This video may give you a good idea as to why updating is important.

It is incredibly important to keep *all* the software on your computer updated on a very regular basis.  Do not leave this to chance.  Do not rely on programs to update themselves. 

Do use tools like Secunia PSI.  Secunia PSI can help you keep a lot of these programs up to date.  We highly recommend this tool, found at: http://secunia.com/vulnerability_scanning/personal/

 Do insure that you have the latest anti-virus software and  keep it updated with current definitions.

There is a list of software that *must* be updated on a regular basis (if installed):

• Sun Java Runtime
• Adobe Flash
• Adobe Reader
• Your computers operating system, be it XP, Vista, MAC OS, Linux or whatever.
• Your browser, be it IE, Firefox, Opera or whatever
• QuickTime
• Spybot Search and Destroy Immunization definitions
• Spyware Blaster
• Your antivirus software
• Your firewall softwares
• Your Security suite, it that is what you use
• CCleaner or whatever temp file and registry cleaner you may use
• Any other anti-spyware software you may use
• Wordpress, or any server based blogging  or similar tools you may use

Everybody who uses the Internet uses  DNS servers.  DNS servers translate the familiar web site names to the numerical code of IP addresses. 

Think of DNS as the phone book of the Internet.  With a phone book, you look up a name and it gives yo a number.  Well, this is what the DNS system does for the Internet.  Only, it automatically looks up the numerical address for you, and tells your browser where to find that web site that you are after.

The DNS server address is actually entered in Network (TCP/IP Protocol) properties.  Most people use the address provided by their Internet Service Provider.  And most of the time these properties are set to ‘Obtain DNS server address automatically’.

Moat uses don’t realize that you are not required to use the DNS servers that your ISP provides.  You can enter any DNS server you choose.  But finding alternate servers is a problem.   We recommend that you consider using Open DNS.  This company is independent of any specific ISP and provided enhanced DNS services, some of which you may find valuable, such as correcting common misspellings.

 For more information and specific instructions, visit http://opendns.com

We have been testing the Comodo Firewall, and we have found it to be a top quality product. We like the ergonomics and look and feel, the intelligent pop-ups, and the easily customizable options, the automatic setup and best of all, it’s reputation for toughness with the bad guys.

It is our new favorite firewall. We previously recommended the Zone Alarm free edition, but it has fallen further and further in the rankings as Check Point apparently seeks to drive customers to the more profitable products. Zone Alarm Pro still stands near the head of the line. But the free edition is near the bottom of the ratings.

Install the COMODO firewall, Scan for Known Applications and set the security level for Low and you will minimize the pop-ups and be well protected.

Courtesy of Gibson Research, you can have your own, personal, unique, custom generated, random password generated for you, simply by visiting this page:

https://www.grc.com/passwords.htm

Please note that these are loooong passwords, 63 and 64 characters in length. But you can cut and paste to pare them down.

These passwords are useful in a number of applications including securing wired and wireless networks and Virtual Private Networks (VPN).

These passwords are about as perfect as you can get.

In light of the recent announcement that over 45 million credit car numbers have been exposed by a major online retailer*, we suggest using the Citibank Virtual Account Number feature, which is available on many of their cards.

* Source: AP-TJX-Security-Breach

The automatically generated virtual account number:

1) may only be used once.
2) may only by the merchant you used it with.
3) expires at the end of the next month.

Therefore, after it is used to make a purchase online, it would not matter if the virtual account number were compromised, it would be of no use to thieves.

And if by chance the merchant does not deliver, you are also protected.

These “one use” numbers can be generated online, or by using the Virtual account number applet on your computer. Either method is very secure and convenient.

Highly recommended.

Chances are, you know somebody who’s computer is a bot, and chances are they don’t know it.

Definition – A botnet (also known as a zombie army) is a number of Internet computers that, although their owners are unaware of it, have been set up to forward transmissions (including spam or viruses) to other computers on the Internet. Any such computer is referred to as a zombie – in effect, a computer “robot” or “bot” that serves the wishes of some master spam or virus originator. Most computers compromised in this way are home-based.

According to a report from Kapersky Labs, botnets — not spam, viruses, or worms — currently pose the biggest threat to the Internet. A report from Symantec came to a similar conclusion.
Source

Yes, bot, as in robot, as in remote controlled zombie attack machine .

Why? Estimates are that as many as one quarter of all computers connected to the Internet are infected with Trojan Horse software that turns them into zombies under the command of the botnet creator. Source

Botnets are considered by many to be the biggest threat to the Internet.

So, how does one prevent a computer from becoming part of a botnet?

1) A good, two way, firewall.

2) Install all operating system security updates and service packs as soon as they are available.

3) Keep all vulnerable programs* up to date, such as Microsoft Office, Java, Flash, Reader, QuckTime, Real Media, web browser, etc.

* any program that is capable of accessing the Internet.

4) An Anti-virus program, updated regularly.

5) An Anti-spyware program, (with real-time prevention) updated regularly.

6) Inoculate your computer to prevent infection, with programs such as Spybot Search and Destroy and Spyware Blaster.

7) If you are particularly security conscious, install an active defense such as an intrusion prevention system.

Hey, it is a lot of work to keep computer systems secure. If you are not up to it, unplug that machine and never connect it to the Internet.

So, perhaps you are savvy enough to have a relatively secure computer. But how about your friends and relatives? If you can, take the time to help someone else who is not as computer savvy, and who might really need the help. It helps us all if there are fewer compromised computers on the Internet.

Friends don’t let friends surf insecurely.

Torpark offers an excellent secure browser designed to run on a USB flash drive. Surf securely from Internet Café’s and other public computers. Surf securely on public wireless networks. All traffic is automatically encrypted for your privacy and security.

This software offers a customized version of FireFox, combined with the TOR secure network.

And best of all it is free.

It can be found at the following link:

http://www.torrify.com/software_torpark.html

Hey, check that router!

If your router, or DSL modem, is still set to use the default password, and/or is set to allow remote administration with a default or weak password, then you are stark naked on the Internet baby!

So button up. It is free. It is easy. Do it now!

Give your router some clothes, give it a strong password.

PS: While you are getting dressed, it doesn’t hurt to add an extra layer of clothes: It is called a firewall.

Think of it this way. A router, or DSL modem generally provides a rudimentary hardware firewall. This is like putting on your underwear. (If it is secured with a strong password).

Adding a serious software firewall, like Zone Alarm, or a serious hardware firewall, like SonicWall, is like putting on your clothes.

So dress up already!

A massive storm that swept across Europe last week…

And then in it’s wake was a storm across the Internet – in the form a series of virus infected emails.

And reference our previous Post, clearly there is a serious lacking of “Street Smarts” among computer users because this virus spread like wildfire.  Check out the F-Secure video post on YouTube, and see for yourself.

All users are advised to update their anti-virus programs and use caution when opening email, and especially email that refers to current events in the news* and induces the recipient to open the attachment.  Some examples:

230 dead as storm batters Europe.
A killer at 11, he’s free at 21 and…
British Muslims Genocide
Naked teens attack home director.
U.S. Secretary of State Condoleezza…
  Russian missle shot down Chinese satellite
  Russian missle shot down USA aircraft
  Russian missle shot down USA satellite
  Chinese missile shot down USA aircraft
  Chinese missile shot down USA satellite
  Sadam Hussein alive!
  Sadam Hussein safe and sound!
  Radical Muslim drinking enemies’ blood.
  U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel
  U.S. Southwest braces for another winter blast. More then 1000 people are dead.
  Venezuelan leader: “Let’s the War beginning”.
  Fidel Castro dead.
  Hugo Chavez dead.

The virus package that this email can load on your computer is nasty.  But users of infected computers may not even be aware that they are infected
Please note that this series of virus infected emails has a variety of subject lines and may contain several different attachments.

For more information, check out the F-Secure Blog.  They have posted a video of the infection spreading across the globe, and also provide detailed information as to the contents of this virus infected series of email.

* The latest variants have branches out into any number of subject lines:

  So in Love
  Happy World Religion Day!
  Most Beautiful Girl
  Someone at Last
  I Believe
  The Dance of Love
  The Miracle of Love
  All For You
  Vacation Love
  I am Complete
  Wrapped Up
  Moonlit Waterfall
  A Little (sex) Card
  A Special Kiss
  Hugging My Pillow
  Safe and Sound
  You’re Soo kissable
  A Romantic Place
  Breakfast in Bed Coupon
  For You
  I Love You So
  Safe and Sound
  Want to Meet?
  We Are Different
  We Have Walked
  You Asked Me Why

Please note that this virus may also have a rootkit component that most anti-virus programs are not able to detect or remove.  F-Secure’s Blacklight rootkit detector can detect and remove this rootkit.  This tool should be run on any computer that has become infected.  Blacklight can be downloaded from F-Secure via the following link: 

http://www.f-secure.com/blacklight/

- Practice Safe Computing