Newton-Willbanks Engineering, Inc.

Forcing Internet Access to the Wired Connection when Both Wired and Wireless Connections are present

I typically have my Ethernet PLC's connected to my computer using a wired connection and simultaneously need Internet access using a wireless connection. Sometimes my Internet access would work, while at other times it wouldn't work unless I disconnected from the wired connection.

I'm still using XP and finally realized that the XP default is to direct Internet access to the fastest connection, wired or wireless.

You can force Internet access to either the wired or wireless connection, as desired, by removing the automatic metric mode and entering fixed "Interface metric" values. The connection with the lower of the two Interface metric values is used as the Internet connection.

Changing the metric parameters is done by doing the following:

1. Open Control Panel -> Network Connections.

2. Select Wireless or Local Area Connection, whichever is desired to be the default Internet access connection (the wireless connection in my case), and click Properties.

3. Select Internet Protocol and click Properties.

4. Click Advanced.

5. Uncheck the Automatic metric box and enter a 1 in the Interface metric box.

6. Repeat this for the non-Internet connection (the wired connection in my case) except this time enter a 999 in the Interface metric box.

Duqu - Son of Stuxnet

Duqu, a new malware using the same techniques as Stuxnet has been found infecting systems in Europe.

Though similar to Stuxnet, there are some differences:

1) It does not self-replicate in order to spread itself. Therefore, it is not a worm.

2) It does not contain a destructive payload that damages the hardware. Instead, it is designed to conduct reconnaissance to gather intelligence that can later be used to conduct a targeted attack on the control system.

3) It removes itself after 36 days.

there is some speculation that his malware (or something similar) was used as a precursor to gather intelligence for the Stuxnet attacks in Iran.

Wired Magazine Article

Symantec Report

Forbes Article

BBC Article

Stuxnet PLC Virus Update

4/11/2011, Siemens info regarding Stuxnet:

http://support.automation.siemens.com/WW/view/en/43876783

If the link doesn't work, cut and paste it into your browser.

3/2011, Ralph Langner's TED Talk:

http://www.ted.com/talks/ralph_langner_cracking_stuxnet_a_21st_century_cyberweapon.html

2/15/2011, Colbert on Stuxnet:

http://www.colbertnation.com/the-colbert-report-videos/374401/february-15-2011/david-albright

Symantec Dossier on Stuxnet:

http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_stuxnet_dossier.pdf

Symantec Video (a little lame):

http://www.youtube.com/watch?v=cf0jlzVCyOI&feature=player_embedded

1/16/2011, NY York times article states that Stuxnet was developed by Israel and targeted PLC's involved in Iran's nuclear weapons program:

http://www.nytimes.com/2011/01/16/world/middleeast/16stuxnet.html

10/6/2010, Early Forbes article:

http://www.forbes.com/2010/10/06/iran-nuclear-computer-technology-security-stuxnet-worm.html

9/24/2011, Early Bloomberg video (with inaccurrate descriptions, but interesting anyway):

http://www.bloomberg.com/video/63225920/

Problem Opening Links in Microsoft Outlook when Firefox is the Default Browser

When opening links in Microsoft Office with Firefox as the default browser, you may get a error message similar to "general failure the url was application not found". The link may or may not open.

To fix, in Windows XP:

1. Open Windows Explorer (or My Computer).

2. Go to Tools -> Folder Options -> File Types

3. Select Extension: "(NONE)" File Type: "URL:HyperText Transfer Protocol"

4. Click "Advanced". In the "Edit File Type" window, select "open" and click "Edit"

5. Uncheck "Use DDE" (the dialog should then hide the lower part).

6. Click OK for that dialog and the next one (afterwards, the "Use DDE" box is still checked but the "DDE Message" box will be cleared, as shown here)

7. Repeat for Extension: "(NONE)" File Type: "URL:HyperText Transfer Protocol with Privacy" (and any other protocols you want to fix)

8. Repeat for Extension: "(NONE)" File Type: "Firefox URL"

9. Repeat for Extension: "HTM" (or "HTML") File Type: "Firefox Document"

Network Tools

Look At Lan

This network discovery tool quickly scans your network and displays a list of devices it finds.

NetSetMan

Manages network settings for various networks. It's much easier to setup than IPConfig and can save multiple configurations.

 inSSIDer

Wireless scanning tool similar to NetStubler, but easier to use.