Please visit the LangaList Home Page

Please note: Older issues may contain information that is now out of date.


How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win $10,000 !)

An easier-to read formatted HTML version of this newsletter is available on line at
http://www.langa.com/newsletters/2001/2001-05-14.htm

The LangaList
Standard Edition

2001-05-14

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

Contents:

1) The "Dead Drive" Security Loophole
2) The PEBKAC Blues
3) Spyware-Free Download Manager
4) How Can You Tell If Something's Spyware-free?
5) *Triple* Your Connection Speed?

6)
Is This Information Useful?

7) Collaborate To Improve Security Online

8)
They Just Keep Coming And Coming and Coming...

9) "Script Sentry" Updated
10) Just For Grins
11) Easy, Do-It-Yourself Auto-Run CDs; A Comprehensive Computer Spec Checklist...

For even more content, downloads and special services,
check out the LangaList Plus! Edition: http://www.langa.com/plus.htm

 

1) The "Dead Drive" Security Loophole

Any time you return a system or hard drive for repair, resell it, hand it down, discard it, or otherwise place it in someone else's hands, you're potentially giving that person access to everything on the drive, including files that you thought were deleted, reformatted, or overwritten.

Reader Andy Nelaimischkies recently encountered this little-discussed but major security problem:

"Hi Fred: I recently had a new hard drive fail due to apparent motor failure. I returned it for another one but afterwards I was thinking: What's to prevent someone from fixing it and accessing my personal data at a later date? Is there a way to erase a drive before returning it for a replacement? Am I being too paranoid?"

No, that's not paranoia at all. While this case--- a dead motor--- would have presented some unusual challenges to a snoop, in most cases it's amazingly easy to recover data from old hard drives, even if they've been "erased" or completely FDisk'ed and reformatted. (And in Andy's case, he never had the chance to do even that; all his data was intact, exactly as it was when the drive died!)

Whenever a hard drive changes hands for any reason, there's absolutely nothing (except the imperfect protection of the honesty and ethics of others) to prevent the new owner of the drive from gaining access to whatever was on it. Your email, tax records, passwords, and any business plans or other private or confidential information may all be up for grabs, even if you've deleted the files or reformatted the disk.

Ironically, even persons and organizations who exercise good security practices during the normal life of a system or hard drive may not pay enough attention to security during repair operations or at the end of a system's life.

But there are ways--- ranging from the free and simple to more elaborate and hard-core solutions--- that can virtually guarantee that hackers, crackers, dishonest repair technicians, hand-me-down users, or even dumpster-diving snoops won't be able to do much of anything with your old or in-for-repair hard drive.

It's the focus of the new "LangaLetter" column due to go live today (May 14) at InformationWeek's ListeningPost: http://www.informationweek.com/LP/columnists/Fred Langa.html (If you arrive early, you'll see the previous column--- Message In A Bottle." Just try again a little later.)

Check out today's column to learn ways you can secure your drives from even the most determined snoops, and then join in the week-long, ongoing discussion ( http://www.informationweek.com/forum/Fred Langa ) to share your thoughts. See you there!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

2) The PEBKAC Blues

Reader Rodney Shaw ran into a problem that's instructive on two levels: First it will show you a password-related trick you may not be aware of. Second... well, we'll get to that in a moment:

Hi Fred. Here is a little tip you can offer your newsletter subscribers - I found it out the hard way!

If anyone should decide to change their Win95/98 Network logon name (the one you see at boot up) make sure you have a backup copy of your *.PWL file, which can be found in your Windows directory folder. I thought I'd take the easy route and delete the *.PWL file (common practice when the PWL becomes corrupt. Simply re-logon using your original name and password and all stored info is auto-resumed).

But changing your logon name is enough to reset all your previously stored auto-fill-in-name-and-password-info (If you chose that option) when filling out forms on web sites.

It gets worse! Your "profile" and cookies, which you carefully decided to accepted from web sites, simply don't work anymore! Yes those "dreaded" security "risk" cookies turn around and say - "Wrong town, wrong baker and not my recipe" - "Gimme your name and password and maybe I'll let you in!" Now you start hunting for those long lost names and passwords - Did I make a backup somewhere? .... hunt .... hunt ... look .... look ... DARN! I can't find them anywhere! Now I have to re-enter all that info again!

Solution. Backup your PWL file BEFORE deleting it and keep it somewhere safe until you are sure everything is running fine after you have made the change! [Luckily I done just that] There are many utils on the web, freeware and shareware which can be used to keep track of ones "name" and "password" but they rely on YOU doing the change and re-entering updated info in it's database(s)! In my opinion they are useless because they rely on the same idiot who deleted the PWL file in the first place! ;-)

Thanks, Rodney! Some jaded tech support people refer to issues like this as "PEBKAC" matters: "Problem exists between keyboard and chair." <g> But all of us, from greenest newbie to the most grizzled veteran, make mistakes. I freely admit that from time to time, along with the normal sounds of whirring fans and clacking keys, my office will resound with the sharp "thwack" of hand meeting forehead as I realize I've made some bonehead move or other.

But, as Rodney re-learned, "To err is human, but to back up is divine." Whether your backup is in the form of a single critical file you're working on, or the contents of your entire hard drive, a good backup is the way out of all manner of PEBKAC problems.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

3) Spyware-Free Download Manager

Reader George Philp found a replacement for Go!Zilla:

Fred, I am forwarding an URL for a FREE download manager with no Spyware, no advertising banners which I have tried out. I have been using the paid version of Go!zilla and this appears to be a much neater program, and the price is right. I have also included the remarks from "Freeware Home" who are very enthusiastic about the program.

http://lctek.tripod.com/dnloadmage/index.html

"Download Mage: True FREEWARE! Download Mage is Feature-Rich, Yet Fast and Easy-to-Use Download Companion for the Every Day Internet User. Select and Download Single or Multiple Links Directly from Web Browser Using Context Menu (MSIE only); Click Monitoring and Drag & Drop; Examines multiple links and displays test results; Preview Content of Zip File before Downloading It; Select and download individual files from target zip file. Size 197 K"

Thanks, George! It looks good!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

4) How Can You Tell If Something's Spyware-free?

The previous item--- "Spyware-Free Download Manager" --- might make you wonder: How can you tell, before the fact, if a given app contains spyware?

Of course, there are ways to tell *after the fact.* For example, you can install the app and then run Ad-Aware ( http://www.lavasoft.de/ ) or Opt-Out ( http://grc.com/optout.htm ) to identify and root out any spyware after it's on your system. That's good, and better late than never.  But wouldn't you prefer to know if something is spyware (or not) *before* you install it?

These sites can help--- they maintain lists of all known spyware. Using them, you can search BEFORE you download an install. Cool!

http://www.spychecker.com/

http://www.alphalink.com.au/~johnf/dspypdf.html

http://www.infoforce.qc.ca/spyware/enknownlistfrm.html

http://www.globalnet.cz/spyware/list.html

... and many others: http://www.google.com/search?q=spyware+list

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

5) *Triple* Your Connection Speed?

BrowserTune is humming along in its new home, and is helping thousands to identify and resolve all kind of problems with their browsers and internet connections.

Take Michael McDonough, who used BrowserTune's speed tests to fine-tune his broadband connection:

I used your browser tune (full) and followed the advice given to improve the speed. Went from an average 594kbs to 1980kbs and a very noticeable improvement in performance in general. Thanks a lot.

Wow! That's a pretty extreme improvement. But BrowserTune can help you make the most out of just about *any* kind of connection, from dial up through high-speed fiber. And along the way, you can identify all the most common problems in your browser or its many subsystems, too.

Check it out: http://www.browsertune.com

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

6) Is This Information Useful?

If you think the LangaList is a worthwhile read, maybe a friend would find it useful too! Just use the following link to recommend the LangaList---your friend may find a new source of useful information and you just may win $10,000 for your trouble (full details also available via this link): http://www.recommend-it.com/l.z.e?s=143182

Or, win a no-strings $30 Gift Certificate for any item at Amazon.Com--- books, software, hardware, kitchenware, toys... and more. (Full details also available via this link): http://www.langa.com/recommend.htm

Either way, thank you, and good luck!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

7) Collaborate To Improve Security Online

Reader Robert Stephens wrote:

... Lawrence Baldwin's site ( http://www.mynetwatchman.com/ )  has ingeniously filled a large hole in the Internet security community by hosting an integrated hacking reporting service. Working directly off, for example, the Zonealarm log the site automatically uploads the data and strips it of all firewall "noise". Comparing the intrusion attempts against other incidents that have been logged by other users, it then focuses only upon direct threats via its data processing routines. The icing of this model consists in the "mynetwatchman" database automatically filing email notifications to the hackers ISP's. Each intrusion attempt is copiously documented for its users with lots of high level stats. Bottomline: this is a must site for ZoneAlarm and BlackIce Users. Really nice work!

Thanks, Robert. The idea of collecting and collating stats to identify the worst malicious hackers is a good one. Although hackers/crackers move around, anything that makes their lives harder is good for the rest of us. 8-)

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

8) They Just Keep Coming And Coming and Coming...

Well over a thousand of your fellow readers have "Loaded the code." Please click over to http://www.langa.com/code.htm , and maybe you can join them! (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://www.langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites--- some professional, some very personal:

View A Randomly-Chosen Reader Site
http://www.langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://www.langa.com/readersites.htm

The Computer Fixer
http://mycomputerfixer.com/

AJ Jerig's Personal Portal
http://ajerig.tripod.com/index.htm

Dr. Don -- Morning Radio From Breckenridge, Texas
http://drdon1.homestead.com/index.html

The Salvation Army St Marys
http://www.salvos.com/stmarys/startup.htm

Doc's Security Links
http://maddoktor2.homestead.com/DocsSecurityLinks.html

TypingBees ---  virtual secretary
http://www.typingbees.com/

Dave's Jazz MIDI Page
http://members.bellatlantic.net/~vze2fgbs/welcome.html

Computer Training (Alaska)
http://members.nbci.com/d4wight/

Koga Software
http://home.earthlink.net/~djkoga/

The McAvatar
http://www.mcavatar.homestead.com/

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

9) "Script Sentry" Updated

Jason Levine has updated his free and popular "Script Sentry" tool that helps protect you against malicious scripts embedded in email.

Hey Fred, I just thought I'd let you know that I released Script Sentry version 2.1. This version has some important fixes and new features. First and foremost, it fixes a pretty big security hole that I just found out about (and that dates back to the earliest version of WatchDog) Due to how Visual Basic checks strings, Script Sentry's checks were case sensitive. This means that while "RegDelete" would be flagged, "regdelete" wouldn't be. (So a virus programmer would only need to meddle with case to get by Script Sentry.) I patched this up quickly, but it's important for all Script Sentry (and WatchDog) users to upgrade.

In addition to the "Case Sensitivity" bug, Script Sentry can now detect and block CLSID exploit detailed at http://www.guninski.com/clsidext.html  Thought you and your readers should know about this important upgrade.

Thanks, Jason. Script Sentry is available at http://www.jasons-toolbox.com/

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

10) Just For Grins

Ron Colverson sent in this bit of wisdom from the prolific mind of Scott Adams:

Dilbert's "Salary Theorem" states that "Engineers and scientists can never earn as much as business executives and sales people." This theorem can now be supported by a mathematical equation based on the following two postulates

Postulate 1: Knowledge is Power.
Postulate 2: Time is Money.
As every engineer knows Power = Work / Time
Since Knowledge = Power
Time = Money
Knowledge = Work / Money.
Solving for Money, we get:
Money = Work / Knowledge.

Thus, as Knowledge approaches zero, Money approaches infinity, regardless of the amount of work done. Conclusion: The less you know, the more you make.

By the way, you can find a whole world of wonderful Dilbert humor at http://www.dilbert.com . Highly recommended!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

Text ad OR banner ad!

Have it your way, and have it seen
up to 1.4 Million times a month!

See http://www.langa.com/ratecard.htm

<a href="http://www.langa.com/ratecard.htm">AOL Users: Click here!</a>

--------------( the above is an advertisement )--------------

11) Easy, Do-It-Yourself Auto-Run CDs; A Comprehensive Computer Spec Checklist...

Today's LangaList Plus! Edition contains all ten items above, plus about 30% more content including: detailed, step-by-step instructions on how to make your own auto-run CDs; and two formats of comprehensive computer spec checklists you can use for easy comparison shopping and record keeping....

Plus! Edition info: http://www.langa.com/plus.htm 

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

See you next issue!

 

Best,

Fred
(fred@langa.com)

Please recommend the LangaList to a friend! (And maybe win $10,000!I)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://www.langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page


Administrivia:

Why are you getting this newsletter? This is a 100% OPT-IN newsletter: There are only three ways to get on the list--- signup via direct email request from you, or signup via the WinMag newsletter page or signup via BrowserTune's email-notification service. If you're getting this newsletter; your name came to me through one of those signup channels. At signup, you also received a confirmation email from my list software---no one is signed up secretly or against their will.

SUBSCRIBE (it's free!): Create and send a new email address it to subscribe-langalist@lyris.dundee.net

For even more content, downloads and special services, check out the LangaList Plus! Edition: http://www.langa.com/plus.htm

UNSUBSCRIBE: From the same address you used to sign up with (it's shown on the first line in the body of each email issue you receive), create and send a new email address to  unsubscribe-langalist@lyris.dundee.net .

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? NEED HELP? See http://www.langa.com/help.htm

About the advertisers:  Langa Consulting LLC will never knowingly accept advertising for a fraudulent product, company or service. However, Langa Consulting LLC makes no implied or explicit warranty, recommendation or endorsement of or for the products, companies or services mentioned in the ads.

Disclaimer: (Please see full disclaimer here: http://www.langa.com/legal.htm.) Abbreviated version: The tips and other information given in the newsletter are researched and are believed to be accurate, but we cannot and do not guarantee that all the information here will work on all systems, for all users, all the time. All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from application of any information presented here.

This newsletter is a service of Langa Consulting LLC and is Copyright © 1997-2005Langa Consulting LLC. All rights reserved. LangaList: ISSN 1533-1156

return to top of page


Please visit the LangaList Home Page