Hubris

Internet Explorer 7 Hits The Mean Streets

It didn’t take long after Microsoft released Internet Explorer 7 for download for the exploits and vulnerabilities to appear, with many reporters and security companies scrambling over each other in order to publish about the new Internet Explorer flaw.

Only, it wasn’t.

Argument and counter-argument ensued, with Microsoft quickly defending the issue as being an Outlook Express issue and not an Internet Explorer flaw. That sleight of hand didn’t satisfy many, who pointed out that the same flaw had been identified back in April, when it was attributed to Internet Explorer 6. At the end of the day, Internet Explorer 7 is a possible vector to exploit an error in the handling of ‘mhtml:’ addresses – which can result in the disclosure of sensitive information.

Unfortunately, this isn’t the only issue to have affected Internet Explorer 7, with earlier beta versions susceptible to the WMF vulnerabilities that were identified and patched over the 2005 – 2006 Christmas / New Year period. The unknown issues with Internet Explorer 7 are going to be a greater concern over coming months, as Microsoft is expected to use Automatic Update to provide the application to Windows XP SP2 users in November.

A positive aspect is that many computer users will get to experience the improved CSS handling, improved security, tabbed browsing, and the other general improvements that Internet Explorer 7 brings to the system.

Every Dog Barks At The Moon Sometimes

Over the last couple of weeks, many security ‘experts’ and companies (including some of the biggest, most ‘respected’ names) have been busy displaying an amazing amount of hubris and arrogance in their coverage of what would normally be regarded as minor news items.

After Apple Computer disclosed that an unknown, but believed to be very small, number of iPods were shipped with some Windows malware preinstalled (claims range from virus to adware), there was an almost unanimous hammering of the company’s claims. By Windows and Microsoft supporters (such as top Information Security companies and people). Almost all of the vitriol was focussed around the “we are upset at Windows for not being more hardy against such viruses, and even more upset with ourselves for not catching it.” statement, which appeared on Apple’s site (http://www.apple.com/support/windowsvirus/) in relation to the issue.

Many called Apple ‘arrogant’, and attacked any perceived ills that they might have had with the company. Unfortunately, in their rush to attack Apple, most completely bypassed (or were unaware of) a broader incident that affected a joint promotion being run by McDonald’s and Coca-Cola in Japan, where 10,000 media players were distributed. Only, the players were infected with password stealing malware.

Elsewhere, an unnamed expert, who crusades against hysteria and false claims in security (and, more frequently, terrorism), fell into their own trap recently. They claimed that firefighters who treated jelly (the gelatinous dessert) as a potential HAZMAT threat (before it had been identified) were over-reacting to it as a terror risk. While it does sound funny that firefighters would be running around in HAZMAT suits trying to deal with somebody’s unwanted dessert, it is a fairly standard practice when emergency services are faced with unknown substances that have been abandoned.

Perhaps it is my background in aviation and engineering related fields, but nothing is done without a healthy factor of safety (risk management), and the initial response was completely appropriate. People have died because they didn’t know enough about the material that they were handling (Goiânia, Asbestosis, Miner’s Lung, and others). Sometimes the simple answer is the correct answer, even if it might be misconstrued.

About the Author

Carl is the founder and lead researcher for Sûnnet Beskerming (http://www.beskerming.com), an Information Security company that services the world and still maintains the local touch. Providing guidance on the latest developments in Information Security threats and news, there is something for all.

Published in: on October 28, 2006 at 11:28 am  Leave a Comment  

How Do You Benefit From A Registry Cleaner

These days, more and more computer users are using registry cleaner software to keep the registry clean and to keep their computers in good health. Computers are the information highway of the 21st century, and most households in the United States use computers for various reasons. The more you use your computer, more information gets stored in its registry. The benefit of a registry cleaner is that it helps ‘slim’ down the registry by removing the unnecessary data thereby making your computer run faster. The registry of your computer is the section where all applications create entries for temporary data, and these entries are never deleted by on their own. The more data your computer processes, the more bloated your registry gets, often slowing down your computer.

It is necessary that you use a window registry cleaner, periodically, to remove all the unnecessary data in the registry. Over time the invalid entries, resulting from uninstalling or incorrectly removing of the software accumulate in the registry. A registry cleaner simply deletes these entries from the registry and helps your system to function at its optimum level.

The Benefits of Cleaning The Registry

This is normally what most computer users do:

* Frequently install or uninstall programs * Delete software that was never really fully “uninstalled”

Alternately, your computer may have an embedded Spyware, or you may have unused but undeleted drivers in your system. All such accumulated problems can lead to stalls in the system, or reduced operating speeds. This is where a registry cleaner comes in handy. Before the problems rise to such levels, cleaning your registry periodically gets rid of all these extra entries; trimming your registry down and making your computer run at a faster speed.

With improvements in technology, newer window registry cleaners are coming in the market with new improved features:

* A registry cleaner with a scan and repair feature scans the entire registry records, and does not eliminate valid records. It leaves your computer with a ‘trimmed’ registry and a better computer performance. * There is a feature that is similar to de-fragmentation of the files. It removes the empty spaces and fragments, making the computer run faster. * Certain registry cleaners come with special features that detect and clean the embedded keys that are generally undetectable. These embedded keys have malicious codes that are used by malware (malicious software). * Most registry cleaning software have a ‘schedule and forget’ feature, which allows you to set a schedule for a registry scan, fix, backup, and eliminate the routine unnecessary entries in the registry.

When you first install a new system, you will most probably, never notice a registry problem. As your usage increases, the frivolous entries in your registry become larger and larger, especially with the installation and removal of software, drivers, and other components. This slows down your complete system. This is where you benefit the most from using a registry cleaner that deletes these unnecessary entries and increases the operating speed of your system.

About the Author

Author is admin and technical expert associated with development of computer security and performance enhancing software like Registry Cleaner, Window Cleaner, Anti Spam Filter etc. More information can be found at http://www.pcmantra.com Related Information: http://www.pcmantra.com/RegistryCleaner.aspx?id=2

Published in: on September 13, 2006 at 9:29 pm  Comments (2)  
Follow

Get every new post delivered to your Inbox.