Article: Firefox 2.0 Scheduled For Release on Tuesday

PC Magazine reports: "The Mozilla Foundation will release the Firefox 2.0 browser on Tuesday, Mozilla Foundation officials confirmed Monday. ... The new release promises several new features, as well as a solution to a annoying memory leak that has troubled earlier versions, according to Mozilla."

I have been playing with the release candidate of this browser for a few weeks now. It has some nice new features, but their not revolutionary.

I have one major complaint about this version of Firefox, several of my favorite extensions stopped working. So be prepared to be disappointed here.

Personally, I believe that the ideas for most of the new features in the browser were borrowed from the more popular extensions. Below is a list of some of the new features:

• Phishing filter warns you when you're visiting a fake web site.
• A new search feature that displays suggestions as you type your search request.
• A session manager that restores the windows and tabs you had opened before a crash.
• A spelling checker that spell checks your input into web forms.
• Better RSS support.

To download the new Firefox 2.0 browser go here.

Wireless: Optimizing and Troubleshooting a Wireless Network Connection

Whenever you use your notebook computer to connect to a public or private wireless network,
it adds an entry for that network in to the 'Preferred Network' list. This list is meant to remember your network settings when you move from wireless network to network. The problem is that if you move between a lot of different wireless networks this list can get really filled up with a lot of junk that can slowdown your network connection time.

Another problem that happens often is that you can find yourself constantly being connected to a wireless network that you don't want to be connected to. This problem is caused by the fact that the entry for the wireless network that you don't want to be connected has a higher order of preference then your preferred network.

To fix both of these problems:

• From the Control Panel folder, open the Network Connection folder.
• Right click on the Wireless Network Connection icon, and select Properties
  
• Click the Wireless Networks tab.
• In the 'Preferred Networks' list, highlight and delete any wireless networks that you don't use. If there is a network that you use more often then others. Highlight the network and press the 'Move Up' button to move it to the top of the list.
• Press the OK button when don't
  

Windows XP: Internet Explorer 7 is now available...

Microsoft just made Internet Explorer 7 available for download. This is the latest version of the IE browser, and its only for Windows XP SP2 . If you're running an earlier version of the Windows OS, you're out of luck.

Some of the new improvements in the browser include: security protection, a redesigned user interface, and a development platform. Below is a high level list of the major new features:

• Phishing Filter (reports if a web site is not who it really is)
• RSS Reader (allows you to read RSS feeds in the browser)
• Tabbed browsing (open multiple web pages in a single window)
• Toolbar search box (quickly search from the toolbar)
• Advanced printing (optimized web page printing)
• Security Status Bar (displays different colors in the status bar to notify you how safe the web site might be)
• Privacy Cleaner (quickly deletes your browser cache, cookies, and other data that might contain personal information)
• And more...

Security: Rootkits Tools

There are several types of malware (viruses, Trojan horses, rootkits, etc.) that are in the wild on the Internet. Some types of malware will find and infect you if you're not running a firewall, others will disguise themselves in the form of an attachment. You can even get infected by visiting the wrong web site if your browser is vulnerable.

Rootkits are the type of malware that doesn't take no for an answer, they will try to exploit every trick they can to get administrator access to your computer. Then once they become an administrator they will deploy their payload.

Most anti-virus and anti-spyware scanners don't properly find rootkits, because they're generally very difficult to detect. Below are some anti-rootkit tools (some free, and others are fee based) that you can run to see if your system is infected by this type of malware.

• Sysinternals: RootkitRevealer (free) - I have talked about this scanner before in a previous article. Although its still a good tool for detecting this type of malware, but it can't remove it.
  
• F-Secure: BlackLight (free trial until 1/2007) - This application seeks out and tries to remove any rootkits it finds installed on your computer.
• Sophos: Anti-Rootkit (free) - I have talked about this scanner before in a previous article. This application seeks out and tries to remove any rootkits it finds installed on your computer.

Windows XP: Automate the Disk Cleanup Tool

In a previous article I talked about the Disk Cleanup tool, which is designed to remove unnecessary temporary files from your computer. These files are created by applications to temporarily store data, but sometimes they don't get cleaned up correctly.

Now, I am going to show you how to automate this process. Its relatively easy to do, all you have to do is follow the instructions below:

Configuring the Disk Cleanup tool:

• From the Run... command, type "cleanmgr /sageset:1" and press the OK button.
  
• You can have up to 0 - 65535 profiles, all you have to do is change the number after '/sageset'. Make sure you remember the number you selected for the profile you will need it for the next section.
  
• When the Disk Cleanup dialog displays, select or unselect the type of files that you want to remove when the tool is run.
• Press the OK button.
  

Running the Disk Cleanup tool:

• From the Run... command, type "cleanmgr /sagerun:1" and press the OK button.
  
• Make sure to use the session number (i.e.: 1 in the example above) for the Disk Cleanup profile you created in the previous section.

The Disk Cleanup tool will now remove all the files as define by the profile you created.

The 'cleanmgr /sagerun:1' command can be run from the MS-DOS prompt, added to a script, or run from the 'Scheduled Tasks' feature on a regular basis.

Software: Changing the World with Your Screen Saver

Do you want to help cure cancer and other diseases? By installing special screen savers on your computer, you can donate your spare computing cycles to cure AIDS, cancer and solve other more complex problems.

The screen saver utilizes the unused processing power of your computer, as a part of a large distributed computing cluster. These clusters can be composed of thousands (or more) of computers working together for a common goal. The way these large clusters work is each computer downloads a small part of a larger problem, and computes the data and sends the results back to the master computer.

Below is a list of some of the projects that are available:

• boinc.berkeley.edu: Stands for 'Berkeley Open Infrastructure for Network Computing', here is a brief list of some of the current projects: Climateprediction.net, Seasonal Attribution Project, BBC Climate Change Experiment.
• folding.stanford.edu: Searches for treatments for Alzheimer's, Huntington's, and other related diseases.
• grid.org: Searches for treatments for cancers, and other diseases.
• SETI@home: Analyze radio telescope data in the search for extraterrestrial life.
• www.worldcommunitygrid.org: Searches for treatments for cancers, and other diseases.

To donate your spare computing cycles. All you have to do is download the software, set how much of your systems resources that you want to donate, then leave your computer alone.

Windows XP: Disabling Services and Devices Based on Hardware Profile

Did you know that services and devices can be enabled or disabled as part of a Hardware Profile? A hardware profile allows you to enable or disable certain features under certain conditions, such as when you dock or undock your notebook computer..

To disable services based on a hardware profiles:

• From the 'Administrative Tools' folder, double-click on Services.
• Double-click the service you want to modify
• Click the Log On tab in the properties dialog
  
• Click disable for the selected Hardware Profile.

To disable devices based on a hardware profile:

• Open the 'Device Manager'
  
• Double-click the device you want to modify.
• In the General tab under the 'Device Usage' label select 'Do not use this device (disable)' option
• Press the OK button.

Windows XP: Recovering from a Failed Driver Installation

Sometimes when you install a device driver the installation can fail, because of corrupt files, problems with the installer, resource conflicts, etc. To fix this issue, below is a list of some common solutions that might help you to recover from this problem:

• Uninstall the device driver, restart the computer and try reinstalling it again.
• Try using the Driver Roll Back feature.
• Try using the System Restore feature.
• From the Start menu > All Programs > Accessories > System Tools > System Restore. Follow the instructions in the wizard.
  
• Reboot the computer, press F8 at startup, and select 'Last Known Good Configuration' and press the Enter key.

After following the advice above, if your system is still giving you some problems (such as displaying errors, rebooting, etc.) you can also try the following:

• From the MS-DOS prompt, type "sfc.exe /scannow" (this runs the System File Checker). It verify the protected system files, and if problems are found it will revert them to a previous version.
  

Windows XP: Driver Signing

Microsoft's Windows Hardware Quality Labs (WHQL) digitally signs device drivers to certified that the driver was tested for compatibility with Windows and has not been altered since its testing. This program was implemented by the company to improve the quality of drivers that are available and increase the stability of the operating system.

Drivers can come from many different sources, like an installation CD, a web site, or other various sources. Some device drivers are not digitally signed by Microsoft, which could mean that they may not have been tested as thoroughly as they could have been. There's a greater chance that they could effect the stability of your system because of unknown compatibility issues.

To configure how these signed and unsigned drivers are handled by the OS, you need to open the 'Driver Signing Options' dialog:

• Open the Control Panel folder.
• Double click the System applet.
• Click the Hardware tab.
• Press the 'Driver Signing' button.

In the dialog, you have three options:

• Ignore (Allows the installation of any files, signed or not.)
• Warn (Displays a warning message that the driver being installed is not signed.) [Default]
• Block (Prevents the installation of unsigned drivers).

Select the option you want, and press the OK button.

Windows XP: Ways to Install New Device Drivers

Anytime that you install a peripheral on your computer, the operating system (OS) will need a device driver to know how to use it. Windows has four different ways that it handles detecting and installing new device drivers into the OS:

• Setup Program: This is software that comes with your new device. To install this software, generally requires putting a CD/DVD in your computer or downloading the setup application from the device manufacturer's web site.
  
• Note: Some devices require that the installation software is installed first before you hook the hardware up to your computer. This is done to make sure the device is properly detected.
  
• Booting Your Computer: Every time Windows starts it scans the system for new hardware that might have been added or removed since it was last on. After the system is fully booted, if new hardware is detected it will check if the system already has the appropriate driver for it. If not, it will request that you provide the location of the driver it needs.
• New Hardware Scans: Sometimes after you boot Windows, you may not have the right drivers for new hardware that was added at that moment. After you get the right driver, you use the Add Hardware Wizard (select the Add Hardware icon in the control panel) to manually perform the hardware-detection and installation process to install the appropriate device driver.
• Manual Installation: Sometimes device drivers don't come with an installation program, but instead they come with .INF files. You can right-click these files and choose Install to add these new drivers.

Security: Simplifying Web Site Logins

About a year ago, I wrote an article about how to create a strong password. In this article I discussed some of the techniques needed to create a password that someone can't easily guess or break. I also recommend that you don't use the same password for every web site that requires authentication.

I recently came across a very cool browser-based utility that simplifies using, creating and remembering strong passwords across any web site. All you have to do is create a master password that only you know, and give the site a URL (such as: http://www.google.com), it will then create a unique password for that web site. You can also create a bookmarklet (JavaScript embedded in to a bookmark) that you can store in your browser links bar, that can automatically generate a password for a site that your visiting based on your master password.

The way this utility works is by using JavaScript on a local web page loaded in your browser (no information is sent to the remote server). The script then uses MD5 to create a one-way hash based on your master password and the domain of the web site that you're going to use it for. Only the first eight (or more) characters of the hash are selected, so its impossible to break the hash because not all the information is used.

Windows XP: Turning Off the Language Bar

Do you have the Language bar taking up real estate on your screen, or in your taskbar and you want to get rid of it? Follow the procedure below to turn off this feature.

• Open the Control Panel folder.
  
• Double-click 'Regional and Language Options' applet.
• Click the Languages tab.
• Under 'Text services and input languages', press the Details button.
• Under Preferences, press the 'Language Bar' button.
• Uncheck the 'Show the Language bar on the desktop' checkbox.
• Press the OK button twice.
  

Note: By following this procedure you will be turning off handwriting recognition, speech recognition, and some other accessibility features.

Security: Internet Privacy is an Oxymoron

Sun Microsystems Inc. Chairman of the Board of Directors Scott McNealy once said, "You have no privacy, get over it." That statement is more true today, then when it was originally said. Everyday, we are losing more of our ability and rights to protect our privacy.

Did you know that there is no such thing as true anonymity or privacy on the Internet? All you can do is mask your identity, and make it difficult for someone to know who you are. Although, in most cases its still possible for someone to track and identify you with enough work.

There is a lot of information about you that is leaked by your own personal Internet activities (such as surfing a web site, posting on forums, etc.). Then your computer and its applications (such as your browser, IM client, etc.) are doing their own fair share to help leak more information.

Anything that contains your name, address, etc. Is known as 'personally-identifiable information' (PII), because it can personally identify you directly. This information is generally provided by you to some web site or service (such as Amazon, eBay, etc.) that you may use regularly.

Any of the information (PII or not) is used to profile how you surf the web, what you buy, and other types of demographic analysis. All most all of this tracking is perfectly legal, and you even grant companies permission to do this when you agree to use a web site through its 'terms of service' or 'privacy policy' that you don't read.

Information Leaked by your Applications
As I said earlier, when you visit a web site there is certain types of information about you that is revealed by your computers applications. A lot of this information (such as your browser cookies) are needed by web-based applications to be able to customize your experience.

Below is a brief list of some of the information a web site can know about you, just by visiting it with a regular browser and Internet connection:

• The type of browser you're using, a long with information about its features. For example: what version of: Java, JavaScript, Flash and other applications you have installed (see: BroswerSpy).
• This doesn't include the information in the HTTP header, which includes information about your browser and the web page you requested from a web site (see the following article for more information).
• There is information in the HTTP header called the 'referer', that also gives the web site your visiting, the last URL of the web site you're coming from. Here is an example, of some of the information a site can see about you.
• Browser cookies and web beacons (an invisible 1x1 graphic on a web page with a unique id embedded in to its name), which can be used identify your computer across different web sites. This technology is generally used by advertising and marketing companies to track and profile your browsing activity to better serve you ads.
• As more web sites become interactive, browser cookies are used to track your web site session information. If you turn off the cookie feature, you can prevent certain web sites from working properly for you.
• Web beacons have been used by spammers to track if you open up an email message, and to see if a email address is valid. Although, most modern email clients prevent images from being downloaded automatically which help prevent information about you from being leaked.
• Your browser keeps local copies of all the web pages you visited in its cache, along with a history of all the URLs you visited. Some browser's like Firefox keep track of the files you downloaded, and the keywords you typed into the search toolbar. Then there is the saved forms information (known as AutoComplete in IE), and saved password feature. This information is used to improve the broswer's user experience, but also can become a privacy issue in some cases.

Then there is all your other Internet applications such as your e-mail client, instant message client, VoIP client, etc. Each of these programs have their own type of logging or privacy issues, that you might be or might not be aware of.

For example, your instant message client may keep logs of all your conversations. Your e-mail client, keeps all the messages that you received and sent. Your VoIP client keeps a log of all the calls that you make.

Even if you clean all this information off your local computer, your application's service provider has logs and/or copies of it in their servers and databases. Its not uncommon for them to use this information to profile usage habits of their users. All this information is also available to local and federal law enforcement generally with the use of a search warrant.

Generally, no matter what network enabled application your using, the following information is always going to be left about you on some server somewhere.

• Once someone knows your computer's IP address, its possible to isolate the ISP, and therefore the city, state/province, and country your computer's from (see: IP Address Locator).
• Local and federal law enforcement with the use of a search warrant can force the ISP to release your identity, based on your computer's IP address.
• When you visit a web site, information is stored in the web server logs of the time you visited the site, your IP address, which pages you viewed, and sometimes what you searched for on that site (see: Omniture).
• Think about this, all your favorite search engines keep all the information that you searched. If you have a personal account on a site like Google, Yahoo, etc., they can directly tie this information back to you.
• For example: "On August 4, 2006, AOL released three months of search history for 650,000 users to the public. Although the searchers were only identified by a numeric ID, the New York Times discovered the identity of several searchers." (excerpt from the Wikipedia)
• Anytime you visit a web site using it's domain name your computer needs to lookup the IP address of the remote server through some DNS server request. This information is then logged on that computer.
• When you're at work, and you search the Internet your companies web proxies and firewall can track all types of Internet activity. Plus in the U.S.A. any information on your computer, or in your e-mail is property of the company.

Digital Forensics
With all the data stored on computers these days, a new area of computer criminal science has been created called 'digital forensics'. These are law enforcement personnel specially trained to find and retrieve specific information off a computer.

The tools that these people use are good at extracting the data they want. Generally the programs we use everyday are really good at leaving digital bread crumbs all over your computer's hard drive about everything that you do. These digital forensics tools are designed to leverage this information

On a side note, about digital forensics tools. Did you know that by using a pattern analysis program you can predict if something was written by a man or a women with almost 70% accuracy.

The way this technology works is by analyzing the words used in a message and assigns different values to them to determine if the text was written by a man or women. More information can also be determined by your writing style beside gender, such as your nationality based on the words that you use.

To see this tool in action, check out Gender Guesser or Gender Genie. With technology like this, it means that any of those anonymous posting or e-mail you might have created are becoming a lot less anonymous.

Note: This technology was created by Dr. Neal Krawetz of Hacker Factor Solutions.

Article: Firefox Zero-Day Code Execution Hoax?

eWeek reports: "A public claim by hackers that Mozilla's Firefox browser is vulnerable to multiple code execution vulnerabilities may be an overblown hoax."

Windows XP: Accessing the Windows Update Catalog

Do you need to download specific updates from Microsoft without using the Windows/Microsoft update site (i.e.: http://windowsupdate.microsoft.com/)?

There can be several reasons why you would want to do this, for example: you have a slow modem at home and you want to get your updates from a faster computer. Or, if you're a systems administrator at a company, and you need to update Windows clients or servers.

Whatever the reason, here is how you can do it.

• Open Internet Explorer (this won't work from Firefox), and go to "http://v4.windowsupdate.microsoft.com/catalog"
• Click the link "Find updates for Microsoft Windows operating systems" or "Find driver updates for hardware devices"
• If you selected the find updates for operating system, you will need to select the OS which you're looking for the updates. Press the Search button to continue.
• Select the category, and then select updates that you want to get.
• Click the "Go to Download Basket" link.
  
• Press the Browse... button to select the download location on your local computer.
• Press the 'Download Now' button.
• Choose if you want to accept the licensing agreement, then press the appropriate button.
  

After the files finish downloading, they will be available in the location that you selected.

Firefox: Open Multiple Home Pages

Just about anyone who uses a browser, generally has a favorite web page selected as their default home page when they open up this application. Firefox has a cool little trick that you might not know about. It can open multiple default home pages when the browser is first opened, all you have to do is separate each URL with a pipe ("|").

For example:
http://www.google.com | http://yahoo.com

To set the home page in Firefox (I am assuming you already have it open):

• From the Tools menu, select Options...
• In the Location(s) field, enter the URLs you want to use and separate them with a "|" (no quotes).
• Press the OK button when done
  

Security: Patch Your System Now

Microsoft recently released a new out-of-band patch (which means its out of their normal release cycle), that fixes a serious exploit in the Internet Explorer browser. This exploit allows a web site to execute code on your computer without your permission. This means if you visit the wrong web site you can have your computer infected with some type of malware.

If you have not patched your system, do it now at Microsoft Update. If you have the Windows Automatic Update feature enabled to download and install the patch, you should have it by now. If you don't have this Automatic Update feature enabled on your computer and want it, the instructions for setting it up are available in this article.

For more information on the patch see the following page.

Windows XP: Microsoft Guided Help

Microsoft has added a new feature to some of its Knowledge Base articles (MSKB), its called Guided Help. Basically its an application that you download and execute on your local computer that will walk you through the steps outlined in the instructions.

Note: Currently there only about 20+ MSKB articles that support this feature, although I hope more will be added soon. Look for the following icon: in the search results to find articles that contain this feature.

If you're an advanced user, this feature will not be too helpful. These tutorials are targeted at the novice user who wants some one to show them what to do, and how to do it. Although if you know someone who can benefit from this feature, I would email them the link to the article.

When you find an MSKB article that contains the Guided Help feature. All you have to do is download the program from the article and then execute it. After accepting the licensing agreement, the program will give you screen clues on what to do and what to click.

For more information about Guided Help check out this MSKB page.

Software: Sophos Anti-Rootkit

Here is another tool in the ongoing battle to fight rootkits and other types of malware. If you don't know what a rootkit is, its a program that tries to hide its presence (i.e.: files, processes, registry keys, and network port) and tries to gain administrator access to your computer. Generally a rootkit will contain a malicious payload like some type of spyware that it will try to install in your system.

Sophos is offering a free Anti-Rootkit scanner, that will seek out and try to remove this software if its installed on your computer. The Sophos Anti-Rootkit scanner can be run from the GUI (Graphical User Interface), or the command line.

Reference: Types of Memory card

Are you confused by all the different types of media cards currently available for your camera, cell phone, PDA, etc? I wanted to provide a quick reference to all the media card form factors that are out there. Every card type has its advantages and disadvantages.

For example the SD form factor is the most popular, while the CF-II allows you to use Microdrives. Some media card types such as SmartMedia never took off.

Personally, one of my selection factors for buying new electronics is that the device needs to support SD cards. I hate having devices that can't support the same type of removable media. This is handy when you need to be able to off load the media to another device quickly.

Below is an excerpt from an Wikipedia article on the different type of media cards available. You might notice some media card form factors that you may never have heard of before, I know I did. If you want more information on any of them just click the link.

Name	Acronym	DRM
CompactFlash I	CF-I	None
CompactFlash II	CF-II	None
SmartMedia	SM / SMC	None
Memory Stick	MS	MagicGate
Memory Stick Duo	MSD	MagicGate
Memory Stick Micro M2	M2	MagicGate
Multimedia Card	MMC	None
Reduced Size Multimedia Card	RS-MMC	None
MMCmicro Card	MMCmicro	None
Secure Digital Card	SD	CPRM
miniSD Card	miniSD	CPRM
microSD Card	microSD	CPRM
xD-Picture Card	xD	None
Intelligent Stick	iStick	None