Wednesday, August 29, 2007

You need more than Windows Update

If you use Microsoft Windows, you are likely familiar with Windows Update, the free service that installs security patches, bug patches, and some enhancements to Windows. But you really need much more.

You need to get updates for other Microsoft prograns, such as Microsoft Office. You can do that by installing "Microsoft Update ".

Next, download and install the Secunia Personal Software Inspector and check for outdated programs and ones needing updates. Though in beta, it works well and is an eye-opener.

Don't put it off -- prote t your computer now!

Tuesday, August 21, 2007

Outdated programs risky

Many programs these days need updates, not just your operating system (e.g. Windows). As an example, today's Windows Secrets points to the following common programs:
  • Adobe Reader
  • Macromedia Flash
  • Apple Quicktime
  • Sun Java
  • Mozilla FireFox

Most of these programs default to checking for updates. But if you ignore the update message or if it only checks once a month, you can be way behind in plugging security holes (a.k.a. "vulnerabilities").

What can you do about that? One very big help is the free Secunia Personal Software Inspector (PSI). You can try it online first and download if it serves as an eye opener for you -- it did for me.

For one thing, I discovered old versions of Sun Java on my system. Any "point" version needs to be updated to its most recent one. For example, the only currently secure versions of Sun Java JRE are version 5 update 12 and version 6 Update 2 (also known as 1.5.0_12 and 1.6.0_02)

Personal information security

I got some new ideas on improving security of my personal information from tips emailed to me at work. Use the tips below to better protect your personal information:
  • When printing checks, print only your first initial and last name. A check forger will not know what first name to use.
  • Do not list your phone number on a printed check. Write it in by hand, but only when required.
  • Do not sign your credit cards, despite the instruction on the card to do so. If your card gets stolen, a signature is a great find for a forger. Instead, use pen to write on the signature line, "Require Photo ID." It helps.
  • Photocopy both sides of your driver's license, all credit cards, etc. If any get lost or stolen, you have a fast memory jog, including the emergency numbers to call.
  • Fill in only the required parts of an online form. The more information you reveal, the greater the chance of its misuse.

Thursday, August 16, 2007

Health by Google?

Google has ambitious plans in expanding its easy-to-use applications to Google Health. One thing that concerns me is the potential for harvesting of personal medical data.

Google can't be 100% attack-proof, no matter how security-conscious they are. So I'd expect that eventually a hacker would break into at least some people's health information.

Also, you give a doctor access to your online profile (medical history, medicines, allergies, operations, symptoms, etc.). So do they get a one-time password entry or would you have to change your password after every such access (yuk!)?

Google now packs StarOffice

Google has announced that it will include Sun's StarOffice as a free download as part of Google Pack. Previously, a StarOffice download form Sun cost $70. Since Google let's you select exactly which apps you want as part of Google Pack, this is a no-brainer.

If you are an average home user, why pay for Microsoft Office when you buy a PC? Just download StarOffice as part of Google Pack.

I'll shortly be ordering a computer for a relative and stocking it with apps. Below are the programs I'll pick from Google Pack:
  • FireFox with Google Toolbar
  • Adobe Reader
  • StarOffice
  • Picasa
  • Google talk (this only because the relative is not a Gmail user).

Saturday, July 21, 2007

Battle of the mappers

Microsoft's "Local Live" map site includes some "Bird's Eye" views that are of high quality. Not all areas of even major cities are covered by the "Bird's Eye feature, though. Also, some of the images are of lower quality than those of Google Maps. Overall, I like Google Maps the best.

Both Microsoft and Google have a map view that shows roads plus satellite. Between the Google "hybrid" view and Microsoft's "aerial", I prefer Google's.

Quiz: Identity theft potential

National Public Radio's web site has a quiz that tells you what your chances are of becoming an identity theft victim. Dare to take it?

Wednesday, July 04, 2007

Microsoft Malware Protection Center

Microsoft offers a security portal page called "Microsoft Malware Protection Center". It lists and links to the top 10 most active malicious software families, most active family variants, most active email threats, and spyware/adware removed from PCs.

The site officially launches in "early July", but the links to threat information are already active.

Wednesday, June 13, 2007

Climate Savers Computing

AMD, Dell, the EPA, Google, Intel, Microsoft, the World Wildlife Federation and others have joined in a common goal to reduce power consumption by computers. The goal of the Climate Savers Computing Initiative is to reduce power consumption by 50% by 2010.

A specific target is a 90% efficiency for computer power supplies. This change alone would reduce greenhouse gas emissions by millions of tons per year and save over $5 million in energy costs.

Monday, May 07, 2007

Another PC protection layer

Even firewalls can let in exploit code from malicious (or hacked) web sites. That's where LinkScanner (and its paid subscription brother LinkScanner Pro) from Exploit Prevention Labs (XPL) comes in. LinkScanner checks the results of searches and shows icons that reflect the safety of the site. Hovering your mouse cursor over an icon adds details.

CNET and PC Magazine both have reviews of LinkScanner and the Pro version. As they both advise, it checks well for exploits, but rely on other software to plug the holes in detecting phishing sites. LinkScanner works with FireFox, Internet Explorer, and Opera.

A recent article in USA Today on web page exploit attacks describes some traps that hackers set on a broad range of web sites. LinkScanner appears to be one more layer you should have in your multi-layered defense of your computer.