fsutil behavior set disablelastaccess 1
fsutil behavior query disablelastaccess

You could set it to 1 (user) or 3 (system) to disable. //

In the System Managed mode, the NTFS driver can enable or disable the “Last Access” updates during the boot (in particular, when the system volume is mounted). The “Last Access” updates are enabled for NTFS volumes when the size of the system volume (which is usually mounted as the “C:” drive) is 128 GB or less. If the system volume is larger, then the “Last Access” updates are disabled.

In the User Managed mode, the status of the “Last Access” updates isn’t modified by the system during the boot. "Last Access" will stay enabled or disabled as you set. //

I put a Batch Script together if you think it will be of use . . .

Free games to play online or offline.

Free Online Mind Mapping
Create, Share, Collaborate, View your mind maps !

Try now !

Why WiseMapping ?
WiseMapping is perfect for individual note-taking, collaborative planning, teamwork and class rooms.

CHATONS – kittens in french – is the Collective of Hosters Alternative, Transparent, Open, Neutral and Solidarity. This collective aims to bring together structures offering free, ethical and decentralised online services in order to allow users to quickly find alternatives that respect their data and privacy to the services offered by GAFAM (Google, Apple, Facebook, Amazon, Microsoft). CHATONS is a collective initiated by the association Framasoft in 2016 following the success of its campaign De-google-ify Internet.

If you have accidentally deleted one of your mail accounts by clicking on the "Remove Account" button in Thunderbird, this does not mean that your mail has actually been deleted from your computer. That mail should still exist in a child folder in the Mail folder in your profile folder. (This assumes that the account is not using the Global Inbox, in which case its mail would be stored in Local Folders.)

Once you've gone to your profile folder and verified that the mail for the deleted account still exists, do the following to get it back into Thunderbird. You may wish to make a temporary backup of your profile folder before proceeding.

ikjadoon

What I don't understand is how any of this could grant access to actual end-user data. From what I know of their design, LastPass's master vault passwords are split - by definition, LastPass is only supposed to have a part of that key; the other half is only known to the end user's device(s). LastPass is never by design supposed to have the full master vault keys. Unless... they do...?

Ditto with unencrypted vaults; those are only ever supposed to exist on end-user devices in-memory, per their own service descriptions. It's one of their selling points. How could LastPass even have unencrypted vault copies to expose? Their own developer vaults, sure; but not end-user vaults. All a bad guy could ever manage to get, absolute worst case, would be an end-user's encrypted vault and half of a key. Supposedly...??

I'm genuinely curious now.

There are two separate vault breaches here.

1) LastPass internally uses LastPass to keep their Amazon S3 login information. This internal LastPass Vault itself the logins to LastPass' internal Amazon account. One LastPass dev had access to this internal dev vault and was allowed to install Plex, which had a major security vulnerability. The hackers installed a keylogger onto that developer's PC and extracted that dev's Master Password and MFA code to the LastPass internal vault. Thus, the LastPass internal vault was immediately decrypted. Because they stole that dev's Master Password + MFA.

If hackers install a keylogger onto a developer's system, then hackers can steal passwords and immediately decrypt any of that user's vaults. That LastPass dev had nobody else's Master Password.

2) Well, that dev's vault was damn valuable. Because now the hackers used that developer's now-decrypted Amazon S3 login and extracted 30 million encrypted consumer vaults stored on Amazon S3 (because LastPass backed up encrypted consumer vaults to Amazon S3). This is all the consumer data.

TL;DR: the hackers keylogged the Master Password of a LastPass employee, not of any consumers. So that LastPass employee's vault was immediately decrypted. Essentially, the LastPass dev accidentally gave away access to his entire PC & work credentials.

//

Encrypted LastPass vaults aren't safe by default, however. If your vault had low iteration counts (e.g., 1 or 500) and a short, non-machine-generated Master Password plus stored juicy things the hackers might want (crypto logins, bank logins), then your vault is more likely a higher priority to be guessed / brute-forced.

A helpful note: some people keep saying "But the accounts had AES-256! Nobody can crack that!" Imagine your LastPass Vault has 100-feet steel walls (that's AES-256) and a locked door (that's the Master Password).

The hackers will not try to drill through the massive walls; they will try billions or even trillions of keys on the door.
February 28, 2023 at 4:38 am

ImportExportTools allows the user to export and import messages with more flexibility, with the following options:

Welcome to Your Easter Devotions!

Each week invites the entire family to reflect on the Lenten season together.

WV Senate OKs intelligent design bill; Florida's assault on education continues. //

Two recent bills introduced at the state level could spell trouble for science education. One of them is in West Virginia, where the state Senate has approved a bill that would allow teachers to tell students that the Universe is the result of intelligent design, an idea that was developed to avoid prohibitions on teaching creationism. While a court held that teaching intelligent design was an unconstitutional imposition of religion, a recent Supreme Court decision weakened the legal foundations of that ruling.

Meanwhile, Florida's thinking much bigger, with the State House considering a bill that would say the legislature disapproves of college courses that cover "theoretical or exploratory" topics being used to fulfill general education requirements. That would seemingly rule out most science classes.

1. Create a new file, e.g.delrecycle.sh
   Enter the following content to delrecycle.sh:

     #!/bin/sh 
     find /mnt/[MountPoint]/.recycle/* -atime +[Age] -exec rm -rf '{}' \;
     find /mnt/[MountPoint]/.recycle/ -depth -type d -empty -exec rmdir {} \;

1. Adjust [MountPoint] (mount point of your share) and [Age] (age of the files in days which you want to erase) to your environment and needs.
2. Upload delrecycle.sh to your share.
3. Create a cronjob (System|Advanced|Cron) with root– privileges, which calls the command:
   sh /path/to/MountPoint/delrecycle.sh