Wednesday, July 27, 2005

Verification required

In other news, you might want to check this out if you are an expee user: Microsoft will require users to verify the legitimacy of their Windows, if your copy of it is found to be a pirated one, you will be unable to download software updates from them. If you don't verify your copy of windows, you'll also be unable to download software from them.
Unless you pay, that is.
Well, read the article. I've nothing to add about it because those are the rules, and if you accepted those rules (ie: you installed the software) you gotta play by them.

GNU/Linux is free and open source.

Sunday, July 24, 2005

CSS recommendations

I haven't done a software rec in a while, so I thought it was about time I did. =]
Only instead of recommending "applications" I am going to recommend web resources.
Enter the 10 best resources for CSS.

You know you want to check it out if you design websites, either for fun or professionally.

Saturday, July 23, 2005

Ugh...

Windows Vista is probably the ugliest software-related name I've heard after Mandriva. Ugh.

Monday, July 18, 2005

New Mozilla / Firefox release this week.

News.com reports that apparently a coding misstep in the newly released Firefox 1.0.5, Thunderbird 1.0.5, and Mozilla 1.7.9 might leave without functionality some of its extensions. For this reason the Mozilla foundation plans to upgrade its products once again this week.
On the bright side, it seems (according to news.com) that the next Firefox will have bit torrent support as well.

In other firefox news, you probably noticed the Firefox Google Bar is already out and ready. Additionally, some security issues with its prior releases (google bar's) have been fixed.

This afternoon it seems I'm "patching entries", I'm not actually touching any new topic. =/

Remember about Microsoft's Windows XP Remote Desktop control vulnerability? Well, it affects other windows versions as well.
From news.com:

Until a patch is available, Microsoft suggests users block TCP port 3389 (the port used by RDP) on their firewall, disable Terminal Services or Remote Desktop if not required, or secure remote desktop connections using either Internet Protocol Security or a virtual private network connection.

Which is pretty much disabling the service. It's good to see they are not throwing a "Buy anti-virus software! Download and install our patches!" sentence at users any longer, like they usually do in these cases, because we all know there is no anti-virus or patch for this flaw.

In days like this I feel like hugging my GNU/Linux box.
Talking about which, I hope to have a little spare time tomorrow to review some very interesting applications running on Linux; among them BRL-CAD.


Technorati tags: , , ,

Sunday, July 17, 2005

Security bug in fully patched Windows XP SP2

After last week's roundup of security advisories (and some patches) for MSWindows and other MS products (MSWord, MSIE, etc), a new and potentially dangerous security bug has been reported, although there is no patch for it as of yet.
This bug affects users turning on the Remote Desktop feature in Windows XP, and allows the remote execution of code (that is, someone whom you haven't authorised to access your computer might, from another computer, get into yours and execute code on it with malicious intentions).

What is the remote desktop function? It's a feature that allows you to control your computer while you are not at it. For example, from work or while you are away on travel. (If you have ever seen those ubiquitous "PCAnywhere ads", you probably have an idea of what I'm talking about). Ideally such a feature should only allow the computer owner (and his workgroup) to access the computer in question. Well, thanks to this bug an ill-intentioned anonymous person might access your computer and cause a DoS attack from a remote location (remote location = from another computer).

The bug affects Windows XP users in spite of their Windows firewalls being turned on, SP2 installed and being fully patched.
Microsoft recommends users of its products to enable their firewall, install antivirus software and download Microsoft's security fixes, however none of these actions seem to prevent this particular remote exploit (in other words: their recommendation is useless in this case).

Microsoft has reported they are working on a patch that could be available in August. *points at date today... ahem*
Secunia advises to "Restrict incoming traffic to affected systems to reduce the risk."
Michelle (not half as a reputable source as secunia.com, although perhaps a lot more radical in this case) advises to turn off the service.

Oh, well. I'm warning you about this because I know many of you -in spite of my shameless propaganda for GNU/Linux- are using MSWindows. I am not. ^_^

Technorati tags: , ,

Friday, July 15, 2005

Spread Firefox (dot) com under attack

This is the e-mail I received today:

On Tuesday, July 12, the Mozilla Foundation discovered that the server hosting Spread Firefox, our community marketing site, had been accessed on Sunday, July 10 by unknown remote attackers who exploited a security vulnerability in the software running the site. This exploit was limited to SpreadFirefox.com and did not affect other mozilla.org web sites or Mozilla software.

We don't have any evidence that the attackers obtained personal information about site users, and we believe they accessed the machine to use it to send spam. However, it is possible that the attackers acquired information site users provided to the site.

As a Spread Firefox user, you have provided us with a username and password. You may also have provided us with other information, including a real name, a URL, an email address, IM names, a street address, a birthday, and private messages to other users.

We recommend that you change your Spread Firefox password and the password of any accounts where you use the same password as your Spread Firefox account. To change your Spread Firefox password, go to SpreadFirefox.com, log in with your current password, select "My Account" from the sidebar, select "Edit Account" from the sidebar, then enter your new password into the Password fields and press the "Save user information" button at the bottom of the page.

The Mozilla Foundation deeply regrets this incident and is taking steps to prevent it from happening again. We have applied the necessary security fixes to the software running the site, have reviewed our security plan to determine why we didn't previously apply those fixes in this case, and have modified that plan to ensure we do so in the future.

Sincerely,
The Mozilla Foundation

Yesterday and the day before yesterday when I tried to access the spreadfirefox.com site, I found it was down. =/ I thought the server was down for different reasons, though.
It is quite of an annoying time to do this (not that there is actually an OK time to hack a site... at least not from the point of view of users), especially considering a new release has been available since Tuesday. I don't know if it's a coincidence, but I bet it isn't.

Technorati tags: , ,

Thursday, July 14, 2005

About Browsers and Improvements

Interesting news about two browsers that you might want to check out. Mozilla's Deer Park and Opera. Both are available for Linux and windows; amd Deer Park is also available for Mac's OSX.
In the first place, please take a look at Mozilla's Deer Park announcement. Deer Park offers some new and interesting functionality, like the ability to download and install security patches to the browser without having to re-download and re-install the browser itself. This feature was, perhaps, among the most requested ones by Firefox and the Mozilla suite users. It's really nice to have this functionality at last. Kudos to the Mozilla development team. =)
(download link from ftp)
I think I'll be playing with it later today or maybe tomorrow and I'll write a more thourough report about it.
Deer Park also includes improvements to the pop-up blocking feature as well as security enhancements.

The second browser-related news I mentioned has to do with Opera. Apparently it's official that the new release of Opera browser will support bit torrent. (Whee!) In spite of the FUD campaign against bit torrent that we've seen lately (by those who want to associate the technology behind bit torrent with piracy... don't make me name names...) the feature is very interesting, since it would allow Opera users to manage software downloads in a fast and reasonably secure way from the browser. (I've always loved their download manager, and quite especially its "resume" feature).
As per the whole FUD campaign I mentioned before, remember that you can't blame technology for the use people give to it.
If you could do that, then if a driver ran over someone crossing the street it wouldn't be the driver's fault, it'd be the car's and the car maker's.
If you stuck your fingers in the electricity outlet and you got electrocuted, it wouldn't be your fault for being stupid; it'd be electricity's fault.
This kind of faulty reasoning is what those who try to blame bit torrent for piracy are trying to impose on us. Bit torrent can be used (and in fact, is used) for legal downloads of software (ex. Linux, and several applications), documentation, etc. Bit torrent doesn't "hypnotize" you or subliminally convince you to download illegal copies of movies, warez or music; and using bit torrent doesn't mean that you are doing something illegal per se, in the same way that driving a car doesn't mean that you are a criminal.
As usual, the question is how people use technology, and that does not depend on technology but rather on the users' moral.

Technorati tags: , , , ,

Wednesday, July 13, 2005

X.org welcome to Debian

After a very long wait, XOrg's X11 has finally arrived at Debian Sid (unstable). For those of us who cling desperately to use Debian GNU/Linux this is something we were looking forward to for some time, and of course, it's happy news.
David Nusinow, the main maintainer of the package, has made some comments about it on his blog that you might be interested in reading.
Personally, I think X11 is more advanced that Xfree, especially considering that a lot more programming has been going on at Xorg than at Xfree, and I find xorg to be more stable in addition to it.
For the record, if you are still in doubt about what X11 is, you might want to check this.

Technorati tags:

Firefox 1.0.5 released

Firefox 1.0.5 was released yesterday. The upgrade includes security fixes as well as improvements to stability. Go get it!

Technorati tags:

Tuesday, July 12, 2005

Technorati doesn't love me

It looks like technorati doesn't like this blog. Isn't it a shame?
I've e-mailed support, but according to what I've been reading online, it might take them quite a long time to actually get to check the error I keep getting.
Insert sad pout here.
I know the internet will survive without this blog being indexed by technorati, but you know... I'd be a very happy puppy if it worked.

If you want to learn what technorati is, just take a look at it. I'm sure their main page does a much better job at explaining what they are all about than I could ever dream doing.

Edit at 0:38AM: They have actually replied very fast to my support ticket (Thank you, Ryan!) but I'm still unable to find a solution for my error bound blog. I guess I'll keep waiting for a while longer.

Edit at 8:10AM: It works now! Thank you, Technorati!

Technorati tag:

Live bookmarks in Firefox

You've probably heard of news syndication before, and you probably thought it was just one more of those complicated and useless things that become quickly fashionable on the internet only to die away a few months along the path.
So, here I am today only to tell you that live bookmarks are actually very useful, that they don't seem to be going to die away any time soon, and that they are very easy to set up and offer an interesting feature that you might become addicted to in almost no time.
Basically, syndication of news and blogs means you don't need to go to the news source (or blog) in question's website to see if there are any new articles. You can move your cursor over the live bookmark and a list of recent articles will appear. Clicking on the article name will take you to the article itself.

But, words can be confusing (especially if it's me who's typing them) so let's take a look at a few images and I'll teach you how to use live bookmarking on Firefox.

I like to keep things organized, because I believe the more organized you are, the less time you waste (and the more free time you will get in the end). So, I usually manage my bookmarks accordingly.
Since I'm assuming you are new to live bookmarking, I'll advise you to be organized in order to make the best out of it and learn fast.
So, first click on "Bookmarks" (upper menu) and select "Manage Bookmarks" (Usually the second option). A new window will appear in front of your browser window. This window is split in two. It looks like this.
Click on "Bookmarks Toolbar Folder" and then click on the "New Folder" icon.
A new folder will appear and you will have to give it a name. When you close the Bookmarks Manager, a new folder will appear on your toolbar, like this.
Now you are ready to start adding live bookmarks for blogs and news sites in an orderly way.
Let's try:
You are, I assume, reading this blog. You will see an icon on the lower right corner of your browser that looks like this:
Live bookmarks
(It might look a little different according to what Firefox theme you are using. In some themes you'll get an orange rectangle that reads RSS.)
If you move your cursor over it, you'll see the following tag:
RSS
click on it and a tag reading "subscribe to this page's feed" will appear. Click it. a small menu with your bookmarks will appear, chose the folder you created specifically for this purpose (Live bookmarking). Click OK and go check your toolbar folder.
Live Bookmarks
When you click it, a list of live bookmarks will appear, if you move your cursor over them, you'll get a list of recent articles that you can easily navigate at a glance.
That's it.

Technorati tag:

Monday, July 11, 2005

Microsoft and Claria, a match made in... hell.

About 2 weeks ago it was mentioned that Microsoft intended to buy adware/spyware company Claria (formerly known as Gator). I also explained what Claria/Gator was all about and why their products have been often questioned in regards of privacy and business practices.

A couple days ago, while browsing random tech-related news, I found this article telling us how Microsoft's anti-spyware (beta) application has downgraded Claria adware detection and removal. Basically (and in simple terms) this means that whereas Microsoft's Anti-spyware manages to detect Claria/Gator/GAIN software, it
doesn't take any action on it and lets it silently do its malicious job in your computer.
Microsoft has denied giving Claria special treatment, and claims that the downgrade in threat level aims to be
"fair and consistent with how Windows AntiSpyware (Beta) handles similar software from other vendors,". Unfortunately Microsoft fails to tell us who these "other vendors" are.

Allow me to remind you that Claria/Gator/GAIN software is, according to a Webroot report, the second most prolific adware install, being detected on 2% of all the computers connected to the internet (in case you didn't figure it out already, 2% of all the computers connected to the internet in the entire world = a huge number of computers); other reports place it the the #1 position with over 6% of worldwide computers affected by it.

Claria software, which is in itself very hard to remove, is included in applications such as Dashbar, Gator, PrecisionTime and Weatherscope (among others). This kind of software collects and sends information about you, which is later sold to Claria's customers (this might compromise your privacy and security to varying levels). It downgrades your computer performance (for example: it makes your internet connection slower), and pops up unrequested advertisement while you navigate the internet, often displaying ads for competitors of the vendors who have paid to be featured in a certain spot of a certain commercial site (disloyal business practice).

Additionally I would like to point out that this change in MS anti-spyware application behavior is not being properly informed to the user.

A nice list of free (of cost) anti-spyware software can be found here.

Technorati Tag: .

Wednesday, July 06, 2005

Free as in speech AND beer

Right now, considering that I'm at work and this computer runs windows expee (I'd call it windows-mega-poo, but ignore me) I'd like to make a quick software recommendation.

7-zip.

You are probably quite acquainted with windows programs such as winrar and winzip. Both of them are proprietary applications and both of them require that you pay to keep using them once the trial period has expired.

7-zip, on the other hand, is a free, open source application that runs on windows platforms and can handle several archive types: 7z, ZIP, CAB, RAR, ARJ, GZIP, BZIP2, Z, TAR, CPIO, RPM and DEB. It is very easy to use; it has a nice, intuitive and unbloated GUI, it's fast and you don't have to pay to use it. You shouldn't be downloading warez versions that are illegal and might contain viruses embedded in them, when you can safely use 7-zip for as long as you like at home and/or at the office and just get the work done.

You might want to give it a try. The official site for 7-zip has some nice screenshots and guidelines that will give you a good idea of how the application works.

The second recommendation will be for another free, open source application: FileZilla.

FileZilla is a fast, nice, easy to use, free and flexible FTP Client. Either if you FTP to your personal site or if you use it for FTP downloads, FileZilla is a reliable solution for windows users.

Additionally, has any of you tried the applications I recommended last time? If you did, let me know what you think about them. ^_^
*is a curious person*

Yay!

^____________________^
No software patents in Europe.

Friday, July 01, 2005

All about the penguin

Tux Magazine.
You know you want to read it... and besides, it's free. =P
It might answer some usability questions for those of you who feel curious about linux but don't yet dare to try it.

(pdf download.)

Additionally, I've found this article to be rather interesting... especially because a feature similar to this one has been available for free with linux for some time now. Heh...

[/linux propaganda]

Claria...? Gator...?

Some years ago, an application called Gator that could be downloaded for free on the internet, promised to make your internet experience easier and better by storing your passwords so that you didn't have to remember them every time you logged in to a password protected area (e-mail accounts, etc.) This application became rather popular among a variety of unsuspecting users who, unbeknownst to them, were sending valuable information to a third party. This third party (Gator) superimposed their own ads to the sites Gatorified people navigated.
You might argue that you don't really pay attention to ads (regardless of it being a disloyal business practice), but still there are a few things you should take into account before disregarding the importance of this invasive practice.
a) They were sending information about you to a third party behind your back and in the vast majority of cases, without your knowledge.
b) They were storing your passwords! True, they were being stored into your computer, but that doesn't mean they couldn't have access to them. Such a practice can potentially mean an application developped by them or anyone else can access private accounts such as your banking, credit records, paypal, ebay, etc.
c) They didn't inform you of this correctly.
d) Gator was hard to remove single-handedly.

Later, Gator (enjoying quite a bad reputation after their business practices became better known) changed its name to Claria, but they didn't change their ways. Taking their scum into the next level of corporativeness they decided to enlist major sites among their supporters, and continued to push their ads on top of regular ads, as well as they continued to gather information about you and your navigation habits. Now the adware was embedded in other "attractive" software, like for example Kazaa (p2p client) which people installed blindly and used blindly, ignorant to the fact that while they were downloading the latest U2 song, information about them was being widely transmitted over the net.

Claria/Gator/GAIN is one of the major scumware providers on the internet, infesting hundreds of thousands of computers with their privacy menacing software. Additionally it has been noted that their practices don't meet their lawyers claims.

You can read more about Claria/Gator here.
Additionally I strongly recommend that you NEVER store passwords anywhere other than in your head if you value your security and you NEVER use such kind of software/features ("remember password") if you don't want to find yourself in varying degrees of chaos. (That includes "Roboform")

You probably heard about identity theft on the internet and how fast it is becoming common while governments fail to do anything notable to counteract it or help the victims. Such "remembering" applications might possibly be the perfect vial for these crimes, and if you install them your are exposing yourself to serious danger.

Software recs

Now, since I have a spare moment of internet time I'll take advantage of it by recommending two pieces of software.
As you can expect, they are free and Open Source.

1) ClamAV. Antivirus. Primarily intended for *nix-like system (for example, linux) it's been ported to several other OS's. You can find versions for Windoze and MacOSX. Even if you know your OS doesn't attract scumware, it's always a good idea to have an anti-virus around, since the fact that said scumware does not affect your system does not necessarily imply that you aren't spreading it to your friends without knowing.

2) Abiword. Word Processor. Lately I've found myself using Abiword a lot more than OO's writer. Perhaps that's because I find Abiword to be lighter and load faster. Available for Windoze, MacOSX and several GNU/Linux distributions, this is the kind of application that one generally overlooks at first. For those of you who do a great deal of writing and want a nice application that shows documents right, loads fast and comes with "can't-do-without" features such as spellchecking; this is a must have/must try.

In other news... Did you hear Microsoft is going to buy Claria?
Claria (formerly known as Gator) is a well-known spyware/adware provider.
Didn't I tell you already that Windows IS a virus? Geez... I bet they are going to embedd the spyware inside longhorn... XDDD Are you still going to pay to get spammed? Or are you ready to make the switch?

Now, yeah, gotta get myself a cigarette and go to sleep.