Neowin.net

Thanks go to XP-erience for this pointer to this neat program.

Introducting, FreelancE VIP's BootXP, v1.2

Where are the Windows® logo in Windows XP
The boot screen logo are stored as a resource in the NTOSKRNL.EXE file, this file are in your WINDOWSSYSTEM32 directory and it is called at boot by the Windows Kernel when XP starts.

Solution...
Before the creation of BootXP the only way to change the boot screen was to replace this file with another resource hacked NTOSKRNL.EXE containing another boot screen.

Problems Encountered...
1.- NTOSKRNL.EXE; it's a protected file of the XP system, you can replace it, but one of the newest features of XP, Windows File Protection (WFP) will replace again with the original NTOSKRNL.EXE file, if you want to change the logo, you need to replace it, booting into 'safe mode' and spending a lot of time.
2.- If you download a NTOSKRNL.EXE file to replace the logo, it's not easy that the file will be in the language of your operating system, nothing matters, but it's a strange component.

Benefits using FreelancE VIP's BootXP
1.- You can have lots of screens (BMP’s about 150kb) on your hard drive using a bit of space compared with the amount of space needed to store NTOSKRNL.EXE files (about 1.15mb). Use the 10% of space.
3.- Changing the boot screen takes seconds and you don't need to reboot in safe mode and tweak Windows File Protection.
4.- You don't have to be a pro for create your own boot screen and install it.

One advantage to this neat program is that with v1.1, the author has added a handy preview window in 640x480.

News source: BootXP
Download: BootXP v1.2 (314kb, 6th Jan 2002)

Citibank spokesperson Maria Mendler wouldn’t comment on the details of Devitry’s accusations, and instead offered a written statement: “While it is not our policy to comment on information security matters, we have taken and are continuing to take all necessary steps to ensure our c2it site is effectively protected from cross-scripting vulnerabilities.”

The alleged flaw in C2it.com revolves around a two-year-old security vulnerability called “cross-site scripting.” Effectively, it lets a current c2it.com customer sneak requests for customer information through a normal form on a Web page.

Until two years ago, many Web page designers never considered the possibility that an intruder might attempt to load malicious code onto a Web server “through the front door” — by typing it right into a Web page form requesting information like name or address or account number. As a result, few Web designers bothered checking data typed in by site visitors for suspicious characters.

In February, 2000, the federally funded CERT/CC Coordination Center, charged with calling attention to major computer risks, published an urgent bulletin on the issue.

Devitry, who publishes a site designed to expose firms that still have not protected against cross site scripting, said the c2it.com issue was particularly worrisome because it exposed customer account information. According to Citibank’s Mendler, c2it.com, a PayPal competitor, currently has 250,000 customer accounts.

“In September I talked to their e-crimes person, it sounded like someone pretty high up who would take care of things,” Devitry said. “But nothing happened. Then I kept sending them e-mail and having gotten much since then. I use the site and I like it, but I like the sites I use to be secure.”

Devitry said he published the flaw in order to convince Citibank to fix the problem.