How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win $10,000 !)

An easier-to read formatted HTML version of this newsletter is available
<a href=" http://www.langa.com/newsletters/2002/2002-04-22.htm ">here</a>

The LangaList
Standard Edition

2002-04-22

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

1) IE6 Security Hole

Reader Jim Stutsman was the first to sound the alarm by referencing a "BugTraq" article ( http://online.securityfocus.com/archive/1/267561 ), but many other readers followed up as the story began to spread. For example, many pointed to this article:

The problem is caused by what can politely be described as a design flaw in Explorer. When a Web page fails to load, Explorer displays a standard error message. This message is set to operate in the "Local Computer Zone" security setting, which by default allows scripting to run automatically....Any code inserted in the original URL is handled as if it comes from the same security zone as the last URL viewed. So a URL containing malicious JavaScript that might be blocked by default if a user visits the site directly, will be automatically triggered when the user presses the back button.

Full article:
http://www.wired.com/news/print/0,1294,51899,00.html

While Microsoft is mulling a patch, you can protect yourself against this kind of exploit by raising the security settings for your Local Zone and by using any of several script-blocking tools.

For example, Symantec offers a free "n o s c r i p t . e x e" download that lets you turn your Windows Scripting Host on or off ( http://www.symantec.com/avcenter/venc/data/win.script.hosting.html )

Finjan's free "SurfinGuard Pro..."

...protects PC users from attacks by proactively monitoring and restricting the behavior of downloaded code. Active content (e.g., executables, script files, ActiveX and Java) runs in a monitored "sandbox" that automatically blocks potentially hostile actions (such as attempting to automatically delete a file). SurfinGuard Pro combats Trojan horses, worms and hostile Web pages based on code behavior, rather than reactive virus signature recognition. ( http://www.finjan.com/products/surfinguard.cfm )

And Jason's Levine's free Script Sentry also may help:
http://www.jasons-toolbox.com/

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

2) PopUp Stopper Method #1

Dear Fred: We who enjoy the benefits of free internet features tend to forget that "nothing is free." ...Those who do not pay for premium [TV/Cable] channels must endure ad after ad after ad... Why then, do they suppose the internet should be any different?

I do, however, use Popup Blocker to avoid the X10 and other intrusive ads of this sort. But there is one problem with that. Many sites I visit, including Windows Update, have popup windows for a purpose. In the case of Windows Update, all that gets blocked is that banner that affirms that Windows is updating my catalog and doing it without sending any information to Microsoft. The actual Update window appears normally after a pause. But other sites use popup windows for such things as "print-friendly format" and for those Popup Blocker must be bypassed. Fortunately it has a clever little way of enabling that. If I forget to hold down Ctrl or Shift when I click, I hear a door slam (one of several wave files to choose from) and then I know I have to try again. I like the "meaning" of the door slamming in the face of the ad! Cordially, Bob Johnson

Thanks, Bob. That is indeed the problem with any of the various PopUp blockers/stoppers out there: They're indiscriminant, and may prevent ANY secondary browser windows from working, even when they're not popup ads. But the next item offers a refinement:

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

3) PopUp Stopper Method #2

Hi, Fred. I had a recent experience where I was surfing for information and stumbled onto a site that utilized a pop-up ad from [name of evil URL withheld]. I got caught up in a nasty loop where closing the larger pop-up spawned a delayed pop-up in a very small window that was too elusive to Alt+F4 or close with the mouse.

It would then quickly spawn the larger ad and the cycle continued. That is, until I utilized a little known and under-appreciated feature of Internet Explorer.

Under the Security Tab of Internet Options (found under the Tools Menu or by right-clicking on your IE desktop icon and clicking on Properties), highlight the Restricted sites icon and click on the Sites button below. Doing so will generate a box where you can input naughty sites you'd like to keep your foot on. In the field "Add this web site to the zone" type in *.naughtysite.com, where <naughtysite.com> is the domain of the site giving you trouble. Click the Add button and continue adding more sites until finished. Click Okay to close the input box and Okay again to close the Internet Options box. Also, make sure you are using the default High Level [of security] for Restricted sites and you're good to go. I've used this gem for many domains... X10.COM. It's a convenient way to slap down those pesky pop-ups. Regards, Steven Patterson

Thanks, Steven. I personally prefer this approach, because it lets you target only the offensive advertisers. Ads from good vendors and sites still get through, which will help to keep the good (free) sites afloat. <g>

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

4) SpamCop Thinks I'm A Spammer?

Reader Joan Korenman wrote to tell me that SpamCop has me on a list of known spammers. That's happened in the past, and I've used their automated tool and tried contacting a human there to get the listing corrected. I explained that my free newsletter is double opt-in (you have to request it, and then separately confirm your request before you get added to the mailing list). And the Plus! version is by paid-subscription. Because I don't send out anything unsolicited, there's no rational way I can be classed as a spammer.

I just re-checked their site, and although I can't find myself on their current "black list," I know I've been on it before, and probably will be again.

Joan had a suggestion:

I've got no idea why SpamCop is on your case... You might consider raising the issue in a forthcoming LangaList newsletter. I would guess that there may be some SpamCop users among your readers, and if a number of them wrote to complain, that might do some good. Best wishes, Joan

Thanks, Joan. SpamCop is largely feedback-driven, so this approach would be especially effective in this case. But it's actually a good idea if you use *any* kind of filter or blocking tool: Let the developers know if the results you get aren't what they should be. If bad results are let stand, they can become self-perpetuating ("Well, no one's complained before..."). But if the developers know what's not working well, maybe they can fix it.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

5) Automatic Power-Off From DOS

When you exit Windows, you have several choices. On newer PCs, this includes a total shut down where the system power goes off, just as if you'd pushed the power switch.

DOS doesn't offer this. There are software tools to automate a reboot in DOS (see the free reboot tool at http://mindprod.com/products.html ), but--- until I got the following note--- I knew of no way to do an automatic, software-driven total power-off shutdown from DOS:

Fred, PowerOff.exe is a 835 byte (less than 1KB!) file which will turn off the computer from DOS. It uses APM (Advanced Power Management) to work with the BIOS and actually power down the computer. It works in DOS the same as "Shut Down" does in Windows. Some users may find it useful for their clean-up batch files. It's freeware, available at http://elektron.et.tudelft.nl/~witteman/PowerOff.html  I've looked and looked, and this is the only one of its kind I've been able to unearth.--- Bruce Fraser

Thanks, Bruce!

The developer says:

Poweroff.exe is an MSDOS program that is able to shutdown the power of the latest ATX power supplies from the command line using the APM functionalities supplied by the motherboard BIOS. Poweroff.exe is to DOS, what Shutdown is to Win9x.

But note that this software can only do what your hardware allows: On older PCs (where Windows gives a "Safe To Turn Off" message instead of turning the system all the way off on its own), this DOS software also probably won't be able to do a complete software-driven shut down. Older system hardware just isn't set up for that.

But if Windows *can* turn off your PC all the way, then this software probably also will give you that ability from DOS. Nice!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

6) Recommend It!

If you think the LangaList is a worthwhile read, just use the following link to recommend the LangaList to a friend. Your friend just may find a new source of useful information; I just may gain a new subscriber; and you just may win $10,000 for your trouble (full details also available via this link):
http://www.recommend-it.com/l.z.e?s=143182

Or, win a no-strings $30 Gift Certificate for any item at Amazon.Com--- books, software, hardware, kitchenware, toys... and more. To have a shot at winning, just use the following link to recommend the LangaList to a friend. Your friend just may find a new source of useful information; I just may gain a new subscriber; and you just may win a $30 Gift Certificate! (Full details also available via this link):
http://www.langa.com/recommend.htm

Either way, thank you again, and good luck!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

7) Workaround For "Password Not Valid..."

Ed James offers this followup to "XP's Recovery Console Life Saver" in the last issue ( http://www.langa.com/newsletters/2002/2002-04-18.htm#6 ):

Love your letter. There is a problem with Windows XP's Recovery Console if it was preinstalled on a new PC. I will not go into the details but some users will get a persistent "invalid administrator password" error even if the password is correct. The following link will describe the problem and a fix. http://support.microsoft.com/default.aspx?scid=kb;EN-US;q308402

The Knowledgebase item is called "Cannot Log On to Recovery Console..." and is meant to help in those cases where your logon attempts generate repeated messages of "The password is not valid. Please retype the password."

Thanks, Ed!

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

8) More Reader Sites!

Do you have a home page or website? (It doesn't matter what size.) Please click over to http://www.langa.com/code.htm , and maybe you can join the hundreds and hundreds of LangaList readers who have "Loaded the Code!" (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://www.langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites--- some professional, some very personal:

View A Randomly-Chosen Reader Site From Among All Listed
http://www.langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://www.langa.com/readersites.htm

Tule Fog Personal Computer Users Group
http://www.tulefog.org/index.html

theLinkz
http://thelinkz.com/

Net-Integration
http://www.net-integration.net/

Time Page ("Examination of Cycles in United States History")
http://www.timepage.org/

Welcome to My World
http://pages.ivillage.com/lindaloo80/

"Affordable Upgrades"
http://www.oneindy.com/computer/

Ghatikar.Com
http://members.tripod.com/ghatikar/

Alice Springs Badminton Club Online!
http://www.angelfire.com/hi5/2001club_bad/welcome.html

TicketDude
http://www.ticketdude.com/

Blokes Fun Page
http://www.geocities.com/blokesfunpage/windows.htm

Scavenger (custom search engine)
http://www.nscavenger.com/index.php

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

9) Good Uses For Ancient Hardware

Kelly Carson writes:

I recently acquired a 486 comp for $10, it has a 82mb hard drive, 4mb Ram, a 5-1/4" and a 3-1/2" floppy drives. It currently is running Windows 3.1. Any suggestions as to what I could use it for. I have heard that I could use it as a firewall, an internet router, and a print server, but any other suggestions or anybody know links to web pages that describe how to do this stuff.

Yes, setting up an old machine as a firewall/router is a great idea: The concept is to install almost nothing on the machine except what's needed to make it boot and connect to the Internet; and then to use a connection-sharing tool that has built-in firewall functions to share that connection. Because only the old system is actually connected directly to the Internet, anyone who manages to hack into it won't find anything of interest, and will probably move on: Your other machines are thus that much safer.

Although it doesn't take a lot of horsepower to share an Internet connection, it may be hard to find software that will live happily in just 4MB of RAM. There are some specialty-distributions of Linux that are meant for sharing Internet connections on resource-limited boxes, and you might want to check them out. See, for example, LEAF--- the free Linux Embedded Appliance Firewall--- at http://lrp.steinkuehler.net/ . See also http://www.google.com/search?q=linux+firewall+ram+486 .

You can try running Windows, plus a connection-sharing tool, on the old box: It may work, although the boot times will be hideously slow. However, once running, it might be OK, especially if you turn off all firewall logging functions, and just let the PC shuffle data bits coming through the wires: That's not a very difficult job, and even ancient hardware can usually handle it.

But if you can find more RAM for the system, even getting to just 16MB, then your options will increase because you'll be able to run almost any version of Win9x (albeit with long boot times), plus more conventional Internet-sharing tools.

 More info:
http://content.techweb.com/winmag/columns/explorer/1999/0927.htm
http://content.techweb.com/winmag/columns/explorer/2000/06.htm
http://content.techweb.com/winmag/library/1998/0701/ana0006.htm
http://content.techweb.com/winmag/columns/explorer/1999/1122.htm

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

10) Just For Grins

Here on the top half of the planet, it's time for Spring Cleaning, which prompted "Jeff" to revive this well-traveled hoax mail:

Hi Everyone, I received this important notice and thought it needed passing on. FYI !!

FOR IMMEDIATE RELEASE

CONTACT Richard Schvanski, Corporate Communications
SOUTHCOAST BELLCOM TO CLEAN PHONE AND INTERNET ACCESS LINES

Los Angeles, CA - April 22, 2002 - Southcoast Bellcom, a subsidiary of PCG Communications, is preparing to join telephone companies throughout the U.S. in a nationwide "cleaning" of all phone and telecom lines this Sunday. "We do this about every 10 years," said a Richard Schvanski, spokesperson for the National Telephone Association. "Over time, dust collects in the lines and this leads to weak connections and static, as well as to broken and slow Internet connectivity."

To clean the lines, Schvanski said, all telephone companies will use air compressors at their central locations in each city to blow a blast of air through phone lines and cable networks. The 10-minute process will cause dust to blow through telephone receivers, fax and answering machines, and both traditional PC and DSL modems in homes and offices throughout the U.S.

Schvanski explained that most people are being urged to set a newspaper under their telecom device before going to bed Sunday night. The cleaning will be done between 2 a.m. and 4 a.m. so as to disturb as few people as possible, he said. In the past, the spokesperson said, some people have put a plastic baggy over their telephone's handset to catch the dust, or wrapped the handset with a cloth to keep dust from getting on their furniture. Cell phones, pagers, and other wireless devices are not affected.

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

11) Plus! Edition Highlights

• Pro-Quality Freeware
• Free Zip-Tools
• Stop That Awful Modem Screech...

Today's LangaList Plus! Edition contains all ten items above, plus about 30% more content including: A reader-discovered German site chock full of free, custom-created (English-language) utilities, widgets, and amusements; several places to get free Zip/UnZip tools; and resources to help you take full control of all your modem's capabilities--- including ways to prevent that awful screeching sound it makes at connect.

The Plus! Edition costs only pennies per issue: http://www.langa.com/plus.htm 

Click to email this item to a friend
  http://www.langa.com/sendit.htm

return to top of page

It's Spring vacation week here in NH, and I'll be using the time to catch up on some long-overdue tasks. See you next issue, which will be on May 2.

Best,

Fred

Please recommend the LangaList to a friend! (And maybe win $10,000!I)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://www.langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page

Administrivia:

UNSUBSCRIBE: From the same email account you used to sign up with), send an email to
unsubscribe-langalist@lyris.dundee.net

SUBSCRIBE (it's free!): Create and send a new email to
subscribe-langalist@lyris.dundee.net

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? OTHER PROBLEM? NEED HELP? See http://www.langa.com/help.htm

This is a 100% OPT-IN newsletter: See http://www.langa.com/info.htm

About the advertisers: http://www.langa.com/privacy.htm#ads

Disclaimer: http://www.langa.com/legal.htm  In brief: All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from your choosing to use any information presented here.

This newsletter is a service of Langa Consulting LLC and is Copyright © 1997-2005 Fred Langa/ Langa Consulting LLC. All worldwide rights reserved. LangaList: ISSN 1533-1156

return to top of page