Tech News
9-30-04
RealPlayer Has Real Threat
Secunia has released a highly critical security bulletin regarding RealPlayer products: ìMultiple vulnerabilities have been reported in RealOne Player, RealPlayer, and Helix Player, which can be exploited by malicious people to compromise a user's system and delete files.
1) An unspecified error when running local RM files can potentially be exploited to execute arbitrary code.î
Products effected include: RealPlayer 8, RealPlayer 10, RealOne Player v2, RealOne Player v1, Helix Player 1.x/. and RealPlayer Enterprise.

Microsoft Release New Tools For Digital Cameras
Microsoft is trying to keep up with the Jonesís by releasing their response to Appleís iPhoto suite. According to CNET, MS has released new tools so that digital camera users can plug into their Windows box, finally.

Itsy-Bitsy Teeny-Weenie PC
After a long gestation period, the mini-PC is about to make itsí debut according to CNET. As small as a Pocket PC, this little package is a Windows XP computer in a wrapper smaller than the Big Mac you had for lunch yesterday.

Show Digital Pictures on TV Sans Computer
Sans Disk has a new media player that allows digital photographers to view their pictures on the TV screen without having a computer. Read more about this new product at the CNET web site.

Apple Announces New Perks for .Mac
Apple has released the following statement to .Mac users: ìWe're excited to announce that your .Mac membership now comes with 250 MB of combined .Mac Mail and iDisk storage. And, in another move designed to make life easier as traffic grows heavier and files grow larger, we've increased the maximum email message size to 10 MB.

If you haven't tried them yet, be sure to check out two additional enhancements recently added to .Mac Mail. There's a new online spell checker with a customizable dictionary available when you use your .Mac Mail account through a browser. And you can now use aliases as email addresses either for fun or as protection when you need to provide an email address but aren't entirely comfortable with the requester. If your concerns turn out to be justified, you can then simply remove the alias and create a new one the next time you face a similar situation.î The .Mac account really is a great value for Apple-ites.

Phishing Is More Than Sport
According to a report from CNET, phishing scams are netting thieves $500 million annually. Phishing is the latest scam used by crackers to obtain your vital information. They accomplish this task using many methods including spoofing your bankís web site.

What is Spoofing?
This definition of spoofing is supplied by ITSecurity.com/: Faking the origin; for example, forging mail headers to make it appear that messages originated elsewhere. One spoof incident reported by CERT involved messages sent to users, supposedly from local system administrators, requesting them to change their password to the new value provided in the message. These messages were not from the administrators, but from intruders trying to steal accounts. Web spoofing: Academics at Princeton University published a paper describing how easy it is for Web spoofers to produce a 'fake' site that can sit between the user and his or her intended destination. The spoofers could receive messages and then pass them on to the true destination, and could receive replies and pass them back to the user. In this way it would be possible to 'filter' valuable information, possibly without the parties concerned ever knowing that it had occurred.
9-29-04
Update for Ad-aware SE Personal Spyware Removal Application
Ad-aware has released an updated reference file for their free Ad-aware SE Personal software and PC owners that use this excellent spyware protection should download and install the new update ASAP. You can update your application by opening Ad-aware and selecting the check for update option. Then check your computer for spyware and run the AVG antivirus software when youíre done with spyware removal. And if you havenít yet installed Windows XP Service Pack 2 (SP2), read the advice and follow the link below.

Advice For Installing SP2
Windows Expert Barb Bowman has advice on how you can install Microsoftís SP2 without increasing your frustration. Remember to remove spyware and backup before beginning this task. Visit the Microsoft Support site to learn more about updating to SP2.


FreeBSD Tricks
BSDatawork.com has a bagful of tricks for FreeBSD users and you can learn more about Usermin and OpenCD by visiting their web site.

Mozilla Has New Alpha Release for Multiple Platforms
Mozillla.org announced the release of Mozilla 1.8 Alpha 4 and if you like to be the first on your block to try a new browser, visit Mozilla.org to download this new browser available for multiple platforms.

Error 1402 or 1406 When Installing iTunes
According to Appleís web site, you should take the following steps when you receive a ëError 1402 0r 1406í message:
Step 1
Thoroughly remove iTunes . Tip: If you have a hard time removing iTunes you may need to download and use the Windows Installer CleanUp Utility  from Microsoft.
Step 2
Delete any files in: C:\Documents and Settings\<your user name>\Local Settings\Temp Tip: You may have to show hidden files and folders to see this folder.
Step 3
Download and install iTunes for Windows by clicking on the link above.

FAQ About Appleís iChat
If you want to start using Appleís iChat, visit their support site for the FAQís about iChat. Want to find out why friends using AIM canít chat, surf to the Apple Support site to learn more.

What is Chat?
Is everyone doing it but you because youíre not sure what ëchattingí is, then read on; According to Sympatico, ìChat refers to any live discussions conducted on or using the Internet, usually between more than two persons using their keyboard to communicate. Internet chat requires a chat server and a chat client, the former usually provided by an Internet service provider (ISP) and the latter is used by the persons chatting. Some examples of chat software are IRC, iChat, and Web chat that uses your Web browser.î

9-28-04
Remove Spyware, Backup, Then Install SP2
Remember to remove spyware from your computer before attempting to install SP2 according to Microsoft. Another necessary step is to backup your files, pictures, and music. Microsoft offers advice on how to perform the backup portion of these suggestions at the MS Support site. For spyware removal, Microsoft recommends you try Ad-aware SE Personal, Spybot S&D, or both of these free programs.

Newest Trojan Not a Pretty Picture
CNET has more information about the latest flaw that can allow a Trojan horse to infect a computer through pictures. As usual, the Trojan creates a backdoor for the bad dudes to control your computer or worse, steal sensitive information. Another CNET article describes the exploitation of this flaw as ìimminentî.

 

McAfee Offers New Security
McAfee has new features for their spam prevention service and according to CNET, it can help customers ward off the evil phishing attacks.





Free Weather Dock for Mac
MacDailyNews has the scoop on a free Weather Dock for Apple owners and you can download your own weather person by visiting the MacDailyNews web site.


Open Source Updates
Secunia issued these updates for open source users: Conectiva Linux 9, Debian GNU/Linux 3.0, Linux Kernel 2.6.x/Linux Kernel 2.4.x/.


Mac Java Update
Apple has released an update for Java and Mac owners can download and install the update by clicking on the Apple logo in your toolbar, then select Software Update and follow the prompts.

What is Java?
What the heck is Java? According to Simplythebest.net, ìJava is a network-oriented programming language invented by Sun Microsystems that is specifically designed for writing programs that can be safely downloaded to your computer through the Internet and immediately run without fear of viruses or other harm to your computer or files. Using small Java programs (called "applets"), Web pages can include functions such as animations, calculators, and other fancy tricks. We can expect to see a huge variety of features added to the web using Java, since you can write a Java program to do almost anything a regular computer program can do and then include that Java program in a web page.î

PC World on iMac: We Like It
PC World has a review on the latest release from Apple under the iMac banner and they like it, they like it! The review is consistent with the others we have read, and cite the speed, size, the cool looks, and temperatures. Read all about it at PC World and if you want to order one from Amazon, click on the ad and help support this web site.

9-26-04
Apple Announces PowerBook Display Solution
PowerBook owners that have observed faint white spots on their displays should visit the Apple Support site to receive directions on how to get this issue resolved. PowerBooks effected are those with serial numbers in the range: V7334XXXXXX to V7345XXXXXX and QT331XXXXXX to QT339XXXXXX.

Remove Spyware, Then Install SP2
According to a report in the Washington Post, Microsoft is warning customers to first use spyware removal tools like Ad-Aware and Spybot Search & Destroy before attempting to install the Service Pack 2 update for Windows XP. Failure to do this first can result in an unsuccessful update. This article was originally published on September 3, 2004. After numerous calls to Leo Laporte, The Tech Guy on KFI regarding problems installing SP2, we were reminded of this recommendation. Here is the link to more on this issue from the Microsoft Support site.

Become the Master of Your Email
Microsoft has advice on how to take control of your email. They provide you with the tips you need to keep your head above the flood of emails bombarding your inbox and you can visit the Microsoft Office site to learn more about these tips.

Two Linuxes For Newbies
PC Worldís Matthew Newton has a review of Xandros Desktop and Lycoris Desktop/LX, ìtwo Linux distributions geared toward folks who aren't gearheads.î Visit PC World to learn if Matthew gives the thumbs up or down to these two distros.

Updates for Open Source
Secunia has issued update or security bulletins for the following open source systems: Gentoo Linux 1.x (1,2,3), Fedora Core 2 (1,2), Debian GNU/Linux 3.0, Conectiva Linux 9

Leo Says: Get a Router and Get Protected
Leo Laporte also recommends that listeners get a router even if they only have one computer. Why? Because it provides you with NAT protection. What is NAT protection? Read about that below.

What is NAT?
What is NAT? NAT is the protection you get when you have a router and according to MSG.net NAT is an: ìacronym for Network Address Translation, a system included with many routers and some operation systems where many hosts "behind" the router, or firewall host are translated to a single real IP address. Fundamentally, NAT is great for any use where the inside client opens a connection out to a remote site (web browsing), or where the two ends rendevous on a selected, random port (IRC's CTCP, FTP), but problematic where a specific port is used and more than one of the translated machines need to accept new connections in from outside, such as in web serving, online games, and other servers.î
9-24-04
Mac Tip
If youíre an Apple-head tired of clicking on F9 to uncover your hard drive icon to open another application, use this cool tip: click on your hard drive icon and then drag it into your dock in the section adjacent to your trash can. Next time you want to open a new application, you can just click on the hard drive icon in your dock and select Applications. This tip was one of the many great suggestions we come across daily in our efforts to make your computing life easier, but we failed to note the source, and to that genius, we humbly apologize.

Order SP2 on CD
If you are still stuck using dial-up service and are reluctant to update to Microsoft Service Pack 2 for Windows you can keep the phone line open by ordering the update on a CD from the Microsoft Support site. The SP2 update does provide a greater measure of protection and you should update to protect your computer and prevent future headaches for the computer owner. We ordered one just to make simple system restores easier, for the more technically inclined, read the suggestion below.

IT Pros and Neighborhood Geeks Have Options
If you are the IT Pro for your business or the neighborhood geek, you have options beyond the suggestion above; Microsoft offers a download for PC users that need to update multiple computers. Visit the MS Support site to learn more about this choice.

Speaking of Geeks!
The Tech Guy on KFI, Leo Laporte is the resident Geek at KFI640Am and he is ready to answer your questions from 12-3pm PDT on Saturdays and Sundays. Leo is a multiple platforms master and was the inspiration for this web site. In the Los Angeles area you can hear Leo on AM640, and the rest of the world can listen live on the Internet by visiting Leoís show notes web site and following the links to the radio show.

Linux Tip
You can learn how to check a Linux ISO image by visiting the LinuxISO.org web site. Why would you care? If you are about to spend the time it takes to install a new operating system, it is a good idea to confirm that the OS you are about to install wonít make toast of what you are ìupgradingî from.

What is a Mirror Site?
Open source people know what a mirror site is, do you? According to Pagetutor.com, ìDue to the popularity of some FTP and Web sites, mirror sites came into existence. They are areas on a computer that "mirror" or contain an exact replica of the directory structure of another computer. If you have trouble getting connected to an FTP site, for example, because of the high amount of traffic, you can usually connect to a mirror site that contains the same information on a different computer. Mirror sites are usually updated once a day.î

9-23-04
The Secrets Out
The code to open a JPEG graphics files on Windows computers is circulating on the Internet according to a report in CNET. PC users that havenít installed the latest updates of XP and Office could be at risk for a new round of security attacks. Use the ìcheck for updateî feature if you are a Windows person.

USB Flash Drive=Cool
Do you have a flash drive? We have fallen in love with ours and we arenít alone according to a story from Tech Knowledge. We have been using it to transfer files from our iBook to the PCs at school and vice versa. It is often easier to do the same at home between PCs and Macs. We have a 128 MB flash drive, but they come in a variety of sizes with prices to match. You can also use flash drives as a storage tool or to transfer files from an older computer not capable of networking (no Ethernet connection) providing it does have a USB connection.

Burn From Your Finder, Baby
The Apple Pro Tip of the Week provides you with the directions you need to burn a CD from the finder. The task is simple, but many PC users making the switch might find the process so easy, it could be confusing. Practice burning a CD while backing up some of your important files, you might be able to pat-yourself-on-the-back later.

Does XP2 Affect Gamers?
Does Microsoftís Windows XP Service Pack 2 affect gamers? Well, it can make your life more complicated if you like the multiple-player games. Learn how to make your gaming experience fun again by reading the article by Windows XP Expert, John Durham, Jr.

Open Source Updates
Secunia has issued the following security updates f0r open source operating systems:
Conectiva Linux 9 (1,2), Gentoo Linux 1.x (1,2), Mandrake Linux 9.x/10.x (1,2,3), Slackware Linux 9.1, and Debian GNU/Linux 3.0/.


What is a Cookie?
No Peanut Butter or Chocolate Chips here, just the computer variety of cookies; and Media-Awareness has this explanation of a cookie, ìA cookie is a file sent to a web browser by a web server to record one's activities on a website. For instance, when you buy items from a site and place them in a so-called virtual shopping cart, that information is stored in the cookie. When the browser requests additional files, the cookie information is sent back to the server. Cookies can remember other kinds of personal information --your password, so you don't have to re-enter it each time you visit the site; your preferences, so the next time you return to a site, you can be presented with customized information. Some people regard cookies as an invasion of privacy; others think they are a harmless way to make websites more personalî.

Free Anti-Virus, Spyware, and Firewall Protection
Some of the best things in life are free, and that cliche applies to anti-virus, spyware, and firewall protection too. Scroll down to the bottom of this page to find the links for some to the best protection you can find.

9-22-04
Safari Debugger Tool
We have shared the Safari Debugger Tool with you before, but we recently discovered an added bonus to this cool freeware program, it allows you to save your bookmarks. After recently loosing a group of valuable bookmarks while updating Mozilla, we can appreciate some of the simpler applications of this multifaceted tool.

Bad Guys: 100,000
PC Owners: Headache
Thatís a grim line score by any measure, but according to a report by the BBC the security firm McAfee has recorded the 100,000th security threat. The Sdbot bug received the dubious honor of achieving this milestone that includes Trojan horses, worms, viruses, adware, and spyware. New or recycled variants of viruses number 25 ñ30 daily and the BBC reports that most of the computers affected are Windows PCs. Make sure you keep your PC updated and get yourself behind a router!

Microsoft: Goal = 100 Million Downloads of SP2 in 2 Months
Microsoft is ratcheting-up delivery of their Windows XP Service Pack 2 update in an effort to attain their goal of 100 million downloads in two months according to a story carried by CNET. Wow! 100 million times the cost of Windows XP Home or Pro (even at wholesale) = a-whole-lot-of-dough!


What You Always Wanted to Know About Linux, And You Donít Have to Ask
If you would like to learn more about Linux but have been afraid to ask just visit our new favorite web site Linuxiso.org/. This web site not only has links to multiple open source operating systems, it has a good introduction for Linux newbies. Learn more about Linux by visiting the Linuxiso.org web site.

Open Source Updates
Secunia has released update bulletins for the following open source systems: Debian GNU/Linux 3.0, Fedora Core 1/2, OpenBSD 3.x/, and Gentoo Linux 1.x/.

OpenOffice New Release
OpenOffice announced the availability of OpenOffice 1.3.3 RC and this freeware office tool is compatible with multiple platforms. We have directions on installing OpenOffice on our How-to page. Give this application a spin; you might like it!

What is OpenOffice?
According to their web site, ìOpenOffice.org is both an Open Source product and a project. The product is a multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, and drawing program, with a user interface and feature set similar to other office suites. Sophisticated and flexible, OpenOffice.org works transparently with a variety of file formats, including those of Microsoft Office.
Available in 25 languages with more being constantly added by the community. OpenOffice.org runs stably and natively on Solaris, Linux (including PPC Linux), and Windows. Additional ports, such as for FreeBSD, IRIX, and Mac OS X, are in various stages of completion.î

9-21-04
Sync Your Mac
If you need to sync your Apple to a cell phone, Palm, iPod, or .Mac then you should check out iSync available from the Apple web site. You can also sync your iCal schedule, address book and more with this cool tool for Mac-Heads.

Time Zone Help
Do you have a friend or relative that is in a different time zone? Are they always calling you in the middle of the night? A solution is available and the price is right, free. Microsoftís Time Zone allows PC users to view the date and time in several time zones; suggest that they visit the Microsoft web site and install this free program soon.

Open Source Updates
The following open source operating systems have updates: Gentoo Linux (1,2,3), FreeBSD 4.x /5.x/ and Debian GNU/Linux 3.0/.

What is a GNU?
What is GNU? Sagus gives the following explanation for GNU, ìGNU stands for GNU's not UNIX and is thus a recursive acronym (and unlike the animal name, the "G" here is pronounced). At any rate, the GNU project is an effort by the Free Software Foundation (FSF) to make all of the traditional UNIX utilities free for whoever wants them. The Free Software Foundation programmers know their stuff, and the quality of the GNU software is on par with the best produced commercially, and often better. All of the GNU software can be downloaded for free or obtained on CD-ROM for a small service fee. Documentation for all GNU software can be downloaded for free or obtained in book form for a small service fee. The Free Software Foundation pays its bills from the collection of service fees and the sale of T-shirts, and exists mostly through volunteer effort. It is based in Cambridge, MA.î

9-20-04
Livestrong Bracelet Update
The ultra-popular Livestrong bracelets are again available from the Lance Armstrong Foundation Store. The bracelets will ship in 3-4 weeks. The bracelets also come in youth sizes for the younger and smaller crowds. This foundation, created by six-time Tour de France winner Lance Armstrong, is performing a fantastic service for those battling cancer and for those who love someone battling cancer. Join in the race to find a cure for cancer(s) and click on the link above to order your Livestrong bracelets now.

Ad-aware Offers Free Upgrade
If you use Ad-aware, and you should, it is time to upgrade if you are using Ad-aware 6.0 or lower. Lavasoft has released their latest version, Ad-aware SE and you should visit Lavasoft and install the upgrade then check your system for spyware with this excellent free software. Our system was clean with 6.0, and we installed SE immediately after the clean check and had 30 little data mining buggers post-SE check. Make sure you find the correct Lavasoft, use our link or make sure that the URL is www.lavasoft.de/.

More on Open Source Security Issues
Some of the recent security issues plaguing the Open Source world are detailed by eWeek in an article published on Friday. Visit eWeek to learn more about the problems.

Make Sure Office Software is Updated
Leo Laporte, The Tech Guy on KFI reminded listeners this weekend to update not only Windows XP but Office software, too. You can read about the issue in Leoís show notes and find the links to many of the other topics The Tech Guy covered this weekend. Listen to Leo live at AM640 in L. A. or on the internet on Saturday and Sunday from 12-3 pm PDT.

Learn About Mac Fonts
Apple has a tutorial available detailing font management for your Mac. Seasoned pros, Mac newbies, and all bodies in-between will learn something new from this quick and painless lesson available as a movie.

Excellent Site for Open Source
We discovered a great site for open source users or wannabes, LinuxISO.org/. The site has links to most of the open source operating systems available. They also have links for newbies including: Introduction to Linux, ISO Image FAQ, and How to burn an ISO.

What is a LinuxISO?
What is a LinuxISO? Linuxiso.org defines it as, ìA Linux iso is a file containing a cdrom disk image of a Linux distribution. This cdrom disk image is an exact copy of a Linux distribution on a cdrom. Think of it as the equivalent of a screen capture, but instead of capturing the information on a screen, this image captures all of the information on a particular Linux distribution's cdrom. When burned as a disk image, the .iso file is turned into a duplicate cd of the original cd. If burned as a file, instead of a disk image, the cd becomes a copy of the downloaded .iso file, and not a bootable cd with accessible files and directories.î

9-18-04
More Security Woes for Microsoftís Internet Explorer
Secunia has more bad news for PC users; a new flaw has been discovered in all of the Internet Explorer versions for PCs. We would advise you use Mozilla, but that advice comes with a qualification, read the article below.

More Mozilla Problems
All Mozilla and Firefox versions prior to Firefox PR and Mozilla 1.8 have security flaws according to Secunia, and they can be the target of browser hijacks. Visit Mozilla.org and update your browser to the most recent version today.

Open Source Have Updates, Too
Secunia has released security bulletins and updates for the following systems: Gentoo Linux 1.x (1,2,), OpenBSD 3.x/, Mandrake Linux 9.x/, SuSE Linux 8.x/, SuSE Linux 9.0/, SuSE Linux 9.1/, SuSE Linux Desktop 1.x/ (1,2), Debian GNU/Linux 3.0/.

Microsoft: Where Did You Get Your Copy of XP?
Microsoft is initiating a new program for visitors to their web site, a voluntary check to determine if the copy of Windows XP you are using has been pirated. According to the report in CNET, Microsoft will still provide downloads to those opting to not cooperate with the ëvoluntaryí survey, and MS is only trying to provide a better customer experience for legitimate customers. Okay, and profit margins wouldnít enter into the thought process at all.

Apple Labels, Advice For You
Apple users that arenít using labels can learn more about this handy organization tool available to Mac users. Visit the Apple Tip site to learn more about the joys of label use.

What is a Worm?
Is a worm the same as a virus? According to the University of Alberta, a worm is ìSimilar to a virus in that it makes copies of itself, but differ in that it need not attach to particular files or sectors at all. Once a worm is executed, it seeks other systems - rather than parts of systems - to infect, then copies its code to them.î
9-17-04
More Security Issues for Microsoft
Microsoft is confirming a security risk associated with JPEG images according to an article by PC World. This is a confirmation by the source of the problem reported by Secunia and previously cited on Wednesday; to learn about the issue from the horseís mouth, read Microsoft Security Bulletin MS04-028.

Apple Users Have iChat Update
MacMinute has the scoop on another Apple update, this one for iChat. Visit the MacMinute web site to learn more about the latest update for Mac Heads or click on the Apple on your toolbar and select Software Update.

Can iTunes, iPod, and Windows SP2 Get Along?
If you are having a problem convincing your iPod and iTunes to function with Microsoftís Windows XP after updating to SP2, visit the Apple Support site to find a remedy for the all the ails you. We can all get along if we work together!

More iPod Stuff: iPod Gets Sleepy After 2 Minutes
MacFixIt is reporting a problem with iPods going into the sleep mode after two minutes for no apparent reason. One suggestion for a cause is an unintentional double-clicks on the play button; possibly caused by one-to-many trips to the coffee pot?

Open Source Updates
If you use an Open Source operating system, it is safe to say you need to visit your favorite web site or mirror for an update. Secunia has released the largest number of update bulletins for OS users we have forwarded to you, hang on:
SuSE Linux 9.1, SuSE Linux 9.0, SuSE Linux 8.x
Fedora Core 1/2 (1,2,3)
Gentoo Linux 1.x (1,2)
Mandrake Linux 9.x (1,2,3,4)
SuSE Linux Enterprise Server 8
SuSE Linux Desktop 1.x
SuSE Linux 9.1
SuSE Linux 9.0
SuSE Linux 8.x
Debian GNU/Linux 3.0 (1,2,3)

Heís Back
If the weekend is approaching then Leo Laporte, The Tech Guy on KFI is getting prepared to answer all your tech questions from 12-3pm PDT on Saturday and Sunday on KFI640 in the L.A. area, or you can listen to the Internet steam by visiting Leoís show notes.

What is a JPEG Image?
JPEG images are the subject of the lead story today, so what is a JPEG? Activeshare.com has this interpretation,
ì(pronounced jay-peg) stands for Joint Photographic Experts Group. JPEG is a color image compression technique that reduces file sizes by eliminating redundant or unnecessary image data. Many digital cameras automatically save images using the JPEG format. JPEG and GIF (Graphics Interchange Format), another compression method, are the most commonly used image file formats on the World Wide Web.î

9-16-04
Mozilla Needs You
Mozilla has released Firefox PR, and they are looking for a few good volunteers to try out the new version and use their new email client. They want you to join the migration away from Internet Explorer and discover the joys of tab browsing and all the other great features found with this free browser. Visit Mozilla.org to download Firefox PR available for multiple platforms and their users.

More On Microsoft Security Flaws
CNET has more information on our lead story from yesterday detailing security flaws with most of Microsoftís software.

Install Those Critical Windows and Office Updates
So how can you protect the PC you love from the evils of the story above, surf on over to the Microsoft Support site and install the latest critical Windows and Office updates, then you can relax; until the next round of crack attacks comes streaming along the net.

The Old ì-39î Error Message Messes With Macs
Apple users that receive a ì-39î error message have an incomplete file problem, but it isnít fatal and help is just a click away; just visit the Apple support site for help on resolving this downloading issue.

Mozilla Flaw Fixed
Late Wednesday afternoon, CNET confirmed another security issued we had relayed from Secunia previously; Mozilla users should visit Mozilla.org to update their browser. Ten security flaws have been addressed with this fix, so protect yourself and your computer by updating today.

Updates for Open Source Users
Secunia issued update bulletins for Debian GNU/Linux 3.0, Gentoo Linux 1.x (1,2), and Mandrake Linux 9.x/.

What is an Email Client?
You receive and send it all the time, but how do you read email? You use an email client and StudentComputing defines the same as, ìAn application used to send, receive and view e-mail. Some common examples include Outlook, Outlook Express, and Netscape Messenger.î Other email clients include Thunderbird, Mail, and Mailsmith.

9-15-04
Security Flaws Discovered in Multiple Microsoft Products
Secunia has issued the following ìhighly criticalî security advisory for a plethora of Microsoft products. ìDESCRIPTION: The vulnerability in caused due to a boundary error within the GDI+JPEG Parsing component (Gdiplus.dll). This can be exploited to cause a buffer overflow by tricking a user into viewing a specially crafted JPEG image with any application using the vulnerable component for JPEG image processing.
  Successful exploitation allows execution of arbitrary code with the privileges of the user.
The following products are affected:
 Microsoft Windows XP and Microsoft Windows XP Service Pack 1
 Microsoft Windows XP 64-Bit Edition Service Pack 1
 Microsoft Windows XP 64-Bit Edition Version 2003
 Microsoft Windows Server 2003
 Microsoft Windows Server 2003 64-Bit Edition
 Microsoft Office XP Service Pack 3
 Microsoft Office 2003
 Microsoft Project 2002 Service Pack 1 (all versions)
 Microsoft Project 2003 (all versions)
 Microsoft Visio 2002 Service Pack 2 (all versions)
 Microsoft Visio 2003 (all versions)
 Microsoft Visual Studio .NET 2002
 Microsoft Visual Studio .NET 2003
 Microsoft .NET Framework version 1.0 SDK Service Pack 2
 Microsoft Picture It! 2002 (all versions)
 Microsoft Greetings 2002
 Microsoft Picture It! version 7.0 (all versions)
 Microsoft Digital Image Pro version 7.0
 Microsoft Picture It! version 9 (all versions, including Picture
    It! Library)
 Microsoft Digital Image Pro version 9
 Microsoft Digital Image Suite version 9
 Microsoft Producer for Microsoft Office PowerPoint (all versions)
 Microsoft Platform SDK Redistributable: GDI+
 Internet Explorer 6 Service Pack 1
 Microsoft .NET Framework version 1.0 Service Pack 2
 Microsoft .NET Framework version 1.1

NOTE: Office 2003 Service Pack 1, Visio 2003 Service Pack 1, and
Project 2003 Service Pack 1 are NOT affected. Also note that Windows
XP Service Pack 2 is NOT vulnerable, but systems running this version
may still be affected if a vulnerable Office, Visio, or Project
application is installed.
NOTE: Systems may also still be vulnerable if an installed third
party application has installed the vulnerable component and uses it
for JPEG image processing.

SOLUTION:
Microsoft has issued patches (see original vendor advisory).î
P.S. If you have updated, youíre Golden!

Mozilla Security Problems, Too
Secunia issued a ìhighly criticalî bulletin for Mozilla users and it affects all Mozilla browsers from 0.x to 1.7x, Mozilla Thunderbird 0.x and Mozilla Firefox 0.x/. The problem has been fixed with Mozilla 1.7.3, Firefox 1.0PR, Thunderbird 0.8/.

Let XP Back You Up
Windows XP has the ability to back up your information, but you have to give it a prompt. To learn how to have XP back up your important data, visit the Microsoft Support site.

Error 1402 or 1406 Message and iPods
These are the directions from the Apple Support site for iPod owners that receive an Error 1402 or Error 1406 message,

ìFollow the steps below if an error message appears when you try to install iTunes for Windows. The error code is either 1402 or 1406.
 Step 1
Thoroughly remove iTunes. Tip: If you have a hard time removing iTunes you may need to download and use the Windows Installer CleanUp Utility from Microsoft.
Step 2
Delete any files in: C:\Documents and Settings\<your user name>\Local Settings\Temp  Tip: You may have to show hidden files and folders to see this folder.
Step 3
Download and install iTunes for Windows.î

Mac Update, Update
We have installed the latest version of Appleís update released, 2004-09-07v1.1 and all is well on the G3s and G4s. Donít forget to repair disk permissions when you install an update.

What is an Upload?
An upload is different from a download; how, you ask? According to SBC.com, ìUpload is the opposite of ëdownload.í Downloading is when you receive something--a message, data, whatever--from another computer, and uploading is when you send something to another computer.î Got it? Good!

9-14-04
Revision of Mac Update
Apple has released a revised update, Security Update 2004-09-07 v1.1 and it corrects a flaw in Safari and lukemftpd according to MacMerc. We havenít installed this latest version, weíll keep you posted.

Open Source Updates
Gentoo Linux 1.x, Fedora Core 1/2, and Conectiva Linux 9 are the subjects of security bulletins or updates from Secunia.

New Worm Talks to You
CNET reports that a new worm talks to you as it is infecting your Windowís PC. According to CNET, XP users hear this message after the Windows boot-up tune, ìHow are you. I am back. My name is Mr. Hamsi. I am seeing you. Haaaaaaaa. You must come to Turkey. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule gule.î


Firefox Released
Mozilla.org has a Preview Release version of Firefox 1.0 available for users of multiple platforms, and Windows, Mac, and Linux users will all find their favorite flavors available at the Mozilla.org web site. Show your support for the Mozilla organization and purchase one of their t-shirts.
 

New Digital Pentax Reviewed
Gizmodo has a review of the Pentax Optio SV, and you can read about this pocket-sized 5.36 megapixel digital camera at the Gizmodo web site. Hint: They like it.

What is Mozilla?
We talk about Mozilla constantly, so what is Mozilla? According to GoCommunitactions, Mozilla is defined as, ìThe original name for Netscape's browser, now called Navigator. Some people claim that the term is a contraction of Mosaic Godzilla (e.g., Mosaic killer), since Mosaic was the number one web browser at the time Netscape began developing its product. The term Mozilla is still used by many web developers and appears in server log files that identify the browsers being used.î

9-13-04
Tips on Chat Room Etiquette
If you are a news group or chat room newbie, Mac Tips and Tricks has an article by Christopher Breen of MacWorld detailing Internet etiquette and faux pas you should avoid.

Missing iPod on Windows Desktop
If your Windows PC isnít able to recognize your iPod, donít despair. Just visit the Apple Support site to read about the steps to take to make your iPod and PC sing in perfect harmony.

Same Song, Different Verse
If your iPod doesnít show up on the Mac desktop, Apple provides support for you too. Just visit the Apple support site to ascertain why the iPod is AWOL.

Update-Updates for Multiple Platforms
If you havenít yet updated you should. The SP2 update for Microsoftís Windows XP is probably a safer alternative for most home users that arenít protected by a router and current with all the XP critical updates.
Mac users should also update their OS to 10.3.5/. The safety enhancements make the small likelihood of conflicts worth the risk.
AVG Free has recently issued a new virus definition package and you should update your antivirus ASAP.

Missing Leo=Not Knowing
If you missed Leo Laporte, The Tech Guy on KFI, you missed out on learning about web design tools, dialer viruses, and web sites for obsolete drivers; and that was just from Sunday show. Donít miss out next week, listen from 12-3 pm PDT on Saturday and Sunday live in the Los Angeles area on AM640 or on the Internet feed.

Windows Media Player 10
PC World loves it, Leo Laporte gave it the thumbs up, and now you can migrate to the next generation of media experiences in the world of Microsoft by downloading Windows Media Player 10 from the MS web site.

Open Source Updates
Secunia Security issued the following security bulletins and update notices:
Gentoo Linux 1.x
Open Office

What is a Trojan Horse
Is a Trojan horse the same as a virus? Not according to CIO.com; they define a Trojan horse as, ìA malicious program that disguises itself as a beneficial or entertaining program but that actually damages a computer or installs code that can counteract security measures (perhaps by collecting passwords) or perform other tasks (such as launching a distributed denial of service attack). Unlike a computer virus, a Trojan horse does not replicate itself.î

9-11-04
Back Up Your iTunes Library
You really should back up your iTunes library in the event that something unexpected occurs (like a hard drive malfunction) and the Apple Support site provides information on protecting your files with iTunes 4.

Problems For Dial-up Users Post-Mac Update
MacFixIt reports that some Apple users with dial-up Internet service have experienced problems after installing the latest update from Apple, 10.3.5; visit the MacFixIt web site for suggestions on working around this annoyance.

More Microsoft Updates Coming Soon?
According to a report in InternetnetNews.com, Microsoft will be releasing two more security updates in the upcoming week. One has been given a critical rating to repair wide range of Microsoft software including Office and others.

Linux Instead of Pocket PC?
Yes, you can run Linux instead of Pocket PC; learn how by visiting RootPromt.org and follow the link to the IBM web site.

Weekend Tutorial
Leo Laporte, The Tech Guy on KFI is offering free computer tutorials on all things with a chip and you can learn by listening to KFI live in the Los Angeles area or on the net from 12-3pm PDT.

What is a Browser?
What is a browser? Kansas State University provides the following definition: ìGenerally refers to software used to access the Internet and read its information. Netscape was the most popular Internet browser for many years, but Microsoft's Internet Explorer now has a slight lead. Mosaic was the first good browser, but is now obsolete. In essence, browsers read HTML files and convert the information to what you see on the screen. Browsers can read HTML files and graphics, even when not connected to the Internet. Just type the file specification of what you want to read in the URL box.î
9-10-04
MyDoom Offspring
New varieties of MyDoom have been detected by security experts according to a report in CNET. Like previous forms of MyDoom, it prevents the infected Windows PC from receiving updates from antivirus sites. Security experts worry that with this flurry of variants occurring, a more powerful virus is forthcoming.

Virtual PC 7 for Mac
Mactopia has the top ten FAQs regarding Virtual PC 7 for Macs at the Mactopia web site. You can also pre-order Virtual PC 7 or upgrade to Office 2004 Pro and get VPC 7 included in the package.

$50 Off for .Mac Members
Members of .Mac can save $50 off the purchase of Contribute 3 Advanced Web Publishing from Macromedia. Open your .Mac site to learn more about this offer.

Installing Gentoo
The Linux Gazette has an article written by Mike Orr regarding his experiences when he migrated to Gentoo. A companion article from April found at OS News is also worth reading if you are interested in Gentoo.

Upgrade or Update?
What is the difference between an upgrade and an update? According to Visonsofadonai.com an upgrade is, ìA newer version of a program intended to seamlessly add new features to an existing piece of software without having to purchase and install an entirely new edition. Upgrades typically cost less than buying an all-new copy of the software (most are nominal, or even free). Also refers to reconfiguring a computer system to increase its computing poweró by installing new hardware components.î
By comparison an update is described by Softwareshelf.com as, A new release (or version) of a piece of software that is genersupport.softwareshelf.com/dictionary/default.aspally understood to be an error correction release and does not contain new functionality. (as opposed to Upgrade) Updates usually are numbered by a change in the digit after the decimal: V1.1 to V1.2/.î

9-9-04
Free iTunes Download
The free download of the week from Appleís iTunes Music Store is ìCome Aroundî by Marc Broussard from the album Carencro. Visit the iTunes Music Store for your free download.

Apple Update
The reviews from most Apple users have been of the positive variety regarding the latest update for the Panther operating system; the issues thus far have been limited to Safari. Accelerate Your Mac carried several threads regarding Safari rendering problems post-update; the issue has been resolved and Apple wasnít at fault.

Secunia on Apple Security
Secunia issued a security bulletin regarding the Apple update and you can learn more about which areas the patch was applied to by visiting the Secunia web site.

Tips to Handle Spam
It continues to clog up the Inbox and Microsoft has tips on how to stem the tidal wave of unwanted e-mail. Visit the MS Support site to learn more about the best ways to avoid the spam slam and how to avoiding being spoofed.

Old Flames Create New Pains
CNET reports that web sites that help old flames reignite are causing an increase in the divorce rates in England. Even when your old flames have new names, you can still get yourself in trouble with the marvels of modern technology.

New Alternatives for Microsoft Music Lovers
Microsoft is trying to catch up with the Jonesí when it comes to digital music offerings, but PC owners can experience the latest MS has to offer by surfing to Microsoftís More Choices web site.

Open Source Updates
Secunia has issued the following security bulletins or update notices for open source users:
Mandrake 9.x (1,2)
Gentoo Linux 1.x (1,2,3,4)
Fedora Core 1/2 (1,2)

Review of new iMac
Weíre not the only ones drooling over a new iMac, just check out this review from The Ageís Garry Barker on the latest Apple to fall from the tree.

What is a DoS?
According to MarketConscious.com DoS is, ìOn the Internet, a denial of service (DoS) attack is an incident in which a user or organization is deprived of the services of a resource they would normally expect to have. Typically, the loss of service is the inability of a particular network service, such as e-mail, to be available or the temporary loss of all network connectivity and services. In the worst cases, for example, a Web site accessed by millions of people can occasionally be forced to temporarily cease operation. A denial of service attack can also destroy programming and files in a computer system. Although usually intentional and malicious, a denial of service attack can sometimes happen accidentally. A denial of service attack is a type of security breach to a computer system that does not usually result in the theft of information or other security loss. However, these attacks can cost the target person or company a great deal of time and money.î

9-8-04
New Update for Panther
Apple has released a new update for Panther that includes security fixes and we have downloaded the patch on our iMac G3; after restart, we repaired disk permissions and have not detected any issues with Safari, Office products, and Mozilla. MacFixIt has no reports on problems created by the update at this time, but we would recommend waiting to update even with the inclusion of the security updates given the recent track record of large and complex patches that include security fixes (they donít always work as planned, in multiple platforms). You can access the update by clicking the Apple in your toolbar and selecting Software Update.

You Won the Lottery---Scam
Sophos Security is reporting a new hoax virus that claims you have won the ìLottery Winners Internationalî big prize and are now going to be rich and famous if you just contact a certain agent. Donít do it! Read more about this issue at our Sophos web page.

Firewalls and Windows XP SP2
Windows IT Pro has an excellent article regarding the use of third-party firewalls with the Windows XP Service Pack 2 update. Remember that a router provides an additional layer of protection, and The Tech Guy on KFI, Leo Laporte recommended using a router and XP firewall post-SP2 update.

Update AVG Anti-Virus
Time to update your AVG Free Anti-Virus definitions and check for any evil viruses lurking inside your PC. To update your definitions, open AVG and select Service; then click on update and follow the prompts in the dialog box. If your not using AVG, click on the link below and start protecting your PC from becoming infected.

Free Protection for Your PC
The following are links to software available to protect your PC and they are all free for personal use:
 

Anti-Virus Protection AVG Free Anti-Virus from Grisoft.com

Firewall Software ZoneAlarm from Zone Labs

Spyware Protection and Removal Ad-Aware from Lavasoft Spybot Search and Destroy from Safer-networking

Need Protection for Business?
If you need protection beyond that provided for personal/home use, check out McAfee for premium products at competitive prices.

Have You Been Munged?
Has your system been munged? Leo said it and Wikepedia defines it as, ìMung (or munge) is computer jargon for "to make repeated changes which individually may be reversible, yet which ultimately result in an unintentional irreversible destruction of large portions of the original item." It was created in 1958 at the Tech Model Railroad Club, at the Massachusetts Institute of Technology. In 1960, the backronym "Mash Until No Good" was created to describe Mung, and a while after that it was revised to "Mung Until No Good"ómaking it one of the few recursive acronyms.

Mung originally had two main meanings: to make large-scale and irrevocable changes to a file and to destroy something. A person who vandalizes a Wiki page would not be munging that page because the changes could be reversed. In the early text-adventure game Zork, also known as Dungeon, the user could mung an object and thereby destroy it, making it impossible to finish the game if the object was an important item.

The spam epidemics of the 1990s have created a new meaning for mung: to modify an e-mail address so that humans can readily reverse it but robots and address harvesters cannot.

Mung also sometimes stands for Multipurpose Unilateral Nonsense Generator, which is a program that will take web pages and run algorithms on them to make them read as if said in a dialectical manner. A web site that has MUNG filters (although it does not actually use MUNG, but Perl) can be found here(http://www.illuminated.co.uk/mung/).î
9-7-04
Lexmark Recalls Printers
Lexmark has issued a recall order for laser printers and models affected include Lexmark, Dell, and IBM according to a report in CNET. Please refer to the article to determine if your laser printer is a potential electrical shock hazard.

Fix For WinZip
A fix for WinZip users is available from WinZip Computing according to a report in CNET. The update package is included in WinZip 9.0 Service Release 1.

Find The Bottleneck
During his show on Saturday, Leo Laporte - The Tech Guy on KFI, talked about programs that listeners can use to find the speed of their PCs Internet connections and where slowdowns might be occurring. Mac users can use Terminal, an application located in your utility folder to determine the same things. Just open Terminal and type ìtraceroute www.yourfavoritewebsite.comî and Terminal will quickly trace the route between you and the site. You will see a detailed report of the connection time between each connection your query travels.

SP 2 and Surfing
Microsoft provides information on the changes made to Internet Explorer after you update to SP2, and you can learn how they ëclaimí you are safer at the MS Support site. You should continue to use an alternate browser according to most security gurus.

Open Source Security Bulletins
Secunia has issued security bulletins and updates for the following systems:
Slackware Linux 9.1
Gentoo Linux 1.x (1,2,3)
Sun Solaris 8
SuSE Linux 8. x to 9.1

What is WinZip?
According to the University of Washington, ìA program, published by WinZip, used to uncompress files after downloading them on a PC running Microsoft Windows. Many files are stored on servers in a compressed format, making them take up less disk space, and reducing the time, it takes for you to download them. WinZip decompresses these files, and makes them usable by your computer.î

9-4-04
STOP: 0x00000050 Error Message When Upgrading to XP2
If you receive a "STOP: 0x00000050" error message when trying to install Microsoftís Windows XP Service Pack 2, you should visit the Microsoft Support Site to learn more and refer to our article from Friday for a link to Automatic Recovery Tips from MS.

Learn To Set Firewall After XP 2
You can learn how to configure the Windows Firewall with the recent Windows XP Service Pack 2 by visiting the Microsoft Support site.

Great Tip For Macís iPhoto and iTunes
If you want to delete a photo from your Appleís iPhoto album and library simultaneously, MacOSXHints has the following tip: ìIf you want to remove a photo from a specific album and from the entire library at the same time, all you have to do is:
1. Select the photo
2. Hold down Command and Option, then press Delete.
This also works in iTunes, as discussed in the comments to this iTunes hint. Just make sure you really want the photo to be removed, as once you use this tip, the photo is gone for good.î

Mozilla Web Site Face-Lift
Mozilla.org has undergone a face-lift and the new web site looks better and is much easier to navigate around. Check it out, and if you are still using Internet Explorer, and our traffic statistics tell us many of you still are, download and try Mozilla or Firefox.

What is a Firewall?
According to the University of Toronto, a firewall is, ìA firewall is used to separate a local network from the outside world. In general, a local network is connected to the outside world by a "gateway" computer. This gateway machine can be converted into a firewall by installing special software that does not let unauthorized TCP/IP packets pass from inside to outside and vice versa. You can give users on the local network, and "inside" the firewall, access to the outside world using the SOCKS package or by installing the a proxy server on the firewall machine.î

9-3-04
Remove Spyware, Then Install SP2
According to a report in the Washington Post, Microsoft is warning customers to first use spyware removal tools like Ad-Aware and Spybot Search & Destroy before attempting to install the Service Pack 2 update for Windows XP. Failure to do this first can result in an unsuccessful update; what can you do then? Read the article below and find out.

Microsoftís Advice: Use Auto Recovery
If things do go wrong while you are installing the SP2 update, Microsoft has advice on how to use Automatic Recovery to get your computer back to the previous condition. Visit the Microsoft support site to learn more about this possibility.

Glitches in Appleís Airport Express Update
MacFixIt reports that some Airport Express users are experiencing problems connecting to wireless networks, especially after the computer has been in the sleep mode. There are several fixes suggested, visit the MacFixIt web site if you have been experiencing problems with your Airport Express.

Free Tech Advice
Leo Laporte, The Tech Guy on KFI answers your questions about all things digital on Saturday and Sunday from 12-3 pm PDT. You can listen live in the Southern California on AM640 or on the Internet through the KFI web site. Join us and learn the Wiki password of the week, then you can help us with the show notes and share your experience with Leoís listeners.

Open Source Updates
Secunia release a plethora of security updates and bulletins for open source users today including:
Gentoo Linux 1.x (1,2,3,4,5)
Fedora Core 1 and 2
SuSE Linux 9.1

What is Scuzzy?
It is pronounced ëscuzzyí, but what is SCSI? Plextor University has this explanation, ìAn acronym for Small Computer System Interface. Pronounced "scuzzy", this interface was introduced as a method of connecting multiple peripherals to computers. Based on a parallel bus structure, with each device having a unique ID (or address), the SCSI bus will support up to seven devices plus the host adapter. Newer 'wide' interfaces, used almost exclusively for hard drives, can support up to 15 devices plus the host controller, and can transfer data at burst speeds of up to 320 MB/sec. Because of the multiple device support and extended cable length (up to 6 meters for SCSI-2), the higher transfer rate, and the ability to install multiple host adapters on the motherboard or in available connectors, the SCSI interface is used most often to connect external devices such as scanners, CD-ROMs, CD duplicators, and multi-drive storage enclosures, while at the same time connecting to SCSI devices internally, usually on the same adapter.î

9-2-04
Feds Said: Ditch Internet Explorer
Leo Laporte, The Tech Guy on KFI, has said it, weíve repeated it and now even the Department of Homeland Security is suggesting that Windows people not use Microsoftís Internet Explorer according to a report in PC World. The report is quick to note that flaws have also been uncovered in Mozilla browsers. The article fails to note the major difference between the two: that being Mozilla reacts quickly and proactively to correct security issues and Microsoft isÖ Well theyíre Microsoft, a mega-corporation that responds when the profit margin demands. Sorry, we just calling ëem like we see them.

Serious Flaw Disclosed in Kerberos
CNET featured a report on a serious flaw in Kerberos, a program used by multiple platforms. The program is used by computers for network authentication and you can learn more on this issue from the CNET article.

WinZip Security Flaw
Secunia issued the following security bulletin for WinZip users:
DESCRIPTION:
Multiple vulnerabilities have been reported in WinZip, which potentially can be exploited to compromise a user's system.
1) Some unspecified vulnerabilities, which can be exploited to cause buffer overflows. successful exploitation can potentially lead to execution of arbitrary code.
2) A problem caused due to insufficient validation of command-line arguments. This can be exploited by using a specially crafted argument to cause a buffer overflow and potentially execute arbitrary
code.
SOLUTION:
Update to 9.0 SR-1:

Another Bagel Please
CNET is reporting the attack of a new Bagle variant; Bagle.dll.dr (AKA W32Beagle.AQ) is infecting PC and tries to shut down security programs on the victims PC.

New Choice for Remote PC
A new product introduced by 3am Labs Inc. will allow computer users to connect remotely to their PCs and is equipped with administrative controls that should keep the IT people happy. Read more about the new product in eWeek.

Virtual PC Ships, Finally
According to MacRumors, Microsoft is finally shipping Virtual PC 7 for XP. The other OS versions are still being developed and will ship sometime soon.

Open Source Updates/Bulletins
Secunia has released the following updates and security bulletins for open source users:
Gentoo Linux 1.x
Linux Kernel 2.6.x
SuSE Linux 8 to 9.1

What is Kerberos?
We mentioned it above, so what is Kerberos? According to the University of Toronto, ìA network authentication system, based on the key distribution model. It allows machines communicating over networks to prove their identity to each other through a trusted third party. It also prevents eavesdropping or replay attacks (recording and retrying encryption information "snooped" off the network) through support for a variety of data encryption schemes.î

9-1-04
SP2 Available on CD
If you have dial-up service, you can order Microsoftís SP2 on CD. Visit the Microsoft Support site to learn more.

Start Up Slow After SP2 Update
We have noticed that it is taking longer for XP to start up and it seems to spend more time in the personal settings mode. Is anyone else experiencing similar issues?

Free Download from iTunes Music Store
This week the free download from the iTunes Music Store is High Lonesome by Jedd Hughes from the album Transcontinental. Visit the Apple iTunes store for your free copy.

Spam Jam
The volume of spam is increasing according to a report from CNET. As we reported earlier, a majority of the spam is originating in the United States.

Secunia Alerts for Open Source
Secunia has issued for Debian Linux 3.x, Mandrake Linux 9.x, and Fedora Core 1 and 2.