Friday, December 31, 2004

Phishing plug-in aims to hook scammers

Phishing plug-in aims to hook scammers - silicon.com

Netcraft is offering a toolbar [like the Google toolbar] designed to help users of Internet Explorer avoid falling victim to "phishing" scams. See the article for more information.

Thursday, December 30, 2004

Trojan horse threatens latest Windows XP

Trojan horse threatens latest Windows XP | Tech News on ZDNet

No patches available yet. So be careful and don't download anything suspicious. Be sure to disable automatic Active-X downloading if you are using Internet Explorer. The article has other important information.

Tuesday, December 21, 2004

Windows Media Player Vulnerabilities (Security)

Windows Media Player Vulnerabilities (Security)

Security problem with Microsoft Windows Mediaplayer that could allow private information to be disclosed. Advice is to disalbe ActiveX support by setting security level of IE to "high". Yet another ActiveX problem.

Monday, December 20, 2004

Seven easy steps for securing your computer



While this article focuses on those who have a new computer, its advice is good for everyone.

New IE Exploit Spoofs Web Sites

New IE Exploit Spoofs Web Sites

This is another serious bug in Internet Explorer 6.0 allowing people to spoof even secure sites and aid in "phishing". It is advised that if you use IE, turn off Active X or set security level of the "Internet" zone to "high". This problem does not affect other browsers such as Firefox, Netscape or Opera.

Saturday, December 18, 2004

G-Mail

About Gmail

I have six invites for people who might wish to setup a G-Mail account. First come, first served.

G-Mail is a web-based mail server like Hotmail or Yahoo but with some additional services. Since it is still in the Beta stage, new accounts are by invite only. You can click on the above link for more information or on the link below for a review by PCWorld.

CNN.com - Spammers ordered to pay $1 billion - Dec 18, 2004

CNN.com - Spammers ordered to pay $1 billion - Dec 18, 2004

This is the largest settlement involving spam mailers. Now, if only I could find someway to get paid for the spam I get sent.

Friday, December 17, 2004

Description of the Critical Update for Windows XP Service Pack 2

Description of the Critical Update for Windows XP Service Pack 2

Windows Firewall has a problem when used in a dial-up connection that may allow your files to be accessed by anyone. This is a critical update for everyone who has installed SP2. If you have not, you do not need the update. If you do not use dial-up access or use an alternative firewall such as Zone Alarm, you are not immediately affected but should look at getting the update anyway.

Thursday, December 16, 2004

Yahoo! News - Adobe Patches Acrobat Vulnerabilities

Yahoo! News - Adobe Patches Acrobat Vulnerabilities

Critical vulnerablility in Adobe Acrobat Reader used by many to read .pdf files. This vulnerability affects versions 6.0 to 6.0.2 on both windows and macintosh. Click on above link for more information. The most recent and patched version is 6.0.3.

Adobe advises installing the complete 6.0.2 version before upgrading to 6.0.3.

Adobe 6.0.2

The 6.0.3. Adobe is available here

Adobe 6.0.3

Seven Steps to System Security (Tips)

Seven Steps to System Security (Tips)

This is a good list of things to do to keep your computer safe, especially if you run Windows.

Secunia is reporting another vulnerability in Internet Explorer 6

Secunia - Advisories - Internet Explorer DHTML Edit ActiveX Control Cross-Site Scripting

Clicking on the link will take you to more information and a test to determine if you are vulnerable to someone from an outside site interfering with your internet surfing. If you are vulnerable, Secunia advises that you set the security level of the "Internet" zone to high to disable ActiveX support. Or switch to an alternative browser.

Tuesday, December 14, 2004

PCWorld.com - Zafi Worm Hides Behind Christmas Cheer

PCWorld.com - Zafi Worm Hides Behind Christmas Cheer

Alert about a new worm that is sent by email. Infected e-mails are titled "Merry Christmas", contain the message "Happy Hollydays" and are signed "Jaime". Your best protection is not to open any strange e-mail and keep your antiviurs updated. For more info, go to the above link.

Monday, December 13, 2004

Who says safe computing must remain a pipe dream?

Who says safe computing must remain a pipe dream? | Perspectives | CNET News.com

Bruce Schneier, computer security expert, gives his advice for protecting your computer. The computer world can be a scary place and an ounce of prevention is better than a pound of cure.

Saturday, December 11, 2004

School's out to shun IE

School's out to shun IE | CNET News.com

Penn State has advised its students to drop Internet Explorer as their primary browser due to its persistent security problems and look at alternative browsers such as Firefox and Opera.

Friday, December 10, 2004

Secunia - Advisories - Microsoft Internet Explorer FTP Command Injection Vulnerability

Secunia - Advisories - Microsoft Internet Explorer FTP Command Injection Vulnerability'

This is a "less critical" vulnerability in Internet Exporer. The advise, probably good in all situations, is to avoid going to untrusted web sites. Another reason to look at alternative web browsers such as Firefox or Opera.

Microsoft Security Bulletin Advance Notification

Microsoft Security Bulletin Advance Notification

Microsoft will be issuing five security updates on Tuesday December 14. These updates have been rated as "Important". You can click on the above link for further information and to sign up for Microsoft's e-mail notification.

Wednesday, December 08, 2004

Multiple Browsers Window Injection Vulnerability (Security)

Multiple Browsers Window Injection Vulnerability (Security)

This refers to a security problem affecting many different web browsers including Internet Explorer, Firefox, and Opera. In certain versions of these programs, it is possible for another website to inject onto a trusted website a pop up window asking for personal information to make it look like the trusted site is asking for the information. The link offers more information as well as a connection to a test if you wish to check the security of your browser.

Wednesday, December 01, 2004

USATODAY.com - Unprotected PCs can be hijacked in minutes

USATODAY.com - Unprotected PCs can be hijacked in minutes

As this article demonstrates, especially if you access the internet through a DSL line, it is critical that your computer have a fire wall and, if running a PC, you should make sure that SP2 is installed. If you are not going to be using the internet for awhile, either turn off the computer or turn off web access for that time.