DNS Advisory

Microsoft has tested the following workarounds. While the workarounds will not correct the underlying vulnerability, it helps block known attack vectors. Specifically, all these workarounds have been tested and shown to block attempts to exploit the vulnerability over RPC traffic as well as port 139 and 445. When a workaround reduces functionality, it is identified in the following section.

* Disable remote management over RPC capability for DNS Servers through the registry key setting.

Note Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the “Changing Keys And Values” Help topic in Registry Editor (Regedit.exe) or view the “Add and Delete Information in the Registry” and “Edit Registry Data” Help topics in regedit.exe.

Note We recommend backing up the registry before you edit it.

1.
On the start menu click ‘Run’ and then type ‘Regedit’ and then press enter.

2.
Navigate to the following registry location:
“HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters”

3.
On the ‘Edit’ menu select ‘New’ and then click ‘DWORD Value’

4.
Where ‘New Value #1’ is highlighted type ‘RpcProtocol’ for the name of the value and then press enter.

5.
Double click on the newly created value and change the value’s data to ‘4’ (without the quotes).

6.
Restart the DNS service for the change to take effect.

Transcription Turn Key Hosted Server

We are now offering an all in one box hosted server solution for transcription companies:

1. Allow principals to upload their audio files.
2. Allows managers to assign the work
3. Allows managers to track the progress of the work.
4. Allows encoders to upload finished work. Including ability to track versions, and to lock out a file for editing.
5. Allows automatic notifications to both principals and selected persons when work is finished.
6. Allows for full index of work submitted for fast retrieval.
7. Enables Calendar, events and survey applications to be run in a team based environment.

Very easy to use! Contact us now for more details.

Electronic Payment and Collection System (EPCS)

From Digital Filipino:

The Department of Trade and Industry and Department of Finance Joint Administrative Order #2: Guidelines implementing R.A.8792 on Electronic Payment and Collection System (EPCS) in Government was just signed last October 25, 2006. This will take effect upon publication this November.

The guideline provides a transparent process that all revenue collecting agencies of the government, local government units, government-owned and controlled corporations, state colleges and universities can take to enable acceptance of electronic payment (credit card, mobile payments, e-banking, among others). The Commission on Audit is also expected to release government audit guidelines in this regard.

Kudos to the DTI, DOF, Bureau of Treasury, and EPCS TWG for their hard work in making this a reality.

The creation of this guideline was asked by the Congressional Oversight Committee for the E-Commerce Law (COCEC) last year. The body is chaired by Senator MAR Roxas and Congressman Junie Cua. It was seen as a necessity to push for compliance by government agencies to Republic Act 8792 or the E-Commerce Law.

An electronic copy can be downloaded at
http://www.digitalfilipino.com/DAO2.pdf

This is the 4th guideline pushed by the COCEC that got enacted this year.

1. Financing for Information Technology Build-Up (SME-FIT)

2. DTI Administrative Order #8: Prescribing Guidelines for the Protection of Personal Data in Information and Communication Systems in the Private Sector (PDF file)

3. Bangko Sentral ng Pilipinas Circular No. 542: Consumer Protection for Electronic Banking

4. DTI-DOF Joint Administrative Order #2: Guidelines Implementing R.A. 8792 on Electronic Payment and Collection System (EPCS) in Government

Downloadable at
http://www.digitalfilipino.com/article.cfm?id=159┬žion=8

Paypal now open for Philippine Users

We got the scoop from an email from Philippine Internet Review blog , courtesy of Ms Janette Toral:

“A few days ago, I was chatting with a friend about this expected development – of an upgrade in Paypal.com that will include accepting new accounts from the Philippines.

Actually, it was just a matter of time and no lobbying influenced it – it is more of a practical decision for Paypal. Today though, the facility is limited to sending of money overseas, not acceptance.”