exists”. What it does is that it checks if the file called in URI actually exists on the file system before invoking the specified executable. If the file doesn’t exist, it will just throw HTTP 404.

This causes two issues:
1/ If you have an access control extension mapped like that (e.g. Siteminder), it will be possible to map your website structure without logging in – attacker can just iterate through all file names and find out which ones are there.
2/ If you have additional ISAPI filters mapped that reply to requests for files that are not on the hard drive, they will not be invoked. The first application mapping will reply to the request with HTTP 404. I had this case with Trace.axd file, which is served dynamically by ASP.NET. With the “Verify that file exists”, the request pipe was broken and it never made to ASP.NET

Categories: Windows Tags:

Windows Mobile / HTC upgrade policy

I currently use HTC Touch Pro. It’s small, nice, easy to write on, functional. However, I bouyght it 1,5 years ago and since then there have been newer phones, bigger, faster, with more features.

I usually upgrade my phone every year or two, so I thought – it’s the time.

However, there is no good replacement for Touch Pro. There’s a thing called Touch Pro 2, but it’s just a minor refinement. Moreover, I had a look through HTC’s leaked plans for 2010, they don’t have anything with bigger screen and much better CPU and hardware keyboard. I would love to buy “HD2 Pro”, but it seems it’s not going to happen.

So I decided to do a software upgrade instead, to get the new features. However, it’s a pain in the back. If I don’t want to spend weeks tweaking and building my new mobile OS, I have to download one of the “custom built” ROMs, e.g. from XDA Developers. But they do have issues. They hang, they’re not as stable as the original OS, they miss some features, draw weird things on the screen etc.

How come Apple gives you the newest software, no matter if you have 3-year old iPhone or the new and shiny 3GS, and HTC / Microsoft don’t? Do they fear I won’t buy I new phone? Hell, I will buy, just make me a device with WVGA, Snapdragon CPU and hardware keyboad and I will gladly pay whatever ridiculous price you put on it.

If not, just let me upgrade my phone, don’t make me feel like I’m stuck with whatever I have because I bought it a year ago.

Categories: IT Tags: , , ,