Lots of “GodModes”

CNet has posted a followup article on the “GodMode” in Windows 7. In addition to the original GodMode ( {ED7BA470-8E54-465E-825C-99712043E01C} ), they provided 16 others:
{00C6D95F-329C-409a-81D7-C46C66EA7F33}
{0142e4d0-fb7a-11dc-ba4a-000ffe7ab428}
{025A5937-A6BE-4686-A844-36FE4BEC8B6D}
{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}
{1206F5F1-0569-412C-8FEC-3204630DFB70}
{15eae92e-f17a-4431-9f28-805e482dafd4}
{17cd9488-1228-4b2f-88ce-4298e93e0966}
{1D2680C9-0E2A-469d-B787-065558BC7D43}
{1FA9085F-25A2-489B-85D4-86326EEDCD87}
{208D2C60-3AEA-1069-A2D7-08002B30309D}
{20D04FE0-3AEA-1069-A2D8-08002B30309D}
{2227A280-3AEA-1069-A2DE-08002B30309D}
{241D7C96-F8BF-4F85-B01F-E2B043341A4B}
{4026492F-2F69-46B8-B9BF-5654FC07E423}
{62D8ED13-C9D0-4CE8-A914-47DD628FB1B0}
{78F3955E-3B90-4184-BD14-5397C15F1EFC}

Just create a folder and append a period (.) followed one of the ugly GUIDs above.

I have attached a Create Windows 7 GodModes Batch file that will create these for you. Remember, these are for Windows 7 and may not work or may even crash other versions of Windows.

For anyone that wants to go nuts, you can check out the Canonical Names of Control Panel Items for even more.

God Mode in Windows 7

Well, it’s hardly “God Mode”, but it is an easy way to access Windows 7′s entire set of control panel settings from a single window. And it reportedly works on Vista as well, although some people claim problems on the 64-bit version of Vista.

Simply create a new folder and rename it to whatever you like, adding the extension “.{ED7BA470-8E54-465E-825C-99712043E01C}”. For example, name your folder, “GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}” and you will see the icon change to a Control Panel icon and when you double click on “God Mode” the icon it will open a long list of settings. Neato.

Cellphone Encryption Code Is Divulged

Cellphone Encryption Code Is Divulged; By KEVIN J. O’BRIEN; Published: December 28, 2009

Excerpt:

BERLIN — A German computer engineer said Monday that he had deciphered and published the secret code used to encrypt most of the world’s digital mobile phone calls, saying it was his attempt to expose weaknesses in the security of global wireless systems.

The action by the encryption expert, Karsten Nohl, aimed to question the effectiveness of the 21-year-old G.S.M. algorithm, a code developed in 1988 and still used to protect the privacy of 80 percent of mobile calls worldwide. (The abbreviation stands for global system for mobile communication.)

Mr. Nohl said the algorithm’s code book was available on the Internet through services like BitTorrent, which some people use to download vast quantities of data like films and music. He declined to provide a Web link to the code book, for fear of the legal implications, but said its location had spread by word of mouth.

The G.S.M. algorithm, technically known as the A5/1 privacy algorithm, is a binary code — which is made exclusively of 0’s and 1’s — that has kept digital phone conversations private since the G.S.M. standard was adopted in 1988.

SOURCE: http://www.nytimes.com/2009/12/29/technology/29hack.html

Enable LDAP SSL with Active Directory in Windows 2003

In my search to Enable LDAP SSL with AD in Windows 2003, I found this which described out to configure Automatic Certificate Requests for Domain Controllers. This turned out to be a very easy way for Domain Controllers to automatically get certificates assigned and start using SSL for AD. First you set up a MS Certificate Authority, then do the following:

1. Click Start, select Administrative Tools and click Domain Controller Security Policy.
2. In the Default Domain Controller Security Settings window, click the Public Key Policies folder.
3. Right click Automatic Certificate Request Settings, select New and click Automatic Certificate Request.
4. Click Next in the Automatic Certificate Request Setup Wizard.
5. Select Domain Controller in the Certificate Template page and click Next.
6. Click Finish and reboot your server.
7. Check if automatic certificate request worked by using the Certificate Authority app located in Start > Administrative Tools. Check the Issued Certificates folder if your server is there.

Note that when connecting to AD using LDAPS, use port 636 and also use the server name (contained in the certificate) – the IP address of the server did not work for me.

References:

Enable LDAP SSL with Active Directory in Windows 2003

http://www.linuxmail.info/enable-ldap-ssl-active-directory/

How to enable LDAP over SSL with a third-party certification authority

http://support.microsoft.com/default.aspx?scid=kb;en-us;321051

How To Enable Secure Socket Layer (SSL) Communication over LDAP for Windows 2000 Domain Controllers

http://support.microsoft.com/kb/247078

Wii for Women, Shii