Please visit the LangaList Home Page

Please note: Older issues may contain information that is now out of date.


How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win $10,000 !)

An easier-to read formatted HTML version of this newsletter is available
<a href=" http://www.langa.com/newsletters/2001/2001-10-15.htm ">here</a>

The LangaList
Standard Edition

2001-10-15

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

Contents:

1) More Fine Print Follies
2) Another IE "Dotless IP" Security Hole
3) LiveUpdate: Quis Custodiet Ipsos Custodes?
4) BrowserTune 2002
5) HotSpots
6) Thanks!
7) InCtrl Puts You In Control
8) They Loaded The Code
9) *Much* Faster "Shields Up!" Site
10) Just For Grins

11)
Plus! Edition Highlights:
 · New Interim ZoneAlarm Update
 · Changing Outlook's "Junk Mail" Filters
 
· Hiding Screen Contents Via The Redirect-to-NUL Trick

For even more content, downloads and special services,
check out the LangaList Plus! Edition: http://www.langa.com/plus.htm

 

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

 

1) More Fine Print Follies

We first covered the growing trend of vendors abusing the fine print in end-user license agreements (EULAs) at the beginning of the year. At the time, perhaps the most egregious offender was Juno, the giant "free" ISP: In a struggle to survive, it inserted a stealth amendment to its online user agreement that said, in essence, that Juno could install code onto your PC as part of routine software updates; this new software would allow Juno to take over your PC's spare CPU cycles: Juno would make your PC a slave in Juno's distributed network and sell your CPU cycles to other companies. You, the end user, had no control over what Juno's software was or what it did; you had no claim to any benefits or profits Juno realized from using your PC; and if Juno's use of your PC, CPU or bandwidth caused you extra costs or problems--- tough.

The catch was that you had actually to read the online agreement to know all this. Existing Juno customers who just kept using Juno the way they always had were automatically bound by the new agreement, even if they never saw it. New users who didn't read the fine print likewise were automatically included in Juno's scheme. (Full story: http://www.byte.com/documents/s=571/byt20010222s0004/ )

More recently, other publications have become aware of this trend towards what we might call  "EULA abuse," and we've been seeing more and more coverage on the topic. For example, there has been a rash of recent reports about Microsoft's FrontPage 2002: It has a fairly standard master EULA burned right onto the CD and installed as part of the software, but also has an unusual printed EULA addendum stuffed into the box of retail copies of the software. That addendum says, in part, that you can't use FrontPage 2002 to create or maintain sites that "disparage" Microsoft.

As reported by a number of publications, that EULA sounds like something draconian; an overweening attempt by Microsoft to limit criticism of itself and its products. But, although the FP2002 EULA is flawed, I actually think there's less to it than meets the eye. In actuality, there are far worse EULAs out there.

In a new InformationWeek column, I'll go through the FrontPage EULA in some detail, and also show you a current EULA that I feel is actually much worse--- one that could theoretically let a vendor charge you almost whatever they want, at any time, without your prior knowledge, and yet you'd be liable for the bill.

You see, as we pointed out at the beginning of the year, reading all relevant EULAs and Terms Of Service is a major pain, but it's becoming increasingly essential: Unless you keep your guard way up, you could be opening yourself up for a nasty--- but perfectly legal--- surprise, courtesy of the fine print.

Please come check out the examples I've posted at InformationWeek, and then join in the discussion: What's your experience with EULAs and TOSes? Do you read all such documents, or do you click "accept" and hope for the best? Have you ever been ensnared by "stealth" terms added to a EULA or TOS document? Have you ever declined to use a product because of a too-restrictive legal document? And, with regard to the Front Page EULA, do you agree with my interpretation that it's not a big deal, or am I letting Microsoft off the hook too easily?

Please check out the new article at
http://www.informationweek.com/859/langa.htm  and then add your comments at http://www.informationweek.com/forum/Fred Langa .

See you there!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

2) Another IE "Dotless IP" Security Hole

Internet addresses may be presented in many formats, and some unusual (but legitimate) formats are sometimes used by spammers and malicious hackers as a way to obscure an address--- to "hide in plain sight" through an unusual format. There's an excellent explanatory page at http://www.pc-help.org/obscure.htm that runs through most of the ways an IP address can be obscured.

Way back in1998, IE4 had a security problem with "dotless" IP addresses--- the kind of Internet address that appears as one long number rather than the more familiar "dotted quad" format. Although IE4's problems with dotless addresses came to light years ago, and despite the fact that the ways to obscure an address are extremely well-known, the same kind of problem has now been found in IE 5.01, 5.5 and 6. (Sigh.)

If a malicious site exploits this problem, your browser can be fooled into treating an external (and possibly hostile) site as if it were part of a local LAN, and thus subject only to your (usually far more lax) "Local" security settings instead of the "Internet" setting that should apply.

More info and a patch:
http://www.microsoft.com/technet/security/bulletin/MS01-051.asp .

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

3) LiveUpdate: Quis Custodiet Ipsos Custodes?

Speaking of security holes, here's one that brings to mind the old Latin phrase (above) that means "Who guards the guards?" or "Who watches the watchmen?" It applies today to Symantec/Norton's LiveUpdate: Ironically, LiveUpdate--- the tool used mainly to keep antivirus software up to date--- may itself contain a security hole by which malicious hackers could load hostile code onto your system.

The original report of this problem appears at http://www.phenoelit.de/stuff/LiveUpdate.txt ,and other sites have since picked up on it (Example:
http://www.infoworld.com/articles/hn/xml/01/10/11/011011hnsecurityflaw.xml?1011alert )

I searched the Symantec site, but could find no response to the report yet. Stay tuned.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

4) BrowserTune 2002

I was surprised at how much mail I got after suggesting (in the last issue) that you might want to try BrowserTune's "Level Three" tests to see if your browser had active Java support: My assumption was that most of you already knew about BrowserTune. My mistake: I guess many, many of you hadn't seen BrowserTune before!

The current version of BrowserTune--- BT2K--- originated on the late, lamented WinMag.Com site. When WinMag shut down, the folks at CMP allowed me to pull the code off their servers (I am BrowserTune's author) and post it on my own site. Some of the BT2K tests did not fare well in the transplantation because they pointed to CMP pages or affiliates that no longer exist, but--- after a ton of work to "de-CMP-ify" the tests--- BT2K reached a point where all the basic tests work fine, and most of the advanced tests do likewise.

I debated whether or not to continue re-doing all the current test pages, but, the "guts" of the current BT site comprise just under 10,000 files and pages (9,664, to be exact!), so it's not a simple thing to wade in and start slinging code. Instead, I've been working on an entirely new and streamlined version of BrowserTune--- BT2002--- for some time now, and hope to have it ready for public test fairly soon.

Because browsers have become more standardized over the last couple years, this new BT version will focus less on the minutia of browser subsystems, and have more geared to tuning browsers and connection speed. It will, however, retain the elements of BT2K that still are germane to the current crop of browsers.

More info to come! Meanwhile: http://www.browsertune.com/

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

5) HotSpots

In light of the above, let me also tell you about HotSpots, another site that also used to appear on the WinMag.Com site, but that I'm now running independently (http://www.browsertune.com/flanga/hotspots.htm ). It's a site whose simple mission is to bring you "Every Day, The Best, Most Interesting, Most Useful, and Strangest  Sites the Web Has To Offer!"

For example, during the last weeks, the Hotspots page has offered these links:

It's such a boring name.
http://renamethemoon.org/index.html

Maybe this would help me keep my desk clean.
http://www.csl.sony.co.jp/person/rekimoto/as/

Weird to see this.
http://www.fbi.gov/mostwant/topten/fugitives/laden.htm

Nice online tech museum.
http://www.intel.co.il/il/exhibition/index.htm

Nice site design--- good utility, too.
http://www.twiga.ltd.uk/

Sometimes, empty minds are mistaken for open ones.
http://www.geocities.com/alienpantieabductions/

AstaLaVista, baby.
http://astalavista.com/

Would you trust this?
http://www.prismnet.com/~jrf/SubPics/index.html

Websites that read your body language?
http://news.bbc.co.uk/hi/english/sci/tech/newsid_1528000/1528426.stm

Merciless--- but fun.
http://www.badastronomy.com/

Unlike the original, no coins needed.
http://www.nutburger.com/pong.html

Making XP More Secure
http://grc.com/dos/sockettome.htm

Got GPS?
http://www.geocaching.com/

Sounds like *this* web page...
http://www.2yaks.com/funpages/funpage2.html

If you're not a regular Hotspots visitor, you're missing a lot. That's why thousands of people actually have the HotSpots page set as their home page, so every day, at log-on, they automatically get to see "The Best, Most Interesting, Most Useful, and Strangest  Sites the Web Has To Offer!"

Check it out at http://www.browsertune.com/flanga/hotspots.htm !

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

6) Thanks!

Thanks to thousands of you, the LangaList has become one of the five most-recommended "Computing & Internet" web sites, according to the folks at Recommend-It! It's a great feeling to know that this newsletter (and Langa.Com) is useful enough for many, many of you to have suggested it to friends and colleagues.

And, as a way of saying "Thanks!" there are two prizes you can win simply for making a recommendation. For example, if you use the Recommend-It service, you can win $10,000 (full details also available via this link):
http://www.recommend-it.com/l.z.e?s=143182

Or, win a no-strings $30 Gift Certificate for any item at Amazon.Com--- books, software, hardware, kitchenware, toys... and more. To have a shot at winning, just use the following link to recommend the LangaList to a friend. Your friend just may find a new source of useful information; I just may gain a new subscriber; and you just may win a $30 Gift Certificate! (Full details also available via this link):
http://www.langa.com/recommend.htm

Either way, thank you again, and good luck!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

7) InCtrl Puts You In Control

InCtrl by PC Mag... is my absolute favorite and I use it constantly (optlog.txt is great reading by the way). It saves all the changes made to your system during an installation - or any other event you choose to monitor - in a text-, html- or csv-file for later use. It feels good to see exactly what changes a new program does to my dear machine. Also, I go back to these files after an uninstall to see if everything is removed properly. And if I ever wonder about a file or registry entry I can search my library of InCtrl files to see what program put it there and the changes it has been going through. --- Henrik Norberg

Indeed, InCtrl is now up to version 5 and runs under Win9x, ME, NT4 and Win2K. It's available at
http://www.pcmag.com/article/0,2997,s%253D1478%2526a%253D4592,00.asp . It can be handy indeed: InCtrl helps you manually undo changes to your system when software doesn't or can't completely uninstall itself.

You use InCtrl to take a "snapshot" of your system settings before and after you install new software, and then can use the tool to see exactly what changed. In this way, it's similar to tools like Norton's "Registry Tracker," except that InCtrl is free.
8-)

If you're an intermediate-level user or above, you should find it quite useful.

Thanks, Henrik!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

8) They Loaded The Code

Do you have a home page or website? (It doesn't matter what size.) Please click over to http://www.langa.com/code.htm , and maybe you can join the hundreds and hundreds of LangaList readers who have "Loaded the Code!" (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://www.langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites--- some professional, some very personal:

View A Randomly-Chosen Reader Site
http://www.langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://www.langa.com/readersites.htm

All You Ever Wanted To Know About Chat...
http://www.geocities.com/abi_lene/

Cutter's Place (female woodcarver)
http://capital.net/~cutter05/

LAKEWOOD PRODUCTIONS
http://www.lwpconsult.com/

Las Vegas Hotels
http://www.geocities.com/lasvegashotel/

Unusual Metal Sculpture
http://gayosbourn.homestead.com/harrys.html

NY, Toronto, London Theaters (strange formatting, good info)
http://www.linkopp.com/members/clairsedore/index.html

"ESP and practical spirituality"
http://www.thelighthouseonline.com/marina/index.html

Airjet's Homepage
http://users.chartertn.net/airjet/

Cyber-Shopper
http://www.cyber-shopper.com/Nuke/index.php

Edit-Pros
http://www.members.home.net/alexmcpv/home.htm

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

9) *Much* Faster "Shields Up!" Site

Long-time readers know I've discussed Steve Gibson's excellent "Shields Up! site many times (
 http://search.atomz.com/search/?sp-q=grc&sp-a=0008002a-sp00000000 ): It's a free online resource that checks your security settings to ensure you're protected from the worst and most egregious problems that can open your system to malicious hackers.

Frequent contributor Bronson Elliott was first to sound the alert about a new, much-faster version of the site that went live just a few days ago:

Fred: I  was just at Steve Gibson's Shields Up website ( http://grc.com/ ) and I noticed that he has made a significant change that makes the security tests almost instantaneous. He calls it NanoProbe. Here's a quote from his site

"If you have used ShieldsUP! in the past, you may have just noticed that the Port Probe system is MUCH faster than ever before. This is the result of the emerging deployment of our much-anticipated NanoProbe Technology. It is finally becoming real."

Check it out. --- Bronson C. Elliott

Thanks, Bronson!

Indeed, the site now finishes the tests in a fraction of the time it used to take. Gibson's site, along with the security tools at http://www.dslreports.com , remain my top-two picks when I want to perform a quick (and free!) security scan of any system I've been working on.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

10) Just For Grins

Reader Claudia Slate sends along this list of "New TV Shows Inspired By The Internet." The list apparently was originally written by one "Dawny-Ray."

1. Modem, She Wrote - Each week, our intrepid detective tries to solve the ultimate mystery why her modem won't ever connect at 56k.

2. Micro-CHiPs - Ponch and Jon now patrol the Information Superhighway.

3. Carly's Angels - Chief exec Carly Fiorina instructs her team of three vixen market analysts on how to prop up HP's sagging stock price.

4. Hawaii 6.0 - An upgraded version of the classic series. Steve McGarrett goes surfing for bad guys online.

5. T. J. Hacker - A retired cop, with an uncanny resemblance to James T. Kirk, takes up computer hacking to track down the miscreants who canceled his TV show.

6. The Excel Files - Inexplicable things are happening to the data in Microsoft Excel spreadsheets. Can this puzzle be solved? The truth is out there.

7. The AOL-Team - Each week, AOL, Time Warner, Netscape, and Mr. T unite to promote corporate mergers and make the world safe for capitalism.

8. Magnum, PC - This series about a crime-solving personal computer that goes by the code name Deep Blue is based in beautiful Hawaii. Season finale cliff-hanger Will Deep Blue be seduced by the wily charms of the Texas Instruments Speak 'n' Spell?

9. The Incredible Bulk - The exciting adventures of Windows, which just keeps growing and growing.

10. Buffy the Virus Slayer - Buffy and her fearless gang of antivirus definitions stalk and kill VBS files--no small feat while wearing a halter top and high-heeled boots.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )--------------

11) Plus! Edition Highlights:

  • New Interim ZoneAlarm Update
  • Changing Outlook's "Junk Mail" Filters
  • Hiding Screen Contents Via The Redirect-to-NUL Trick

Today's LangaList Plus! Edition contains all ten items above, plus about 30% more content including: Information on a new update to ZoneAlarm (no, not version 3.0--- yet); a way you can manually adjust Outlook's Junk Mail filters via an external file, so Outlook won't discard mail you really want to see (or so it will trash mail you *don't* want to see!); and a way you can prevent individual Autoexec commands from displaying anything on your screen, for privacy.

Plus! Edition info: http://www.langa.com/plus.htm 

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

See you next issue!

 

Best,

Fred
(fred@langa.com)

Please recommend the LangaList to a friend! (And maybe win $10,000!I)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://www.langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page


Administrivia:

UNSUBSCRIBE: From the same email account you used to sign up with), send an email to
unsubscribe-langalist@lyris.dundee.net

SUBSCRIBE (it's free!): Create and send a new email to
subscribe-langalist@lyris.dundee.net

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? OTHER PROBLEM? NEED HELP? See http://www.langa.com/help.htm

This is a 100% OPT-IN newsletter: See http://www.langa.com/info.htm

About the advertisers: http://www.langa.com/privacy.htm#ads

Disclaimer: http://www.langa.com/legal.htm  In brief: All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from your choosing to use of any information presented here.

This newsletter is a free service of Langa Consulting LLC and is Copyright © 1997-2005 Fred Langa/ Langa Consulting LLC. All worldwide rights reserved. LangaList: ISSN 1533-1156

return to top of page


Please visit the LangaList Home Page