All things Crypto and Tech

Error: importing EC2 Key Pair (ssh-key): operation error EC2: ImportKeyPair in to AWS EC2

2025-02-11T12:04:00.001-05:00

Error: importing EC2 Key Pair (ssh-key): operation error EC2: ImportKeyPair, https response error StatusCode: 400, RequestID: 7ef58acb-c106-44ff-a96b-ea7c92c81f18, api error InvalidParameterValue: Value for parameter PublicKeyMaterial is invalid. Length exceeds maximum of 2048.

Solution:

You are trying to import a private key. You need to extract the public key.

Here is how you create the key: ssh-keygen -t rsa -b 2048 -C "name@domain.com" -f ~/ssh-key.pem

Now to remove the public key run: ssh-keygen -y -f ~/ssh-key.pem > ~/ssh-key-pub.pem

It'll now import!

Source: Link

Installing XRDP with update for Larger Monitors

2024-12-20T21:04:00.003-05:00

Option 1a: Configure the TCP send buffer size

Edit the file /etc/xrdp/xrdp.ini
Locate the line that reads "tcp_send_buffer_bytes". Remove the comment character ("#").
Edit the value so it now reads:

tcp_send_buffer_bytes=4194304

Restart the service:

# systemctl restart xrdp

Option 1b: Configure the kernel network buffer size

Change the current network buffer size to a larger value with the following command:

sysctl -w net.core.wmem_max=8388608

Create a new file /etc/sysctl.d/xrdp.conf with the following content:

net.core.wmem_max = 8388608

This will ensure that the value is properly set between reboots.

Source: Link

------

I followed the 2nd option and I have a 35in samsung wide screen monitor. It would lock up and randomly come back. User FitAward_6935 goes on to explain that larger monitors now require a higher tcp send buffer. There is too much fragmentation over the xrdp protocol which then slows the performance.

Coingecko's 7 Steps to increasing your chances at the possible LayerZero Airdrop | $10,000 incoming?

2023-06-18T17:15:00.004-04:00

I'm going to start posting my YouTube videos here that might help a person looking to get into crypto Airdrops.

This video is a walk through of Coingecko's suggested actions needed to possibly qualify for the LayerZero Airdrop.

Source: https://www.coingecko.com/learn/layerzero-airdrop

Step 1: Join Discord (https://discord-layerzero.netlify.app/discord)

Step 2: -
- Part A: Use Stargate (https://stargate.finance/transfer)
- Part B: https://stargate.finance/pool

Step 3: Use LiquidSwap (https://bridge.liquidswap.com/)

Step 4: Use Aptos Bridge (https://theaptosbridge.com/bridge)

Step 5: Use Radiant Capital (https://app.radiant.capital/#/markets
- Chainlist URL: https://chainlist.org/?search=arbitrum&testnets=true

Step 6: Use Hashflow (https://app.hashflow.com/)

Step 7: Use Tapioca (https://beta.tapioca.xyz/teleport)

Good Luck!

How to Convert a Polkadot Wallet from Trust Wallet or Exodus to polkadot.js.org

2023-03-14T00:53:00.000-04:00

There is a very good write up done here (Link). The thing is this has changed a little bit. I also found an easier way.

If you are using Trust wallet, you will need to import your private seed phrase into exodus. If you are already in exodus, then you don't have to do anything.

Once in Exodus, select your polkadot wallet and click the 3 vertical dots.

Select View Private Keys. Under the private key header, that is the key you will need later. You will just need to add 0x in front of it.

Now follow the instructions on how to convert the raw string into something that polkadot can read. Polkadot has instructions explained here (Link).

Once you have set up the account on the web, you will have the json file that you can import into the browser extension.

I would recommend undoing all the changes about saving things locally back to having that not save any thing locally. It was set to that for a reason.

Hope this helps!

Plex Media Player gets stuck in full screen

2022-04-10T11:26:00.004-04:00

No matter what you do, the double arrows won't allow you to exit full screen. You can't move monitors even with windows+arrow.

Uninstall didn't fix it either. The only solution I have found that works is the following:

Navigate to:

C:\Users\<user>\AppData\Local\PlexMediaPlayer

Make sure Plex media player is closed and then delete the file called plexmediaplayer.conf.

Reopen PMP and it should be unlocked.

youtube-dl --hls-prefer-native fails with error "WARNING: hlsnative has detected features it does not support, extraction will be delegated to ffmpeg"

2020-04-23T02:46:00.000-04:00

Error: WARNING: hlsnative has detected features it does not support, extraction will be delegated to ffmpeg

OS: Centos 7.7

youtube-dl --version: 2020.03.24

Solution: pip install pycrypto

Other things installed before this that might also need installed.

pip install crypto
yum install pycrypto
yum install python-crypto

Syncing Time in CentoOS 7 (ntp/chrony)

2020-03-02T11:27:00.000-05:00

For some reason, I couldn't get this to sync until I finally found 1 command that everyone never mentioned. Here's how to set it up.

ntpd

yum install ntp ntpdate
systemctl start ntpd
systemctl enable ntpd
systemctl status ntpd
ntpdate -u -s 0.centos.pool.ntp.org 1.centos.pool.ntp.org 2.centos.pool.ntp.org
timedatectl set-ntp yes
timedatectl set-ntp 1
systemctl restart ntpd

chronyd

yum install chrony
systemctl enable chronyd
systemctl start chronyd
ntpdate pool.ntp.org
timedatectl set-ntp yes
timedatectl set-ntp 1
systemctl restart chronyd

Source: Link Link Link Link Link

How to set a static IP using terminal in Ubuntu

2019-12-12T09:11:00.001-05:00

First lets find the version you are running:

lsb_release -a

No LSB modules are available.

Distributor ID: Ubuntu

Description: Ubuntu 18.04.3 LTS

Release: 18.04

Codename: bionic

Now lets see what our interface name is:

ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000

link/ether 00:50:56:af:9d:c8 brd ff:ff:ff:ff:ff:ff

Ok so the version and interface information we need is in red.

Now let's create the file we need. First, let's back up the original.

cp /etc/netplan/01-network-manager-all.yaml /etc/netplan/01-network-manager-all.yaml.bak

Ok now edit your 01-network-manager-all.yaml with your favorite editor.

vi /etc/netplan/01-network-manager-all.yaml

The following is the working config for the version and interface listed above:

# This file describes the network interfaces available on your system

# For more information, see netplan(5).

network:

version: 2

renderer: networkd

ethernets:

ens160:

dhcp4: no

dhcp6: no

addresses: [10.10.10.100/24]

gateway4: 10.10.10.1

nameservers:

addresses: [10.10.10.1,8.8.8.8,8.8.4.4]

Ok let's break down the file:

First thing, formatting matters. If it is not formatted correctly, it will fail.

ens160 is the interface name. You can see the links I used to figure this out, theirs was called ens33.

addresses is the static IP of the box. You set this to what you want it to be.

addresses is your DNS servers. If you have a local dns server, put that first.

Now that all that is done, lets apply it.

netplan apply

You can verify this by looking in the gui or ifconfig.

Sources: Link Link Link

Plex Cinema Trailers and Pre-Rolls

2019-05-28T10:38:00.003-04:00

I couldn't get this to work. Everything I saw talked about 2 places you need to set this but I figured it out. It needs to be set in 3 different places.

1st Place:

You need to enable it in your library.

2nd Place:

In your server.

Settings -> Settings -> Extras

3rd Place:

Your client. This will depend on the client you're using. Here are two examples.

Web (Settings -> General -> Player)

Plex Media Player (Settings -> General -> Player)

One final thing... if none of this works, I've seen several places where if your time is off it won't work either.

My Notes on youtube-dl

2019-03-06T17:34:00.000-05:00

OS: Centos 7.5

#Installing Python
TBD

#Installing FFMPEG

yum install https://download1.rpmfusion.org/free/el/rpmfusion-free-release-7.noarch.rpm

yum install ffmpeg ffmpeg-devel fribidi zvbi lame-libs

#Downloading a video that is split in to multiple files (Verified it worked with 8 mp4 files)

$ cat mylist.txt
file '/path/to/file1'
file '/path/to/file2'
file '/path/to/file3'

$ ffmpeg -f concat -i mylist.txt -c copy output

#Downloading a file that you have to authenticate with first (Link, Link)

Assuming you are using chrome extension (link based in title), you click the new extension after authentication, it will give you the cookie.

Create a file that you can pass to youtube-dl.

So:

vim cookies.txt

Paste contents copied earlier

youtube-dl --cookies=cookies.txt <url>

#Downloading a group of videos

Create list called list.txt:

ex ->

<url>

Save and close

youtube-dl -a list.txt

Fixing Plex Guide Data For Use with HDHomeRun Premium TV

2019-02-19T17:41:00.000-05:00

I think I got this figured out... but I'm still testing. So this is use as your own risk.

I'm using zap2xml for guide data.

I started out by following this guide here Link

That was a huge help to get started. I then went to https://tvlistings.zap2it.com/ and created my first account. To keep things simple I just made it username+east@gmail.com. I went in and added all the east coast/national channels to match my local cable provider.

Here is the list of East/West Coast Feeds -> Link

I opened another browser and created a 2nd account and called it username+west@gmail.com. I went in and then added all the west coast channels. I ended up using Comcast out of San Francisco (94016) since the numbers matches closely to my cable provider.

Now this part will different depending on what OS your going to do this on. For me it was CentOS 7.5.

First install the packages you need:

yum install perl perl-HTTP-Cookies.noarch perl-libwww-perl.noarch perl-Time-Piece perl-JSON perl-JSON-XS perl-CPAN perl-LWP-Protocol-https -y

Create your directory where you will store everything:

mkdir /epg

Download zap2xml perl script (Link)

cp zap2xml.pl /epg/

chmod 755 /epg/zap2xml.pl

cd /epg/

Now we are going to build our configuration files:

touch east.zap2xmlrc west.zap2xmlrc

/epg/east.zap2xmlrc

start=0

days=14

ncdays=0

ncsdays=2

retries=2

user=username+east@gmail.com

pass=password

cache=/epg/east1

lang=en

outfile=/epg/east.xmltv

outformat=xmltv

/epg/west.zap2xmlrc

start=0

days=14

ncdays=0

ncsdays=2

retries=2

user=username+west@gmail.com

pass=password

cache=/epg/west1

lang=en

outfile=/epg/west.xmltv

outformat=xmltv

Now we will create the cron script that will continue to pull in new data:

touch zap2xml.sh

/epg/zap2xml.sh

#!/bin/bash

rm -f /epg/west.xmltv

rm -f /epg/east.xmltv

perl /epg/zap2xml.pl -C /root/epg/west.zap2xmlrc -L -b -T -F

perl /epg/zap2xml.pl -C /root/epg/east.zap2xmlrc -J /root/epg/west.xmltv -L -b -T -F

/usr/bin/cp -f /root/epg/east.xmltv "/var/lib/plexmediaserver/Library/Application Support/Plex Media Server/"

Change the permissions so we can launch it:

chmod 755 zap2xml.sh

./zap2xml.sh

Troubleshooting:

It suggested using the https perl module but it wasn't really a suggestion, it's required.

Also found another issue where I kept changing guide data, trying to find the right zip/channel number on the west coast and more and more channels would have the same data for 8 days straight. To fix this I cleared the cache folders (/epg/west1 and /epg/east1).

So far so good and I will keep updating this as I test this further.

iTunes crashes when downloading is processing the file

2018-08-19T03:15:00.000-04:00

I ran into something weird. I switched users in iTunes and all of a sudden anything I downloaded crashes. Ok no big deal, I'll log out and switch to the original user. Nope now happening all the time for all users. I searched and there are a ton of try this try that out there but nothing worked.

What ended up working for me was deleting the whole iTunes folder. When I relaunched it, it created all the folders and everything was working again.

OS: Mac OS 10.12.6
iTunes 12.8.0.150

Facebook Business Page Name Change Denied No Matter What You Change It To

2018-08-01T01:46:00.000-04:00

So after months and months of trying, I was ready to give up. I tried every combo of ways of changing the name, but no matter what... Name Change Denied! It was always a bot who replied. You can tell for how fast it came back with the deny. There was an option to appeal the deny, so I figured what the heck, worth a try. Yea... nope. I was lucky to even get a response. Every appeal, I added a comment but no one from Facebook ever replied. Then I got lucky. Just searching google one day, I came across a community post that suggested how to get the bot to approve the page. You would type your new name but also keep your old name separated by a hyphen. Here's an example: "New Name - Old Name". I was thinking to myself... "This is wayyyy to simple. This is never going to work."

It worked....

I can confirm so far that this works.

Then in a week or so, change the name again by deleting the "- Old name". Now you have the name you really wanted.

I'll update this post at a later date to confirm the 2nd name change also work. I hope this helps someone like it helped me.

UPDATE: This worked perfect. I didn't even have to delete the old name part. I just merged the pages and done.

iTunes Err (stopped = 3050)

2018-05-02T08:51:00.001-04:00

I got this error and it was acting like it couldn't get to the internet. Even though every other app had internet access. I have determined that it was the endpoint protection/anti-virus software that I installed. I disabled the firewall, still blocked. I uninstalled it and it now works. There weren't many google results for this error. The few that were didn't help. Hopefully this helps someone.

The Remote Session was Disconnected because there are no Remote Desktop License Servers available to Provide a License. - Remote Desktop Gateway Server

2018-04-18T09:37:00.000-04:00

I was testing out the remote desttop gateway server role and everything was working fine. Other projects came up and a remote desktop user cals were never added. Now I'm getting this error. Thankfully I came across this thread:

https://community.spiceworks.com/topic/490289-no-remote-desktop-license-servers-available-unable-to-login

I was able to login with an admin account after opening the run box (windows+r) and then running the command mstsc /admin

The /admin is the key piece you need. Hopefully this helps you too!

Source: Windows Server 2016 Standard

How to unassociated a file type in Redhat/CentOS 7

2017-10-20T09:43:00.001-04:00

They are located in:

/home/username/.config/mimeapps.list

Inside you should see the file type. Remove and save it. It should go back to how it was originally.

How to add remote disc to macOS 10.12

2017-10-06T03:08:00.000-04:00

Open a terminal:

mac:~ user$ sudo defaults write /Library/Preferences/com.apple.NetworkBrowser EnableODiskBrowsing -bool true

Password:

mac:~ user$ killall Finder

Open Finder
Go to Devices
Select your hard drive
You should now see Remote Disc

Building a Media Server with Plex

2017-09-26T08:20:00.001-04:00

I've been using Plex (www.plex.tv) for a while now but I just could never find the right setup. I think I'm getting closer so I decided I'm going to start documenting it here. Throughout my search, I've never found 1 page that says here is how you do it. Hopefully that will change with this page.

Step 1
Purchase a DVD or Bluray and then Rip it. For this step we are using MakeMKV (www.makemkv.com). After installing and running it, put the disc in and have it start scanning the disc. Once it loads you will see multiple lines that look the same. You want to select all lines that have a lot of chapters. That is one way of knowing it's the feature film. We just don't know which is the language we want.

Step 2
Select the Subtitles of your language and the forced subtitles below the line you already selected. For example, sometimes you might find more than 1 english, so select them all. If you are unsure if the movie has subtitles, here is a google doc that people are updating. Click Here. You can also set this language in the menus so it only checks the language you set when you open it.

Step 3
Go ahead and start the ripping process. Once it's done, you'll either have 1 file or multiple ones. If you have multiple ones you need to figure out which one is the one you want. Download VLC Player and open it there. Once you hit the title of the movie you'll know if it's the right language.

Step 4
Extracting subtitles would be the next thing to do. This where things start to get tricky. You'll need at least a Windows machine (maybe a Mac).

You need to download:

https://mkvtoolnix.download/
https://www.videohelp.com/software/Subtitle-Edit

Next thing is to open back up VLC and turn the subtitles on and off one at a time. Based off the google doc, some lines tell you which track # was the forced subtitles. This just takes a little trial and error. Once you figure it out, open mkvtools and open the mkv.

Select the track subtitle and click extract. Once it's done, you're going to open it in Subtitle-Edit. It will allow you to review your subtitles and then it exports it as a srt. Copy it to the folder where your movie will be. We will rename it to The_Exact_Name_of_the_Movie.language.forced.srt. Plex will know its forced and auto select it.

Step 5

We need to convert the mkv to something that will direct play. I've fought with this a lot always trying to rip it as high of quality as I can so it looks good on any screen. The only problem is by doing that it buffers a ton or it has to transcode. My new goal is to get everything where they play without transcoding and still look good.

~~I used the sickbeard_mp4_automater (Link) to convert it to mp4. Here is my code:~~

~~autoProcess.ini~~

[MP4]
ffmpeg = C:\Users\Username\Desktop\sickbeard_mp4_automator-master\ffmpeg.exe
ffprobe = C:\Users\Username\Desktop\sickbeard_mp4_automator-master\ffprobe.exe
threads = auto
output_directory = 
copy_to = 
move_to = 
output_extension = mp4
output_format = mp4
delete_original = False
relocate_moov = True
video-codec = h264,x264
video-bitrate = 8000
video-crf = 
video-max-width = 
h264-max-level = 
use-qsv-decoder-with-encoder = True
ios-audio = True
ios-first-track-only = True
ios-audio-filter = 
ios-move-last = False
max-audio-channels = 
audio-codec = ac3,mp3,dts,dca,aac
audio-language = eng
audio-default-language = eng
audio-channel-bitrate = 256
audio-filter = 
audio-copy-original = False
subtitle-codec = srt
subtitle-language = eng
subtitle-default-language = eng
subtitle-encoding = 
fullpathguess = True
convert-mp4 = False
tagfile = True
tag-language = en
download-artwork = Poster
download-subs = False
embed-subs = False
embed-only-internal-subs = False
sub-providers = addic7ed,podnapisi,thesubdb,opensubtitles
permissions = 0777
post-process = False
pix-fmt = 
aac_adtstoasc = False
preopts = 
postopts =

~~Couple of things to note:~~

video-bitrate I leave blank when I am testing out something. That way it doesn't have to re-encode so its faster testing. I'm still testing but size vs quality, I'm thinking Bluray will be around 8000 and DVDs will be around 3000.

I scrapped all of the sickbeard stuff for right now. It's quality was ok but file sizes were still huge. I have switched over to handbrake. I'm doing super high quality for Blurays and High Quality for DVDs. I've been super happy with quality.

Some additional Links worth tagging:

Plex Subtitles Formatting Link

Hackintosh Dell Precision T3500 macOS Sierra 10.12

2017-07-14T09:40:00.000-04:00

Currently up and working. Will document all settings and configurations.

How to rename your Spacewalk Server

2016-09-29T09:23:00.001-04:00

This will also fix an error message if you are getting a certificate name error from your spacewalk clients. This will cause the repos to show 0 packages even though spacewalk reports there are 1,000s of packages in the repo. Other error messages "The SSL certificate failed verification."

On your spacewalk server you can check the cert:

openssl verify -CAfile /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT /etc/pki/spacewalk/jabberd/server.pem

You can also verify if your server name matches the certificate name by running the spacewalk rename script.

Before running the command, you need to install the spacewalk-utils

yum spacewalk-utils

spacewalk-hostname-rename x.x.x.x

The Xs are your servers IP. It'll tell you the name it is reading. Compare that to the file in /root/ssl-build/rhn-ca-openssl.cnf. You are looking for cn=.

Now assuming that names don't match or you want to change your server name:

RHEL 7

hostnamectl set-hostname newservername

RHEL6

hostname newname

vim /etc/sysconfig/network

Now verify the new name is working

hostname

Now we need to create new certs.

rhn-ssl-tool --gen-ca --force

rhn-ssl-tool --gen-server

Now you need to install the new certs.

rpm -ivh --force ~/ssl-build/spacewalk/rhn-org-httpd-ssl-key-pair-spacewalk-1.0-2.noarch.rpm

Copy the new files to the apache folder so the clients can access it

cp ~/ssl-build/rhn-org-trusted-ssl-cert-1.0-2.noarch.rpm /var/www/html/pub/

chown apache /var/www/html/pub/rhn-*

Note: The rhn-org-trusted-ssl-cert-1.0-2.noarch.rpm changed on me. The original was 1.0-1.

Now even though it's showing everything is right the spacewalk rename tool won't work until you reboot. So reboot and then run:

spacewalk-hostname-rename x.x.x.x

Then do like you would normally:

rpm -Uvh http://servername.domain.com/pub/rhn-org-trusted-ssl-cert-1.0-2.noarch.rpm --force

Note: Notice that I added the --force argument

rhnreg_ks --serverUrl=https://servername.domain.com/XMLRPC --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-activationkeyname

Note: If the system is already registered, you must add --force to the rhnreg_ks command.

Error: /usr/lib64/python2.6/site-packages/pycurl.so: undefined symbol: CRYPTO_set_locking_callback

2016-09-26T14:48:00.000-04:00

This error messages gets thrown when I run ANY yum command. After lots of googling and finding nothing I stumbled upon part of the solution (First Link Below).

The page pointed out a system variable "LD_LIBRARY_PATH". This variable was not set on working machines but it WAS set on machines that had Matlab installed.

I believe matlab must set this for root account which breaks yum. Here is how I fixed it. There was a user named matlab_user already created so I just moved the value to the user's bash profile.

This is for the root account

echo "export LD_LIBRARY_PATH=" >> /root/.bashrc
cat /root/.bashrc

This is for the matlab_user

echo "export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/MATLAB/MATLAB_Runtime/v81/runtime/glnxa64:/opt/MATLAB/MATLAB_Runtime/v81/bin/glnxa64:/opt/MATLAB/MATLAB_Runtime/v81/sys/os/glnxa64:/opt/MATLAB/MATLAB_Runtime/v81/sys/java/jre/glnxa64/jre/lib/amd64/native_threads:/opt/MATLAB/MATLAB_Runtime/v81/sys/java/jre/glnxa64/jre/lib/amd64/server:/opt/MATLAB/MATLAB_Runtime/v81/sys/java/jre/glnxa64/jre/lib/amd64:/opt/MATLAB/MATLAB_Runtime/v84/runtime/glnxa64:/opt/MATLAB/MATLAB_Runtime/v84/bin/glnxa64:/opt/MATLAB/MATLAB_Runtime/v84/sys/os/glnxa64:/opt/MATLAB/MATLAB_Runtime/v85/runtime/glnxa64:/opt/MATLAB/MATLAB_Runtime/v85/bin/glnxa64:/opt/MATLAB/MATLAB_Runtime/v85/sys/os/glnxa64" >> /home/matlab_user/.bashrc

cat /home/matlab_user/.bashrc

Source: Link

Fixing Nessus Finding Remote Desktop Protocol Network Level Authentication through GPO

2016-09-26T14:33:00.003-04:00

How to fix the Nessus Finding Remote Desktop Protocol Network Level Authentication through GPO.

Click Start -> Control Panel -> Administrative Tools -> Group Policy Management

Step 1:

Open Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Security ->

Require User Authentication for Remote Connections by Using Network Level Authentication -> Enabled

Set Client Connection Encryption Level - > Enabled
Encryption Level: High Level

Fixing Nessus POODLE Finding through GPO

2016-09-26T14:22:00.001-04:00

How to fix the Nessus POODLE Finding through GPO.

Click Start -> Control Panel -> Administrative Tools -> Group Policy Management

Step 1:

Open Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer - > Internet Control Panel -> Advanced Page -> Turn off Encryption support -> Enabled

Should be set to: User TLS 1.0, TLS 1.1, and TLS 1.2

Step 2:

Click Computer Configuration -> Preferences -> Windows Settings -> Registry -> Right Click, New Registry Item.

Reg Item 1:

Action: Update
Hive: HKLM
Key Path: SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client
Value Name: Enabled
Value Type: REG_DWORD
Value Data: 0

Reg Item 2:

Action: Update
Hive: HKLM
Key Path: SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server
Value Name: Enabled
Value Type: REG_DWORD
Value Data: 0

Fixing Microsoft Security Bulletin MS15-124 Finding in Nessus

2016-09-26T14:14:00.000-04:00

How to fix the Microsoft Security Bulletin MS15-124 Finding in Nessus.

Click Start -> Control Panel -> Administrative Tools -> Group Policy Management

Click Computer Configuration -> Preferences -> Windows Settings -> Registry -> Right Click, New Registry Item.

Reg Item 1:

Action: Update
Hive: HKLM
Key Path: SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_USER32_EXCEPTION_HANDLER_HARDENING
Value Name: iexplore.exe
Value Type: REG_DWORD
Value Data: 1

Reg Item 2:

Action: Update
Hive: HKLM
Key Path: SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_USER32_EXCEPTION_HANDLER_HARDENING
Value Name: iexplore.exe
Value Type: REG_DWORD
Value Data: 1

Nessus Finding: Hardened UNC Path through a GPO

2016-09-26T14:05:00.003-04:00

How to fix the Nessus Hardened UNC Path finding.

Click Start -> Control Panel -> Administrative Tools -> Group Policy Management

Computer Configuration -> Policies -> Administrative Templates -> Network -> Network Provider -> Hardened UNC Paths -> Set to Enable

Scroll down and click show. Enter the following: