Sophos Issues Sony DRM Removal Tool

The link above will take you to an informational page at British Anti-Virus firm Sophos. Read it and use the link to download a tool which disables the Sony DRM, removes at least most of it and prevents it reinstalling.

Sophos is to be congratulated for such swift action on this. I'm sure others will follow.

Windows users are now taken care of on this issue. Word is coming around that Macs are also affected by the Sony rootkit. Details are still sketchy as I've been unable to find enough information in English and machine translations are inadequate. I'll keep looking.

Jack

Sunbelt BLOG:Bad Capacitors are still an issue.

I thought this was an old issue, but its apparently not, there's a link to the CNET story, with a picture of bad caps. The degree of leakage is way less than I thought, and I may have had some bad caps on the ASUS board that failed on me 2 weeks, ago, I'll definately have to go back and look at it.

--MissM

Strange New Products

There's just too much goodness to post all of the links. Go there and check out the following:

Watch Traffic Cameras on your Cell Phone: Traffic Vizzion is available in 20 major metro areas, costs only $5.00 a month.

3-D Wedding Planner: For the control freaks getting married. You can go step-by step through a ceremony in 3-D fashion.

The Memory Maintainer: This little contraption keeps your car's clock and radio presets from getting reset when it's battery gets changed.

A Basketball That Stays Inflated for 365 Days, from Spaulding.

--MissM

Silicon Valley Sleuth: Yahoo Maps pranks Google

I thought this was amusing, I think this is all in fun. the Dude's site, is bare, though amusing at the layers of the joke. I got there from Google rumors: GoogleRumors ? Yahoo engineers prank Google

btw, beta yahoo maps looks good. Apparently they use Flash versus Google's DHTML but the navigation screen looks great!
Here's a link to Geeks in Anchorage, AK, put your mouse over the map, on the left, it bursts out at you!! Too kewl. If you go to Anchorage's local page you'll notice there's a wireless search, right there ;)

--MissM

Xbox.com | Xbox News - Enter to win tickets to the ultimate Midnight Madness event!

There's only a few hours left to register!!

Enter to win two tickets to the biggest gaming event of the year!
Where is It?

It's somewhere in the Mojave Desert. Top secret.


--MissM

First Trojan using Sony DRM spotted

The virus writers finally got around to taking advantage of Sony's rootkit, courtesy of Dvorak's blog.

--MissM

Visual Studio Express

If you have ever wanted to dabble in Microsoft, here is your chance. MS is offering Visual Studio Express for free. Yes, folks, that is "free as in beer" free. The offerings include Visual Web Developer 2005 Express Edtion; Visual Basic 2005 Express Edition; Visual C# 2005 Express Edition; Visual C++ 2005 Express Edition; Visual J# 2005 Express Edition; and SQL Server 2005 Express Edition. Pretty neat, eh?

This offer will only last for one year -- until November 7, 2006 after which time you will have to pay to play. However, you will not have to pay if you downloaded prior to this date. It really is free. So go and have some fun courtesy of the boys and girls in Redmond.

Most questions about this can be answered by the FAQ .

New worm targets Linux systems | Tech News on ZDNet

"Lupper blindly attacks Web servers, installing and executing a copy of the worm when a vulnerable server is found, McAfee said in its description of the worm. "

World of Warcraft hackers using Sony BMG rootkit

Want to cheat in your online game and not get caught? Just buy a Sony BMG copy protected CD. Sony BMG's content protection software can make tools made for cheating in the online world impossible to detect. The software--deemed a "rootkit" by many security experts--is shipped with tens of thousands of the record company's music titles. Warcraft's anti- cheating program cannot detect any files that are hidden with Sony BMG's content protection, which only requires that the hacker add the prefix "$sys$" to file names.
Thank you Terry B.

Alice Hill?s Real Tech News - Independent Tech ? USB Port to Replace Car CD Players

"A CD changer is two or three times the cost of the USB interface, said Visteon mobile electronics project leader Ian Randall. Those CDs would have only 70 to 80 tracks. With a 1-gigabyte stick you can get 400 or 500 songs."
Thank you Terry B.

OhGizmo! ? Start Your Car Through The Internet

"So, you should be able to get your car started, unlock your doors or even honk the horn through any WAP enabled device."
Thank you Terry B.

Google Wants to Dominate Madison Avenue, Too - New York Times

Google has created what it says is one of the most sophisticated artificial intelligence systems ever built. In a fraction of a second, it can evaluate millions of variables about its users and advertisers, correlate them with its potential database of billions of ads and deliver the message to which each user is most likely to respond.
Because of this technology, users click ads 50 percent to 100 percent more often on Google than they do on Yahoo.
Thank you Terry B.

Singularity - Home

"Singularity is a research project focused on the construction of dependable systems through innovation in the areas of systems, languages, and tools."

Anonymous Sperm Donor Tracked Down by Son

This is an interesting story on privacy -- or the lack thereof in the Internet age. Using recently available DNA testing kits and some web sleuthing, a young man identified the father whom even his mother did not know. Lots of implications on this one...

Cognitive Dissonance: Buy Your AMD CPU from Dell

No kidding, Folks. Dell, the huge online tech sales machine, will even sell you AMD microprocessors at competitive prices.

Skype explains why security evaluation omitted bug reports

The link is to a short analysis of Skype security.

I long ago removed Skype from all our computers and will not reinstall it until I'm satisfied it is not a risk. They seem to be working on it and hopefully that day will come. Call me skeptical, if you will.

Joe and Riley are using Skype to their satisfaction, as are others we all know. I'm somewhat more paranoid than they are (and quite okay with that).

Jack

Lupper Worm Targets Open-Source Software Running on Linux

Don't freak out. SANS rates this one as "low risk", mainly because of the construction of Linux permission structure.

A while back, a buffer overflow flaw was found in XML-RPC for PHP. Most of the affected applications have already been patched. Check the link above for a partial list of affected apps and a link to the SANS report. The cure is to patch your apps and the PHP scripting engine.

As the prominence of Linux increases, there will be more and more of this sort of malware floating around. And by the way; ClamAV detects it.

Jack

OnComputers Radio show Podcast 11-06-05

This is the On Computers Radio show podcast for 11-06-2005. If you prefer, you can download the same file here via ftp.

Sick of automation? Dial 0 for human - The Boston Globe

This is a link to the article in the Boston Globe that was discussed on today's show regarding automated answering systems.

Microsoft's AntiSpyware Rebranded 'Windows Defender'

Apparently, according to eweek, MS new "defender" will include rootkit detection. There are many good links in the article about rootkits and security.

I have a question about MS antispyware, does it run in the background? I've never seen it run explicitly. Help me out, please?

--MissM

An experimental open thread

In the interest of getting a conversation going. What geeky stuff are y'all interested in or intrigued by?? Let us know.


--MissM

Google's been berry, berry good to them

From the Wall Street Journal.

Wide-Flying Moguls:
Google Duo's New Jet
Is a Boeing 767-200
Included Are Two Staterooms,
A Shower, Seats for 50;
It's 'Good for the World'

HEY! I have a great idea! Get google to sponsor geek meet 06 and they could pick us all up ;)

-- MissM

Samsung's Wonky New Laptop Designs - Gizmodo

It must be laptop day here at OnComputersTips! This is too kewl, the 19"LCD detaches from the computer, there's a cool picture at the link in the title. Hold the drool though, if you are in the US, its just been released in the UK, so far (she says optimistically).

I haven't heard of anybody with a samsung laptop, anybody have any experience with them? I know I LUV their TVs!

--MissM

The ThinkPad is returning to retail - Engadget

I've always heard good things about IBM Thinkpads. Lenovo bought them from IBM, I believe, ande it was just announced that Office Depot is picking up the line, and they are going on sale on Sunday, at a SUBstantial discocunt, right around half price. Check it out, in case a laptop is on somebody's holiday list ;)

--MissM

Movie downloads could cost Racine man up to $600,000

Courtesy of Dvorak's blog:" A Racine man who says he doesn't even like watching movies, let alone copying them off the Internet, is being sued by the film industry for copyright infringement after his 13-year-old grandson downloaded four movies on their home computer."

First a 13year old, now a 67 year old man, what a shame....
--MissM

Magix Audio Cleaning Lab 10 Interview

On Friday, the hosts will be interviewing representatives from Magix Audio Cleaning Lab to discuss the release of their new product. If anyone has any questions, please email them to onair@oncomputers.info.

Sony to patch copy-protected CD | CNET News.com

In an update to a story posted by several of us, Sony is working on an update to the rootkit technology.
To quote news.com : "Sony BMG Music Entertainment and a technology partner are working with antivirus companies on a fix for a potential security problem in some copy-protected CDs."


We'll keep an eye on this for you, as it develops.

--MissM

update: As I was typing the above, I'm listening to Steve Gibson and Leo Laporte's Security Now podcast, and they were actually talking about this rootkit installed by Sony BMG CDs. Gibson says that it hides files and a directory by beginning the filenames with $sys$, these files show up in rootkitrevealer . I've been concerned about BMG copy protection for several years, and as a result of this rootkit, I'm saying bye bye to BMG Music. Leo says that someone searched on amazon.com and there are 24,000 CDs that may have this on it. Gibson said the gentleman at sysinternals was technically breaking the DMCA by looking into this. I consider this another example of how wrong the DMCA is. I also watch DVDs on the computer and, and I've always refused the interactual install, just for those same reasons. Leo says interactual just disables any dvd copying software you have.
The apparent easiest solution: Don't run as administrator! (Tip courtesy of Steve Gibson)
Go Listen and SUBSCRIBE! :)

Blogger /Blogspot notification

"Tuesday, November 01, 2005

We will be upgrading our network access this weekend which will require downtime for both Blogger and Blog*Spot. The outage will occur at noon (Pacific Time) on Saturday and last for 2 hours. Thanks for your patience during this maintenance window."

Just a head's up that there will be blogger problems, this weekend.

-- MissM

Dell Slips Twice. Stock Off 9% Overnight.

Slip No. 1 -- the company is taking a $300 million charge this quarter to cover "the cost of servicing systems that included a vendor part that failed to perform to Dell's specifications." They have to replace lots of motherboards in enterprise Optiplex desktops. I don't yet have any information on whose part failed and why.

Slip No. 2 has been happening all year. This time the company fell down. Dell was overly aggressive on consumer pricing in the first half of 2005. Margins suffered, while units sold went through the roof. Recall that in the second quarter, WW PC unit sales were up 17%. Dell picked up a lot of that growth, but not profitably. The company said it would focus on more profitable, upscale consumer systems in Q3. Bad choice, as the company now has to write off inventory because sales are not at the level expected.

My first thought is that the execs at HP headquarters are going to burn the midnight oil with the accountants. HP's fiscal year ended last night, so the company can make adjustments with knowledge aforethought on Dell's health. Believe me, HP has hated being the weak sister to Dell the last couple of years. So watch HP's earnings announcement on November 17th.

Second, Intel's stock was also down today in sympathy. Dell sells only Intel processors, so Dell is a proxy for Intel.

Third, you can bet the Dell execs in Round Rock, Texas are asking what went wrong with their consumer strategy. One question that's bound to be asked -- again -- is whether AMD's repute for better performance in high-end machines and good value in low-end machines is finally hurting Dell in ways that can no longer be ignored or smoothed over with Intel marketing dollars.

Fourth, as I wrote in July, a 17% global PC unit growth is unsustainable long-term -- and Dell's stock story is all about sustainable growth with profits. Where's the sweet spot for the world's largest PC company? Dell's stock is down more than 17% on a five-year basis, meaning a lot of investors will now more loudly voice their dissatisfaction in the company's performance -- and strategy.

"Training"

Well, got my training yesterday. Four hours worth. The server we were logged into crashed! LOL. I got my log ins. Right now it's email and repair requests. Also my 1st. experience with the "help" desk. That will be a post in and of itself when done. I'm waiting for a call back.

Scot's Newsletter | By Scot Finnie | November 2005

Scot's Newletter is excellent, this month's issue covers Windows Vista and IE7 thoroughly. He also has a lot of information about firefox 1.5 beta (which I reviewed, and had issues with), and suggests the final version will be released, in a couple weeks. One also has to appreciate any newsletter that includes linux command tips (this month's is hdparm). One thing I especially appreciate is Scot uses Eudora like I do, and he keeps me updated.
If you would like to subscribe, use the following link:Get Scot’s Newsletter


OffTopic: CAPTCHA aka word verification in comments and posts:I was at paypal.com last night, and they had an option to have it read to you, which I thought was very cool, the first time, it missed some letters, so I had to listen a couple times, and they said it was case sensitive, and I didn't hear a case reference in the file, but I thought that was a nice workaround to visually impaired people and the word verification.

-- MissM

Sony CDs Rootkit Your Windows PC

This is a good article to skim if you are not a techy, and to bookmark if you are at all interested in self-maintenance of your Windows PC.

The horror show is this: Sony DRM(digital rights management)-protected music CDs will royally screw up your machine, slow it down permanently, take over control of your CD drive, and make life miserable for you -- all without a mention in the EULA and with no way for you to remove the software. For all this joy, you pay $18.99 to Sony. Have a good day.

Makes me recall the time Sony's online music service took over one of my machines. It was a bear to get rid of!

Bottom line from me is:

• Do not allow your CD-ROM drive to Autorun when loaded. It's too easy for automatically-loaded bad software to mess up your machine. To disable Autorun (default is enabled!) in Windows XP: Start->My Computer->right click on CD (and/or DVD) drive->Autoplay tab->Take No Action.
• Don't buy DRM-protected music that requires you to listen to it on your PC. Instead, download the tracks from an online store like iTunes, or copy the mp3 files on an Apple Mac, where the DRM software is not installed.
• If you do not heed the above, and bring your DRM-protected CD to work, make sure you have your resume up to date. Your IT department may be exceedingly displeased when your personal entertainment screws up corporate property.

Sony, Rootkits and Digital Rights Management Gone Too Far

Mark Russinovitch has discovered that DRM on a Sony CD installs a rootkit. Anyone purchasing one of these CDs gets some nasty "bonus" material. Thank goodness there are people out there shedding light on these things. Knowing that a CD has DRM is one thing, but DRM that installs a rootkit is a huge breaking of consumer trust.

I guess that at least on "respectable" (not any more) content company not only thinks it owns your computer; it actually "owns" your computer.

Sony Rootkits your computer

Charlie Demerjian writes (rants?) in The Inquirer about Sony's DRM on music CDs. I'm not sure if calling the DRM a "rootkit" is appropriate. However, no matter how you brand it, it's invasive enough that removing it will kill your Windows installation.

Seems to me our choices in music are becoming more and more limited, at least as far as playing CDs on our computers goes. (They still work fine in dedicated CD players.) I, personally, have given up on CDs, though I love music. Seems as if every one I buy is unable to play on one or another device I own, because of the record company's fear that I'll steal something from them, thus cheating them out of money they can then cheat the artist out of.

Jack

Ruby on Rails

As we spoke a little about programming and programming languages on the show yesterday, I thought finding this article timely. I had even mentioned the Ruby scripting language.

Ruby on Rails (RoR) seems a successful attempt to provide a framework; a system, if you will, for generation and maintenance of web services and web site code. The philosophy of rigorous simplicity is interesting in it's own right. The article is an interesting read and can even give those who don't program a fairly decent idea of RoR's strengths and weaknesses.

Jack

OnComputers Radio show Podcast 10-30-05

This is the On Computers Radio show podcast for 10-30-2005. If you prefer, you can download the same file here via ftp.

"It's Not Excel, It's Magic!!" Contest Winners

Please join us in congratulating Barry Bouchard and Mike Iversen for winning a copy of Mike Umlas' book, "It's not Excel, It's Magic!"

Senators question file-storage shift - The Boston Globe

Interesting article here. Apparently, users with visual disabilities are complaining because the office applications that support the OpenDocument format don't really work well with devices made to make lives of these users easier.

Maybe Riley can comment on this.

Aaron

IBM is working to eliminate the need for Anti-Virus apps

This Techworld.com article is about AXE (Assured eXecution Environment) which is kernel level execution control. With it in place, unauthorized code simply cannot run.

While not here yet, neither is this the sort of press conference "pie in the sky" we hear so often. Instead, it is a real and progressive effort to provide us, the users, with protection. More power to them.

Jack

Sun lets JDS on Linux roam free

Trust me on this when I say this is a HUGE development!

For those of you who aren't familiar with Sun's "Java Desktop System" (JDS) it is a desktop layer which, until now, ran on Sun's version of SuSE Linux, Sun's Solaris operating system or their SunRay thin client OS. The JDS is based on the Gnome Linux desktop with heavy dependence on Sun's Java programming language.

Unlike a Linux distribution, the JDS contains only one application for any given purpose. It thus presents a rather less confusing set of choices to the user, in much the same manner as Windows or the Mac OS X do. To a corporate IT department, this is very attractive because they do not have to support a lot of duplicate application nor strip them out of a distro before turning the machine over to the user. And now Sun has freed it to be shipped with any Linux distribution.

I am not really a fan of Gnome, though the most damning criticism I can level at it is that it doesn't really suit me as a user. And I have to say it does suit a lot of users. It's a personal preference thing and no more than that. In my opinion, the JDS version of Gnome is the best, most usable desktop around, period! I ran it here for a while and would have kept it had it supported the hardware I needed it to. I also have several friends and one business with which I am assocaited using it They won't use anything else, so this development is good for them. In fact; I think it's good for all of us.

The article above has screenshots and if you get really curious, you can find information on the JDS at Sun's web site and several Linux sites, including LinuxQuestions.org.

Jack

Open Sources 2.0, The Continuing Evolution

The link is to an O'Reilly web site page. The book is a collection of essays by verious open source luminaries about the evolution of what can now safely be called a movement and their views of the future. I've read a couple samples and found it thought provoking and well enough written to be thoroughly enjoyable.

Jack

Congress to Face Crackberry Cold-Turkey Withdrawal

Supreme Court Rejects RIM's Stay Request By MARK H. ANDERSON, DOW JONES
U.S. Supreme Court Chief Justice John Roberts denied Research In Motion Inc.'s request to freeze lower court proceedings in a patent dispute between the BlackBerry maker and NTP Inc. Shares of Research In Motion fell 4%, or $2.36, to $55.04 on the Nasdaq Stock Market after the decision was announced.

The emergency request was denied without comment. RIM could refile the request with another justice, but such a move isn't likely to result in a different outcome. Chief Justice Roberts handles emergency requests for cases out of the Washington-based Federal U.S. Circuit Court of Appeals, which reviewed the case on appeal because it dealt with patent law.
Research In Motion, a Waterloo, Ontario, maker of Blackberry wireless email devices, has been trying to ensure a U.S. District Court doesn't enact an injunction restricting its ability to sell and support Blackberry operations in the U.S. because of a patent infringement case the company lost against NTP, a Virginia patent holding company. It filed an emergency appeal with the Supreme Court on Monday.

In a statement after Wednesday's decision, RIM confirmed the high court had denied its emergency request, but added the court "was not asked to, and did not decide, whether it ultimately will accept an appeal of the decision in the case."

Congress discovered Blackberries a couple of years ago, after Wall Street, tech execs, and lobbyists. My take on the legal battle that RIM is waging is that an injunction will be granted, forcing RIM to shut off the Blackberry e-mail service. So if you see an IM junky walking the corridors of power with a nervous tic, be kind to these withdrawing addicts.

Back Up for Dummies from Dell

For all of $99, Dell will now provide you with a second 80 GB hard drive on some Dimension models. All your files are backed up continuously and, when the dreaded hard drive crash comes (as it eventually will) you're protected.

What's not to like? It's cheap enough, capacious enough for all but the most rabid file traders and probably as reliable as any electro-mechanical system can be. And it happens automatically, so Joe or Jane Consumer isn't troubled by administrative details they don't understand.

It's about time.
Jack

Itanium Delay Puts HP in a Bind

[Google Blogspot ate my 10 paragraph blog. Honest. Below is a thumbnail of what never got posted.]

HP has by far the greatest risk to Itanium disappointments due to the company's heavy commitment to the processor family. HP 9000, VAX, and Tandem NonStop customers who bought into the Itanium migration are now facing some difficult choices. The delayed Montecito will have reduced features and a lower clock than planned when it arrives mid-2006. Future Itaniums are pushed out nine months or so. Thus, the future for tier-1 backend database machines based on Itanium is cloudy and deteriorating.

HP's Itanium engineers were sucked into Intel last year, meaning HP is stuck with what Intel can deliver on the Itanium platter. There's lots of speculation that Intel, absent its contractual commitments to HP, would sunset Itanium as a distraction. If nothing else, Intel needs the Itanium engineers as troops in its big battle pitting Xeon -- and its architectural descendants -- against AMD's Opteron.

The question I hear HP's Itanium customers asking today is basically this: "When can we jump from an Itanium multi-processor in a scale-up architecture to a scale-out architecture with 4-way Xeon (or Opteron) processors?" The answer is that many can. Today.

SANS - Internet Storm Center

Skype has a couple security issues that are fixed by downloading the latest here.
"Our avid reader and contributor Juha-Matti let us know that there are two new vulnerabilities in the free IP telephone software Skype.

http://www.skype.com/security/skype-sb-2005-02.html

and

http://www.skype.com/security/skype-sb-2005-03.html

CVE entries: CVE-2005-3265
CVE-2005-3267

Secunia advisory: http://secunia.com/advisories/17305/

Please upgrade to the new version ASAP, they have been rated highly critical by Secunia, and high by Skype."


--MissM

IBM's xBox 360 Details

From IBM's press release:
The chip features a customized version of IBM's industry leading 64-bit PowerPC core. The chip includes three of these cores, each with two simultaneous threads and clock speeds greater than 3 GHz. It features 165 million transistors and is fabricated using IBM's 90 nanometer Silicon on Insulator (SOI) technology to reduce heat and improve performance. The chip's innovative 21.6 GB/s Front Side Bus (FSB) Architecture was customized to meet the demanding throughput and latency requirements of the Xbox 360 gaming platform software.
Other Xbox 360 chip features include:
-- 3 identical multi-threaded PowerPC-based CPU cores operating at 3.2 GHz enhanced with specialized function VMX acceleration for gaming applications and a high speed 128-bit vector unit
-- 1 MByte Shared L2 Cache with custom logic for high-speed data streaming for graphics and system applications
-- 5.4 Gb/s per-pin Front Side Bus (with an aggregated bandwidth of 21.6 GBs)
-- Highly configurable and programmable utilizing eFUSE technology

The aggregate FSB bandwidth at 21.6 GB/second is an eye-opener. That ought to allow for near-photo realism in games and 2x HD video (2160i).

CNET news story on the chip here.

Meanwhile, Microsoft's plans for a simultaneous global launch guarantee shortages. Want the hot, unobtainable Christmas product you can sell on eBay? Better order in advance of the November 22nd launch. Then again, the shortage story may be part of a brilliant PR campaign to focus media attention on the xBox 360. You decide...

The Rinky-Dink Software Rant

Dvorak is at it again. I read this column with my head nodding. Even my favorite Paint Shop Pro is overly complicated, yet a lot easier to use than a full-blown copy of Photoshop. Its easier on the pocketbook, too.

So far my favorite all easy "get the job done" solution is Photoshop Elements.

As to the Kindegarten interface programs. The bundled software litters my hard drive and is rarely if ever used. Often uninstalling these pieces of candy corn (pretty, sweet, and otherwise useless) break another part of the bundle so they sit there idly, taking up bits. Then again, that's what 160 GB hard drives are for!

Why OpenOffice.org 2.0 Is Your Best Choice

From the article:

"Let me get down to the nitty-gritty: It's free (as in free beer) and it works. What's not to like?"

Can I say more. I'm going to start my download today :-)

Rat outsmarts scientists

If nothing else, it is a great headline.

Note that the one thing they don't mention having in the anti-rat arsenal was a cat. By the way, I have no doubt that cats can outsmart scientists, too.

OnComputers Radio show Podcast 10-23-05

This is the On Computers Radio show podcast for 10-23-2005. If you prefer, you can download the same file here via ftp.

Today's URLs

This isn't Excel, its Magic! By Bob Umlas

Sysinternals Freeware - RootkitRevealer

Security Now podcast, transcript.
Mike Tech Show
Flock browser
Open Office 2.0
Strider Ghostbuster from Microsoft Research

--MissM
a url I didn't get to mention on the show. Gizmondo stolen from a store, so they text message the guy, and use social engineering against him. Picture and story here. What do you think? Is it really tracking him? Place your bets in the comments ;)

Very first :-) on the Internet

Ever wondered where the first :-) came from? Well now you do. Microsoft research has been nice enough to post the dialog.

"The contents of the "joke" thread on the CMU CS general bboard that led to Scott Fahlman's invention of the smiley are below. This was retrieved from the spice vax oct-82 backup tape by Jeff Baird"

Page 2 of Internet history

--MissM

read more | digg story

SANS - ISC Possible issue with MS05-050 Patch

"If you have manually downloaded and installed the patch for MS05-050, you may want to check again to make sure you have the correct patch. Microsoft has recently released a Knowledge Base article on "The computer may not be updated after you install the "Security Update for DirectX 7.0 for Windows 2000 (KB904706)" on a Windows 2000-based computer that is running DirectX 8 or DirectX 9".

According to the Microsoft, this only applies to:
• You are running Microsoft Windows 2000
• Microsoft DirectX 8.0 or DirectX 9.0 is installed on the computer

This is likely due to the incorrect patch that you have manually downloaded and installed. If you have installed using Microsoft Windows Update website, you should be protected and free from this problem.

To check whether your system is correctly updated, you can verify the version number of Quartz.dll. The steps are detailed in Microsoft KB article 909596."

Also they post info on Exploit Code for MS05-47, I've got all my updates, finally, though they arrived in bunches. Are you all patched??

--MissM

Happy Birthday Email!

Official Google Blog:"It's difficult to pin down the exact origin of email, but in October 1971, an engineer named Ray Tomlinson chose the '@' symbol for email addresses and wrote software to send the first network email."

--MissM

Wired News: Creating the Global Hot Spot

"Telecom giant Inmarsat is weeks away from launching the second in a series of two super-satellites -- designed to be among the most powerful commercial communications spacecraft in orbit -- that will beam broadband data and voice services to almost any location on the planet." Can you beam me Up Now!
Joe

Dude, they gave me a password

Got a login password yesterday, while I was trying to have my lunch! lol. It's only to use the computer locally. To log into the main server, I have to wait until I get trained. (smirk) lol. Looks like I have a P4 2.8 gig. 512 Meg memory, Intel onboard video. 8 mem shared for video. Also got office 2003.
Computer is online and in the right domain. The fun part comes when I can login to the server! Update after I get my "training". ;-).

OpenOffice celebrates turning 2.0 | Tech News on ZDNet

"Programmers released version 2 of OpenOffice.org on Thursday, a major overhaul to an open-source software suite that has recently become a more serious rival to Microsoft Office. "

Guest for this Sunday on the show

This Friday we will be prerecording an interview for the show with Bob Umlas the author and MVP, If you have any questions for this guest please send them to me at Joe@AlaskaJoe.com

Professionals who use Microsoft® Excel know the value of the widely-used spread sheet program around the world. However, they may not know the 85 tips and tricks discovered by Excel guru and author Bob Umlas, now published in THIS ISN’T EXCEL, IT’S MAGIC!.
Bob Umlas will be a guest on On Computers to discuss this tips and tricks of Excel. He was a contributing editor to INSIDE MICROSOFT EXCEL and has written over 300 articles on all aspects of the program. For 10 years he co-led New York City’s PC Excel Special Interest Group and has authored several chapters in various Excel books on "tips and tricks" and array-formulas.

THIS ISN’T EXCEL, IT’S MAGIC! is capturing world-wide attention, with daily sales coming in from all over the globe and reviews from a variety of readers. It is a handy and portable book, full of easy-to-understand graphics and chock full of tips and tricks for getting the most out of Excel.

Security Now! Now featuring episode #9

Superb Podcast on rootkits, with Leo Laporte and Steve Gibson, "la creme de la creme," of explaining technical subjects . They pick one topic a week and talk for about 30 minutes or so, and thoroughly explain the topic. Its a great thing to see two such professionals cooperate on such a desperately uncovered topic, security.

My interest in rootkits was motivated by a post at Sunbelt Blog. This rootkit detector /fixer found a couple suspicious entries, but couldn't fix them. Therefore I need to find out more info, and poof! Leo and Steve do a podcast on rootkits (insert twilight zone theme here (yes, I tried to find the blasted thing, and couldn't)). In addition to the rootkit detector above, Steve Gibson mentioned that sysinternals has one too, I am not going to post the url here, cause anybody who's not afraid to break their computer, can find it :)

I was typing this as I listened to the podcast, Steve says MS is going to, if not already, going to check for rootkits, so this vulnerability is getting more and more attention paid to it, Bravo!

All the posts at sunbelt blog are interesting, its one of the blogs that I subscribe to, in my rss aggregator.

Back to my rootkit research....

--MissM

Why Software Sucks (and what to do about it)

Scott Berkun is a thoughtful essayist and once you've read the one I've linked to above you might want to look at the others he has on his site. He has a knack of simplifying things without dumbing them down.

Starting with the premise that no one sets out to create bad software, Scott explores why they often do. It's interesting to view programming from his point of view and I recommend you take this one in.

Jack

Dude update 3

The link is what dell they gave me. You'll need java to see it. It's a DELL Optiplex GX280 in a small Desktop case. Peter, saw your comment. TY I'll check it out as soon as they give me my password for the thing. :-).

OnComputers Radio show Podcast 10-16-05

This is the On Computers Radio show podcast for 10-16-2005. If you prefer, you can download the same file here via ftp.

Phishing fight may be paying off | CNET News.com

"The number of phishing sites on the Web hit a record high in August, but coordinators in the fight against the prevalent Web scams say they have made some progress. "

Gates to students: Microsoft wants you | CNET News.com

"WASHINGTON--Microsoft Chairman Bill Gates on Friday preached the 'magic of software' to a packed ballroom at Howard University here and said it's up to today's generation of college students to drive innovation in the future. "

Free Software from PC Magazine

AMD is on a Serious Roll

With server market share north of 20% and climbing -- up from about nothing a couple years ago, AMD must be pleased to garner more than half of U.S. retail PC sales in the just-ended back-to-school period. With a new fab open in Dresden, Germany, the company has a 50 million microprocessor capacity ramping to 100 million chips a year. Once pooh-poohed as a manufacturing laggard, AMD has been pounding Intel on many fronths for a year now. The results are beginning to tell.

Apple's iPod Nano: Staggering Demand Meets Supply Reality

If Apple can get past the NOR memory supply problem -- they bought 40% of Samsung's global capacity, then I think Apple will sell over 5 million of the Nano iPods a year.

Windows Vulnerabilities Just Keep Cropping Up

The bad guys now pounce on the code for fixing vulnerabilities, decompile it, and build worms to take advantage of the problem. I conclude on the continuing evidence that Windows is a problem that will not be fixed.

Why all the Interest in AOL?

Road kill a year ago, AOL is now meat in the eyes of investment bankers. Who was smart enough to buy the stock in 2004?

Find the Black Helicopters

The satellite data at Google Earth is so good that it is a cause for contests. The recent interesting one is "find the black helicopters" around the globe. Stunning results.

Any suggestions for our own contest?

Make Ubuntu usable in few minutes

As Jack has talked about on the show, and Joe has blogged, I saw this Easy Ubuntu, update.
To quote the person who dugg it:
'Easy Ubuntu allows you to Add extra repositories, Activate the "audio preview" feature in Nautilus, Active the num lock at system startup, Replace the GNOME foot logo with Ubuntu's logo and Install: multimedia codecs, Firefox plugins, support for RAR and ACE, P2P software, Skype, AMSN cvs with webcam support, NVIDA or ATI driver for 3D support.'



read more | digg story

tech.memeorandum @ 11:05 AM ET, October 15, 2005

A fix for an issue some people are having with MS update MS05-051 .
I also saw it on Internet Storm Center's Blog

--MissM

Microsoft 'lends security expertise' to Nigeria

I am not saying a thing about this one. I'll blow it, I just know I will, if I open my mouth.

Jack

Dvorak Takes Potshots at Microsoft

Titled "The Microsoft Protection Racket", this opinion piece in at PC Magazine's web site is about as bitter as I've ever known John C. Dvorak to be.

I've been hearing more and more variations on this theme from regular users, as well, of late. Even a lot of staunch Windows and Microsoft boosters are now expressing similar thoughts. While I'm no Microsoft fan, I do like many of their products to the point where I'm often willing to deal with their shortcomings to be able to use them. I think a lot of people have felt like that and I'm now forced to wonder if Microsoft is losing the PR battle due to lack of security diligence, or the perception thereof.

Jack

Comprehensive Tablet PC Review with the HP tc1100

BentUser has a good review of the HP tc1100 hybrid tablet PC.

Instead of just a hardware review, this one also talks about using the software bundled with the unit in such a way that those unfamiliar with the concept(s) behind the tablet form will be able to easily see how it might, or might not, fit into their life and work. For that reason, I really recomment this article.

Jack

New gadget to make theft of mobile phones harder - Yahoo! News

"Finnish scientists have invented a device to make it harder to steal mobile phones and laptops by enabling them to detect changes in their owner's walking style and then freeze to prevent unauthorized use." Don't hurt your leg or you will not be able to call for help!

Dude part 2

Well the dell is here. Desktop case Dell. Pentium 4 CPU. Win XP pro. 17" CRT monitor came with it. It's locked to my desk! LOL. Can't Even log into it yet. Although I do have it hooked through my KVM Switch. Have to use the 17" monitor for my other computer. Updates when I can log into it.

Samsung guilty of price fixing

Gee, I sure hated to read this. Guess we shouldn't bee too surprised anymore though.

Current Infosec News and Analysis

"Patch yesterday folks. So far we're aware that an MS05-051 exploit is in the hands of immunitysec Canvas customers - 'October 11, 2005: MS05-051 (MS DTC) Trigger for the bug in MS DTC on Windows 2000'"

2nd day exploits for Microsoft's October updates (details here).

As I was posting this, they updated the info especially for MS05-051 for Win2K:"The obvious thing is to apply patch MS05-051 on at least your Win2k systems. We do know the port 3372 scanning started in full force, likely in order to acquire target lists. If you can't patch, at least make sure port 3372 is closed. Windows 2000 does not come with its own host based firewall. But you can use IPSec policies to acchive the same effect. See this paper by David Taylor for details."

--MissM

Hewlett-Packard Company Recall of Notebook Computer Batteries

Courtesy of the Charlotte Observer. The link goes to the government Consumer Product Safety Commission (ok, I'm guessing on the acronym :P) I went to hpsupport.com and it wasn't on the front page, so ....
Here is the direct link to HP's battery pack replacement contact info:
Consumer Contact: For additional information, visit the HP Battery Replacement program Web site or call (888) 404-7398 between 7 a.m. and 7 p.m. CT Monday through Friday.

--MissM

Surprise! You're exposed - Security

I found this article fascinating and scary, at the same time.The bottom line, in my opinion, is social engineering and people's natural behavior is the biggest security risk. No matter what security processes you have in place, most of them are for inbound traffic, and the users of the system, turn out to be the biggest security flaw.

From Schneier.com, a $5M con "The man, described by detectives as the greatest conman they had encountered, convinced one bank manager to leave him €358,000 in the lavatories of a Parisian bar. “This man is going to become a hero if he isn’t caught quickly,” an officer said. “The case is exceptional, perfectly unbelievable and surreal.”
also from Schneier.com:
There are two bills in Congress that would grant the Pentagon greater rights to spy on Americans in the U.S.:
"The Pentagon would be granted new powers to conduct undercover intelligence gathering inside the United States -- and then withhold any information about it from the public -- under a series of little noticed provisions now winding their way through Congress."

In my opinion, if the information exists digitally, it will never be secure, and in terms of security, an ounce of prevention is worth a pound of cure, or months of hassle and, more than likely, thousands of dollars to correct.

Do you feel secure?

--MissM

Windows Vista Build 5231 Leaks

Neowin is reporting the next build of Windows Vista, due to be released to testers next week, has appeared on the Internet, apparently without permission.

New features and functions are discussed, though not in any detail.

Jack

Desktop search and malware: friend or foe?

The link is to a short article in The Register in which desktop search functionality is described both as an opportunity for malware authors to ply their trade and as a possible adjunct, or even a core function, to security services. After all; your anti-virus and the search utility are both scanning the same files, at least in the main. Some research is being performed on uniting the two scanning functions.

The article makes clear that right now, conventional anti-viral scanning applications are faster and more thorough, in part because search functions do not have access to kernel-level functions and processes. However; as search is more tightly integrated into operating systems, this can be designed in and it might make a whole lot of sense, both in terms of resource conservation (and related efficiencie) and real-time protection.

Food for thought

Jack

Microsoft, Yahoo Reach IM Partnership - MSNBC Wire Services - MSNBC.com

Well, its about time.

Toward a BSD Desktop

There are people who run one or another of the BSDs (stands for Berkeley Software Distribution, a true Unix) on their desktop. I did it, once, until my wife caught on.

Now, there's an organized effort to integrate the KDE desktop environment with BSD and a heap of applications. The selling point is security and performance. The tinkerers among us will no doubt flock to DesktopBSD, at least to give it a trial. (I'm already downloading it, though it's only in the release candidate stage of v1.0.)

Find a review of sorts, here.

Jack

Toward a Better Desktop

Novell has a new website and this one is really interesting because it addresses a pressing need.

Essentially, Novell is telling open source programmers that their users are not as technically proficient as they are and that more consideration for the user in the interface to applications needs to be given. This site allows coders to see videos of tests of user interfaces to see how they might be improved.

This is a BIG deal. One of the reasons Desktop Linux hasn't caught on is that the interfaces to both the operating system/utilities and associated applications is more geared to the technically competant user, rather than the general public. This has been improved a lot, over the years, but it is still a sticking point. A properly set up Linux desktop computer is easy enough to use, but it's not easily made that way by the average user (whoever that is).

Anyone interested in this sort of thing ought to check this out. I found it thought provoking, to say the least.

Jack

Baby Boomer Tech

From WCBS 880 NYC:
Ok, I'm not a big Kim you know who fan. However, I thought this was, since most of "US" are big time computers geeks, was amusing. Check it out. Lot of flash on the page but, you don't need flash to read the story.

Flaws Found in Security Software

This TechWorld.com article is about a flaw found in Kaspersky's Anti-Virus engine and mentions other flawed products as well.

For a while now, those in the know have been warning us that some, perhaps even many, of the products we use to secure our networks and otherwise keep us safe have major problems. This article highlights that well.

Jack

CNN.com - North Dakota Internet sellers may need license - Oct 10, 2005

This speaks for itself.

Windows Vista To Have 20 SKUs!!!

Bink.nu has a list of 20 different stocking units of Vista. Some of these are OEM only and won't see retailer's shelves. Even so, it's going to be confusing, especially for support people.

Jack

A Terrabyte of Home Storage

The Inquirer has a very affordable route to a TB of home storage. Click the link to see.

I know I harp on storage a lot. I hope it's not boring to you all. But we have GOT to have reliable backup and storage solutions that don't require a lot of work or attention. This details one such setup and the devices can be "daisy chained" together into a real array, if need be.

There are some problems, particularly with heat in small enclosures filled with hard drives. These are manageable, though; if not with this setup then with others. Check it out.

Jack

Google News Reader review

I tried the google newsreader, which is in beta (as a disclaimer), and my initial impressions are sucky! I foolishly loaded a fresh export of my sage rss feader to an opml file, which had 137 or so feeds, and it timed out several times, and was generally slow, though I was very pleased that they did accept imports, and I see they also support exports of your feeds. Sage does limit categories, as far as I know, so my feeds are one long sidebar in firefox, but when there's a new post, it turns the feed name bold, and it doesn't check often enough, but listing by site is key for me, because I have so many, and some are more critical to me (I've gotta BLOG, after all :) ).
Google newsreader shows all posts in a window, that only shows 9, and only increments the number of posts by 20, as you scroll down. You also get the option to sort by relevance or time, but not site! I can't deal with that, the default was relevance, but sorting by time doesn't make it any better. Did I mention it was slow? :)
When I realized how unusable it was for me, I decided to leave a few tech feeds in google newsreader, just to see how it changes, and delete the rest of the subscriptions. I started deleting feeds in firefox [Which you have to do ONE AT A TIME, after hitting edit, then unsubcribe, then wait for the page to be refreshed THEN it reloads your subscriptions], but it wasn't refreshing or working well, and so I decided to try it in IE. This worked better, but one feed for Scot's newsletter wouldn't delete the first 5 times I tried! All the rest were deleted as requested. The reason I am so fired up about it (length of post is one sign of excitement), it tooke me THREE hours to delete over 100 subscriptions. OH MY GOSH!!! Once feeds were deleted, the posts that had been retrieved stayed unread, and listed, I started clicking to mark all as read. When it said 160 of 180 (did I mention it only updates the item count in blocks of 20, as you scroll through?) I gave up, and decided to save y'all from the same pain, if I can. Like Dave Winer says did a human being even look at this???? I'm also planning on trying newsgator and bloglines, as other RSS news aggregators. What news aggregator/RSS news reader do you use?

--MissM (with a very tired clicking finger)
DAMN! thinking about how many clicks it took to clean up the feeds, to a more manageable, in this current interface, 160 + (3*100) = 460! Totally unacceptable!

As Peter said yesterday during the show about calling netgear and informing them of my issues with the SC101, as a public service, I will forward this blog post to the team at google's newsreader.

gada.be (Chris Pirillo)

Hot off the presses, Chris Pirillo's new search, looks interesting and hot off the presses, the announcement is only 3 hours, old.

"With "gada.be," you insert the query *AS* the subdomain! [Of course its pronounced, I think, "gotta be"]

* http://corpse-bride.gada.be/

* http://corpse.bride.gada.be/

Those are two different URLs, each with a different set of results. A dot between two keywords implies a quoted statement, whereas a dash implies the AND operator. Note, too, that you can easily change categories by adding the designated category slug to the end of the entire URL. Too geeky for you? Then you're thinking too hard about it. "

Very intriguing, I haven't tried it yet, but I'm getting ready to!

--MissM

Langa Letter: Testing 10 Windows 'Registry Cleaning' Software Packs > October 10, 2005

I'm always looking for info on Registry maintenance. I do think that cleaning the registry makes a positive difference. As usual, Fred shares his thoughts about as well as the results of his registry cleaning tests.

Blogger's being funky

Ok, my first post wasn't lost, but it was put under the previous post. even though the time stamp is later... I wonder what's up with that????
I noticed the times were messed up on another blog, too. Curiouser and curiouser...


--MissM

Yahoo has a podcast directory

Yahoo is doing a podcast directory now, you can use it for any mp3 player and can put the feeds in Ipodder, too, as far as I read. Here is the OnComputers podcast link in yahoo. It looks like its not updating very quickly. The last feed listed is 10/2/05, which is missing one show, we'll see how this pans out. No, I'm not trying this one, I'm exhausted! (see post below) I'm sticking with Ipodder Lemon for now.

--MissM

Fraud gold mine

A closed Blockbuster video left customer records, applications, credit card numbers, etc, etc in a clear trash bag in the STREET of NYC!!?!?!?!!?!???? Privacy is an illusion. :(

--MissM

OnComputers Radio show Podcast 10-09-05

This is the On Computers Radio show podcast for 10-09-2005. If you prefer, you can download the same file here via ftp.

Linux in a web browser

Try out linux in a web browser! Uses Java.

I tried it and the maximum number of users had been exceeded, but once the digg.com users get done, it'll work maybe :)

Very kewl stuff

--MissM

read more | digg story

AOL revises privacy policy

From the article:

"'Looks like a fairly standard privacy policy, with the usual weasel words and wiggle room where they say, 'We collect information about what you do on our service and we can use it for pretty much any business reason we can dream up,'' said Kevin Bankston, staff attorney at the Electronic Frontier Foundation."

If you are an AOL member you need to read this. Some of it is better, some of it is worse, and in the end all of it is up to AOL.