2007 Security outlook

Mark Edwards, "Windows IT Pro" magazine, sees the following threats for 2007:

• Vista exploits.
• Exploits of RSS and Atom syndication feeds ... you know, feeds like this blog! Whoa, Baby!
  
• Exploits of multimedia content, including MySpace and YouTube.
• User education will still be a low priority for businesses.
• Increasing identity theft, Spam, and malware.
• Increasing malicious use of botnets.

The full article is in the latest Windows IT Pro "Security UPDATE" email newsletter. You can sign up for various email newsletters at Windows IT Pro.

You need more than automatic updates

Windows' "Automatic updates" only downloads "critical" updates. Windows Update and Microsoft Update, which has MS Office updates too, both have a ton of security patches plus added features you can download. The optional updates and hardware-related updates do not automatically download.

So periodically manually surf to the Update site (Windows Update or Microsoft Update) and check out the other two categories of updates -- "Software Updates [optional]" and "Hardware updates".

Update your PC clock for new DST

Here's an update listed as optional that I'd prefer to be mandatory -- update the system time to reflect the new dates for Daylight Savings Time (Microsoft Knowledgebase article 928388). In case you didn't recall, the U.S. and several other countries have decided to change the start and stop dates for DST.

Since your PC clock has the "old" rule, you really do need this update so that the system can change the time automatically when DST arrives and departs.

Dig a hole through the earth

If you dig a hole "clear through the earth", will you really come out in China?

Find out with this very clever Google Maps mashup by a Brazillian developer.

Clever and fun.

Zoom vs. text size in IE 7

Internet Explorer 7 has many new features to help you as you surf. One I like is the "Zoom" feature.

First, let's be clear. "Zoom" is not the same as "Text size" in IE 7. Changing the text size does only that -- increases or decreases the size of the text on the page. If what looks like text is really part of an image, it does not change. "Zoom" make the entire page enlarge or shrink. That also means that as you enlarge the page, it will (usually) eventually exceed the window area and the left and right parts of the web page will be "cut off" in the view.

So text size and zoom each have their uses.

In the lower right of the (bottom area) status bar, you see a zoom percentage. You have several options to changing the "zoom": level

• Click on the zoom number. This rotates through a three zoom levels (125%, 150%, 100%).
• Click on the down-arrow to the right of the zoom percentage, then select one of the set levels you want to view or choose "Custom view".
• If you have a wheel mouse, hold down on the keyboard's "Control" key (often marked "Ctrl") and rotate the mouse wheel. Rolling toward your body decreases the zoom by 10%. Rotating the wheel away from your body increases the zoom by 10%.
• Hold down on the Control key and then press the plus (+) or minus (-) key to zoom in or out by 10%.

Family-proof your PC

Family members vary in the degree of risky computing behavior they perform. You can help lessen the chances of getting infected by taking the below steps:

• Create a separate user account for each family member.
• Only assign the type account really needed. Try to use "User" level for most. Assign "Power User" with caution.
• Never sign on and do normal work with an account that's a member of the "Administrators" group.
• Take the offensive against possible attackers. Install software that monitors and protects the computer. Many such basic software programs are free. The gamut includes general security monitors, security scanners, antivirus software, antispyware, and firewalls.
• Protect surfers. Configure privacy and security settings in the user's browser (each user has their own settings). Use a program like McAfee's SiteAdvisor, which gives sites a color-coded safety rating.
• Upgrade to the latest version of your browser. This is especially important if you use Microsoft Internet Explorer. Version 7 is more secure and nicer to use that prior versions.
• Use filtering software (aka Parental Controls) for your kids.
• Teach each user. Explain why opening messages from strangers is not a good idea, for example.

These tips are based on an excellent article, "How to family-proof your PC", by Jessica Dolcourt, CNET Download.com.

Tis the season ... to be paranoid

It's OK to be paranoid if people really are out to get you. And that's the case with "greeting card" attacks. As the Christmas season nears, the number of attacks involving faked greeting cards rises.

The attack arrives in your inbox as a message (perhaps looking like it's from a friend) with a link to a "Greeting Card". If you click on the link, you may even see some sort of online greeting. But along with the greeting comes a Trojan. You have been attacked.

Prevention tips:

• Don't open email messages from strangers
• Don't assume a message from a friend is really from that person, especially if it has links or an attachment you didn't expect to receive.
• If you get a message like above from a friend, send them a separate email and ask if they really sent the one with the link or attachment.
• Don't "reply" to a suspicious message -- you could be replying to the attacker.
• When in doubt, delete.

Recent science-related news

It's a bit off-topic, but here's a motley collection of recent web and science-related news links...

• M.I.T. and Britain's University of Southampton plan to offer a research program in Web Sciences.
  [Required free registration]
• Commerce, NASA IGs investigate White House for muzzling scientists and altering scientific reports.
• Midterm elections may affect science.

Neat gadgets

The Cyberguys site, which I like a lot, has some more neat gadgets (I choose to get emails about the latest offerings).

• 1GB Biometric flash drive (Sandisk Cruzer) -- swipe your fingerprint to access your data
• Microsoft Optical notebook mouse
• Flat speakers, USB-powered, with battery pack -- for notebook use?
• 1GB Compact Flash Card (SanDisk) for only $29
• Wireless PC headphones (Logitech)
• USB cup warmer -- so you can keep the Java hot while you surf
• Pantone Huey monitor color correction kit
• Notebook cooling stand, with fan, for lap or desk

If you like to check out new computer-related gadgets as much as I do, you may want to bookmark the "New items" page at Cyberguys . Happy online "windows shopping".

How to buy online more securely

You wouldn't mail an unsealed envelope because anyone with access to it could read the contents. And they just might steal the information or contents. So remember to take precautions when you are online. Here are a few:

• Make sure that you only buy products or services, pay bills, or provide personal data from a secure web page. This means the website encrypts the information.
• Check the web address in the browser's address bar. A secure web server address should start with "https://" ("s" for secure) rather than the normal "http://".
• Look for a "padlock" icon in the browser's status bar (in the lower right in Internet Explorer). Check the encryption level by hovering your mouse pointer over the icon.

Tip: You can find more detailed information about the security and encryption level of the site you are viewing by double-clicking on the lock icon in the location bar and viewing the
tabs (General, Details, and Certification Path) in the pop-up.
By the way, just because a website uses encryption doesn't mean it's legit. Malicious sites can mimic "good" ones and use encryption too. Be cautious. Be paranoid. It's OK ... your money and identity is at risk.

Hold on to Windows XP?

You may want or need to hold on to Windows XP instead of upgrading to Vista. If so, you should know that you can still get some of the benefits of Vista by adding on to XP. Here are some cool add-ons, (courtesy of an article by Paul Thurrott's SuperSite for Windows). These are free unless a price is listed. Read Paul's article for a more in-depth review of each category.

• Desktop search: Windows Search
• AntiSpyware: Windows Defender
• Web browser: MSIE 7.0 (not yet in final release)
• Sidebar and Gadgets: Yahoo Widget Engine or Google Desktop
• Backup/Restore: Windows One-Care ($15-$20/yr)
• Email: Mozilla Thunderbird or Microsoft Windows Live Mail Desktop Beta
• Calendar: Mozilla Sunbird or Google Calendar
• Photo gallery, management, & sharing: Picasa 2 from Google.
• Digital Media Jukebox: Windows Media Player 11 for XP
• Digital movie editor: Windows Movie Maker 6