« March 2005 | Main | May 2005 »
Friday, April 29, 2005
Rogers Admits Reality
Big freaking whoop.
Software firewalls, anti-virus, anti-spyware and other intrusion prevention software has been available for FREE since the days of dial-up.
Perhaps now that compromised computers are a threat to its business model Rogers is finally taking the obvious step to save its own skin?
Still, 95% of users are clueless? OMFG.
Edited on: Wednesday, July 20, 2005 4:34.14 PM EDT
| Categories:
Saturday, April 23, 2005
RealPlayer Security Patch
RealNetworks has released a patch to correct a flaw in its RealPlayer software that could allow evil code to be run on client computers. This flaw was rated "highly critical" by Secunia and should be addressed ASAP.>
>Run the updater to download and install the fix:
>
Thursday, April 21, 2005
OpenOffice.org Security Patch
>
>This patch addresses the security risk found in all releases of OpenOffice under Linux, Solaris, Windows and Mac OS X operating systems.
>
>Be sure to read the Introduction - it (may) explain the whys and wherefors.
Edited on: Wednesday, July 20, 2005 4:35.46 PM EDT
| Categories: Openoffice.org, Security Alerts
Tuesday, April 19, 2005
Norton Internet Security 2005 AntiSpyware
Symantec today released their Anti-Spyware application - Norton Internet Security 2005 AntiSpyware Edition. I downloaded it and was in the middle of the install when the following dialogue box appeared:
>Well, thanks but no - what makes them think I
want their damn anti-virus? Perhaps if I had no
protection this would be a treat but to have them suggest I uninstall my
present Anti-virus seems a tad arrogant to me. Sorry Symantec, you're
tactic is not appreciated and therefore I will not
be installing your application until it is a stand-alone anti-spyware
client.
Edited on: Monday, July 25, 2005 1:23.56 PM EDT
| Categories: Best Practices, Security Alerts
Opera 8 Released
It has increased security, pop-up blockers, an RSS aggregator, is fully tweakable and has the ultra-cool voice commands!
You haven't lived until you have barked, " Opera, next link!" at your computer.
Edited on: Wednesday, July 20, 2005 4:38.43 PM EDT
| Categories: Alternative Apps, Best Practices, Opera
Software Install In Firefox
Firefox can be made to disable the installation of software, allow all software to be installed or selectively allow named web sites to install software.
In our case we assume that since you are reading this your install has failed because Firefox has software install presently disabled. We will now turn it on for this site only.
First, copy the domain address that you wish to add - "addons.update.mozilla.org" (without the quotes)
Just above the Window on the left you should see text similiar to
the graphic on the left.
|
At the extreme right of the text (above) you will see a button
entitled "Edit Options..." similiar to the graphic on the right -
Click it.
|
Place a check in the box for "Allow web sites to install software"
then click the "Allowed Sites" button on the right.
|
Here you can see that sites may be added or removed. The safest and
easist way to surf is to disable the ablity of sites to install
software except for specific sites you know to be safe.
To access this window at other times click Options - Web Features. |
In the "Address of web site:" window paste the text you earlier
copied and click the "Allow" button.
Now click the "OK" button. |
|
That's it - now when you come back to this site Firefox will allow
it to install software.
When you happen upon other safe sites you can selectively add them to the list of allowed sites. |
Installing Firefox Extensions
Firefox adds to its functionality by making it possible for anyone to add what are called "extensions" to the browser. These extensions are available at the Mozilla site here - The easiest way to be informed of new extensions is to add the following feed to your RSS aggregator.
I suggest you check out the existing extensions - many are very useful for specific purposes.
On the other hand there exists the Abe Vigoda Status Extension - but who are we to judge?
Time to install Formfox - Open this link in a new tab.
About half way down the page you will see a tan box with the words Install
Now - Click it.
|
The Software Installation dialogue box will initially grey out the
Install Now button forcing you to consider the security implications
of what you are doing.
Since this site is known safe we will continue. Once the Install Now button turns its regular colour we can click it to continue the installation. |
The Install Now button has turned its regular colour and it has a
big green check mark so click it to continue.
The dialogue box (below) will pop up. |
To be able to use the extension you must restart Firefox as
indicated in the Extensions dialogue box.
Before you do check the last two pics below. To access this dialogue box at other times click Tools - Extensions. From here you can Update extensions, uninstall extensions and check for new extensions. |
Here we have an example of the Formfox extension at Google.ca - With
the mouse hovering over the Google Search button we can see that the
form will indeed be sent to http://www.google.ca/search and NOT
http://www.russian-mafia.ru !
|
Every so often - and ALWAYS after upgrading Firefox itself - click
the icon to the right of the Help text button - Firefox will check
all the sources for your installed extensions and if there are
updates or newer versions it will prompt you to install them.
In some instances updates to extensions will take time and for a period after installing an updated Firefox some extensions won't work - indeed there have been extensions that have remained broken and were eventually uninstalled :-( |
Monday, April 18, 2005
Firefox Extension: Formfox
The extension is called Formfox - it's purpose is to alert you to where the information in an online form is being sent to.
This is an excellent way to prevent folks from being taken in by a fake site that asks for legitimate information that is forwarded to evildoers.
When your mouse is hovering over the button that submits a form an URL will display showing where your information is actually going. If, for example, you believe you are at the your online bank and the URL displayed by Formfox is [http://russian-mafia.ru] you may well not press that button!
| Categories: Best Practices, Mozilla Firefox
Saturday, April 16, 2005
Firefox1.0.3 Released
Note that this patch took some eight days as opposed to IE patches that take (usually) thirty days.
Worms Attacking Instant Messaging
To download a safer (and better) IM client called GAIM go here.
Edited on: Wednesday, July 20, 2005 5:22.48 PM EDT
| Categories: Alternative Apps, Security Alerts
Tuesday, April 12, 2005
MS Security Updates Feed
Microsoft has added an RSS feed to let us know about current updates related to security - good on them.Drag this to your favorite RSS Reader.
The present email alert is to end soon, but:
Our new Security Update Alerts provide notification when security updates are released & allow you to receive the alerts through MSN Messenger, Windows Messenger, your e-mail, or on a mobile device such as your phone or PDA.
Monday, April 11, 2005
Fake Windows Update Emails
Clicking on these links will send users to a bogus website posing as Microsoft's official website for critical security patches.
If users try and download updates from the website they are infected by the Troj/DSNX-05 Trojan horse which allows hackers to take remote control of the infected PC.
Microsoft NEVER sends emails of these types. Always use the "Windows Update" link from the Start button.
Edited on: Wednesday, July 20, 2005 5:25.17 PM EDT
| Categories: Viruses-Trojans-Worms
Wednesday, April 06, 2005
CRTC: VoIP firms must carry 911 services
Watching rogers.com provide this service should be fun if the past performance is any indication:
"Press 1 if you are on fire, Press 2 if you are being assaulted, Press 3 if you need to speak to . . . click . . . "
Edited on: Wednesday, July 20, 2005 5:26.15 PM EDT
| Categories: Best Practices
Tuesday, April 05, 2005
Firefox JavaScript Security Flaw
The only secure method of browsing until this flaw is patched is to disable Javascript.
Since this means most sites will be un-workable you can bet the bug fix from Mozilla will be out in double-quick time.
...which is NOT a plug-in from Apple...
Mabir.A Virus Spread Via SMS & MMS
This virus also spreads via Bluetooth.
Edited on: Wednesday, July 20, 2005 5:28.11 PM EDT
| Categories: Bluetooth, Mobile, Viruses-Trojans-Worms
Monday, April 04, 2005
The Gomery Inquiry
But, since this blog is hosted in the US there is probably no worries.
Saturday, April 02, 2005
Just Say NO to Google Prefetching
Prefetching loads the top results of a search into the browserâs cache. If any of these first results are clicked on they will load faster then normally.
The problem is that the cookies and other parts of the pages get downloaded to your hard drive even if you don`t visit the page.
If these intial pages contain evil scripts or more simply are dubious sites that contain spyware, tracking icons, etc you are caught before you know it.
To prevent this "prefetching" open Firefox and follow the steps below:
1. In Firefox type "about:config" (without the quotes) in the address bar.
2. In the list that appears double-click the line "network.prefetch-next" (without the quotes).
3. The 'value' will change from TRUE to FALSE.
4. That's it.
