Please Note: Archived information (e.g. below) may become out of date.
How To Subscribe
and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.txt
Questions about the advertisers? See the end of
this note. Please also see legal notices at the end of
this note.
Want an easier-to read formatted HTML version? See http://www.langa.com/whats_new.htm (The HTML version of each issue normally is available by 9AM EST [GMT-5] of the issue date.)
Please recommend the LangaList to a friend! (And maybe win $10,000 !)
The LangaList
2000-Mar-20
A Free Email Newsletter from Fred
Langa
That Helps You Get More From Your Hardware,
Software, and Time Online
1) Is The "Sixth Security Layer" Useless?
You folks are great! Each week, I'm awed by your collective knowledge, which many of you share in email or in the chat areas associated with some of the columns I write.
For example, the current column on the WinMag site ("Secure Your PC Online, Part Three" at http://content.techweb.com/winmag//columns/explorer/2000/06.htm ) describes a six-layer defense I use to protect my PC against miscreant hackers, and shows you how you can employ any or all of the same layered strategy to help secure your PC.
Last week, I got this note from Viraf Mohta, who's the Director of Kiosks and Interactive Media for eOutlets.com:
Dear Mr. Langa:
First, I would like to thank you for your informative newsletters. Second, I would like to draw your attention to a POSSIBLE error in your most recent article regarding multiple layers of defense for your online PC. (You may want to confirm this with other sources though.) As your 6th layer of defense, you unplug your modem and replug it, under the assumption that in doing so, your PC which has a dynamic IP address, will be assigned a new dynamic IP address. You also state that this is true for ANY PC using dynamic IP addresses. Well, I don't think this is ALWAYS true. It depends on the way the dynamic IP addresses are allocated to your PC by the server. You could very well get the same IP address, each time you unplug and replug your machine, and even if you were to turn your machine off for a few days.
A rule (set by the server admin) on the dynamic IP address assigning server determines what happens at your end, to a certain extent. The rule could state that even if your machine has been shut down for a week, you will still get the same IP address when you re-boot it; but if shut off for two weeks, then grant any IP address which is free and available. Although an IP address granted to you is dynamic, it is still 'reserved' for you for the duration of the one week specified in the rule on the server. So unplugging your modem or LAN connection, or even turning your machine off doesn't guarantee a new IP address.
Once again, thanks for your very informative newsletters.
Viraf is right: It *is* possible to reserve an address--- but that's not true dynamic addressing.
But even with dynamic addressing, there's still a small but nonzero chance you could get the same IP each time. If a connection is truly dynamic, then (because of the way blocks of IP addresses are allocated) you'd have a 1 in 256 chance of getting the same address--- not hugely favorable odds, but better than nothing. It's also possible that your odds would be 1 in 256*256 addresses or even 1 in 256*256*256 addresses; these are much larger "haystacks" for the "needle" of your address to get lost in---for making you harder to track..
But in itself, dynamic addressing is not a great defense. That's why it's the 6th (and weakest) layer in my system. It doesn't do a lot--- but even a minor speed bump in the path of a hacker is better than nothing. 8-)
Come check out all six defensive layers and see which ones would work for you!
http://content.techweb.com/winmag//columns/explorer/2000/06.htm
Click
to email this item to a friend
http://www.langa.com/sendit.htm
return to top of page
--------------(
Please Visit This LangaList Sponsor!) ------------
--------------(
the above is an advertisement )--------------
I told you about PicoSearch last
week--- it's a fast, free and easy-to-use external search engine you can hook up
to your site. It blows the doors off some locally-hosted searches, such as those
generated by the FrontPage search bot. (More info: http://www.langa.com/newsletters/2000/mar-16-00.htm#5
) But by Friday, PicoSearch was
nearly dead in the water. I don't know if it was a coincidence, or if it was a
boatload of LangaList readers all trying to index their sites at the same time.
But whatever the cause, the PicoSearch site was in deep kimchee. (It returned to
normal on Saturday.) I like PicoSearch a lot, and
probably will like it more because of what reader Tom Phelan found out: Fred, I wrote you about
the lack of AND (the boolean operator) using Pico search. I also wrote Pico
search and they responded.... Looks like AND is in the not too distant future.
Thanks for pointing me in the direction of Pico, it's a fantastic service and
saved me the hassle of setting up my own search engine. Boolean searches (AND, NOT, OR,
etc.) will only make a good thing better. All in all, surely one of the above
searches will fit your needs, should you ever want to add a search engine to
your site. But PicoSearch isn't the only
free search engine available: You mentioned a
good search engine in your newsletter 16 March 00. I use Atomz ( http://www.atomz.com
) for my web site (located at http://www.haynes20.freeserve.co.uk
). I have found this to be an excellent service. It provides the opportunity for
you to create your own results page in which you paste your code, so your users
don't even know that it is operated externally. It is free and only displays a
small logo on the results page, which you can also customize! A very impressive
service, which is accurate and very flexible. Thanks for a great
newsletter--- Nick Haynes Thanks, Nick and Tom. Looks like
we all have two great options for adding FREE searches to our web sites! Click
to email this item to a friend Last week (see http://www.langa.com/newsletters/2000/mar-16-00.htm#4
) I told you about several "Cool Tools;" image compressors/converters
that can take even already-compressed GIFs and JPGs and squeeze them down
further, making web pages smaller and faster-loading. Once again, the collective
wisdom of you and your fellow readers came through in the resulting emails I
got: From: John Collins--- From: David Webber--- From: Jamie Gray--- And there's the GifBot at http://www.netmechanic.com/
too. Thanks to all who wrote in! Click
to email this item to a friend -------------(
Please Visit This LangaList Sponsor!) ------------
--------------(
the above is an advertisement )--------------
Even after all this time, DOS
still sometimes causes trouble. Last week, for example, Microsoft released
information on a "DOS Device in Path Name" security problem that could
cause your system to crash. The problem affects the entire
Windows 9x line, from Win95 through Win98SE. Microsoft describes it this way: "DOS device names
are reserved words, and cannot be used as folder or file names. When parsing a
reference to a file or folder, Windows correctly checks for the case in which a
single DOS device name is used in the path, and treats it as invalid. However,
it does not check for the case in which the path includes multiple DOS device
names. When Windows attempts to interpret the device name as a file resource, it
performs an illegal resource access that usually results in a crash. Because it
is not possible to create files or folders that contain DOS device names, it
would be unusual for a user to try to access one under normal circumstances. The
chief threat posed by this vulnerability is that a malicious... web site
operator hosted a hyperlink that referenced such a path, clicking the link would
result in the user's machine crashing." A patch to correct this problem
will be available soon via WindowsUpdate, but it's available right now at these
locations: Windows 95: Windows 98 and Windows 98 Second
Edition: More info: Click
to email this item to a friend I had a long internal debate with
myself about bringing you this tweak. On the plus side, it can significantly
speed the loading of complex web pages--- Internet Explorer will load these
pages *much, much* faster. But the downside is that the tweak makes IE
non-compliant with the HTTP1.1 spec. If you employ this tweak, you'll be making
your browser nonstandard. The HTTP 1.1 spec limits the
number of simultaneous connections any one browser can make to a given server.
It's a way to ensuring there are enough connections to go around. This IE tweak
turns off IE's built-in compliance with this standard, and lets your copy of IE
open far more simultaneous connections with a server. This means your browser
can grab many chunks of a web page at one time, speeding load times. But it also
makes your browser a connections "pig," consuming more than its fair
share of server connectivity. It makes your browser a selfish net entity. But this tweak is public
knowledge now--- reader John Collins dug it out of the Microsoft Knowledge Base,
for example (thanks, John!)--- so I'll tell you about it, with a caveat. This tweak can be useful as a
temporary setting, or for troubleshooting. But I do NOT recommend it as a
permanent thing. Slow web pages are usually caused by something other than the
number of allowable connections. (Look at my newly-tweaked http://www.langa.com
to see how fast pages can load with no browser weirdness at all, for example.) But if you want the tweak and
aren't concerned about taking more than your share of connectivity, here are
John's instructions: In Windows 2000: 1. Open Regedit
(Start-->Run--> and type 'regedit' [without quotes] ) 2. Navigate to the
following folder: 3. Find the keys that
say: 4. Change the value of
both keys to some higher number In Windows 9.x 1. Open Regedit
(Start-->Run--> and type 'regedit' [without quotes] ) 2. Navigate to the
following folder: 3. Create the following
"DWORD" : 4. Set the value to any
high number (the default is 2) 5. Creat the following
"DWORD" 6.Set the value to any
high number as well (the default is 4) More explanation:
See Click
to email this item to a friend If you think the
LangaList is a worthwhile read, just use the following link to recommend the
LangaList to a friend. You just may win $10,000(!), your friend just may find a
new source of useful information; I just may gain a new subscriber (full details
also available via this link): http://www.langa.com/recommend.htm#1 Or, win a copy of
"Poor Richard's E-Mail Publishing: Creating Newsletters, Bulletins,
Discussion Groups and Other Powerful Communications Tools." This book has
been described as "An excellent, straightforward manual on email
publishing, banner ads, driving traffic and especially ethics." (Full
details also available via this link): http://www.langa.com/recommend.htm#2 Either way, thank
you, and good luck! Click
to email this item to a friend -------------(
Please Visit This LangaList Sponsor!) ------------
Promote
your product or service --------------(
the above is an advertisement )--------------
But don't take just my word for
it: To: <fred@langa.com> I'm sure you've gotten
many of these emails, but now it's my turn! Thanks to "It pays to load the
code" and your mention of my site www.putergeek.com
in your newsletter of13-march-00, the traffic on my site has increased
drastically! Here's some info... On the 13th, I got some 3000 hits more than
usual. While I don't write for
a living, I know how busy my website keeps me, (as small as it is) so I can only
guess the amount of time you put into yours. I just want to say thank you for
all you've done for 'puter users in general and myself in particular! I've been
reading and learning from you for some time and I'd like to think that you've
directly helped me over some of the bigger rocks on the path towards 'puter
knowledge. Please keep up the GREAT work! ---Peter Crockett My pleasure, Peter. In fact,
"Load The Code" is one way we all can help each other out. So, if you
have a home page or website (it doesn't matter what size), please click on over
to http://www.langa.com/code.htm
, and maybe you can get some extra traffic too! Meanwhile, here's another VERY
eclectic selection of reader sites--- some professional, some *very* personal---
from among the many, many readers who have taken me up on my "Load the
Code" offer. http://members.tripod.com/~fjallen/compinfo.htm http://members.xoom.com/falcon22/Link.html http://www.geocities.com/bdveach/ http://www.snellville.com/opinions/sleepybob/ http://useforesite.com/links_resources.shtml http://www.bicycleforum.com/ http://website.lineone.net/~dhardy/ http://www.bridle.demon.co.uk/ http://www.alhoffman.org/bigaldoc.html http://www.acronet.net/~egroelle/ http://www.members.home.net/fxallen http://3090454.home.icq.com/PortalNet-NOW.html http://toms_garden.tripod.com/ http://fly.to/himatis Click
to email this item to a friend Reader Steven Pitts sends this
along: You think you're smart??
Try this out....Read this sentence: FINISHED FILES ARE THE
RE- Now count the F's in
that sentence. Count only once, don't go back and count a 2nd time. ANSWER: There are six F's in the
sentence. There is no catch. Many
people forget one or more of the "OF"'s because in English, the F
there is pronounced like a V. Click to
email this item to a friend -------------( Please Visit This
LangaList Sponsor!) ------------
Looking to Advertise via
Graphical Banner Ads? They're now available on the
Langa.Com site. --------------( the above is an
advertisement )--------------
See you next issue! Best, (Please recommend
the LangaList to a friend! (And maybe win $10,000!I) An easier-to read formatted HTML version is
available in the "what's new" section of http://www.langa.com.
(The HTML version of each issue normally is available by 9AM EST [GMT-5] of the
issue date.) All past LangaList issues are also available via the same link. Why are you getting this newsletter? There are
only two ways to get on the list (direct email request or via the WinMag mail
list signup page) so if you're getting this newsletter; your name came to me
through one of those channels. SUBSCRIBE (it's free!): Create and send a new
email address it to subscribe-langalist@lyris.dundee.net About
the advertisers: Langa Consulting LLC will never knowingly accept
advertising for a fraudulent product, company or service. However, Langa Consulting LLC makes no implied or explicit warranty, recommendation or endorsement
of or for the products, companies or services mentioned in the ads. Disclaimer:
The tips and other information given in the newsletter are researched and are
believed to be accurate, but we cannot and do not guarantee that all the
information here will work on all systems, for all users, all the time. All
information herein is offered as-is and without warranty of any kind. Neither
Langa Consulting LLC, nor its employees nor contributors are responsible for any
loss, injury, or damage, direct or consequential, resulting from application of
any information presented here. This newsletter is a free service of Langa Consulting LLC and is Copyright © 2000 Langa Consulting LLC. All rights reserved.2)
OK, Who Killed PicoSearch? <g>
http://www.langa.com/sendit.htm
+return to top of page3)
More Image-Shrinkers
Fred, these two tools are *very* helpful in shrinking html size:
http://www.radikalworx.com/shrinkHTML/ShrinkHTML050.zip
http://pico.i-us.com/tools/htmlshr.htm
Your last issue Cool Tool #1 could have used this -
http://www.jasc.com/trj.html
In reference to your Cool Tool #1 the site I use is http://www.spinwave.com/
and there is no need to login, it is free, you can choose images on your hard
drive, or on the net, and you can do either .gif, or .jpeg files right from this
page. You then choose how much compression, how much reduction in file size you
want, it usually gives you 6 pictures, then you just use the right-click save
as... feature, and you've got yourself a much smaller image.
http://www.langa.com/sendit.htm
return to top of page4)
DOS Reaches From the Grave... to Bug Windows9x
http://www.microsoft.com/downloads/release.asp?releaseID=19491
http://www.microsoft.com/downloads/release.asp?ReleaseID=19389
http://www.microsoft.com/technet/security/bulletin/fq00-017.asp.
http://www.langa.com/sendit.htm
return to top of page5)
Speed Up IE4 and 5--- But At Your Own Risk!
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings
MaxConnectionsPerServer
and
MaxConnectionsPer1_0Server
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings
MaxConnectionsPerServer
MaxConnectionsPer1_0Server
http://support.microsoft.com/support/kb/articles/Q183/1/10.ASP?LNG=ENG&SA=ALLKB&FR=0
http://www.langa.com/sendit.htm
return to top of page6)
$10,000 For Your Trouble?
http://www.langa.com/sendit.htm
return to top of page
to over 100,000 readers,
and lock in today's low ad rates through June 30!
see http://www.langa.com/ratecard.htm7)
It Really Does Pay To "Load The Code!"
Subject: My site traffic has soared thanks to you!
Computer Information links
eclectic personal site
Barry Veach's Home Page
Bob Griggs' Publisher's Page
useful web resources
bike-related message board
West Hertfordshire provincial Grand Lodge
part of the multimedia web ring
watch him morph!
Saumir Signal Depot - A nostalgic Look Back
"Fred Allen's Great Web Site"
Welcome to JCW Associates PortalNet-NOW
tom's garden
personal site w/ free gifs etc
http://www.langa.com/sendit.htm
return to top of page8)
Just For Grins
SULT OF YEARS OF SCIENTIF-
IC STUDY COMBINED WITH
THE EXPERIENCE OF YEARS
A person of average intelligence finds three of them.
If you spotted four, you're above average.
If you got five, you can turn your nose at most anybody.
If you caught six, you are a genius.
http://www.langa.com/sendit.htm
return to top of page
See http://www.langa.com/ratecard.htm
Fred
(fred@langa.com)
UNSUBSCRIBE: From the same address you used to sign up with, create and send a
new email address it to unsubscribe-langalist@lyris.dundee.net
.
CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? NEED HELP? See http://www.langa.com/help.txt