|
| Facebook Warns Members About Rise in '419' Scam |
| Wednesday, September 30, 2009 |
More and more fraudsters are harvesting the log-in data of Facebook members in order to impersonate them and ask their friends for money, according to the social-networking company. The scammers use phishing techniques to trick Facebook members into providing log-in information. For example, fraudsters often send legitimate-looking e-mail messages purporting to be from Facebook that ask members to visit a Web page and enter their log-in credentials. They also post messages on members' profile Walls with links to supposed video clips or photos that really lead to phishing Web sites. Once scammers can log in to someone's Facebook account, they often engage in what Facebook calls a "419" scam: pretending to be the member, they send messages to the person's friends asking for money. In a "419" scam, fraudsters usually ask that the money be wired to them using Western Union, saying they're stranded and penniless in a foreign country. There has been an increase in "419" scams recently, although the number of Facebook members who have been affected remains low, the company said Tuesday in its official blog. Facebook is working with Western Union to raise awareness about the scam, implementing technical measures to better detect and deal with the issue and collaborating with law enforcement agencies and e-mail providers to identify the criminals. It's no surprise that cyberthieves are attracted to Facebook, where more than 300 million members worldwide post a lot of personal information, much more than on other sites. If malicious hackers gain access to someone's Facebook profile, they will likely learn not only the person's full name, but probably also their date of birth, place of employment, education history, marital status, phone numbers and addresses, as well as get the chance to contact hundreds of family members, friends and professional acquaintances. Even if someone's Facebook account isn't compromised, security experts warn people to be careful about the information they post on their profiles and who they share it with. Although Facebook gives its members very granular access controls over their profile content, the company has admitted that its privacy features can be confusing to understand and complicated to manage. For that reason, Facebook announced in July that it would simplify its privacy options, an initiative that is still in progress. Labels: Facebook |
by Sajin George on 9:58 PM
  |
BACK TO TOP
|
|
|
| Five Reasons to Dive Into Google Wave |
|
 Google is inviting another 100,000 people to play in the Google Wave test pool. The developing duo of Jens and Lars Rasmussen envision Wave revolutionizing online communication and collaboration. I am not sure it will be revolutionary, but at first blush it seems at least evolutionary and worth taking a closer look at. Google Wave is part social networking, and part unified communications, and all Google. Wave combines email, instant messaging, blogging, document sharing, wikis, and multimedia content to provide a seamless communications platform. Unless you're one of the lucky (relatively) few invited by Google, you can't play with Wave just yet. But, I'll give you five reasons you should be anxiously looking forward to giving Google Wave a try: 1. Single Point of Access. Many of the functions of Google Wave already exist, but require logging into separate applications- email, instant messaging, office productivity, blogging, etc. Google Wave will provide you with one platform that ties all of these separate applications together. 2. Next-Generation Communication. A Wave is part email, part instant message, and part document. It combines text, photos, video, maps, and other elements into a single communication stream, enabling richer, more dynamic conversations.
Wave really blurs the line between the various methods of communication you are used to. You can instantly add new participants to a wave by dragging them from your contact list. You can also link to other waves, photos, and other content elements by simply dragging them into the wave. 3. Real-time Sharing and Collaboration. Arguably the most compelling aspect of Google Wave is the real-time collaboration functionality. Wave participants can comment inline and the statements are accompanied by the user's avatar and a timestamp allowing you to easily identify who said what, when.
Users can see text appear in the wave as it is being typed- even as they typo and backspace to correct the text. Wave participants can view and edit the same content at the same time-collaborating in real-time.
Even cooler is the Playback function which allows new participants who just joined the wave to play the wave stream back post by post. They can add comments and edit text as they go through the stream and get caught up on their own schedule so they can join the real-time conversation. 4. The Wave Lives On. A wave is like an email or instant message on steroids. The entire wave has a life of its own. Participants on the wave are notified as the wave is updated or modified, and the wave can be easily searched based on any content of the wave-dynamically updating potential results as you type.
You can link to waves from other email and instant messaging clients, and you can also embed waves within web sites or social networking services using Google Wave API's. 5. Its in the Cloud. One of the things that Google has always brought to the table is Web-based access. Not only is it nice to combine email, instant messaging, and other online communications in one place-it is also nice to be able to access the platform seamlessly from anywhere in the world. Have Web access? You can Wave. It still remains to be seen if Google Wave is a competitor for social networking sites like Facebook and Twitter, or if it's a unified communications tool competing against Microsoft and Cisco. If it's as revolutionary as Google makes it sound, perhaps it is all of the above and none of the above at the same time. Labels: Google Wave |
by Sajin George on 9:54 PM
  |
BACK TO TOP
|
|
|
| Microsoft says automated 'Fix it' is working |
|
Microsoft says that rather than struggle to fix their own PC problems, computer owners have proved themselves more than willing to just click a "Fix it" button and let the computer take care of itself. Since about January, Microsoft has been adding the automated fixes for an array of PC problems for which there is a single known solution. In the past six months, it has added more than 300 "Fix its" to automate the steps needed to solve problems, change settings, and even protect against viruses. Recently, Microsoft used the approach to help people defend against a serious unpatched flaw. "If we know what those 15 steps are, why shouldn't we just script it," Lori Brownell, Microsoft's general manager of product quality and online support, said in a February interview. The effort is working, Microsoft said this week, noting that more than 7 million people have used the automated fixes and in 95 percent of cases, the "Fix it" button completely solved the issue. Microsoft said the fixes are now available in 23 languages and have shown up in the company's advertising. There's even a "Fix it" page on Facebook and a feed on Twitter. Labels: Microsoft |
by Sajin George on 9:49 PM
  |
BACK TO TOP
|
|
|
| Dell brings wireless recharging to laptops |
|
That Dell is releasing a new laptop for business customers is the opposite of surprising. But the fact that it contains notable features not seen in any other laptops certainly is. Most everything about the new Latitude Z is expected: It's yet another very thin notebook (a metric which PC manufacturers keep using to try to one-up each other), with a different kind of exterior finish (soft-touch, in this case), and comes in a black cherry. It measures 16 inches across, and is 14 millimeters thin at its most narrow point. But you probably wouldn't guess that the Latitude Z charges wirelessly. And as far as we can tell, it's the first laptop to do so. Surprised that this is coming from Dell? You're not alone. The wireless charging is handled elegantly enough. An inductive pad that's built into a laptop stand can accomplish a full recharge in "about the same amount of time" as a standard-issue cabled charger, according to Dell. While smartphone maker Palm has a similar (albeit smaller) wireless charging system for the Pre, and companies like Visteon and Wild Charge have debuted wireless charging accessories for phones, no PC maker has incorporated the idea until now.  The wireless charging stand. (Credit: Erica Ogg/CNET) It's part of what Dell is terming its new "wireless eco-system." Besides being able to get juice without wires, the Latitude Z will also be able to dock without them. A smaller separate adapter can hook up the laptop with any accompanying monitor, whether it be one in a cubicle, or in a conference room. Both cost extra, and are by no means cheap ($199 for each), but the intention is for companies to buy, not necessarily individual consumers. Other cool things Dell is introducing: touch-sensitive controls on the screen's bezel, and its first take on "instant on." The sliding touch controls--not visible to the naked eye--are located on the right side of the bezel and appear when contact is made. Any controls can be customized and placed there, such as screen brightness, volume, or easy access to specific applications. When controlling an application like Excel or a Web browser, the right side of the bezel can be used as a sort of touchpad for scrolling through a spreadsheet or Web page. The instant-on capability works exactly the way it sounds. Instead of waiting for Windows to boot up, the computer uses a second smaller motherboard and a separate ARM processor. Through a separate, non-Windows interface, it allows e-mail, contacts, calendars, and a Firefox-based Web browser to be accessed right away. E-mail, contacts, and calendars are always running in the background and are constantly being synced. The ARM processor doesn't have access to the main motherboard or the ports, which should alleviate security concerns, according to Todd Forsythe, vice president of Dell's commercial client product group. The secondary processor--used mostly in smartphones--also draws much less power than a more robust desktop or notebook processor and so while it's running in the background it doesn't drain the battery as fast: using just the instant-on mode will provide up to two days of battery life; when using Windows and the accompanying Intel Core 2 Duo processor, it will get four hours. Companies like DeviceVM and Phoenix have built businesses out of instant-on capabilities--basically a quick-booting interface built right into the computer's BIOS that isn't dependent on Windows. Dell said it decided not to go with either of those because they wanted to use the separate low-power processor for the background syncing. What Dell, and DeviceVM, and Phoenix, and plenty of others are doing is part of a trend that's gaining steam: doing a sort of end-run around Windows. HP came out with its own interface on Touchsmart PCs last year that allows for quick sorting between photos, e-mail, and Web browsing on a few models. Lenovo recently introduced a new touch-screen interface for its tablet, and Asus has its own for its popular Eee PC Netbooks and touch-screen desktop called TouchGate. Most people aren't used to seeing Dell trying new things like this, some of it actually ahead of competitors. Last year, we wrote about how Dell was starting to be a little more risky about the types of products it was trying out. Not new to the market, just new to Dell, which has traditionally had a habit of waiting, analyzing the market's response to new products, and jumping in later with a more efficient, and less expensive way of making that product. But that way of doing things is over for Dell now. The company has struggled to find the right mix of products and now has less opportunity to be picky. But it's a good sign that the company is trying out smaller, more innovative, and more practical ideas like wireless charging, docking, instant on, and touch interfaces. Though it's only in the Latitude Z right now, we hear these features are stirring a lot of interest in other product groups at Dell. It's easy to see how, for a cheaper price (the Z starts at $1,999), these new features could find much broader acceptance with retail customers. Labels: Laptop |
by Sajin George on 3:45 PM
  |
BACK TO TOP
|
|
|
| Malware worldwide grows 15 percent in September |
|
A rise in malware has caused the number of infected PCs worldwide to increase 15 percent just from August to September, says a report released Tuesday from antivirus vendor Panda Security.Across the globe, the average number of PCs hit by malware now stands around 59 percent, an all-time high for the year. Among 29 countries tracked, the U.S. ranked ninth with slightly more than 58 percent of its PCs infected. Taiwan hit first place with an infection ratio of 69 percent, while Norway came in lowest with only 39 percent of its PCs attacked by malware. The study found that in the U.S., Trojans and Adware were the two most pernicious types of malware, followed by worms and viruses. "This is a clear sign that hackers are becoming more and more sophisticated," said PandaLabs Technical Director Luis Corrons. "Cybercriminals have found news ways to spread their creations, frequently exploiting the latest news stories to launch attacks through social networks, videos, and e-mail. The huge amount of Trojans in circulation is due to the spectacular increase in the number of banker Trojans aimed at stealing user data."The company based its results on data taken from users who scanned their PCs with the free Panda ActiveScan online tool. The results for September were gathered from August 28 to September 28 and compared with the results from July 28 to August 27. Labels: Malware |
by Sajin George on 3:39 PM
  |
BACK TO TOP
|
|
|
| Microsoft Security Essentials Launches Tuesday |
| Tuesday, September 29, 2009 |
If you can't wait to get your hands on Microsoft's upcoming free antivirus app, and you missed the limited public beta period, you won't have to wait any longer. Microsoft has confirmed that its Security Essentials antivirus software will be publicly available tomorrow, September 29. The download isn't yet available as of this writing, but you'll be able to get it from Microsoft's Security Essentials site. It'll be avaliable for users of Windows XP, Vista, and 7. Microsoft first announced Security Essentials--code-named "Morro"--late last year, as a free replacement to the paid Windows Live OneCare. The announcement shook up the free antivirus market, and led some to wonder if Microsoft would ultimately end up dominating the desktop security market. In late June Microsoft offered a limited public beta of Security Essentials. In my initial hands-on, I found the Security Essentials beta to be well designed and easy to use. The main interface uses a single window with four tabs, and a color-coded status bar across the top, so you can see if your PC is protected at a glance. The Security Essentials public beta also took fourth place in our recent roundup of free antivirus software. Microsoft Security Essentials beta detected 97.8 percent of malware in tests conducted by AV-Test.org, which is decent score compared to other, similar free antivirus tools. Malware scans were a bit on the sluggish side, though, taking longer to scan than a number of competing products. But Security Essentials has a lot going for it, though it isn't perfect. As our reviewer Erik Larkin put it when he looked at the beta, "If Microsoft can improve the detection rate a bit--and rev up the scan speed more than a bit--before the program's final release, Security Essentials could turn out to be a real contender in the free antivirus arena". Labels: Microsoft |
by Sajin George on 3:08 PM
  |
BACK TO TOP
|
|
|
| 3 ways to simplify your PowerPoint presentations |
| Saturday, September 26, 2009 |
Microsoft Office PowerPoint is a terrific medium because it allows you to reinforce your message with visual prompts. But too often, the power of PowerPoint is lost because the speaker doesn't use it to help viewers focus on the message. Instead, PowerPoint itself becomes the focus. If you want to feel more relaxed and confident the next time you're using PowerPoint to deliver a presentation, try these three tips to maintain the focus on your topic-not the medium. Be consistent on all pages by using the Master View If you're tired of typing the date, presentation title, or page number on every page in your presentation-or changing bullet styles and indentations-listen up. PowerPoint will do this for you! The Master View feature allows you to enter information once on either the title page or an interior slide page. Once entered, the information is used consistently throughout the presentation, and remains there until you change it. I use this feature in every presentation I create. It makes my life a little easier to know that each page will be consistent without much effort on my part. Let's take a look specifically at how PowerPoint can automatically take care of the date, footer, and page numbers for you. From anywhere within your presentation, go to the View menu, click Master, and then click Slide Master. You will now be in the Master View mode, as shown here.
Note four key areas in this view, which shows you the presentation's title page. -
On the slide itself are two large boxes that allow you to edit the Master title and subtitle styles. Less obvious are three remaining areas, which I've circled in red. -
In the left navigation bar, you will see two thumbnail slides. One is the Title Slide view, and above it is the slide view for the rest of the interior slides. In the example above, you can see that I have selected the Title Slide. -
A small, useful toolbar called Slide Master View appears as well. In this article we use only Close Master View. -
Finally, note the bottom portion of the slide. It shows the date, footer, and number areas. To include the date from the Master title page: -
In the Date Area box, highlight </DATE time>and enter the date you wish to use. -
Click Close Master View on the toolbar. You should now see the date automatically noted on your title page, as shown below.
To make similar changes on slide pages that follow the title page, simply select the slide page thumbnail on the left within the Master View. You can then make changes to the bullet styles and indentations PowerPoint automatically sets up for you. Don't like a bullet color? Select the interior slide Master View and change it to the color you want. The example below shows some of the items you can change on the Master slide.
Tip Page numbers are added by default. However, if you want to remove page numbers from your presentation, remove <#> from the Number Area. Note If you want a date to appear on both your title and interior slide pages, you must edit each page type from within the Master View. Reinforce your message with automated charts and graphs You've probably seen presenters who have very cool graphs and charts within their presentation. You can import these from other programs such as Microsoft Office Excel, but did you know you can perk up your slides without importing from those programs? People retain information in different ways-by reading text, by seeing graphical representations, and by listening to what you say. So, if you want your audience to really remember your message, it's important to learn to create at least simple charts or graphs in PowerPoint. With the automated formats it provides, you have literally dozens of ways to build a unique presentation and make your message memorable. To insert a chart or graph in your presentation: -
Go to the Insert menu, and click Chart. PowerPoint will drop in a preformatted basic chart for you. If you like the format it chose, simply type in the text you need in the datasheet box provided for vertical and horizontal axis. Click anywhere on the slide and your chart will appear on the slide with your information. That's it!  -
To change the format, right-click within the chart. In the example shown, you would right-click the area outside the colored bars, but still within the chart-not in the datasheet box. You'll know you've clicked the correct spot because you will see the menu below pop up. If you don't, move your cursor to a different spot and keep trying until you see this menu.  -
On the menu that appears, click Chart Type to choose from 34 different chart options such as bar, pie, and bubble. Note You can choose from Standard or Custom Types. -
Once you have selected a Chart type and option, choose a Chart sub-type you like. (Each chart option offers several different color and visual styles.) Want to see the style in a larger view? Select Press and Hold to View Sample. Note Custom Type charts do not have this viewing option.  -
Once you have made your selection, click OK. -
Type in the text you need in the datasheet box provided for vertical and horizontal axes. Click anywhere on the slide and your chart will appear on the slide with your information. 
Jump easily between pages If you didn't know how to use a hyperlink, you wouldn't be reading this online article. You may already use hyperlinks for quick and easy access to the Web if you are connected to the Internet while making your presentation. Too often, however, a cool way to use hyperlinks within a presentation is overlooked. It happens when presenters include additional information at the back of a presentation as "back up" slides and then never refer to them because it's too difficult to navigate to the end and return to the main portion of the presentation. But if the information is important enough to reference in back up, why ignore it? With PowerPoint hyperlinks, you don't have to because it's easy to jump between slides. To insert hyperlinks between slides in your presentation: -
Locate the first slide you will be on when you want to briefly jump to another slide. On this slide, highlight the word or phrase that is the most obvious descriptor of the second slide. On the Insert menu, click Hyperlink.  -
In the Insert Hyperlinks dialog box, under Link to, click Place in This Document. -
Under Select a place in this document, click the slide to which you want to jump. Use the Slide Preview to ensure that you are selecting the correct page. Click OK. Your hyperlink is now in place on the text and page you selected. Note Trying to check whether your link works? Hyperlinks can only be used in the View Show mode.  -
The final step in this process is to go to the second slide you selected (in this example, page 3) and insert another hyperlink that allows you to jump back to the first slide. Follow steps 1-3 to do this. Once complete, you now have two hyperlinks within your presentation that allow you to move back and forth between slides like a pro. |
by അല്പന് on 12:36 PM
  |
BACK TO TOP
|
|
|
| Find information faster: Organize your computer |
|
If you've been using your computer for more than 6 months, it's probably safe to say that you don't need all the files and e-mail messages stored there. When left untreated too long, an unorganized computer will perform slower and make it more difficult for you to find the information you need. If that's the case, it's a great time to make sure your computer is cleaned up and ready to roll for your next upcoming project or assignment. This article can help you get started. Clear out your old, unnecessary files So how long should you keep old files on your hard drive? It's kind of like cleaning out a closet?if you haven't used a particular file (or sweater) in a year, you're pretty safe storing it somewhere else. How can you tell how old a file is? Rest your mouse cursor over the file to see when it was last modified. For more information right-click the file, and choose Properties. You can see when the file was created, last modified it, and most recently accessed. If a file is old, not important, and hasn't been accessed in more than 6 months, it might be time to clear it out. You're the best judge to determine which files to keep, but here is a list of items you might want to consider saving: -
Tax and legal information -
Project-related files -
Favorite digital images from the year -
Plans you could leverage for future projects -
Important e-mail messages -
Customer information
By looking at the properties of a file you can see when the file was created, last modified it, and most recently accessed. Once you've gotten rid of your files, learn 7 ways to manage your files better.
Tip To view your files in a folder by the date they were last modified, open a folder and on the View menu click Details. On the top of the column, clickDate Modified.
Quickly find old files by organizing them by the date they were modified. Back up important files The next step is to copy selected files to another storage medium, such as a writeable CD or DVD or an external hard drive. For your most important files, such as project files, key presentations, or large e-mails, you'll rest a lot easier if you have a backup copy stored safely away from your computer. Backing up your files to CD or DVD will allow you to safely store these disks should you happen to lose your computer or if it should fail. To back up your files it's ideal to have a CD or DVD burner or a hard drive you can connect to your computer through a USB or FireWire port. Learn more about how toback up your files with Windows XP. Also, learn more about how to back up your Microsoft Office Outlook 2003 e-mail messages.
Tip If you're backing up your information to a CD or DVD, be sure to create labels for your CDs that in some way describe their contents. For example, you might title the CD "2005 Archive" or be more specific with something like "2005 Presentations." Clean out your e-mail Do you have a system for weeding out and organizing your old e-mail messages? Here are a few quick ideas for taming your Inbox and getting ready to handle those messages in the months to come: -
Create folders to store messages according to sender, topic, or date. -
Create e-mail rules to file and manage your messages automatically. For example, you can create a rule to send all messages from your manager to a special folder. Learn more about managing e-mail messages with rules. -
Go through your Sent folder in Outlook in and delete items you no longer need (especially those with large file attachments). -
If you're sure you no longer need e-mail you've deleted, empty the folder that contains it. For more help keeping your e-mail in check, learn 4 ways to take control of your e-mail Inbox. Or watch a demo about how to manage the size your Inbox. Organize and clear out your Internet files If you're like the average person, you've been doing a lot of Web searching and your Internet Explorer Favorites folder may be bursting at the seams. It could probably use some weeding out and organizing. To organize your Favorites in Internet Explorer, on the Favorites menu, click Organize Favorites. While your tending to your Favorites folder there's some additional clean up that's easy to do. Start Internet Explorer and on the Tools menu click Internet Options. In the General tab of the Internet Options dialog box, you have two cleanup choices. These steps can help reduce some unnecessary files on your computer. -
In the Temporary Internet files section, click Delete Files to remove all temporary files. (You can also elect to remove all offline content downloaded from sites you've visited.) -
In the History section, click Clear History to remove the list of sites you've previously visited. Also make sure that you have the Days to keep pages in history: set to where you would like it.
Clear out Internet Explorer using some of the options on the Internet Options dialog box. |
by അല്പന് on 12:30 PM
  |
BACK TO TOP
|
|
|
| Working wirelessly: What you need to know |
|
Many companies are making the leap to wireless networks in the office for both financial savings in overall equipment and sheer convenience for their employees. They also often provide mobile PCs with wireless capabilities to their employees so that they can be productive anytime anywhere, hence enhancing the company's bottom-line. In this article, I will explain what WiFi is and how it works. I will also discuss what you need to start working wirelessly as well as what you can expect to gain from doing so. Finally, I'll discuss the precautions you should take when working on the go. What is WiFi? Learn the lingo Wireless, or WiFi, technology is another way of connecting your computer to the network using radio frequency and no network cables. Wireless works similarly to cordless phones; they transmit data from one point to another through radio signals. But wireless technology also requires that you be within the wireless network range area to be able to connect your computer. There are three different types of wireless networks: -
Wireless Local Area Network (WLAN): WLAN are wireless networks that use radio waves. The backbone network usually uses cables, with one or more wireless access points connecting the wireless users to the wired network. The range of a WLAN can be anywhere from a single room to an entire campus. -
Wireless Personal Area Network (WPAN): WPANs are short-range networks that use Bluetooth technology. They are commonly used to interconnect compatible devices near a central location, such as a desk. A WPAN has a typical range of about 30 feet. -
Wireless Wide Area Networks (WWAN): WWANs are created through the use of mobile phone signals typically provided and maintained by specific mobile phone (cellular) service providers. WWANs can provide a way to stay connected even when away from other forms of network access. Also, be aware that additional charges are often associated with the usage of WWANs in some locations. How do I get started? The only thing you really need to go wireless (in addition to a mobile PC) is a wireless PC Card. Depending on the age of your mobile PC, the card is either built-in or needs to be inserted in the PC Card slot and includes an antenna. In addition, you can also use wireless keyboards and mice, which can provide more freedom and flexibility when you're working in your office. It's always good to research the available hotspots in the area you're planning on visiting (whether a neighborhood in your city you're not familiar with or a city on the other coast). Locate hotspot identifiers using the links at the bottom of this article,hook up to a wireless hotspot. As you head out in this brave new world of wirelessly connectivity, here are the steps to follow to connect to a wireless network (whether at home, at work, or on the go): -
Locate available networks: Right-click the wireless network connection icon in your taskbar, and then click View Available Wireless Networks.
Find the wireless network you can use. -
Connect to one of the available wireless networks in range: In the Wireless Network Connection dialog box, click the name of the network you want to connect to and click Connect.
Choose the wireless connection you want to use. Note If you're using Windows XP SP2 and the network you're connecting to is security-enabled but does not support Windows Provisioning Service, you may be prompted to enter a key. -
Get things done: Windows XP will briefly change the network's connection status to Acquiring Network Address, and then to Connected. You are now free to surf the Web, download and respond to e-mails, or put the final touches to the presentation you'll be giving later in the day. Working wirelessly: What's in it for me Working wirelessly can offer you the following benefits. -
Flexibility: The lack of cables that comes with wireless networking enables you to roam with your mobile PC. You can roam from your office to a nearby conference room for a meeting, or from the couch in the living room to a kitchen for a snack. For example, if you're working wirelessly in a meeting you can printout a report for a co-worker without having to leave the meeting. -
Time-saving: If you're waiting for an important response you can use your mobile PC to monitor your e-mail even when you're in meetings or at lunch. As soon as you get the data needed, you can promptly forward it to your customer rather than wondering whether the information has come in while you were away and having to run back to your office between meetings and other commitments. -
Increased productivity: Working wirelessly enables you to turn down times between meetings or while in transit into productive time. For example, you may be attending a conference and just found out that one of the sessions you were planning on attending has been cancelled. Rather than waste the next hour, you can check e-mail, start compiling your trip report, or order your son's birthday present. -
Easier collaboration: Using wireless mobile PCs, you can easily share files and information with others. For example, you can collaborate on a presentation with colleagues during a flight delay in an airport lounge, or you can share the syllabus of a course while attendees so that they can take more digitally during the class. What should I worry about when working wirelessly? When working wirelessly from hotspots and public places, you are responsible for ensuring the security of your files and your mobile PC. To make network access easier for their users, public hotspots typically leave all security turned off. This means that any information you send from a hotspot is most likely unencrypted, and anyone within range of the wireless LAN-whether at a next table or in the parking lot-can access and use your Internet connection, and look at your unprotected information. For more information, see tips for working securely from hotspots. WiFi gives you the freedom to go anywhere and still be connected to your office, your family, and other important aspects of your life. Your virtual office can now be a ice cream parlor in a seaside resort. Embrace and enjoy the flexibility that WiFi affords you. |
by അല്പന് on 12:27 PM
  |
BACK TO TOP
|
|
|
| Microsoft Security Advisory (975191) |
| Saturday, September 12, 2009 |
Vulnerabilities in the FTP Service in Internet Information Services Executive Summary Microsoft is investigating new public reports of vulnerabilities in the FTP Service in Microsoft Internet Information Services (IIS) 5.0, Microsoft Internet Information Services (IIS) 5.1, Microsoft Internet Information Services (IIS) 6.0, and Microsoft Internet Information Services (IIS) 7.0. The vulnerabilities could allow remote code execution (RCE) on systems running FTP Service on IIS 5.0, or denial of service (DoS) on systems running FTP Service on IIS 5.0, IIS 5.1, IIS 6.0 or IIS 7.0. Microsoft is aware that detailed exploit code has been published on the Internet for these vulnerabilities. Microsoft is currently aware of limited attacks that use this exploit code. Microsoft is actively monitoring this situation to keep customers informed and to provide customer guidance as necessary. We are actively working with partners in our Microsoft Active Protections Program (MAPP) to provide information that they can use to provide broader protections to customers. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs. These vulnerabilities were not responsibly disclosed to Microsoft and may put computer users at risk. We continue to encourage responsible disclosure of vulnerabilities. We believe the commonly accepted practice of reporting vulnerabilities directly to a vendor serves everyone's best interests. This practice helps to ensure that customers receive comprehensive, high-quality updates for security vulnerabilities without exposure to malicious attackers while the update is being developed. Issue References For more information about this issue, see the following references: Affected and Non-Affected Software This advisory discusses the following software. Affected Software | Microsoft Windows 2000 Service Pack 4 | Microsoft Internet Information Services 5.0 (FTP Service 5.0) | | Windows XP Service Pack 2 and Windows XP Service Pack 3 | Microsoft Internet Information Services 5.1 (FTP Service 5.1) | | Windows XP Professional x64 Edition Service Pack 2 | Microsoft Internet Information Services 6.0 (FTP Service 6.0) | | Windows Server 2003 Service Pack 2 | Microsoft Internet Information Services 6.0 (FTP Service 6.0) | | Windows Server 2003 x64 Edition Service Pack 2 | Microsoft Internet Information Services 6.0 (FTP Service 6.0) | | Windows Server 2003 with SP2 for Itanium-based Systems | Microsoft Internet Information Services 6.0 (FTP Service 6.0) | | Windows Vista, Windows Vista Service Pack 1, and Windows Vista Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 6.0) | | Windows Vista x64 Edition, Windows Vista x64 Edition Service Pack 1, and Windows Vista x64 Edition Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 6.0) | | Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 6.0) | | Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 6.0) | | Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 6.0) | Non-Affected Software | Windows Vista, Windows Vista Service Pack 1, and Windows Vista Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 7.5*) | | Windows Vista x64 Edition, Windows Vista x64 Edition Service Pack 1, and Windows Vista x64 Edition Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 7.5*) | | Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 7.5*) | | Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2 | Microsoft Internet Information Services 7.0 (FTP Service 7.5*) | | Windows 7 for 32-bit Systems | Microsoft Internet Information Services 7.5 (FTP Service 7.5) | | Windows 7 for x64-based Systems | Microsoft Internet Information Services 7.5 (FTP Service 7.5) | | Windows Server 2008 R2 for x64-based Systems | Microsoft Internet Information Services 7.5 (FTP Service 7.5) | | Windows Server 2008 R2 for Itanium-based Systems | Microsoft Internet Information Services 7.5 (FTP Service 7.5) | |
by അല്പന് on 10:44 AM
  |
BACK TO TOP
|
|
|
| Intel Processors |
|
Laptop Processor Families Work or play-anywhere life takes you-with the power, performance, and flexibility of our laptop processor technologies. Not sure which one is right for you? Compare laptop processors Great gaming performance that goes anywhere and everywhere. Unplug and enjoy great performance in more places. Accomplish more in more places with outstanding wireless performance.?1 Get freedom and flexibility to work and play on the go. The reliable choice for more than 15 years. Good value and trusted technology come together here. | | Desktop Processor Families Find a perfect desktop computer, whether you're a multimedia enthusiast, hardcore gamer, multitasker, or just want everyday computing. Not sure which one is right for you? Compare desktop processors Conquer extreme gaming with the fastest PC processor on the planet?: the Intel� CoreT i7 processor Extreme Edition. Intel's leading-edge PC processor, for unmatched intelligent performance. New intelligent performance for fast multitasking at work or at play. Great performance that pulls you into the game. Experience smooth multitasking, sharp HD video playback and other tough jobs. A mainstream processor that isn't limited to mainstream performance. The classic processor from the global leader in PC processor technology. Get good value from the world leader in PC processors. | | Internet Device Processor Families Enjoy Internet activities such as email, web surfing, or social networking on small and portable devices. Not sure which one is right for you? Compare Internet device processors Take the Internet with you in a small and powerful device you can fit in your pocket.? Enabling simple devices designed just for using the Internet and email. Enabling desktop computing devices designed just for using the Internet and email. | | | | | | |
Labels: Processors |
by അല്പന് on 10:25 AM
  |
BACK TO TOP
|
|
|
| Chrome extensions arriving in developer version |
| Thursday, September 10, 2009 |
Support for extensions to customize Chrome, the top-requested feature for Google's browser, has begun arriving for adventurous users. Previously, extensions worked only for those who enabled the feature with a command line switch. Now the feature is enabled by default in the developer preview version of Chrome on Windows, Aaron Boodman, the Google engineer who oversees the extensions work, said in a blog post Wednesday. "We're ready for a few more people to start using extensions--the kind of adventurous people who populate the dev channel," said Boodman, who earlier in his career developed the Greasemonkey tool that permitted extensive customization of Firefox. Work is already under way for some popular extensions, including Yahoo's Delicious for social bookmarking and Xmarks for bookmark synchronization. Extensions are enabled by default only for Chrome's Windows users right now. "We've also enlisted some help to get extensions up to speed on Mac and Linux," Boodman said. The extension-programming interfaces have been changing, and more changes are coming to the user interface. Those who want to start developing extensions should look at the new Chrome extension documentation. Chrome extensions are written with the same programming technologies as are used for Web pages themselves--HTML, CSS, and the like. Mozilla has a related extension effort called Jetpack under way for Firefox. Labels: Chrome |
by Sajin George on 8:14 AM
  |
BACK TO TOP
|
|
|
| Close to Patch Tuesday, New Flaw Surfaces |
| Wednesday, September 9, 2009 |
As Microsoft prepares to release patches, researchers said they've seen exploit code for a new flaw that puts organizations using Vista and Windows 7 at great risk.
The flaw lies in a driver used for the Samba file-sharing feature in Windows, said Bojan Zdrnja, a handler for the SANS Internet Storm Center. Exploit code was released around 11 p.m. U.S. Eastern time, he said.
Zdrnja said he tested the exploit code and it works on fully patched Vista machines running Service Pack 1 or 2 as well as Windows 7. It may also affect Windows Server 2008. When successfully attacked, the exploit will cause the targeted machine to crash.
"You get the blue screen of death," Zdrnja said.
Researchers don't know yet if the flaw is remotely exploitable, he said. Just one malicious packet is needed to crash a machine. Most PCs on internal networks keep port 445 open, which is used for file sharing.
That's dangerous, since if a hacker already has access to a compromised computer within the network, it would be possible to crash all the other machines, Zdrnja said. Administrators should disable access to the port.
Home users usually have that port open, too, Zdrnja said. But for users who join a public Wi-Fi network, Windows will ask if it is a public network and, if it is, then block port 445.
A module for the exploit has already been created for Metasploit, a hacker toolkit used to attack PCs, Zdrnja said.
Microsoft is due to release its five patches on Tuesday, all for "critical" flaws, the company's most severe threat rating. Zdrnja said it's not known if this latest flaw will be addressed.
If it isn't patched on Tuesday, Zdrnja said the flaw is so potentially harmful that he would not be surprised if Microsoft did an off-schedule patch release. Labels: Microsoft |
by Sajin George on 7:54 AM
  |
BACK TO TOP
|
|
|
| Microsoft Patches Critical MP3 Flaw |
|
Today's Patch Tuesday fixes from Microsoft include six critical bulletins that head off potential attacks involving poisoned media files and Web pages, along with wireless and TCP/IP security holes. An under-attack FTP flaw remains unfixed. Two patches, MS09-045 and MS09-046, fix vulnerabilites that could allow attack code hidden on a Web page to run any command on a vulnerable computer. The first shores up multiple versions of the JScript Scripting Engine and is rated critical for Windows 2000, XP, Server 2003, Vista and Server 2008 (except for Windows Server R2 for x64 and Itanium systems). The second closes a hole in the DHTML Editing Component ActiveX control, and is considered critical for Windows 2000 and XP, and moderate for Windows Server 2003. Windows Vista and Server 2008 aren't affected by the ActiveX flaw. A third bulletin addresses a critical hole in the Windows Media Format that can hand over control of a vulnerable PC if you view a poisoned .mp3, .wma or .wmv media file, according to Symantec. The MS09-047 patch is critical for numerous combinations of the Windows Media Format Runtime or Windows Media Services on Windows 2000, XP, Server 2003, Vista and Server 2008. Microsoft's bulletin lists the full array of potential OS and software combinations, but Itanium-based systems running either Windows Server 2003 with SP2 or Server 2008 are not vulnerable. Fourth comes a fix for potential attacks over the network using malicious TCP/IP packets. A firewall will mitigate the risk by blocking TCP/IP packets from unknown Internet sources. The MS09-048 bulletin is critical for Windows Vista and Server 2008 systems, which could be taken over by a successful attack. The flaw is only rated important for Windows Server 2003 and Windows 2000, as an attack against those OS's would likely only cause a crash. However, there is no patch available for Windows 2000 - Microsoft says a fix would require rearchitecting large parts of the OS and is "infeasible." The final critical patch corrects a problem with the Wireless Lan AutoConfig Service that can allow specially crafted attack packets sent over a wireless connection to take over vulnerable Windows Vista and Server 2008 machines. Other versions of Windows aren't affected, and any computer without a wireless card is of course safe as well. The MS09-049 bulletin lists more details. IT admins should note that a previously reported security hole in the FTP component of the Microsoft Internet Information Service did not get fixed in this month's patch batch. The hole is reportedly under active attack, so on-the-ball admins should check the list of workarounds in Microsoft's technet post. Labels: Microsoft |
by Sajin George on 7:41 AM
  |
BACK TO TOP
|
|
|
| Firefox Update will Remedy Flash Flaw |
| Monday, September 7, 2009 |
Mozilla's next update for Firefox, slated to ship Tuesday, will check for outdated versions of Flash Player, a frequent target of hackers, the company said on Friday. The move is the open-source browser maker's opening salvo against out-of-date, open-to-attack plug-ins from vendors like Apple, Adobe, Microsoft and Sun. One security expert applauded the news. "This is a great way of improving the security of Web browsers," said Wolfgang Kandek, chief technology officer at security firm Qualys, in a blog entry Saturday. "Flash is often used by attackers to exploit client machines and unfortunately notoriously difficult to update, requiring, on Windows, different update packages for Internet Explorer and all other browsers." Firefox 3.5.3 and Firefox 3.0.14, security updates for the newest Firefox 3.5 and 2008's Firefox 3.0, respectively, are set to release Sept. 8. After installing either of those two updates, Firefox users will see a message if their computer has an out-of-date version of Flash Player. "You should update Adobe Flash right now," the message will read. "Firefox is up to date, but your current version of Flash can cause security and stability issues. Please install the free update as soon as possible." The message will also include a link to the download site for the latest Flash Player plug-in. "For now, our focus is on the Adobe Flash Player both because of its popularity and because some studies have shown that as many as 80% of users currently have an out-of-date version," said Johnathan Nightingale of the Firefox security team, in an entry to the group's blog . Nightingale was referring to a mid-August report by New York City-based security company Trusteer, which said that two weeks after Adobe patched Flash , almost 80% of the 2.5 million PCs scanned by Trusteer's security service had not yet been updated. Some of the users most immediately affected by Firefox's new plug-in check will be those running Apple's new Snow Leopard operating system. Apple shipped a months'-old copy of Flash with Snow Leopard, and even "downgraded" current versions during the upgrade to a vulnerable edition of Flash. Starting Tuesday, Firefox users running Snow Leopard will be alerted to that fact after they update their browsers. Mozilla plans to expand the plug-in check, Nightingale added. "Mozilla will work with other plug-in vendors to provide similar checks for their products in the future," he said. "Keeping your software up to date remains one of the best things you can do to keep yourself safe online, and Mozilla will continue to look for ways to make that process as easy as possible for its users." In a follow-up comment to Nightingale's post, Christopher Blizzard, a Mozilla evangelist and former member of the Mozilla Foundation's board, spelled out in greater detail just what Mozilla wants to do. Later this month, said Blizzard, Mozilla will publish a page on its Web site that Firefox users can visit to check the update status of other plug-ins. With the release of Firefox 3.6, now scheduled to ship in early November, the browser will check for newer versions of plug-ins through the same mechanism now used to check for updates to any installed Firefox extensions or add-ons. "We're going to try to get to the point where you can upgrade [an outdated] plug-in via the plug-in service that we currently use for installations," promised Blizzard. Mozilla's ambitions are actually grander than that, according to a plans posted on its Web site. Firefox 3.6 will also warn users of any outdated plug-in when they visit a page that requires the use of an older plug-in, when the browser starts up, and when the plug-in list is periodically updated by Mozilla. The initial goal is to have Firefox 3.6 detect outdated versions of several widely-used plug-ins, including Apple's QuickTime; Adobe's Flash, Shockwave and Reader; Microsoft's Silverlight; and Sun's Java. Flash is a major target for attackers, who regularly exploit unpatched vulnerabilities in the popular software. Adobe has patched the program twice so far this year, in February and July. Among the July update patches was a fix for a flaw that hackers had been using for at least a week in widespread attacks. If Mozilla implements its plug-in plans, Firefox 3.6 will be the first browser to regularly check for outdated third-party add-ons. Labels: Firefox |
by Sajin George on 1:29 PM
  |
BACK TO TOP
|
|
|
| Getting a grip on better password hashes |
| Saturday, September 5, 2009 |
New rainbow table distributed computing project aims to create large, free resource for more complete and complex password security.Many of today's computer passwords are stored and transmitted in a cryptographic hashed form. A strong password hash algorithm ensures that if the password hash is obtained by unauthorized parties that it is non-trivial to convert the hash back to the original plain text password (assuming the password is not trivial to guess at in the first place). Microsoft Windows has two types of password hashes: LM (LAN Manager) and the newer NT (or NTLM) hashes. When you type in a Windows logon password for the first time, the password is stored twice by default in the authentication database (local security accounts manager file or Active Directory database) -- once for each type of hash. In Windows, LM hashes are weak and much easier to crack than the NT hash. Other platforms have the same sort of problem; earlier, weaker password hashes are now superseded by stronger hashes. Linux, Unix, and BSD use various password hash algorithms, including weak crypt, stronger MD-5 style encryption, and the strongest, known as Bcrypt. Passwords can be compromised in many ways, including social engineering, key logging, guessing, and cracking. Cracking implies that the password hacker was able to obtain the password’s hash value. In the old days, the password cracker would run a program that would consider every possible likely password, hash it, and compare it against the stolen hash. This type of attack is fairly successful for passwords up to about six characters long. Beyond that, the passwords begin to take too long to crack using traditional methods. Enter the rainbow table. Rainbow tables are closely related to a cracking technique pioneered by Philippe Oechslin. Essentially, the captured password hash is mathematically converted into an intermediate form. From there, you can generate large tables (called rainbow tables) containing hash values that represent a likely subset of all possible passwords the cracker wants to use. The captured password hash’s intermediate form is compared to the values stored in (or calculated from) the rainbow table. The intermediate forms and new comparison technique allow password crackers to crack larger or more complex passwords in a much shorter period of time than they could by using traditional methods. The key to rainbow table cracking is to use a program that implements the newer cracking techniques, and to have a large precomputed rainbow table containing all the possible password values needed for the comparison. Oh, yeah, and it takes lots of memory and CPU power. The best password rainbow table would include all possible passwords and their hashes. With enough hard drive space, memory, and time, no password hash would be safe. But in real life, complete rainbow tables are infeasible. For example, Windows log-on passwords can be as long as 127 characters and be comprised of 65,000 (minus a few dozen) Unicode characters. There is absolutely no way to make a rainbow table that contains all the possible passwords that large a dataset would need to contain. I don't have the real numbers available to me at the moment, but it's easy to say that the resulting database would take billions of years to calculate and take more hard drive space and memory than is available in the world now or in the next 100 years.
Labels: Security |
by Sajin George on 9:03 PM
  |
BACK TO TOP
|
|
|
| Top 5 Features of New Red Hat Linux |
|
Red Hat has released its latest version of its flagship operating system RHEL (Red Hat Enterprise Linux) 5.4, and there's a lot to like in this new business Linux. I've been using RHEL and its twins, CentOS and Oracle Unbreakable Linux, since day one, and I like them a lot for business server use. Of these releases, RHEL 5.4 is the most impressive of the lot, for these reasons: 1) Baked-in virtualization. This edition of RHEL incorporates KVM (Kernel-based Virtual Machine). KVM, unlike VMware or Citrix Systems' XenServer, isn't an add-on virtualization program; it's actually part of the operating system. Indeed, as the name suggests, it's built right into the Linux kernel. As Jim Whitehurst, Red Hat's CEO, told John Fontana of NetworkWorld, "KVM makes RHEL Linux deployments look the same whether they are virtual or physical... [so] all of those thousands of man years of work put into processes and management for Linux can be applied to virtual instances." Red Hat is not the only company to think that virtualization should no longer be an extra but instead, should be part of the operating system. Microsoft is doing the same thing with its proprietary Hyper-V technology in Server 2008 R2. Unlike Hyper-V, though, which the Burton Group for one doesn't think is ready for prime time yet, KVM is ready for both small business to enterprise data center use. I've used KVM myself, and I'm impressed. Red Hat's KVM supports up to 16 virtual machines, each of which can have up to 256GB of RAM. And, since they work just like real machines, you can control them with the usual RHEL management tools. This is the stuff I want on my datacenter computers. 2) High-end processor support: The new RHEL also includes support for Intel Xeon Processor 5500 Nehalem EP processors and AMD Istanbul platforms. It also includes support for IBM POWER mid-range and System z mainframes. In other words, it supports the kind of hardware needed for high-end virtualization and cloud computing. 3) To really make use of all this power on the processing side, you need to be able to deploy it to clients — and RHEL does this well. It now includes better support for InfiniBand and Fibre Channel over Ethernet for those times when gigabit networking isn't fast enough. RHEL also now supports smart network adapters that include processors to handle GRO (Generic Receive Offload). Network cards with GRO relieve CPUs of the burden of dealing with 10Gb and faster networks. When users, like the high-frequency traders of modern stock exchanges, want deals done in milliseconds every millisecond counts. 4) Improved programming tools. All that new speed and virtualization functionality is great, if you can use it. With RHEL's improved SystemTap performance monitoring toolset, it's gotten even easier to see what's what with your C++ applications. RHEL also now includes some new static kernel tracepoints to make life easier to monitor performance. 5) Virtual desktops ahoy? Although Red Hat didn't make a big deal about it, RHEL 5.4 also includes Solid ICE/SPICE (Simple Protocol for Independent Computing Environments) desktop virtualization and management support. Looking closely at the RHEL release notes revealed that, while there's no stand-alone RHEL 5.4 desktop coming soon, there is support for virtual desktops. To be precise, you'll be able to boot RHEL 5.4 desktops, which run within KVM server instances, with PXE (Preboot eXecution Environment). This is still a work in progress. For example, these virtual desktops only have "Technology Preview" support at this point. In other words, don't rely on it. I'd hoped for better virtual desktop support from Red Hat, at least the basics are in there. Labels: Linux |
by Sajin George on 3:10 PM
  |
BACK TO TOP
|
|
|
|
|
|
Latest Updates
|
|
| Archives |
|
|
|
| |
|
| About Me |
|

Name: Sajin George
Home: Mumbai, Maharashtra, India
About Me: I'm Working as a System Administrator in an Animation Studio.
See my complete profile
|
|