Firefox and Security
For those of you that have Firefox installed, read on. Otherwise, skip to the next section. I have long tauted Firefox's usability, security as well as it's extensions. The following article is about a Trojan that installs as an extension into Firefox. This was discovered by McAfee and it is an interesting read: http://www.informationweek.com/story/showArticle.jhtml?articleID=191202224&cid=RSSfeed_IWK_All. Keep in mind though, for this to work you would have had to run an attachment sent by email and also have Firefox installed on your system. I have a number of extensions to Firefox and you are always warned beforehand that there is a security risk for third party extensions. If you get the extension off of the Mozilla site, you have nothing to worry about. It is a good idea after seeing this article to check your installed extensions on a regular basis. Now for better security through Firefox:
NoScript is an extension for the Firefox browser that is a must have in your arsenal to keep your PC secure. Increasingly, one of the ways that attackers can get at you is through Java script applications. These are scripting programs that run on the server side of a site that you are browsing. Generally, most are safe and without these scripts your web page would not load right or function correctly. I personally use java script on the web sites that I have designed. However, if you were to land on a malicious site, you could find yourself in big trouble and you wouldn't know, until it was too late (yes, it doesn't matter how great your firewall is). Enter NoScript. This great extension to Firefox let's you decide which sites have your permission to let the java script run in. To learn more and to download (you must have Firefox installed already), go to the link at the beginning of this paragraph. By the way, how bad is malicious java script? Read this: JavaScript opens doors to browser-based attacks (article dated July 28th, 2006).
Now that we have got that out of the way, I would like to discuss an extension to Firefox that just came out that tracks your cell phone usage. I have Verizon Wireless and this little extension displays minutes used whenever I have Firefox open on the status bar of the browser. Here is the link to get the xpi: http://verizon-minutes-used.blogspot.com/. If you can't figure out how to install it, let me know.
Forecastfox is another extension that I use that displays weather in real time . I mention it here because I have noticed an issue with Severe Alerts remaining in the information bar, even though they have expired (sometimes over 24 hours ago!). At first I thought it was a bug with the extension. However, I was able to determine it was an issue with Accuweather's reporting status on the site. I thought you may want to know. Keep in mind Forecastfox is a very configurable little extension. You can place it in any toolbar, set up multiple profiles and so on (right click and select "Options").
Lastly, I suggest that once in awhile go to "Tools", "Extensions" and check to see that the extensions that you have installed are up to date. If you are not sure, just click on the "Find Updates" button and download the ones that show up. Remember, the update will not take effect until you restart the browser.
Back to Top
|
TrueCrypt
I would like to talk about TrueCrypt (Introduction) here and it is one of the new links I have added at the bottom of this newsletter. Although Microsoft Windows XP SP2 Pro (not the Home version) offers the same features of encrypting a folder or file (right click your "My Documents" folder for example and select "Sharing and Security" and then the "Share" tab. Enable "Make This Folder Private" by putting a check mark in the box) it does not come close to the features and security of TrueCrypt. However, what if someone else or a attacker is able to log into your Windows session? What do you do then, since they would then be able to access your "protected" files and folders? Enter TrueCrypt. Part of security is assuming that at any time without your knowledge, your computer could be compromised. Knowing this, have you taken the necessary precautions to make sure you are secure and that vital information about you is secure? Most haven't. If you read the part about "JavaScript opens doors to browser-based attacks" earlier, you will realize that now is the time to protect your information before it is too late. TrueCrypt does this and rather then go long winded, I suggest reading information on their site (link above) and for those that are a little tech savoy, you can listen to Leo Laporte's and Steve Gibson's podcast on TrueCrypt by downloading this MP3 file here.
In any case, since setting up TrueCrypt may at first be "a little over your head" (as it was with me in the beginning), you may want to contact me and I can walk you through the installation process as well as it's use (yes, I don't mind).
Remember that TrueCrypt works on Windows XP (Home, Pro or x64 Editions), Windows 2000, Windows Server 2003 and Linux (kernel 2.6.5 or later). Windows 95/98/Me/NT OS's are not supported.
Back to Top
|
