Microsoft Provides Windows 10 FIDO Support

Windows 10 will support the specification of the Fast IDentity Online (FIDO) -Alliantie, allowing users soon also through other ways than can log in a password. The FIDO Alliance has set itself the goal to replace the password by authentication methods that are "safer, user-friendly". Microsoft's next include Google, Lenovo, MasterCard and PayPal one of the members.

The parties develop products and services that use the FIDO protocol. This would allow devices that support FIDO are automatically detected and gives users the ability to replace passwords with another authentication method. It may involve fingerprint scanners, biometric solutions as well as voice and facial recognition.

In the case of Windows 10, Microsoft will the FIDO 2.0 specification support, both password-less login as logging permits through a second factor (U2F). In the case of U2F the user uses a special device that is detected via the browser and can be used to log into websites. Websites can thus simplify the password, for example by requiring a four-digit PIN.

Windows 10 Technical Preview available already offers implementations of the FIDO 2.0 specification, so says Microsoft's Dustin Ingalls. This allows business users through their Windows computer and two-factor authentication without a password on services from Microsoft and partners login. Windows 10 also will also support Active Directory integration for local scenarios and Microsoft account integration for consumer services such as Outlook.com and OneDrive.

Microsoft Publishes Script For Password Reset Krbtgt

Microsoft has published a script that enables organizations to reset the password of the so-called krbtgt account, what should prevent attackers with a stolen krbtgt account access to confidential data on the network. These researchers would focus increasingly on developing methods to attack the Kerberos authentication.

Kerberos is a standard authentication protocol that allows users to log on securely to the network and to prove their identity, without having to log in each time. Kerberos authentication works by assigning a ticket to a logged-in user. These tickets are encrypted with a symmetric key that is derived from the password of the server where the user logs on.

To request a session ticket must have a special ticket called the Ticket Granting Ticket (TGT), be presented to the Kerberos service. The TGT is as said encrypted with a key derived from the password of the krbtgt account, which is known only by the Kerberos service. A stolen account password can also have serious consequences, because an attacker this if other users can occur and thus gain access to sensitive data.

One way to reduce the risk of an attacker used a compromised krbtgt key to falsify user ticket is periodically reset the krbtgt account password. By doing this regularly to the useful life of the krbtgt keys is limited in case an attacker is able to access them. Microsoft now has a script and its advice is made ​​available to reset the password regularly.

"It is important to remember that resetting krbtgt is only one part of a recovery strategy alone will not prevent a previously successful attacker unauthorized access in the future to get a hacked environment," said Microsoft Tim Rains. He advises organizations therefore to draw up a comprehensive recovery plan.

Researchers Bypass Windows Security With 1 Bit

A group of researchers has managed to overcome all sorts of important security controls in Windows by changing only one bit. The problem in Windows Kernel played until yesterday evening in all supported Windows versions, including the technical preview of Windows 10.

Microsoft has over the years provided the Windows kernel of all additional protective measures to make it more difficult for an attacker to present a possible leak actually exploit. This involves things like Kernel DEP KASLR, SMEP and NULL dereference Protection. The researchers discovered that the leak made it possible for an attacker who had access to the system to bypass all Windows Security.

The exploit that researchers enSilo developed requirement only adjusting one bit to abuse of the leak. The problem a few months ago was reported to Microsoft, which last night in the form of Security Bulletin MS15-010 came with an update.Through the leak, which in this film is demonstrated, an attacker could raise its rights on the system, according to the description of Microsoft.

The researchers say they have shown that even a small bug can give full control over Windows. "Nevertheless, we find that Microsoft's efforts to secure the operating system have raised the bar properly and making reliable exploits have made much more difficult than before." Yet they say that these measures will not keep attackers at bay and that will add this kind of exploits eventually to their arsenal.