MFA versus MITM

 

A spider's web is a real sticky situation and serves as a perfect trap for the unaware prey. 

In the real world and online, it is the same.  We don't want to end as the "free lunch" by threat actors.

Each person/organization is an open game for the "predators" (persons/entities) with malevolent intent/actions who utilize cunning and deceit to lure their prey to the bait and capture them. 

BACKGROUND

I set up my future-proof desktop PC last year to adhere to up to date hardware/software standards. 

 

This was to eliminate and/or prevent internet persons/entities from obtaining access to any of my accounts on-premise or Cloud-based whilst using my desktop PC.

Thus, I got Yubico last year in action. Everything went fine for some months until the month of June 2022 something was really off.

When I decided to get to use my licensed Microsoft Word processing and Microsoft Excel spreadsheet applications installed on my desktop PC.

I am fully aware that the attack surface for "bad actors" expanded upon installing the above-mentioned applications.

To expand further the attack surface, I also used a well-known web-based communications application.

Now, the proof of the pudding is the eating, right? 

Then out of nowhere one afternoon, a MITM (Man-In-the-Middle) attack took place. 

Suddenly, I noticed I cannot use the word-processing and spreadsheet applications on my desktop PC.

It suddenly became "unlicensed".

What?

Furthermore, my licensed software was asking that I change my web Auth and not giving me access to my security key-Auth.

By the way, these applications (word/spreadsheet) are legitimate out-of-the-box licensed software applications, which were tied to my email account.

SOLUTION/MITIGATION:

As this "MITM" event was unfolding in real-time, I quickly responded to all tick box answers being automatically flagged by my free account of Voodoo Shield.  

I logged in my Microsoft Account using an alternate route/link.

Checked for changes.

Restore my mobile phone number.

Initiate additional restoration of email ... 
 

Saved the account.

(Threat actors cannot really save account information changes in real-time since they do not have access to the security key Auth/biometrics.)

I then updated all my browsers to the latest versions. 

When I made my initial assessments, and this was real quick whilst this abnormality was happening in real-time, I shut off the web-based communications application/software, which are all tied to my email/online account.

At first, I thought it was the web browser (which was outdated) that was the alleged gateway for the application/account compromise.

Then I checked the status of my email account by invoking a *separate link which I discovered during implementing a solution by scanning and found one.

Guess what, the bad guys/actors have changed my phone number and entered two unknown phone numbers.

So, I acted like a ninja and summoned my powers on hand.

So, I immediately deleted the unwanted phone numbers. 

Placed an alternate email recovery reference.

Get that verified and validated with another paid/licensed email provider account.

My email account I use for my Microsoft account was restored to its original secure state. 

Also, Voodoo Shield popped up with a warning of attempts trying to run a Powershell script in my PC,

So, I blocked this with VoodShield switch. If you are the switch master, then tick OFF and that nails it for good.

Sealed. Powershell request for good.

Next, I did fast ninja moves and downloaded the latest installer of my web browser.

And also I resurrected and activated the built-in browser of my Operating System (OS), which I only now will use for emergency purposes.

I uninstalled the old web browser and installed the latest one. This one required a PC reboot which I did.

By the way, before rebooting, make sure to have open online accounts logged off and all cookies, cache, deleted.

I then disconnected my PC/LAN cable from my router.

Check and assess (simple forensics) the situation before going back online.

Plugged back my physical security MFA key. 

Plugged back my PC/LAN cable and boot up my desktop PC.

So, the result of my post-attack event assessment was that the entry/portal was through the communications software which was a web-based log-on, and I used my physical key Auth to authenticate.

Unknowingly, the group chat was connected to an unsecured server (e.g., file server) which the MITM threat actor/s can snoop on incoming/outgoing traffic through the communications application/software. 

So, I re-installed and configured the latest version of this communications software and upon physically touching my MFA key, I ran the PC desktop version, and I was able to log in to my communications app for desktop without any problems.

This time I invoked an option to log in with GitHub and use its MFA Auth to seal the ultimate security deal.

Thanks to GitHub requiring log-in/membership and enforcing it to be physical key-based MFA Auth and established a Fort Knox protection against MITM. 

POST-ATTACK MONITORING

Again, back to post-attack event monitoring, and herewith are the results:

- Bitdefender warnings ceased/absence of malevolent warnings.

- Seamless log on to the communications software (desktop version) with GitHub Auth MFA;

- I was able to use my word processing and spreadsheet application software without reinstallation and/or license key activation.

Test!

Whilst I was already using the latest web browsers, Bitdefender still popped-up warnings.

Thus, I came to the conclusion and realized that the MITM spoofing of my MFA auth was originating from the Skype for Web and the account which I logged on earlier.

I exited from Skype for the web application.

I downloaded the Skype for desktop and installed the same.

Now, since the MITM relies on web access via Skype for intercept on log on.

I got Skype for Desktop to authenticate, this time with a third-party MFA Auth (GitHub) which I authorized before with my physical security key as one of their account membership musts.

FURTHER FORENSICS

I discovered also that my Wi-fi router modem info might have been intercepted when I sent the phot via unencrypted email (which was my bad).

I eventually ended up having my telco/internet service provider replace my old/outdated Wifi-router to a latest and up-to-date model for FREE. Yehey! (Two thumbs up for that.)   

CONCLUSION

In a nutshell, the months of June and July 2022 mark the days when zero exploits were at their height. I'm no exception. 

I went back to the drawing board and went deep dive into what was really going on.

I also purchased a new licensed Windows 11 Pro.

Installed, configured the same, and put the security policies in place and updated eve

Of course, MFA and key auth are a must!

So, far so good.

Hey, but wait, I added a pair of hardware devices too.  However, that will remain a secret for now.

It's not a guarantee, but at least the surface attack field has now been greatly reduced and well-mitigated.

Major takeaways for this "battlefield" journey are as follows:

• Implement registry and group policy settings using U.S. Dept. of Defense-grade and security
   

  Windows 10 Security Technical Implementation Guide

  
  
   
• Learn the Art of War
  
  
  
• Password 101
  
  

• Learn the attack methods via an installed "honeypot" desktop PC

At the end of the day, lose some battles but ultimately, win the war.

Zero trust is a must especially, in logging in (for example, Skype group chats either private/public).  

For this use case, key-based MFA auth combined with legitimate third-party MFA-auth is the key to enhanced MFA security.

Be sure to have your Skype get authenticated by a reputable and reliable highly secured MFA Auth implementing website like GitHub. 

This is the first time in my many years of desktop computing that I encountered MITM spoofing via MFA auth credentials.

Powershell intercept application VoodShield ... cuts off the fulfillment of 


Purchase, and use legitimate and licensed software/applications.


Update your PC/laptop BIOS, et cetera. and observe safe computer habits/practices.

Do install, configure and implement the latest Systems Monitor (SYSMON) from Systems Internals. 

System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to file creation time. By collecting the events it generates using Windows Event Collection or SIEM agents and subsequently analyzing them, you can identify malicious or anomalous activity and understand how intruders and malware operate on your network.

What's New (August 16, 2022)

Sysmon v14.0

This major update to Sysmon, an advanced host monitoring tool, adds a new event type, FileBlockExecutable that prevents processes from creating executable files in specified locations. It also includes several performance improvements and bug fixes.

Until next blog.

Cheers!


A peaceful mind generates 

elevated and uplifting thoughts 

for one's benefit 

and 

also 

your 

immediate environment/world.

If you like this blog, 

  Till next blog post. 

Keep safe, and keep blogging.

Do check me out/follow me on the social media channels below:

 

Instagram: avianquest

 

Twitter: avianquest

 

Facebook:  avianquest

Blog:  avianquests.com

The Secret of a Glorious O Gaming Mouse in 2022

 

Warmest welcome 

to my 

humble blog.

 
Oops, we are not up to any of Victoria's Secret stuff here.

(Hint: Read up to the last part of the blog for the secret reveal of the Glorious O mouse.)

Here's the story.

During the last remaining six days of March 2022, my main desktop mouse, a  Reddragon M601-3 CENTROPHORUS 3200 DPI gaming mouse that I use for my daily grind literally conked out or got ahead of its next life, or in short "died".  

I tried reinstalling the software of this mouse which got successfully installed however, it operated with quirky behavior even when I conjured the immortal resurrection jutsus. 

It doesn't want to play master and puppet games anymore.

I even tried assigning the right to left ... again, a total failure.

So, I concluded that something was wrong and the reason it went kaput is in the mechanical part of the trigger mechanism/contacts/circuitry of the mouse.  

A good thing was that I have a backup ordinary class B ordinary mouse lying around, which I used as a stop gap measure so I can go about unimpeded daily desktop operations/activities.

I am not a gamer however, I use it as a baseline for quality hardware gaming specs that justify the daily wear and tear of a desktop mouse more effectively/efficiently.

I remembered that sometime last year I got myself my first Glorious product
 - a padded keyboard wrist rest full size (17.5 x 4 inches/ 44 x 10 cm.)  

to probably arrest/prevent carpal tunnel syndrome.

In addition, I really enjoy using this first Glorious product/accessory to the present time.

 

So, I decided, why not check out Glorious's other
product offerings.

I went into a deep dive in due diligence/research and come up with a "proper" daily driver desktop mouse. 
 

It certainly makes a lot of sense that the Glorious brand is my next mouse daily driver of choice (the one which sports the elevated cord version though) which is just fine.

It's a big deal to me since the mouse specs, price, and performance up to this day deliver S-tier add-on value validations.

Price-wise, it is a bang for the buck.

Specs-wise, Star-trek yup!
 

Performance, it would not land in an S-tier class.

Upon arrival, I went through the motions.

World-class and solid box packaging.

 

Very straightforward:  logo, tag line, weight, model, product class.

 

The belly of the box: tech specs, S/N, et cetera.

That's an O minus mouse type actually that I purchased.

 

Located online in the

 GLORIOUS PRODUCT GUIDE  

 

section.

I went through a well-explained and quick walk-through of the Glorious Quick Start Guide

 

Click above on a video unboxing of the Glorious O minus wired matte mouse.

 

or click on below the image to video the unboxing video. 

 

 

 

 
 

Behold Glorious O minus white matte wired mouse.

Spanking fresh/brand new!

My first up close and personal with a Glorious O matte wired mouse.

SET UP

 

It's really lightweight (58 grams!) as I picked up the mouse out of the box for the time.

Before using the mouse, on its underside are blue protective film strips at the four corners of its G-skates with markings "remove".

Be sure not to forget and remove these to get the G-skates revved up to slide max...
 

There's a free Glorious sticker too! Yey!




Above is a  creative photo I took of the Glorious O Minus white matte wired mouse.

Credits: DAVE2D

Well, guess what, I stumbled on to this video of Dave2D?

THE SECRET WAS REVEALED!!!!

 

The video is dubbed 

The Best Gaming Mouse Tier List 2020

in YouTube, 

which by the way 

featured one of the mouse line up, 

a  Glorious O (Wireless) mouse 

in Dec. 6, 2020,

and that is two years ago, 

which was rated 

by DAVE2D
as one of the 

first S-Tier 

class gaming mouse!

Now, fast forward today, 2022.

S-Tier INDEED!

For gamer-agnostic like me, the gaming specs of this mouse will get you through your daily grind activities.  For gamer/players out there who push this mouse to the limits, have a Glorious end game to all.

After a week of heavy use (8-12 hours daily), the Glorious O minus wired white matte delivered without click fails, scrolling.

Also, cool with room lights offs as the ARGB colors looked cool. I chose breath mode.

I am contemplating replacing it's skates with glass skates in the future.

I, therefore, personally conclude that it was a glorious moment for a GLORIOUS mouse as a top S-tier mouse experience.

By the way, 

 

I outsourced the

Glorious O Minus Wired Matte White Mouse

 

via 

 

LAZADA

through

rotoblox

For any Frequently Asked Questions About Glorious Mouse/Mice (click this link)

Video is powered by licensed  

Filmora Wondershare 

version 11.

 

 Filmed/photographed 

with a humble OnePlus NORD.

If you like this blog, 

  Till next blog post. 

Keep safe, and keep blogging.

Do check me out/follow me on the social media channels below:

 

Instagram: avianquest

 

Twitter: avianquest

 

Facebook:  avianquest

Blog:  avianquests.com

A Kavaborg Enlightenment

Cyborg

© Roger Rishab Tibon
(Acrylic on canvas 48"x36" 2018)
Artwork with permission for use on this blog post

 

Since I was young, I have a preferential bias to subject matters, which contain futuristic themes and/or genres.

For example, 

The Ghost in the Shell.

  

Cyborgs, mystery, cliffhangers, twists, plots, et cetera, keep reading forward.
 

Whilst science and technology constantly evolve in time, also a hand-in-hand by-product is a use case.

 

My past personal music journeys starting in the '80s on the path to "music nirvana" inevitably got me to the "school of hard knocks."

Today, I am finally getting a semblance of "enlightenment" in terms of  technology, material, design, which offers I'd say, risk mitigation to our musical instruments.

This "risk mitigation" provides protection for what we use in our livelihood, past time, hobby, et cetera.

 

In this case, a guitar gig bag is one form of risk mitigation with different forms of use cases.

Without a gig bag = zero risk mitigation

Whilst one is out on the road or traveling to various places where we bring our bass guitar, one must always consider proactive precautions and not temporary "firefighting" measures.

Thus, to reap the benefits of applying risk mitigation by using a middling level gig bag (in my case) will eventually offer more than enough to "protect" my guitar from unwanted dings, damage, malfunction, accelerated depreciation, et cetera.

 

Enter the  online marketplace which sports the latest highly-evolved bass gig bags, which by the way heavily influenced my purchasing decision.

Now, using one's personal money as an investment is destined for a surefire bang of the buck.  

 

In my humble opinion, due diligence (thorough research) automatically trumps impulse buying.  

 

As a result, I finally settled on a middling-level priced bass gig bag (made in Asia, purchased online). 

Finally, I committed on a rainy Wednesday night (March 2022) to invest in a "must-have" to possibly last a "life-long" use case for a gig bag.

Nowadays, a typical use case of music enthusiasts, amateur/professional musicians in relation to bass gig bags have become more of a "must" to flexibly meet various scenarios especially when one does the following:

- Plane travel (hand carry);
- Ship sea travel (hand carry);
- Motor vehicle travel (hand carry); or

- Ambulatory (hand-carry and walking).

I've had in the past great bass cases (most of the hard cases) but were all sold as part of the used product resale package deal.

I owned rectangular hard case bass cases, which offer maximum protection to the bass guitar however come with lots of pain points:

- Heavy (arm, hands, and backbreaking)

 - Bulky

- Eats lots of space
- Not portable
- Cannot be hand-carried inside a plane (ends up as cargo)

 

So, eventually, I switched to a bass gig bag, which was an ordinary one then that did not offer much protection thereby getting the neck of my old bass guitar damaged and rendering it totally unusable.

A hard lesson learned on my part.

At present, highly-evolved gig bags are emerging and/or morphing into best-of-breed/class in the marketplace, and offering lots of features and/or functionalities absent old, ordinary gig bags of the "archaic" past.

A dream gig bag of my choice is one that must be able to address all of the above-mentioned hand-carry scenarios (ship, plane, land vehicle travel).

Dovetailing to this, further the gig bag must be:

 

Lightweight, 

Portable, 

Easy to maneuver.

"Drop-proof"
Weatherproof -waterproof.

Breathe-ability (humidity protection)

 

Comes now, KAVABORG.

Kavaborg Lux Gray color

A Kava-what? 

 

It sounds like a cyborg movie Terminator who got back from the future to the present time. You get what I mean.

Well, this is my personal take regarding the name of this cool gig bag name.

KAVA + BORG

Kava pronounced kä′və (noun).

"BORG" lining or padding stitched in this which is of course synthetic material and definitely not from sheep wool plus, highly-evolved design/materials ...

However, KAVABORG - ABOUT US. 

Kavaborg produces OEM 

 

for many well-known international brands, 

 

such as MATON of Australia, 

 

WASHBURN 

 

and  

 

D’Addario of USA and etc.

 

In the Kavaborg website, they classified one of their products as "New Fashion Guitar Bags" which I eventually ordered locally where I live.

Imagine if this gig bag existed in the '60s-'70s? Definitely, a game-changer to a lot of musicians, eh?

LUX (noun): a unit of illumination equal to the direct illumination on a surface that is everywhere one meter from a uniform point source of one candle intensity or equal to one lumen per square meter.

Below is a visual link to a

Kavaborg LUX gig bag unpacking video.

or

or

 Also, do check the
Kavaborg gig bag's video 

of it's contents and my 

CORT Action DLX Plus bass.
 

 

The base or lower part of the bass gig bag is equipped with a black rubber boot (detachable) that offers impact protection to the bass guitar on slips and falls.

The internal rubber boots wood be better outside located at the bottom of the gig bag.
Internal bottom shock buffer ridges (boots)  keep the guitar safe from upright fall.

Drop protection. This feature I haven't tested and hopefully, I won't accidentally drop the case with my bass.

The small green thingy pouch is a dehumidifier pack that came free with the gig bag.

The red color neck brace/support is a DIY I "McGyvered" which I later removed. (You can ask me in the questions below section and I will gladly share with you how.)

 

 

PROTECTION

Thick padding.  Yes, that's 30mm padding more than enough to ensure safety upon impact.

Shock absorbing ridges. Check.

In addition, the removable neck cradle (attached with a velcro tape) functions as storage for string oil, polish, cleaner, and other guitar care accessories. 

 

Notice at the bass guitar headstock area, the Kavaborg Lux gig bag has spacious clearance, thus allowing some sort of breathing space and no overcrowding and preventing the machine heads/tuners from getting to the foam edges.

The removable neck cradle balances and elevates my CORT Action DLX plus bass to be fully level and horizontal with the Kavaborg Lux neck support/cradle.

The neck cradle protects the headstock from external pressure also it keeps the neck straight and prevents warping due to stress.

Since the Kavaborg offers a limited and fixed neck support cradle that is not adjustable, I  have to add a soft lightweight foam pillow at the back of my bass guitar to achieve balance of bass body vis-a-vis with the neck cradle of the gig bag.

 

A link to the second outer collapsible compartment.

The Kavaborg's gig bag outer layer/skin is water resistant so you can confidently carry it under rain/downpour and there will be no seepage to go in the gig bag.

This is the second highest consideration for the protection of the bass guitar.

 

WATER PROOFING

I would say that the Kavaborg Lux gig bag is not totally waterproof since submerging the gig bag in water will literally drown the internal contents.

However, the gig bag is actually water resistant, so one can confidently carry it under the rain and not worry of water seepage going in the gig bag case.

So, the covering surface material of this gig bag is designed with highly water-resistant qualities which are a definite plus.

This is one of my highest consideration in terms of protection in choosing this bass gig bag.

HUMIDITY DELAY

Where I live in South East Asia is wet and dry and  tropical weather means it’s humid all year round.
So, we’ve got to take special care to keep our guitars looking and sounding their very best.

With the humidity here often around 70%-90%, which does spare our bedrooms and closets which are are not suitable places to store our guitars in.

Kavaborg Lux's gig bag case keeps moisture away and the internal contents protected from extreme changes in humidity which can damage our guitar and repair/part replacement cost are very expensive !

You can also add dehumidifier packets inside the gig bag for added dryness.

 PORTABILITY

 

The black bulges are patented pressure-relief air cushions

especially designed to provide relief for our back.

Here's a link to the gig bag straps.

I can comfortably carry this bag around in two ways:

1.  Wear it like a bag pack.

2.  Carry it like a hand-carry luggage.

The flexibility of a gig bag in terms of portability is very helpful, especially traveling in a car, cab, bus, plane.

 

The gig bag can easy fit in cramped vehicles, especially beside the driver's side of jeepney, taxis/cab, and the overhead of a public utility bus.
 
The bass gig bag is lightweight and designed for comfortable handling and commuting.
 
With a modern design and choice of materials, you can walk in style.

I chose a color that is neutral muted gray and doesn't shout and attract attention.  Black color easily attracts/reveals dirt marks, scratches.


So, why not black color? As black is a dirt magnet/indicator.

Patented pressure-relief air cushion

 Thick handle

LIGHTWEIGHT

Only over 5 lbs (similar to a Mono Vertigo gig bag) which is super expensive. LOL!
   

FUNCTION

Can store all my bass accessories link.

With the LUX, you have room for every accessory you wish to bring -

Cables, Strap, Strings, Picks,             
Music sheets,  Setlist,  Tablet,  Power bank, USB charger, adapter for cellphone devices, gadgets, tuner, et cetera.        

And charge your phone outside of the bag with the built-in USB extension link.


Multi functional A4 Size pocket for capo, strings, slider, picks, cable, and music book, cleaner polish.

DURABILITY

 

The bag material is not only water resistant, but it is thick and durable

Thick stitches guarantee the bag will last for a long time
 

YKK large zippers provide effortless and long-lasting performance

Below is my Kavaborg Lux gig bag, which now hosts my CORT Action DLX Plus bass guitar.

The measurement details in this link.

My Kavaborg Lux now
houses my
CORT Action DLX Plus bass guitar

 

Internal bottom shock without buffer ridges does not the bass guitar safe from an upright fall

CONCLUSION

After experiencing countless school of hard knocks moments, then coming to an "enlightenment" or self-realization and understanding and finding my own gig bag use case with reduced pain points and increased overall bass protection.

 

The Kavaborg Lux gig bag is definitely a keeper for me, and a perfect match to my CORT Action DLX Plus bass guitar/bass guitar which perfectly fits the gig bag.

Video URL Link (Click me)

All products mentioned in this blog post are definitely NOT a paid  product feature/endorsement.
 

I personally bought the product/s using my personal out-of-pocket money.

References: 

Guitar Pusher.

 

 

  I outsourced the

Kavaborg LUX

(FB-90B)

 

via 

 

LAZADA

through

 

Guitar Pusher

 

Kavaborg® is now a 

standard accessory 

of

 my

Action DLX Plus

bass !

 

 

 

I use a licensed
 

FILMORA version 11 Wondershare 

 

for all of my video productions.

If you like this blog, 

  Till next blog post. 

Keep safe, and keep blogging.

Do check me out/follow me at the social media channels below:

 

Instagram: avianquest

 

Twitter: avianquest

 

Facebook:  avianquest

Blog:  avianquests.com