Steve’s Stuff

Faults in the clouds of delusion

Archive for November, 2005

Turn off JavaScript

with 2 comments

Even as we start redeveloping websites in the CCIM family planning on using more JavaScript than ever (think Ajax), I’m here to tell you to turn off JavaScript in your browser.

E-Week is reporting, as are other sites including the SANS Internet Storm Center and the Washington Post, an unpatched vulnerability in Javascript that allows websites to execute programs on your computer without restriction.

Infected or malicious websites might be able to do very bad things to your computer and the networks to which it is attached without any action on your part other than visiting such a website.

If you use Internet Explorer, you MUST immediately turn of ActiveScript / JavaScript for non-trusted websites. Microsoft does not yet have a patch for this problem. Read the rest of this entry »

Listen to this post Listen to this post

Technorati Tags , ,

Written by Steve

November 23rd, 2005 at 8:26 am

Posted in Security

Sony’s EULA adds insult to injury

without comments

An entry by Fred von Lohmann on the EFF site disects the 3,000 word EULA that comes with a CD. Basically, it’s only by the grace of Sony that you’re allowed to even hum the music. And, not in public.

Listen to this post Listen to this post

Technorati Tags ,

Written by Steve

November 13th, 2005 at 2:34 pm

Posted in Security

Microsoft will wipe Sony’s ‘rootkit’

without comments

Microsoft will wipe Sony’s ‘rootkit’ | CNET News.com
Microsoft will update its security tools to detect and remove part of the copy protection tools installed on PCs when some music CDs are played.

Piling on!

Listen to this post Listen to this post

Technorati Tags , ,

Written by Steve

November 13th, 2005 at 1:20 pm

Posted in Microsoft, Security

Homeland Security and Sony Rootkit

without comments

The Washington Post notes that the Department of Homeland Security had negative things to say about Sony’s rootkit.

Reuters has a report that “Sony BMG is temporarily suspending the manufacture of CDs containing XCP technology”.

Listen to this post Listen to this post

Technorati Tags , ,

Written by Steve

November 11th, 2005 at 3:43 pm

Posted in Security

Google Desktop 2 released

without comments

The new desktop has been released: Desktop grows up.

Unfortunately, the problem with voice mail being marked as read continues in this version.

Listen to this post Listen to this post

Technorati Tags

Written by Steve

November 4th, 2005 at 9:57 am

Posted in Google

Tagged with

Do you trust Sony with your PC?

without comments

This is important. Mark Russinovich, a respected Windows expert, developed a tool to find rootkits that run under Windows. As he was running it on one of his computers that he was sure was clean, he found a rootkit! It turns out to have been installed by a Sony music CD.

The mainstream media has now taken note: Security Fix - Brian Krebs on Computer Security - (washingtonpost.com).

I certainly won’t be buying any CDs with DRM on them — or at least won’t be ripping them on a Windows system.

Listen to this post Listen to this post

Technorati Tags , ,

Written by Steve

November 2nd, 2005 at 10:44 am

Posted in Security