Wednesday, December 12, 2007

Microsoft release (3) Security Bulletins

Bulletin Identifier
Microsoft Security Bulletin MS07-064
Bulletin Title
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
Executive Summary
This critical security update resolves two privately reported vulnerabilities in Microsoft DirectX. These vulnerabilities could allow code execution if a user opened a specially crafted file used for streaming media in DirectX. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Maximum Severity Rating
Critical
Impact of Vulnerability
Remote Code Execution
Detection
Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart, except in certain situations.
Affected Software
Windows, DirectX, DirectShow. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier
Microsoft Security Bulletin MS07-068
Bulletin Title
Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275)
Executive Summary
This critical security update resolves a privately reported vulnerability in Windows Media Format. This vulnerability could allow remote code execution if a user viewed a specially crafted file in Windows Media Format Runtime. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Maximum Severity Rating
Critical
Impact of Vulnerability
Remote Code Execution
Detection
Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart, except in certain situations.
Affected Software
Windows, Windows Media Format Runtime. For more information, see the Affected Software and Download Locations section.

Bulletin Identifier
Microsoft Security Bulletin MS07-069
Bulletin Title
Cumulative Security Update for Internet Explorer (942615)
Executive Summary
This critical security update resolves four privately reported vulnerabilities. The most serious security impact could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Maximum Severity Rating
Critical
Impact of Vulnerability
Remote Code Execution
Detection
Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will require a restart.
Affected Software
Windows, Internet Explorer. For more information, see the Affected Software and Download Locations section.

Monday, September 17, 2007

Scam's

Happy Friday! This morning, I received a pretty disturbing e-mail from a member who submitted a question about an e-mail he received about collecting a large sum of money from a British lottery prize. I've posted the e-mail thread here for your review (read it from bottom to top). And on that note, I just want to urge all you members who are tempted to respond to e-mails such as these, or to any type of e-mail promising you a large sum of money, to please disregard it and DO NOT reply. I know for many, you are rolling your eyes now, saying "No duh, Steve", but I wanted to bring this to the attention of those who are newcomers to e-mails or to the Internet, to use extreme care to not fall victims to these scams. No one in their right mind is going to give you money for free! And the only reason why these scams still circulate is because someone out there is falling for them, and I don't want any of you here to be their next victim. Anyway, spread the word and stay safe. Now, let's hit up this week's topic on how to start out on the right foot with a new computer in hopes of keep it running well in the long run.

Wednesday, August 29, 2007

Spam that might just kill you!

Everyone hates spam. In particular, I dislike the spam that advertises low, low prices on brand-name pharmaceuticals. Vicodin. Viagra. You name it. Now there's a study out from San Francisco-based MarkMonitor, a company in the business of protecting brands online, that finds those who patronize unsolicited online pharmacies risk not only possible identity theft, but their personal health as well. It's all the more reason to aggressively filter your spam, or simply stay away from nonaccredited online pharmacies that show up in Google search results. If the prices are too good to be true, chances are they're not selling you the legitimate drugs you're supposed to be taking.

Thursday, July 12, 2007

Be Safe on MySpace

Don't put too much personal information on your page. Too much personal information can mean putting what town you live in, where you go to school, your first and last name, and where you hang out with your friends. The reason you don’t want to put personal information on your Myspace page is because if you do someone who doesn't know you could find you with the information that you have put on Myspace. This could be dangerous. ** Dont be fooled by all the 20 question surveys. The more questions you answer and post on your page, the more information you're letting people know. You may not say your age, but if you put what grade you're in, you might as well have told them your age!
Avoid drama. Just like in school where people gossip and spread rumors, drama can also happen on Myspace. People can leave others nasty comments, or start groups. Many parents have come into middle and high schools complaining about the stuff that went on through Myspace. Be nice, treat people the way you would want to be treated, and if you don’t have anything nice to say don’t say it at all. Here are some tips to protect yourself from this kind of thing from happening to you. Set your profile settings so that you have to approve of comments before they go on your profile, and if anyone is harassing you- delete them from your friend’s list.
Be smart. Know that you are not anonymous on your Myspace page (even if you don't have your full name on your page, people will know who you are), so if you do something like making fun of your teachers, someone could find out and report you. (Such a said event has actually happened. A teacher in Tennessee had a rumor posted on a pupil's page.)
Protect yourself from Internet predators or harassment by making your profile private. How to make a Myspace profile private: There is a feature on Myspace that allows you to make your profile private so only your friends can see your entire profile. To do this, go into your "Account Settings" and then "Privacy Settings". Check the box "My Friends Only". The feature has been available to everyone (any age) in late 2006. With your Myspace profile private, only the people that are your friends on Myspace can see your whole profile, which includes your pictures, your comments, your "about me" section, etc. Technically, you're supposed to be 14 to have a Myspace page (even though this isn't being enforced), so Tom (the founder of the site) can delete your profile (or anyone else’s) because you are too young.
Don’t accept friend requests from anyone you do not know. People will try to add themselves as your friend, and you want to set your profile so that you can see who requests to be your friend. You can also make it so that before people can add you that they need to know your last name or email address.
Don't be upset if your parents question you about the content on your page. This is not a "private venue". Anything you put on MySpace becomes available to the public. Be thankful that your parents are interested in what's going on with your life.

Tips
Set your profile settings so that you have to approve of comments before they go on your profile, and if anyone is harassing you - delete them from your friend’s list.
If you post pictures of yourself, make sure they do not include any public landmarks (such as street signs or mailboxes), because someone you don't know may be able to find you.

Warnings
If you are under fifteen, be sure to ask your parents about having a Myspace. Don't be angry if they disapprove. They are just trying to protect you, remember, it won't be the end of the world if you don't have a profile on Myspace.
If you are concerned about a user who pesters or harasses you on Myspace, report him or her to Customer Support. Nobody (by the extraordinarily vast majority, anyway) likes those kind's people.

Thursday, July 5, 2007

New Office 2007

Amateur's beware??

New office comes with its own file extension which has to be changed before sending to older office documents, spreadsheets or PowerPoint presentations.