Archive for 'Security'
Fix it: Help for Checking Your Windows Security Settings
Microsoft has small utility online you can run to check your Windows security settings:
Diagnose and fix Windows security problems automatically
What it fixes…
- Checks Windows security features and enables them if needed
- Phishing or Smartscreen filters
- User Account Control (UAC)
- Data Execution Prevention (DEP)
- Windows Firewall
- Antivirus protection status and updates
Change Your Amazon Password
If you haven’t changed your Amazon password in awhile, you should do so right away. Amazon changed the way they are storing passwords, as their previous method wasn’t as secure. See this article for details:
Maximum PC | Why You Should Change Your Amazon Password Right Away
Free FamilyShield filtering from OpenDNS
Posted on July 11, 2010, under Security, Technology.
I have been using the OpenDNS domain filtering in my house for over a year, and have been very happy with the service. They have made it even easier to use for households looking to protect kids, by rolling out FamilyShield filtering. Without even needing to sign up for an account, you can use their service for free to block the following categories of web sites:
- Pornography
- Phishing
- Malware
- Proxy and anonymizer (for the “street smart” kiddos)
You can easily set up the service by following the walk-through instructions on configuring your router or computer’s DNS servers.
Web Browsers – Trackable without cookies
Posted on May 18, 2010, under Security, Technology.
Interesting proof of concept by the Electronic Frontier Foundation to show how the fingerprint of your web browser makes you trackable, even without the use of cookies:
New security risk in SSL implementations
More holes found in Web’s SSL security protocol.
It appears most modern browsers are susceptible to a simple man-in-the-middle attack on SSL certificates, meaning your encrypted browsing sessions can be intercepted.
The article lists Firefox 3.5 as the only modern browser not affected by the attack.
Watch out for increased Internet crime
Posted on January 15, 2009, under Current Events, Security.
I caught an interesting quote from the bottom of a Symantec news article:
Explaining why Symantec continues to invest heavily despite the recession, Bregman said that during economic downturns Internet crime rises, creating opportunities for security companies.
Probably time to re-think through how you are securing your company and personal data, and watching out for cons.
Apple pushes insecure web browser on computers
Posted on March 31, 2008, under Current Events, Security, Technology.
Apple pushes Safari on Windows via iTunes updater (posted 3/21)
Apple has started offering Windows users its Safari 3.1 Web browser through the same online updater it utilizes for iTunes and the QuickTime video player.
Not just offering, but pushing. As in you must manually un-check the install or ignore it, or Safari will be installed the next time you run the updater to bring your iTunes up to the next release.
MacBook Air hacked in security contest (posted 3/27)
A team of security researchers has won $10,000 for hacking a MacBook Air in two minutes using an undisclosed Safari vulnerability.
Bad decision, Apple. I don’t want that accidentally pushed out on my machines, or any of the family members I help support.
If you want to prevent this from happening on your machine when you run the Apple updater, make sure the Safari option is checked, and then in the top menu, select “Tools > Ignore selected updates”.
Hiding Wireless SSIDs
Myth vs Reality. Hi Jeff! 
10 things to know before you register a domain name
Posted on June 28, 2007, under Security, Technology.
Sometimes I get asked what is involved in registering a domain name, and is there anything to be careful of. I just ran across this site which does a good job of listing out most of the concerns to watch for when choosing an organization to register a domain name with:
10 things you MUST know before you register a domain name with anyone
Secunia Software Inspector
For the last year or so, I’ve used Secunia to keep track of the latest software vulnerabilities that have been discovered. Recently, they released a new, free web-based service called the Secunia Software Inspector. The tool will scan your computer for software that has reported vulnerabilities, and it alerts you of what to do to update your software or address the issue. I don’t know how comprehensive its software list is, but it seems to at least catch major browsers, plug-ins and e-mail clients.
On both my work and home computers, the scanner let me know of a vulnerability for the installed version of Apple QuickTime, as well as remnants of old, trouble-some Adobe Flash installs. I did end up having to go research how to remove old versions of Flash player on my own though. It’s helpful to note Adobe provides a global Flash uninstaller.
The Software Inspector is by no means a replacement for a good anti-virus package or firewall, but it is a nice free service to help keep your machine a little more clean and secure.
