Please visit the LangaList Home Page

Please note: Older issues may contain information that is now out of date.

How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win $10,000 !)

An easier-to read formatted HTML version of this newsletter is available on line at
http://www.langa.com/newsletters/2001/2001-06-25.htm

The LangaList
 Standard Edition

2001-06-25

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

Contents:

1) The Web-Bug Boondoggle
2) I Hate Sites Like This One
3) PhoenixNet BIOS's Performance Hit
4) Word, NetMeeting Security Holes (and Patches)
5) Freeware Reader Rave
6) Last Week To Enter June's FREE Book Drawing
7) Netscape 6.1 Preview
8) They Just Keep Coming And Coming and Coming...
9) More Uses For "Search Bar"
10) Just For Grins
11) Awesome Free File-Conversion Site;
Huge List For Ad-Blockers;
R.I.P. CueCat...

For even more content, downloads and special services,
check out the LangaList Plus! Edition: http://www.langa.com/plus.htm

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

1) The Web-Bug Boondoggle

Many readers have been asking about "Web Bugs"--- tiny, invisible graphics (usually 1x1 transparent GIFs)--- ever since the "Bugnosis" anti-bug software became available.

For example, reader Larry Kamin wrote:

      Dear Fred: Recently downloaded and installed a little tracking aide that spots 1x1 Bugs to aide in tracking you. It is from "The Privacy Foundation" and can be found at http://www.Bugnosis.org…. Perhaps you could make others aware of this valuable little tool. Available free.

I believe that the Privacy Foundation means well, and their intent with Bugnosis is honorable. But I also believe their Bugnosis site generates more heat than light about Web Bugs, and may do more harm than good by obscuring larger issues, and elevating a truly minor issue vastly out of proportion.

Long-time readers know I take security very, very seriously. But in most cases, I think fear of Web Bugs--- like the fear of most Cookies--- is a form of mass hysteria, and way out of proportion to any real risk.

From Bugnosis' own site, here's their definition of Web Bugs and the "threat" they pose:

      A Web Bug is a graphic on a Web page or in an e-mail message designed to monitor who is reading the page or message. Web Bugs are often invisible because they are typically only 1-by-1 pixels in size. In many cases, Web Bugs are placed on Web pages by third parties interested in collecting data about visitors to those pages.

      What information is sent to a server by a Web Bug?
      The IP address of the computer that fetched the Web Bug
      The URL of the page that the Web Bug is located on
      The URL of the Web Bug image, which contains the information to be communicated between the Web page visited and the site collecting the data
      The time the Web Bug was viewed
      The type of browser that fetched the Web Bug image
      A previously set cookie value
      Although this doesn't seem like much, these items can be used to spread information between multiple Web sites.

Wow! That sounds bad, right? And in fact, you'll see lots of talk around web sites--- usually on the pages of sites that want to sell you products and services (although Bugnosis is free)--- about how Web Bugs can be used to "track" users around the web, or (as Bugnosis says) to "monitor who is reading a page or a message."

To which I say: Baloney.

Web Bugging is not a simple topic, but given the amount of bad information out there, it's important to know what's really going on. To help you understand Web Bugs, to find the facts amidst the huge amounts of misinformation that's been spread about Bugs, and to help you assess what the real, no-BS threat level is, I've focused my current InformationWeek.Com article on Web Bugs.

In it, we'll cover exactly what Web Bugs are and exactly what they can--- and cannot!--- do; we'll discuss "the Cookie connection;" examine the limited ways in which Bugs *can* be misused; see how to prevent Bugs from sharing *any* sensitive data about you (no third-party software is needed); assess the risks by looking at some worst-case scenarios; and then discuss what I believe is the real answer to *all* online privacy issues.

To me, Web Bugs--- like Cookies--- are just a minor sideshow in the security arena, and hardly worth any concern at all. But many feel otherwise. Please come check out my reasoning and then join the ongoing, week-long discussion: Do I have my head in the sand about Web Bugs and Cookies, or do you agree that they're not much of an issue at all? If you use Bug filters and "Cookie crushers," have you encountered problems with them? What can and should be done about issues like Web Bugs?

When the column is posted (2001-06-25) it should be available via this direct link: http://www.informationweek.com/843/langa.htm .  If you arrive early, the link won't work: just try again a little later. <g>

Or, you can use the general "front door" to InformationWeek.Com's "Listening Post:" http://www.informationweek.com/LP/

See you in the discussion area!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

2) I Hate Sites Like This One

I like to think I have a good sense of humor; most of my friends and family seem to think so, anyway. But some "humor" sites go way beyond the bounds and end up doing actual harm in their attempts to be funny.

We discussed one such site in a recent item ( http://www.langa.com/newsletters/2001/2001-06-14.htm#1 ): The site rigged a totally fake security test which all users would fail, and then used the faked "security breach" to try to sell a firewall to gullible visitors. Har har.

But a site that reader Sheila K ran across is even worse:

Several days ago I searched for "virus scan, online" and in about the 2nd or 3rd screen of results found...  freevirusscan.org, registered to a "WebInfoSearch, LLC". When I went to their site, they offered a virus scan, so I clicked on the button to scan my computer. It asked to verify my IP address, I clicked yes, then I saw the contents of my root directory scrolling up on the screen. Then it told me I had the "Wassaboo Virus" and gave me an option to fix it. I clicked the button to fix the problem. Then it said I really didn't have a virus and had what may be a real or bogus link to McAfee - I didn't click on it, rather I attempted to exit the site and/or shut down my browser when a message appeared that it was formatting my hard drive -- which it didn't. Then a message flashed on the screen that "we have all your data" or words to that effect.

Have you ever heard of this site/others like it and should you care to check it out yourself and get similar results, would you please alert your readers to this? I feel it poses a significant threat to anyone who ventures near this site. Fortunately nothing but my son's games and web apps were on this computer but should one have financial or otherwise important information, they could be in for some serious trouble.

After this experience, I deleted all cookies on my H/D, changed all passwords, called up my ISP/telephone provider and changed ISP account info, phone info, etc., etc. I don't know exactly what these guys are up to, but it smells like a rat. I wouldn't want others to get taken advantage of like I did. I hope you could warn them away. This site should be shut down!

Sheila did the right things, but for the wrong reason because the site is a total scam--- a hoax that neither scans your system, gathers data, nor harms your files. In fact, if you let the fake "reformatting your hard drive" go to completion, you finally get a page that says

"No, your hard drive has not been formatted. No, You don't have the Wassaboo virus. Actually, we didn't even check -- you could have a hard drive full of viruses."

All the activity before that--- the virus scan, the information-gathering, the reformat--- was completely faked: Nothing actually was going on. It was just designed to scare site visitors. Har har.

I enjoy a good joke--- and even clever practical jokes. But this one caused Sheila to waste real time and effort. It's not funny: It's cruel and stupid, and the folks at "freevirusscan.org" should be ashamed.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

3) PhoenixNet BIOS's Performance Hit

In 'Oh No! *Hardware-Based* Phone Home Apps!" ( http://www.langa.com/newsletters/2001/2001-06-07.htm#3 ) I told you about "PhoenixNet," which embeds a phone-home app in the foundation hardware of some new PCs, where it's very hard to get at or to control with certainty.

Writing from Athens, Greece, reader Michael Kefalakis tells us of an amazing discovery he made with a PhoenixNet BIOS:

Dear Fred, I have been long reading your newsletter, great job!  I am studying Computational Fluid Dynamics (CFD), and as you might already know, computational speed is really important for that kind of applications. I found that a PhoenixNet enabled BIOS on a GigaByte motherboard can severely impact performance. A simple CFD code would run in 14:30 minutes on a 800MHz system equipped with VIA Apollo Pro and a PhoenixNet BIOS, while it took 10:30 minutes to execute exactly the same code on the same machine after flashing the BIOS with an older version I downloaded from GigaByte which came WITHOUT PhoenixNet.

The motherboard in question is GA-VXE7+ . I don't know if this issue exists only with this specific motherboard but I feel this is really serious, for a 40% difference in performance can cost too much.

Thanks, Michael! While this doesn't definitively prove that the phone-home part of the BIOS is the problem--- there could be some other issue at play there--- it is suggestive. And in any case, it's another anecdotal datapoint in the growing list of reasons to avoid PhoenixNet.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

4) Word, NetMeeting Security Holes (and Patches)

Microsoft just released patches for two newly-discovered security holes:

"Malformed Word Document Could Enable Macro to Run Automatically" affects users or Word, and could allow an embedded macro to run without warning; the macro could do almost anything:

"...[I]t is possible to modify a Word document in such a way as to prevent the [built-in] security scanner from recognizing an embedded macro while still allowing it to execute.... Exploiting the vulnerability would enable an attacker to cause a macro  to run automatically when such a document was opened. Such a macro would be able to take any action that the user herself could take...."

More info and patch:
http://www.microsoft.com/technet/security/bulletin/ms01-034.asp

"NetMeeting Desktop Sharing" Vulnerability leaves NetMeeting users open to potential "Denial of Service" attacks. This is actually a new variant of an older vulnerability: "The denial of service can occur when a malicious client sends a particular malformed string to a port which the NetMeeting service is listening on and with Remote Desktop Sharing enabled."

More info and patch:
http://www.microsoft.com/technet/security/bulletin/ms00-077.asp

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

5) Freeware Reader Rave

Reader Tony Briggs found a freeware utility that sounds incredibly versatile:

Hi Fred. In your recent newsletter was a mention of a free utility to batch rename files. Here is another that does this and far more, but to be fair it is a little complex to get used to but once I mastered its complexities, I find it so versatile, I would be lost without it now. What often takes your left mouse button several steps to accomplish can many times be handled with a single right- click. DMEX Menu recognizes the power of the right-click and extends Explorer's default context menu with an assortment of helpful utilities. Once the program is installed, you'll discover a new menu item when you right- click on a file or folder in Explorer. One click will also allow you to rename groups of files, change the date and time stamps of multiple files, or modify the attributes of a selected group. You can also create subfolders, open a DOS window at the current folder, and switch to bookmarked directories. Want more? DMEX Menu even allows you to execute your favorite programs from the context menu and schedule applications to run at a later time.

http://1.digital.cnet.com/cgi-bin1/flo?x=dAAYmYKAhuwhEAmuE

Thanks, Tony!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

6) Last Week To Enter June's FREE Book Drawing

At the end of this week, I'll choose another monthly winner of a no-strings $30 Gift Certificate for any item at Amazon.Com--- books, software, hardware, kitchenware, toys... To have a shot at winning, just use the following link to recommend the LangaList to a friend. Your friend just may find a new source of useful information; I just may gain a new subscriber; and you just may win a $30 shopping spree! (Full details also available via this link): http://www.langa.com/recommend.htm

The more times you make a recommendation, the greater your chances are of winning!

Or, if you'd like to try to win $10,000(!), try this link (full details also available here):
http://www.recommend-it.com/l.z.e?s=143182

Either way, thank you, and good luck!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

7) Netscape 6.1 Preview

There's a "preview" (that is, a beta, or test) version of Netscape 6.1 available. It adds:

My Sidebar, a tab system that link directly to stock quotes, chat messengers, etc.
Better searches
Multiple mail accounts and identities
Integrated AOL instant messenger
Privacy tools
Pure Java interface
Integration with Real Player, Winamp, and Net2Phone

As with previous versions, it's heavily-branded adware (that's AOL's gentle touch at work), but otherwise can be downloaded and used for free.

You can try it via

http://home.netscape.com/browsers/6/index61pr.html?cp=dowpod61pr
or
http://www.tucows.com/preview/59081.html

 

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

8) They Just Keep Coming And Coming and Coming...

Well over a thousand of your fellow readers have "Loaded the code." Please click over to http://www.langa.com/code.htm , and maybe you can join them! (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://www.langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites--- some professional, some very personal:

View A Randomly-Chosen Reader Site
 http://www.langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://www.langa.com/readersites.htm

Castle Software (New Zealand)
 http://www.castlesoft.co.nz/Products.htm

Charles K. Kincaid
 http://www.charleskincaid.com/

FIREMAN DAVE'S PLACE (Florida)
 http://www.firemandave.freeservers.com/

PC Used
http://pcused.tripod.com/

THERESA'S PALACE
http://www.nbizz.com/viralldredge/

Harmony Hill
http://harmonyhill.20m.com/

ShareHolder Power (Burma)
http://www.shareholderpower.com/

The Sellars Family
http://www.sellars-family.com/index.htm

James' Medical Links
http://sites.netscape.net/jwschoutes/start

WebCobblers
http://www.webcobblers.com/

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

9) More Uses For "Search Bar"

Patrick Deal's free Search Bar ( http://www.langa.com/newsletters/2001/2001-06-21.htm#3 ) is winning more converts:

Hi Fred, Since I started using the Search bar which you suggested, I've taken the time to see the many ways in which I come up with to use it. One use is in searching for MP3s and CDs, and you'd be surprised to see how many search engines at companies or general public sites are compatible with this software.

My latest, and coolest find perhaps, was the compatibility with the search engines in my local newspaper's site (The KC Star). I used set up the search bar to search classifieds for merchandise (and could choose my options, for example "Today" or "Sunday" in advance. At the click of the search bar I can now see if something I need is for sale in the classified pages. Unfortunately, this was not true for career searching, as the engine in that section is a bit more complicated. Nevertheless, a simple tool proves itself a handy winner once more! ---Dan

If you haven't tried it yet, Search Bar is definitely worth a look: http://go.to/searchbar or http://members.telocity.com/dealpa/index2.html

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

10) Just For Grins

Reader Kevin Lamoreaux sends in this (apparently) for-real example of political correctness carried to a ridiculous extreme:

Windows Minesweeper is an 'offence to mine victims'

"Windows Minesweeper (Winmine) is an offence against the victims of the mines, and to those who sacrifice themselves, risking their own life, clearing the lands contaminated by these implements," says the International Campaign to Ban Winmine (ICBW).  So it wants you to delete the programme and replace it with its own Winflower game. And it wants Microsoft to substitute the game with something more respectful with its next version of Windows. The beta version of Windows XP includes Minesweeper , but there's still time to get it removed - if people lobby hard enough.  So far, The ICBW effort has managed to clear up Minesweeper from a pathetic 696 PCs. But how can this campaign not be a good thing? First stop; kill an addictive little game. And from there, destroy the landmine manufacturing industry and aid the removal of planted mines.  So pledge your support here. http://www.theregister.co.uk/content/6/19875.html

What's next? Why not ban chess, in support of those who ever have been oppressed by a monarchical government? Ban solitaire, in sensitivity to those who suffer from social isolation... Ban the black-and-white high-contrast screen color scheme because it's a reminder of racial divisions... Ban the very word "Windows" because it's insensitive to people who can't afford to live in fenestrated dwellings...

Sheesh.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

11) Awesome Free File-Conversion Site;
Huge List For Ad-Blockers;
R.I.P. CueCat...

Today's LangaList Plus! Edition contains items #1-10 above, plus about 30% more content including: an outstanding free file conversion site that lets you change files from and to a huge range of formats; a "master list" of many, many ad sites that you can feed to your favorite ad-blocking software; and the inside story on why the "CueCat" scanner finally is going to that great big litter box in the sky.

The Plus! Edition only costs about a dime. How can you beat that? <g> Info: http://www.langa.com/plus.htm 

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

See you next issue!

Best,

Fred
(fred@langa.com)

Please recommend the LangaList to a friend! (And maybe win $10,000!I)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://www.langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page

Administrivia:

UNSUBSCRIBE: From the same email account you used to sign up with), send an email to
unsubscribe-langalist@lyris.dundee.net

SUBSCRIBE (it's free!): Create and send a new email to
subscribe-langalist@lyris.dundee.net

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? OTHER PROBLEM? NEED HELP? See http://www.langa.com/help.htm

This is a 100% OPT-IN newsletter: See http://www.langa.com/info.htm

About the advertisers: http://www.langa.com/privacy.htm#ads

Disclaimer: http://www.langa.com/legal.htm  In brief: All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from your choosing to use of any information presented here.

This newsletter is a free service of Langa Consulting LLC and is Copyright © 1997-2005 Fred Langa/ Langa Consulting LLC. All worldwide rights reserved. LangaList: ISSN 1533-1156

return to top of page

Please visit the LangaList Home Page