KCNET NEWSLETTER
04/01/07  &  04/08/07
TECHNICAL PAGE


TECH TALK BY ROXANNE FRYER
TECHNICALLY SPEAKING
VIRUS AND OTHER STINKY STUFF
DOWNLOAD FREE ANTI VIRUS, SPYWARE AND ADWARE
INTERESTING SITES
 
 
TECH TALK
By KCnet Tech - Roxanne Fryer

RAM is an abbreviation for Random Access Memory, the working memory in your PC. Ram is like short term memory.  It holds the web page you are looking at, the document you are typing, and the applications that you are running. As your computer runs programs and works with data, it uses RAM to store the program information. 

RAM is usually measured in megabytes (MB). More RAM allows your computer to run more complex programs and to do so faster. RAM also allows you to "multitask," or work among several open programs. For example, working on a Word document as you surf the Internet and listen to MP3 music files can be very draining on your computer's RAM. After the processor, RAM is the second biggest factor in overall system speed. If you work with large spreadsheets or digital images, having more RAM is a big help. The downside to RAM is that its contents disappear when you shut off or restart your computer.

That is why the computer needs ROM.
ROM stands for read-only memory. A ROM chip is programmed with a permanent collection of pre-set bytes. The address bus tells the ROM chip which byte to get and place on the data bus. When the RD line changes state, the ROM chip presents the selected byte onto the data bus. 

Nearly all computers contain some amount of ROM (it is possible to create a simple computer that contains no RAM -- many microcontrollers do this by placing a handful of RAM bytes on the processor chip itself -- but generally impossible to create one that contains no ROM). On a PC, the ROM is called the BIOS (Basic Input/Output System). When the microprocessor starts, it begins executing instructions it finds in the BIOS. The BIOS instructions do things like test the hardware in the machine, and then it goes to the hard disk to fetch the boot sector (see How Hard Disks Work for details). This boot sector is another small program, and the BIOS stores it in RAM after reading it off the disk. The microprocessor then begins executing the boot sector's instructions from RAM. The boot sector program will tell the microprocessor to fetch something else from the hard disk into RAM, which the microprocessor then executes, and so on. This is how the microprocessor lads and executes the entire operating system. 

Types of Ram
Just as computer processors have evolved and improved over the years, so has RAM technology. There are many different kinds of RAM, and your motherboard and processor determine the type you need. Most computers now come with DDR-SDRAM (Double Data Rate-SDRAM), which is an upgrade of the standard SDRAM format. While SDRAM (Synchronous Dynamic Random Access Memory) can perform at different clock speeds, and perform much faster than older memory types, DDR-SDRAM truly does double the efficiency of standard SDRAM. DDR-SDRAM effectively complements the faster and more versatile processors, however, it's important to remember that SDRAM and DDR-SDRAM won't perform faster than your system's bus, and in fact, they synchronize with the bus to match its rate.

How Much Do You Need?
It's been said that you can never have enough money, and the same holds true for RAM, especially if you do a lot of graphics-intensive work or gaming. Next to the CPU itself, RAM is the most important factor in computer performance. If you don't have enough, adding RAM can make more of a difference than getting a new CPU! 

Choosing RAM is similar to choosing a processor; keep in mind your future needs. Also similar to processors, graphics and digital imaging, as well as gaming and multimedia Software, tend to require the most RAM to run smoothly and effectively. You may be able to run the hottest new games with out-of-date RAM, but game play might play slow, or some game features may be disabled in order to free up memory. Likewise, graphics files are comparatively much larger than text files, and can slow your system down if you have insufficient RAM. Another factor to keep in mind is whether you'll be multitasking—a memory robbing practice that can often go unnoticed by the user, especially when programs such as virus protection don't make their presence known. The Internet is another drain to RAM, especially when you open multiple browser windows, some of which may be featuring sites packed with animation and graphics.

If your system responds slowly or accesses the hard drive constantly, then you need to add more RAM. If you are running Vista the RAM recommendation minimum is 256.  If you are running Windows XP, Microsoft recommends 128MB as the bare minimum RAM requirement. At 64MB, you will experience frequent application problems, therefore, I would never try to run XP on it. For optimal performance with standard desktop applications, 256MB is recommended. If you are running Windows 95/98, you need a bare minimum of 32 MB, and your computer will work much better with 64 MB. Windows NT/2000 needs at least 64 MB, and it will take everything you can throw at it, so you'll probably want 128 MB or more. 

The amount of RAM listed for each system above is estimated for normal usage -- accessing the Internet, word processing, standard home/office applications and light entertainment. If you do computer-aided design (CAD), 3-D modeling/animation or heavy data processing, or if you are a serious gamer, then you will most likely need more RAM. You may also need more RAM if your computer acts as a server of some sort (Web pages, database, application, FTP or network). 

Most computer gurus recommend doubling the Operating System minimum for smooth computing.  In the case of Vista you will want to increase the Ram to as much as a Gigabite to be able to effectively run Vista Aero.  Other considerations include increasing the minimum Ram suggested if your computer has on board memory demands for your audio and video components. 

What happens when you do not have enough RAM
When Microsoft Windows runs out of RAM to use for programs, it uses the hard drive as temporary storage for program information. Because this temporary storage is not "real" memory, it is referred to as virtual memory. While virtual memory keeps the system from crashing, using virtual memory slows the system down, even if you have a fast processor and powerful hard drive.

Another question is how much VRAM you want on your video card. Almost all cards that you can buy today have at least 64 MB of RAM. This is normally enough to operate in a typical office environment. You should probably invest in a 256-MB or better graphics card if you want to do any of the following: 

• Play realistic games 
• Capture and edit video 
• Create 3-D graphics 
• Work in a high-resolution, full-color environment 
• Design full-color illustrations 


TECHNICALLY SPEAKING:


 

** This one is a must read ** 
Especially for anyone considering a new computer.

Microsoft sued over Vista branding   By Colin Barker   Special to CNET News.com 
Published: April 4, 2007

Class action suit claims software giant deliberately misled consumers with its marketing of the new operating system.

Microsoft has come under attack for the way it advertises the Vista operating system.

A lawsuit, filed in Seattle, alleges that the company advertised systems as "Vista capable," when in fact the systems were not able to run Vista properly. The suit alleges that the marketing around Vista was designed to deliberately mislead potential customers.

The outcome hangs on the precise definition of the circumstances under which a machine is "Vista capable."

Microsoft has allowed PC vendors to put stickers on their systems saying that they are "Vista ready," when the system could run only Vista Home Basic, which does not allow many of the core features of Vista to run. The suit maintains that it was unreasonable of Microsoft to assume that every person to whom it was marketing Vista could understand the system requirements.

PCs need at least 512MB of RAM, a processor capable of operating at 800MHz or faster and a graphics processor that is DirectX 9-capable to be classified as "Vista capable." However, the suit alleges that it was not clear from Microsoft's advertising and marketing around Vista that while a system may be advertised as "capable," it may be incapable of running many of the advertised features of Vista, such as the Aero desktop.
Now on News.com:

    * U.S. cities hot for hydrogen
    * Cursor flaw gives Vista a black eye
    * Newsmaker: iStockphoto sees new rivals everywhere
    * Extra: Inside the iRobot lab

According to the legal action, which was filed as a class action suit on Thursday, "consumers were falsely led to believe they would be upgraded to a dramatically new operating system bearing the key features marketed by Microsoft." In particular, the court action highlights Microsoft's "Express Upgrade" plan, which upgraded users from Windows XP to Vista Basic. This was an upgrade to Vista "in name only," the suit alleged, and "not the functionality."

Microsoft said it had made extensive efforts to inform buyers about the hardware resources needed to run Vista.

"We conducted a broad effort to educate computer manufacturers, retailers and consumers about the hardware requirements to run different versions of Windows Vista," the company said in a statement. "This well-documented effort occurred as part of the Windows Vista Capable program. We look forward to presenting this information to the court and addressing all other issues raised in this lawsuit." 


 
 
 
I Always Feel Like Somebody's Watching Me  This one from Bob Rankin coeditor of Tourbus

anonymous surfing Your Internet Service Provider, along with the websites you visit, gather more information about you than the FBI or the CIA. Just about everything you do on the Internet is being watched by someone. All the big websites, major search engines and ISPs know what sites you like to browse, what pages catch your eyes, what subjects you like to search. And if you use web-based email, even the contents of your e-mails may be stored somewhere.

Let's suppose you Google an author, navigate to his latest book on Amazon and check it out. That simple process will give both Amazon and Google at least one important bit of information about you.
Part of the Internet's basic design is that each computer is identified by an IP address - a number designated to your computer when you are online. And whenever you visit a website, that IP number is revealed to the operators of the site. There's nothing evil about this... websites can't reply to your request to view a page unless they know where to send the data. (To learn more about what information is and is NOT revealed when you visit a website, see Does IP Address Reveal my Physical Location?)

And by using a browser cookie, both parties can identify when a user returns to their sites, and keep track of the things they see and do. (See Eat Your Cookies to learn more about cookies.) Google, Amazon and thousands of other websites use cookies to keep track of the searches you perform, what kind of books you like, the news stories you read, etc. But how much of a privacy risk is this?

It's important to remember that neither cookies nor your IP address can identify you by name or location, unless you willingly surrender that information when making a purchase or signing up for an online service. But a computer's IP address is kind of like a car's license plate. With the help of your ISP, your IP address traces back to you. And with a court order, your ISP and others may be required to hand over your web surfing history to the authorities. Think that sounds paranoid? Some major search engines have already given information on the users of pornographic and racist websites to national governments. If you're concerned about covering your tracks online, consider anonymous surfing.
How Does Anonymous Surfing Work?

anonymous web surfing Anonymous surfing is exactly what the terms suggests. You go online without revealing any of the personal or technical information on your computer. It's done by having a special computer -- called a proxy server -- screening you from the websites you are contacting. Your computer contacts only the proxy server, which contacts the website for you. The website, in turn, sees only your proxy server and not you. In addition to hiding your IP address, a proxy server will usually block cookies, pop-ups and other annoying web parasites.

With some systems you have to go to an anonymous service website and access your favorite website from there. With others, you download and install software which finds an anonymous server for you. There are numerous services and programs that facilitate anonymous surfing such as Guardster, SnoopBlocker and Mega Proxy, but Anonymizer is the pioneer and recognized leader of the pack.

Anonymous e-mail services use similar identity screening technology. They allow you to use their servers to send and receive e-mails or text messages without revealing your true identity. Check out Anonymizer Nyms or TheAnonymousEmail.com for examples of anonymous email services.

The drawback with these services is that you have to pay for your anonymity and that's a drag. They may also block the kind of cookies you DO want, such as those that let you read your local newspaper without re-registering every time. Proxy servers often can't handle the volume of traffic they get, slowing down your Internet experience, and sometimes make it difficult to make online purchases. It may all be too much trouble for the casual Internet user, but if you've ever been the victim of a stalker or a phishing expedition, this kind of anonymity may be necessary.
Is Privacy History?

There are other steps you can take to preserve your privacy, if not your complete anonymity on the web. Highspeed users should reboot the modem occasionally. Each time you do so, your computer is assigned a new IP address. You can delete cookies regularly, although you should be careful to avoid deleting those that may be beneficial. See Clearing Browser History for additional help with obscuring your web surfing history.

You can also hide some of your browsing by searching via European media sites, such as British newspapers that offer a web searching facility, or by using a European search engine like Yahoo.co.uk. These operate under European privacy laws that prohibit the kind of record keeping US search engines use. And if you really want to foil those nosy search engine guys, Firefox offers a download called trackmenot which bombards search engines with random and meaningless searches. This foils attempts to discern a pattern in your searches.
Access the article for a number of links and additional information about anonymity and other information about The Tourbus Newsletter.
http://askbobrankin.com/anonymous_web_surfing.html


 
 
 
Microsoft fits 7 patches into .ANI emergency update   Ryan Naraine   April 3rd, 2007

Microsoft's out-of-band update for the critical — and under attack — animated cursor (.ani) vulnerability has finally  crossed the finish line, one week ahead of Redmond's own schedule but more than three months after it was first reported by a private security research company.

The MS07-017 update, which should be considered super high-priority, includes patches for a total of seven vulnerabilities, three affecting Windows Vista.

In addition to Windows Vista, the update applies to Windows 2000 SP4, Windows XP SP2, Windows Server 2003, Windows Server 2003 SP1, and Windows Server 2003 SP2.

The .ANI flaw, which was discovered by Determina and reported to Microsoft in December 2006, is the only bug rated "critical" across the board.  Microsoft's brief description explains why:

A remote code execution vulnerability exists in the way that Windows handles cursor, animated cursor, and icon formats. An attacker could try to exploit the vulnerability by constructing a malicious cursor or icon file that could potentially allow remote code execution if a user visited a malicious Web site or viewed a specially crafted e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

The decision to dump seven patches into this update is a bit of a surprise but that does not mean that next Tuesday's scheduled release of fixes is being canceled.  A spokesman for the MSRC told me this morning that more patches are coming down the pike on April 10, 2007.

The other six updates address a range of privilege escalation and denial-of-service flaws affecting Windows users. 

One of those bugs — a kernel issue related to the Graphics Rendering Engine — is particularly interesting, since it was known to Microsoft since October 2004.  I'll have a separate blog entry coming on this bug, the disclosure issues surrounding it, and the sudden decision to dump it into a high-priority update.


 
 
 
I found this note from a Tech Republic Newsletter very interesting. (Mike)
Forcing Windows XP's Disk Cleanup to delete all temporary files
If you've ever run the Windows XP's Disk Cleanup utility, you probably discovered that your temporary files occupy a significant amount of space. You might select the Temporary Files check box in order to allow the Disk Cleanup utility to delete the files in the Temp folder, but the Disk Cleanup utility will not remove all of the files. The reason for this oddity is that the configuration for the Disk Cleanup utility does not allow deletion of files accessed in the last seven days.

 
 
Mozilla gets social bug with The Coop   By Martin LaMonica, CNET News.com
Published on ZDNet News: April 4, 2007
The Mozilla Foundation's Labs has started a project to add social-networking features to the Firefox browser.

Called The Coop, the project aims to build a browser add-on that will let people share and receive links or other Web-delivered content, such as photos.

Project planners envision a row or column of boxes that contain their friends' photos, which could be pulled from an online photo-sharing service like Flickr.

The person will know that something has been sent when a friend's avatar or picture glows. Or a person can click on a friend's avatar to get his latest bookmarked Web pages, photos, blogs or movies.

"Perhaps the most common social interaction on the Web today is sending someone a link," the project's Web site notes. "The goal of The Coop is to ease this interaction and merge it with similar tools provided by a large number of popular Web services."

Like a chicken coop, each friend's avatar will have its own box, where it "lives."

Information could be transported between people's browsers either using RSS feeds or setting up an instant-messaging server, according to the project's Web site.

The project is now at a "proof of concept" phase, but Mozilla has already sketched out anticipated features such as letting someone drag a link onto a friend's image to share it.

Another browser designed around online social services like Yahoo's Delicious and Facebook is Flock, a Firefox-based product still in the beta-testing phase. 


 
 
 
Keep It Clean    A good fix from a recent Worldstart

When it comes to our computers, all we tend to think about is the stuff we see on the screen, right? And that just so happens to be the software we put on our computers. Most of us tend to neglect the rest of the computer itself.

So, now that I've got you thinking about your actual PC, what can you do with your computer to make it run longer? Well, as I just mentioned above in the title, you can try your best to keep it clean!

I can't tell you the number of computers I've opened that have just been so clogged with dust. In fact, I've seen computers fail and have intermediate problems due to excessive dust build up. In addition, a lot of dust in your computer can cause it to run hotter than it should, which shortens its life.

So, what can you do?

If you are brave, you can open your computer's case (make sure you unplug it first) about once every six months or so and blow it out with that canned air stuff. You can get that at any office supply store. Of course, when you do this, be careful not to disconnect or damage anything. Make sure you blow out the power supply and the CPU fan too. But, be sure that you do not open up the power supply unit itself. Since all this dusting can make a mess, you may want to do it outside as well.

Here's a shot of one of my dirty old PCs. This one uses a Pentium III processor, so its CPU fan is vertical in orientation. Your CPU fan may be flat on the board.

Also, make sure you keep your can of compressed air upright. The propellant inside those things tends to come out when the can is inverted or at an angle, so be careful.

Oh, if you can, get some kind of good "mini vacuum." That would be okay too. In fact, some would argue vacuums are better, because compressed air can force dust deeper into the cracks and crevices of your computer.

But, with that said, I still like canned air better and for several reasons.

1.) I've yet to find a little vacuum that was any good. They all seem to leave a ton of dirt behind on the boards. In my opinion, if you can't get all the dirt off, what's the point?

2.) In addition, there are a lot of places that even small attachments just can't get to. Again, what's the point of cleaning if you can't get it all?

3.) I've been cleaning computers since before DOS and I have yet to actually see a problem with using canned air. In my opinion, compressed air simply removes the most dust. So, I'll stick to my little cans, but you can still vacuum if you'd like. The choice is yours!

Finally, no matter how tempting it is, washing your computer with the help of a garden hose is always a bad idea. Have fun keeping your computer as clean as it can be! 


 
 
This Worldstart tip for MAC users.
Do you know anything about a Google Desktop for Macs? I've heard rumors, but I wasn't sure if anything was set in stone yet. If you know anything, please share!

Well, you probably already know that since this question is posted above, I do have something to say about the topic. After all, if you know anything about this newsletter, you know I'm not just going to choose this question and then tell you, "No, I have nothing to share, but thanks for asking!" 

So, what is going on with the Google Desktop and Mac computers? Well, it seems as if the Google Desktop phenomenon that invaded Windows is now making its way onto Macs. Yep, that's right, all of you OS X Mac users out there can now get your very own Google Desktop. Now, that's not even the best part of it. The beta version (yes, it's still in beta) was released less than 24 hours ago! You can never say again that WorldStart doesn't stay on top of things, now can you?! I was just so excited to share this information with you and I couldn't wait any longer. Yes!

Okay, now back to what the Google Desktop can do for all you Mac people! After releasing the Windows version of Google Desktop (about two years ago), Google was able to put together a Mac team to bring the software over there as well. With your own Google Desktop, you will be able to perform searches on your whole computer's indexes, applications, music files, photos, e-mails, chat logs and basically any other documents you have. By having this advantage, you will always have all of your important data right at your fingertips.

Now, as you know, Google likes to group their programs together and this one is no exception. With Google Desktop, you can access all of your Gmail files from Google's servers, along with any contents that are included in your Web search history. With this, you will always be able to have a copy of that material, even if you're not connected to the Internet at the time of your need. You can also have those options disabled if you're not comfortable with them being so easily accessible. Google Desktop is designed to keep your important information safe and for your eyes only, so there are several options to choose from.

This Mac version of Google Desktop is a little different from the one used in Windows. So far, it only has the Quick Search feature. The toolbar and gadgets that can be found in Windows are not available as of yet. The search box is very quick though and it seems to be a lot more advanced than other programs, such as Spotlight and Quicksilver. To use the search feature, you just have to hit the Command/Apple key twice. Once it comes up on your screen, you can also change the keyboard commands if you'd like. Like I said, Google Desktop works just for you!

Once you start using the search option with your Google Desktop, it also works to learn your searching behavior. It progresses to be faster and faster as you continue to use it. For example, it pays close attention to the programs you launch and files you look at often. If you don't want it to do that though, there is an option to see all of the normal search results, etc. You just have to change your preferences once you download the software.

Right now, Google Desktop is only compatible with Safari, Firefox and Camino on Macs. One of the Google Desktop product managers Rose Yao said that "this is one of our first big launches for the Mac platform and it's really important to us. Google is all about universal access and we want to make it available in as many platforms and languages as possible." Sounds good, huh?!

Now, the beta version of the Mac Google Desktop will more than likely last for at least three months, because they want to get as much user feedback as possible before making it a full release. In time, all of the features of Windows' Google Desktop will be brought to Macs, but for right now, all you Mac users can get used to what is offered. You can install the beta version for your own computer right here and get started today.


 
 
The subway tunnel as video billboard    By Daniel Terdiman, Staff Writer, CNET News.com
Published: April 5, 2007

It's not exactly the drive-in, but tech is taking movie like ads to some deep, dark places. The trick is to go fast.

Tell us what you think about this storyTalkBack E-mail this story to a friendE-mail View this story formatted for printingPrint Add to your del.icio.usdel.icio.us Digg this storyDigg this
The subway tunnel as video billboard

If you've been in a subway car in San Francisco, London, Boston, Rio de Janeiro or one of several other cities recently and thought you saw a short film playing along the dark walls of the tunnels, you're not going crazy.

In fact, what you saw was one of the latest forms of advertising technology, which is slowly taking over one of transit riders' last refuges from commercial messages.

The technology, which comes from companies such as Canada's SideTrack and New York-based Submedia, is just what it sounds like: ads displayed on subway tunnel walls in nearly 10 cities worldwide promoting products from companies including Microsoft, Target, Coca-Cola, Reebok and Honda.

Last month, Bay Area Rapid Transit (BART), which serves the San Francisco Bay Area, began a one-month trial of SideTrack's technology. The SideTrack system currently works by installing a long series of still photographs in a subway tunnel and then illuminating the images with rapidly flashing spotlights as trains go by. The effect is much like watching a movie, or a children's flip book, in that what riders see is a 15-second multimedia message.

And to those in charge of some of the rail systems using the ads, they're working.

"It's everything and more that I wanted it to be," said Graeme Hay, the commercial manager for London's Heathrow Express, which connects the British capital to its main airport. "I've had customers who said to me, 'Wow, that's fantastic. What is it?'"
tunnelads

Michael Swistun, CEO of SideTrack, explained that his company's technology is designed to present riders with a 24- or 30-frame-per-second "movie," depending on the speed of the train.

The technology requires that trains pass the ads going at least 25 miles per hour. If they're going slower, the lights stay off and the tunnels stay dark.

"We're cognizant that we don't want to be doing something irritating to people," Swistun said, "and the advertisers want to make sure the ads are displayed at the speed they're designed to be displayed at."

In BART's case, one major element still to be evaluated in its trial of the technology is whether ads threaten public safety.

"We're basically looking to make sure that the system doesn't distract our train operators," said Linton Johnson, BART's chief spokesman. "(So far) there's been no outcry from the train operators. That said, maybe it's because they enjoy looking at it."

Rider response
According to Swistun, as well as Hay and Johnson, there has been little, if any, complaining from riders who have seen the new ads.

But some do question whether any surface is safe from being used to sell.

"It's fascinating and yet sort of Orwellian," said Michael Vavricek, a regular BART rider. "It confirms what some humans say about America: Everything is for sale."

Others say the ads themselves aren't so bad, but that the tunnels could also be used to showcase art.

"I think (it's) cool as a medium, but just balance it out everywhere," said Oakland, Calif., artist Kevin Byall. "I feel like I'm being bombarded everywhere (by ads). The subway tunnels, I kind of like them dark. But if we're going to do this, make them artful."

Byall pointed to a project undertaken a couple years ago by some Berlin artists in which they attached a projector to the side of a subway car which then displayed images of swimming fishes and sharks on the tunnel.

To the transit operators, however, such concerns are unfounded.

"We did think about that very carefully," said Hay, "because we have quite a lot of advertising along the routes, in the stations. The thing that made me feel comfortable that we weren't going to go into the area of turning (riders) off is simply because of the quality and the novelty of the technology. The user experience is so cool and so innovative that the 15 seconds actually excites people."

More to the point, the ads are bringing in much-needed revenue with hardly any cost.

Swistun said SideTrack has advertisers paying $50,000 a month for ads in Boston, and while he wouldn't be specific, he said that between 25 to 40 percent of revenue goes to the rail agencies.

"For them," said Swistun, "it's an absolutely perfect way to get new revenue without having to raise fare prices."

For now, SideTrack's ads have relied on still photographs viewed as the train shoots past. And because of that, it is a bit of a challenge to install--since the work must be done in the hours when the subways are closed. Any changes to an ad campaign must be done piece by piece.

But Swistun said that SideTrack is about to roll out a new, digital system in which the still photos and flashing lights will be replaced by LED screens. That way, he said, ads can be cycled throughout the day and campaigns can come and go without having to send crews deep into the tunnels.

Hay said that Heathrow Express--which is still in its initial three-month trial period in a single tunnel--is getting ready to add a second. And that second installation will use the digital technology.

Whether still photos or digital screens, the ads are changing the dynamic of the dark tunnel and the break in between subway stations jam-packed with ads.

But Swistun said he doesn't think rail passengers mind that tunnels are no longer dark.

"We're covering concrete and wires," said Swistun. "Nobody has said they'd rather see the concrete and wires. People are looking out the window anyway to avoid eye contact."


VIRUS/BUGS  AND OTHER STINKY STUFF:
Cursor flaw gives Vista security a black eye    By Joris Evers, CNET News.com
Published on ZDNet News: April 4, 2007

Microsoft's release of a "critical" patch on Tuesday poked holes in Vista's security promises, but security experts advise against discounting the new operating system.

The software giant broke with its monthly patch cycle Tuesday to fix a bug that cybercrooks had been using since last week to attack Windows PCs, including those running Vista.

"As far as software vulnerabilities go, Vista's cover is blown," said Nand Mulchandani, a vice president at Determina, the company that discovered the latest security bug. "It is not Superman; it is just a human being. It is just software. Vista is going to be very similar to the other operating systems Microsoft has delivered in terms of bugs."

Microsoft officially launched Vista for consumers in January, promoting the operating system as the most secure version of Windows yet. It is the first client version of Windows built with security in mind, meaning that it should have fewer coding errors that might be exploited in attacks, Microsoft has said.

Yet the "critical" hole that affected much older Windows versions also hit Vista. The vulnerability lies in the way Windows handles animated cursors and could let an attacker commandeer a PC when the user views a malicious Web site or e-mail message.

The cursor flaw lies in the operating system code. This means that any application that relies on the operating system to handle animated cursor files could be an attack vector. This includes alternative browsers, such as Firefox.

It is a flaw that should have been caught by Microsoft's code-vetting processes for Vista, called the Security Development Lifecycle, some experts said. The flaw is also evidence that faulty code from previous Windows versions has been copied into Vista, they said.

"It is a little premature to attack the whole effort altogether, but this is something that the Security Development Lifecycle should have caught," said Amol Sarwate, a research manager at vulnerability management company Qualys.

The buffer overflow vulnerability in the cursor function in particular should have already been fixed because a bug in the same Windows component was patched two years ago, said Rohit Dhamankar, manager of security research at TippingPoint, a seller of intrusion prevention products. That should have prompted re-examination of the code, Dhamankar said.

Microsoft disputes that it should have caught the cursor bug before. People who say so don't understand security vulnerabilities because not all bugs are created equal, said Stephen Toulouse, senior product manager in Microsoft's Security Technology Unit.

"In the case of the cursor vulnerability, even though something may look similar to the outside, that doesn't mean the code is anything alike to the previous vulnerability," Toulouse said. "The SDL was never meant to catch every single vulnerability, period."

But Dhamankar argues that Microsoft forgot to recheck all the possibilities that could lead to a buffer overflow after the original bug was found and patched in 2005.

Mulchandani agreed. "The dirty little secret is that Microsoft clearly did not write Vista from scratch. They did not completely build a whole new code base for this operating system. Every version of Windows since Windows NT has had this flaw in it," he said.

Microsoft does acknowledge that Vista will have vulnerabilities. "There are going to be other vulnerabilities. The SDL is not a process by which no vulnerabilities will ever occur. There is no process on this planet that can do that," Toulouse said.

The cursor flaw is like a sign post for the bug hunters. Hackers will now be looking for bugs in similar Windows components to find ways to attack Vista.

"This has been a very significant break and it definitely gives a big pointer," Dhamankar said. "If more such errors are found later, Vista is not going to be able to offer the great protection that's claimed."

Still, Microsoft's Vista security promise doesn't fall apart because of this single vulnerability. Vista is more secure than XP or any other Microsoft client operating system, Sarwate said. "If you consider Windows 2000, XP, 2003, I would still say that Vista is more secure than all the other operating systems," he said.

Mulchandani also said that, while Microsoft has taken way too big a bite at the security message, Vista is more secure than its predecessors because of features such as User Account Control and others that limit privileges on the operating system.

And that's just the goal Microsoft was aiming for, Toulouse said.

"You have to look at Vista versus XP. A lot of people are holding Vista up and saying in a vacuum it will reach some nirvana of security," Toulouse said. "Our whole goal with Windows Vista was to create a fundamentally more secure operating system than we have ever created previously." 


 
 
 
The following two tips are from Dummies Daily
Set Up Periodic Antivirus Scans
Having your antivirus program scan the entire computer for viruses is a necessity. Even though most antivirus programs have an auto-protect feature that should -- theoretically -- prevent the insertion of a virus onto your computer, it’s still a good idea to scan your computer periodically in the event something was missed somehow by the automatic protection.

When scheduling periodic scans, choose a day and time when you know your computer will be running. It’s no good to schedule a scan for Friday night at 10:00 p.m. if your computer is turned off. If your computer is in standby or hibernation mode (common battery-saving modes on laptops), your antivirus program will not wake it up to scan. It’s got to be fully awake and running at the appointed time. On the plus side, your monitor needn’t be on.

One other factor to take into account for your weekly scan: Run it when your computer is running but when you’re not using it. If you have one of those high-speed Internet connections (such as cable or DSL), then perhaps you keep your computer on all the time anyway. If so, then you can just schedule your scan to take place, say, on Fridays at 1:00 a.m. (or whenever you’re routinely not using the computer). 

Avoiding a Variety of Viruses
The Internet brings the world to your doorstep, but it also brings hoaxters, scam artists, and phishers. Without the right protection, your computer is subject to getting sick from a virus. Viruses come in these different shapes and forms.
    * E-mail virus: This kind of virus reproduces itself by going into the recipient's Address Book, taking down names, and e-mailing itself to tens or hundreds of people at once. It's important to remember that no virus can spread inside an e-mail message. Viruses travel by e-mail, but not inside messages -- they travel in files attached to e-mail messages.
    * Time bomb: This is a virus that is programmed to lie quietly in wait on a computer until the appointed hour, when it "explodes" and causes damage.
    * Trojan horse: This virus masquerades as one kind of program but is really another. The game you thought you downloaded turns out not to be a game at all, but a virus. Trojan horses travel on the Internet by stealth, not by reproducing themselves quickly like other viruses.
    * Worm: This is a virus that quickly makes copies of itself on many computers. Worms infect a security hole in a network, and when they are inside the network, quickly copy themselves from computer to computer. Code Red, the most notorious worm, copied itself to a quarter-million computers during one day in July 2001.

Viruses slow Internet traffic. They clog computer networks. They make computers run more slowly by tying up a computer's processor. They destroy important files. Always be on the alert for viruses, and make sure that antivirus software is installed on your computer.


 
 
 
THE TALLY:
Friday, March 29 -- Thursday, April 06
According to Sophos, a leader in Anti Virus Software development, 58 new/improved viruses, which required Anti Virus upgrades, were released into cyberspace via email. 
&
KCnet's anti virus program caught and "defanged" 9,1778 email viruses in addition to sending 224,857 non spam and non virus messages and refusing 986,300 spam messages. These are record numbers for a seven day period.

Sophos notes that virus season is year round.  Many of these buggers constantly replicate themselves on infected computers, sending themselves to every email address in that computer each time the user reboots.  Each one sent and not blocked by a service provider or personal antivirus program can replicate itself and send to every email address in the new host's computer, and on and on and on.


 
 
Have you updated your anti virus program lately? 
If not, may I recommend that you do it now?

 
**************************************************************************************************
Free Virus Scans
Best done with The Internet Explorer Browser.
Computer Associates, a reputable and reliable anti virus developer introduced a new free program  which allows anyone to do a virus scan without downloading any software or registering for an anti virus program.  You must use Internet Explorer for access to Computer Associates and to perform the scan.  This is a good one and very simple to operate  The address is http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Trend Micro, more commonly referred to as Housecall, offers free virus scans and in most cases can fix damage down by a virus or worm that your computer may have contacted. The program works well.  The first time one uses the free program it is necessary to download a small program. Trend Micro walks you through the process.   Then the virus scans are quite simple for each return.  Go to http://housecall.antivirus.com/  then choose the link   "Scan without registering".  Follow the directions.

You should disable any anti virus program that you have running.  If you do not have a virus program I recommend that you use one of the programs offered above first and then download and install one of the free programs listed below or install any anti virus program you have purchased.
**************************************************************************************************
Free Anti Virus programs for download. 
Quite a few KCnet members use these programs and like them.
Be careful if you download a virus program and you already have one installed on your computer.  You need to at least disable the program already installed.

AVG Free
AVG Free Edition is the well-known anti-virus protection tool. AVG Free is available free-of-charge to home users for the life of the product! Rapid virus database updates are available for the lifetime of the product, thereby providing the high-level of detection capability that millions of users around the world trust to protect their computers. AVG Free is easy-to-use and will not slow your system down (low system resource requirements).
http://free.grisoft.com/freeweb.php/doc/2/lng/us/tpl/v5

Avast
Avast has been "anti virusing" for quite awhile.  The following info comes from their download page:   Avast! Home is now free of charge for HOME users for NON-COMMERCIAL use. You can find more info here.
http://www.avast.com/eng/down_home.html
Note: This product is free for home non-commercial use after registration!
HINTS:   Click on the English Version Link and download the installation file.  Then click on the installation file and follow the directions.  You will need to return to the download page and click on the link to get the registration key.   It will be sent to you in an email after you provide some registration information.  This will give you 14 months of coverage including any updates which can be set to auto download.  You can reregister for additional free coverage at the end of the 14 months.
You will want to browse around and choose from the many options available for operation.  This process will take some time and digging.

Another good free program is:
http://www.free-av.com/
This one installs a bit easier than Avast.

**************************************************************************************************
Free Spybot and Adware programs for download.

Get ewido anti-spyware Free
ewido anti-spyware Free is a free anti-spyware protection tool developed by GRISOFT for home use. We invite you to join the millions of satisfied customers worldwide who have downloaded the software and now enjoy the benefits of ewido anti-spyware Free.
What you get with ewido anti-spyware Free
Easy to use
Daily database updates
Heuristics to detect unknown threats
Automatic Cleaning Engine
And most of all ... great customer satisfaction!
http://free.grisoft.com/freeweb.php/doc/20/lng/us/tpl/v5

Windows Defender (Beta 2) is a free program that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software. It features Real-Time Protection, a monitoring system that recommends actions against spyware when it's detected, and a new streamlined interface that minimizes interruptions and helps you stay productive.
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Spybot - Search & Destroy 1.4 - product description
Application to scan for spyware, adware, hijackers and other malicious software.
Choose one of the sites to download from.
http://www.safer-networking.org/en/mirrors/index.html

Ad-Aware Personal provides advanced protection from known data-mining, aggressive advertising, Trojans, dialers, malware, browser hijackers, and tracking components. This software is downloadable free of charge.
http://www.lavasoftusa.com/software/adaware/
 


True Viruses and Warning Letters of Impending Doom.
Believe it or not, the amount of harm done by sending false computer virus alarms and letters of impending doom to your thousand closest friends can be just as damaging as the alleged virus (if it even exists!);  if you remember the story of the boy who cried wolf, you understand why.
If you think you've got the scoop on the latest new devastating virus or latest doom warning, check it out at the Web sites below before taking it on yourself to alert the world.  If the virus is as terrible as you think it is, odds are the virus fighters already know about it and -- good news here!  -- your anti virus software provider probably knows about it too and already has an update for it.
Sophos supplies this current information about actual hoaxes.  Look at them. Read about them.  If you are sent one of them, delete it.

Here are a few sites of many that can help you determine if an email is a hoax or real.

http://www.snopes.com/
http://vil.nai.com/VIL/hoaxes.asp
http://kumite.com/myths/
http://www.symantec.com/avcenter/hoax.html
http://www.scambusters.org/VirusHoaxes.html
http://www.sophos.com/virusinfo/hoaxes/
http://www.truthorfiction.com/
http://www.quatloos.com/

INTERESTING SITES:
Emeril's Olive Stuffed Leg of Lamb
Food Network Kitchen’s Roasted Asparagus with Hollandaise
Paula’s Oven Roasted Red Potatoes with Rosemary and Garlic
Tyler’s Spring Green Salad
Giada’s Easter Pie
Giada’s Lemon Ricotta Granita
http://www.foodnetwork.com/food/et_hd_easter/0,1972,FOOD_9834,00.html
Other Good Family Easter Sites
http://www.holidays.net/easter/
http://www.holidays.net/easter/
http://www.kidsdomain.com/holiday/easter/
http://www.newadvent.org/cathen/05224d.htm
http://www.blackdog.net/holiday/easter/index.html
http://www.gsfp.org/article.php?id=320



http://www.religioustolerance.org/easter.htm


 
 
 
Pornography Statistics 2007
By Jerry Ropelato
These are all links available on the opening page.
Pornography Time Statistics
2006 Worldwide Pornography Revenues
2006 & 2005 US Pornography Industry Revenue Statistics
2006 Top Adult Search Requests
2006 Search Engine Request Trends
Internet Pornography Statistics
Children Internet Pornography Statistics
Adult Internet Pornography Statistics
Women and Pornography
Porn Producing Countries and Cities
Pornographic Web pages by country
US Adult Video Sales and Rentals
US Hardcore Pornography Titles Released
US Adult Internet User Demographics - Income
US Adult Internet User Demographics - Age
Pornography Industry Corporate Profiles
2006 Worldwide Pornography Revenues

Internet Pornography Statistics

Pornographic websites 4.2 million (12% of total websites)
Pornographic pages  420 million
Daily pornographic search engine requests 68 million (25% of total search engine requests)
Daily pornographic emails 2.5 billion (8% of total emails)
Internet users who view porn  42.7%
Received unwanted exposure to sexual material  34%
Average daily pornographic emails/user  4.5 per Internet user
Monthly Pornographic downloads (Peer-to-peer) 1.5 billion (35% of all downloads)
Daily Gnutella "child pornography" requests 116,000
Websites offering illegal child pornography  100,000
Sexual solicitations of youth made in chat rooms  89%
Youths who received sexual solicitation  1 in 7 (down from 2003 stat of 1 in 3)
Worldwide visitors to pornographic web sites 72 million visitors to pornography: Monthly
Internet Pornography Sales  $4.9 billion

 
Pornography Time Statistics
Every second - $3,075.64 is being spent on pornography
Every second - 28,258 Internet users are viewing pornography
Every second - 372 Internet users are typing adult search terms into search engines
Every 39 minutes: a new pornographic video is being created in the United States

There is much more to read and access.  Including recommendations for blocking and filtering unwanted media.
http://internet-filter-review.toptenreviews.com/internet-pornography-statistics.html


 
 
 
SampleSwap
Free professional quality audio samples.

This AIFF/WAV collection is currently 4.6 GB (9,823 sounds) including 1,860 techno, hiphop, trance, and drum 'n' bass loops / breakbeats, 2700 drum hits, 2040 sound FX, 570 instrument samples, 810 vocal samples, 748 melodic loops, and more. 
http://www.sampleswap.org/


 
 
Not Starring! 
This one from Amanda
I want you to imagine your favorite movie. Who starred in it? What would that movie have been like if different actors played your favorite characters? Well, welcome to Not Starring. This Web site is where you can see who didn’t get the parts in all the movies you love to watch.
You can navigate by using the A to Z actor strip or the A to Z movie strip. Those are both located at the top of the page. You will also find the choice to browse by actor or movie in the middle of the page. Beneath that, you’ll find the featured sections.
Take Today’s Trivia Quiz – Here you will answer a question about a movie. When I was there, the question was, “Who was originally considered to star along side Tom Cruise in the movie Collateral"? Then you got to choose from: Adam Sandler, Jack Black, Chris Tucker and Denzel Washington.
What’s New Section -- Next to the trivia quiz is the What’s New section where you’ll find the Top 10 newest entries for the day. Also, if you look over to the next section of Special Features, you’ll find several interesting categories.
Fan Favorites – Here you will find the top 25 most popular entries. There were some very interesting entries there and I can see why they are so popular.
Who Has the Most – Here you will find out who has the most entries. You get a list of 25 actors and 25 movies that have a lot of entries on the site.
Newest Submission – Are 10 newest submissions not enough for you? Well, that’s okay, because in this section, you get the Top 50!
Do you know of someone who turned down a part or was thought of for a part and didn’t get it? Well, you can submit a new entry here. Just click the Submit a New Entry button at the top or bottom of the page.
Do you know for sure that some of the information on here is wrong? If so, you can also report a correction with that button at the bottom of the page.
Are you ready to explore the world of movies and who didn’t star in them? It's so much fun. Check it out! 
http://www.notstarring.com/

 
 
It is Spring. Spring my favorite months for sure. The beautiful hardwoods will soon be budding and then fully foliaged. 

"A tree is a wonderful living organism which gives shelter, food,
warmth and protection to all living things. It even gives shade to
those who wield an axe to cut it down" - Buddha.

There are probably hundreds of majestic and magnificent trees in the world - of these, some are particularly special:
This site features 10 Of The Most Magnificent Trees in the World.
http://www.neatorama.com/2007/03/21/10-most-magnificent-trees-in-the-world/


 
 
Chow  This is another good recommendation from Amanda

This is a Web site that has a lot going on, but trust me, it's in a very good way! Here you can learn all about food and beverages, as well as, get recipes, read food blogs and watch "how to" videos.

As soon as you load the page up, there is a lot of interesting things to do and see. There is a great variety of features to really get you hooked into the site. I’m already in love with it! I adore a site that can keep me interested with just what they have on display on their main page. That usually means there are plenty more great things to come.

When I was there, if I clicked on the main image, it took me to a seasonal Spring menu. I don’t know how often they change this section, but I really hope it's there for you guys. Just click the image and you’ll get whisked off to the menu. For there, click the links that strike your interest. The Arnold Palmer drink is one of my summertime favorites.

Since there is so much to cover, I’m going to focus on telling you all about: Theme, Recipes, Stories and Videos.
Theme – On the right hand side, look for the word Theme. Next to it, there will be two little squares of color. One is cream and the other is red. Click the cream box and watch how it changes the color of the page from red to cream. Now, click the red to change it back. It’s pretty nifty that you can choose what color you browse in, don't you think?!
Recipes – There are two ways to get started in the recipe section. One is to check out the featured recipes on the main page and then continue browsing from there. The second is to click the Recipe link at the top and go directly to the section (or, you can click the arrow next to it and choose what course of food you want recipes for). Either way, you will find tons of interesting recipes from all over the globe and many of them have been commented on by people who have tried them!
Stories – You’ll find the featured stories to be a great way to get into what this section is trying to bring you, which is food related stories from all facets of the subject. From the kitchen you cook in to your favorite restaurant to the tools you use to make dinner. If you just want to dive right in, you can use the Stories link at the top of the page and find a story about something that interests you from the listing.
Videos – Scroll down the page and you’ll see the featured videos. When I was there, it was "Dear Helena" and two "how to" videos on opening a bottle of wine and poaching an egg. To find more videos, either click the Videos link at the top of the page or choose More Videos in the featured area. There are some incredible "how to" videos here, such as how to truss a chicken, how to tie pancetta and how to make a vinaigrette, just to name a few.

If you’ve fallen under the spell of this site, you may want to register. At the top of the page, click the Sign Up link. Provide them a username, e-mail address and password and you are good to go! Just make sure you use an e-mail address that you will check, so that you can confirm that you requested the subscription. Once you’re a member, you can sign up for the recipe newsletter, which I have to admit, I am looking forward to. And even better, signing up is free!

Now that you’ve had a taste of this site, I’m sure you want to get busy exploring, so go on. Explore!
http://www.chow.com/

Return to Top of Page

HOME PAGE
KCNET NEWSLETTER
COMMENTARY AND CLASS SCHEDULE PAGE
MIKE'S COMMENTARY, COMPUTER CLASSES AND COURSES, 
ADVANCED USER GROUP NOTES, SUE'S NEWS & NOTES
FUN PAGE
TRIVIA, QUOTES, 
CHUCKLES AND BELLY LAUGHS
KCNET SENIORCENTER.NET HOME PAGE
NEWSLETTER ARCHIVES 2006, 2005, & 2004
KCNET NEWSLETTER MEMBER PAGES