Posts from the Security Category at Download Squad

Freenet 0.7 released: Decentralized, anonymous publishing

Posted May 8th 2008 7:00PM by Brad Linder
Filed under: Internet, Security, Windows, Macintosh, Linux

Freenet is a tool that lets users publish pretty much anything online "without fear of censorship." The software stores your data on a decentralized, anonymous network of nodes made up of other Freenet users' computers. Freenet communications are encrypted and routed through those nodes, making it difficult for anyone to trace what you're doing. The service is useful for communication where a right to free speech is not guaranteed, and for privacy nuts and conspiracy theorists in countries where free speech is supposed to be a universal right, but may not be.

Freenet 0.7 was released this week, marking the first major update in three years. The latest version not only lets users upload data anonymously, but also lets users mask the fact that they're using the service at all by connecting only to computers of people you know and trust.

You can use the Freenet network to share files, publish websites, send emails, or communicate via message boards. The software is Java based and works with Windows, Mac, and Linux systems.

[via Slashdot]

The Internet Archive, busy protecting us from ourselves

Posted May 8th 2008 8:30AM by Kristin Shoemaker
Filed under: Internet, Security, News

We don't like to make political statements too often here at DLS. It just seems a lot less complicated to fight over software, or whether or not something is Web 2.0, or pirates and ninjas. Every once in a while, though, something comes up that's just a little too out of line not to mention.

Wired reports that back in November, the FBI paid a visit to The Internet Archive and served founder Brewster Kahle with a National Security Letter. The NSL (.pdf link, be warned) is a funny sort of document. It is a subpoena that can be issued without a judge's watchful eye. It usually comes with an order to not tell anyone that the person in question has received it, excepting, of course, their lawyer. So Kahle couldn't tell board members, or his staff, or his teddy bear without legal repercussions.

NSLs aren't really new, but they've blossomed since the USA Patriot Act was enacted. According to Wired, though the FBI guidelines don't encourage frequent use, Congressional audits and the FBI itself reveal that it is likely that hundreds of thousands have been issued in the past seven years. It's likely, because, you know, the FBI doesn't actually seem to track how many they've used. Oh, whoops.

The other dimension to this drama is that the Internet Archive is more of a library than an ISP/communications provider. It seems, in light of that, that the NSL used was actually not the proper document to request the sort of things it was requesting from that institution. Whoops again.

This week, the government and The Internet Archive reached a settlement in regards to the NSL issue. The issued NSL is officially off the table. The Internet Archive can't say anything about what the information was that got the FBI so riled up in the first place.

Seeing that the Internet Archive archives public information, that anonymous browsing is allowed, and all that's required to sign up for an account is an email address, username and password (Kahle says IP addresses aren't logged) it doesn't seem as though the FBI will really find much helpful information. They will find a whole lot of Grateful Dead recordings, if that's any consolation.

[via LISNews via Wired]

Yahoo! adds malware warnings to search results

Posted May 6th 2008 8:00AM by Brad Linder
Filed under: Internet, Security, Yahoo!, Search

Yahoo! has partnered with McAfee to integrated the security firm's SiteAdvisor technology in Yahoo! search results. That means Yahoo! will remove some of the most dangerous sites from search results altogether, and will include highly visible warning messages on search listings that force downloads, include browser exploits, or sites that send unsolicited emails.

Google offers a similar service, through a partnership with Stop Badware. But Google doesn't check for web sites that initiated automatic downloads when you load them, or sites that include links to harmful web pages. Yahoo!'s new SearchScan feature does.

SearchScan will be turned on by default for Yahoo! users in the US, Canada, the UK, Australia, France, Germany, Italy, New Zealand, and Spain. You can turn it off by visiting the SearchScan settings page.

Happy Belated Birthday - Spam turns 30

Posted May 5th 2008 9:00AM by Romeo Wahed
Filed under: Fun, Security

Happy Belated Birthday Spam. Here, have some cake.

30 fateful years have passed since what is believed to be the first piece of spam has defiled the inboxes of unwitting victims. Since then things have gotten much worse, with Internet scams at an all time high and spam comprising up to 90% of all email.

Gary Thuerk, the only soul that can lay claim to the title "Father of Spam," is the man who started it all, even if he's not to blame for the monstrosity that all of this has evolved into. The enlightening moment in his mind was this: "It's too much work to send everyone an e-mail," ... "So we'll send one e-mail to everyone." And thus the beast was born.

His email inviting people to come see a product presentation of the DECSYSTEM-20 FAMILY, which was written in all caps (setting the standard for years to come), was met with a very negative reaction foreshadowing how we still feel today about unsolicited emails. Interestingly enough, the email generated about $12 million in sales for Thuerk, which is probably why spam is still filling the inboxes of young and old alike: it works.

[via Geeks are Sexy]

Jotti's Malware Scan: Online virus scanner

Posted Apr 29th 2008 11:00AM by Brad Linder
Filed under: Security, Web services, web 2.0

Nothing really beats a good firewall or anti-malware program that offers real-time protection. But if something was going to come close, we'd say a tool that lets you check files against 20 different antivirus might come close. Jotti's Malware Scan is an online tool that lets you upload a file and scan it with 20 different antivirus tools including Avast, ClamAV, and Kaspersky.

Note that there's a big ole warning on the site letting users know that just because Jotti's Malware Scan says a file is clean doesn't mean it's safe to run that executable file you found on BitTorrent that promises to show nude pictures of Billy Ray Cyrus -- wait, no, that's not the person people are looking for naked photos of, is it? Anyway, this warning message was probably placed on the site to point out that the developers take no responsibility for any problems you may have with files scanned. But in general, we'd say that if you feel the need to scan a file with 20 different antivirus applications, you probably already know that you shouldn't be opening it.

[via MakeUseOf]

WordPress 2.5.1 security update

Posted Apr 26th 2008 12:00PM by Christina Warren
Filed under: Security, Blogging, web 2.0

The WordPress team has released version 2.5.1 of the blogging software. The new version, which comes nearly a month after the initial release fixes a slew of performance and interface bugs, but also includes a very important security update. It is highly reccommended that all WordPress 2.5 users update their installations as soon as possible, especially if you allow open-registration (for user comments or for multi-author blogs).

In addition to the aforementioned security patch, 2.5.1 contains a number of fixes to issues that have plagued some WordPress users for the last couple of weeks.

The highlights include

Improvements to the Media Uploader
Performance tweaks for the Dashboard and the Write and Comments pages
TinyMCE has been updated
Layout fixes for IE users

Download the latest version of WordPress from their site and update your installations accordingly.

AVG 8.0 Free released, now with protection from spyware

Posted Apr 24th 2008 9:00AM by Brad Linder
Filed under: Security, Windows, Freeware

A few months ago, Grisoft updated its AVG anti-virus suite to version 8 and bundled linkscanning, anti-spyware, and anti-rootkit software to boot. Now Grisoft's popular freeware anti-virus application is getting some of the same features. AVG Free 8 is out, and not only does it protect your system from viruses, but you get spyware detection as well.

AVG Free 8 doesn't have all of the features you get in the commercial version of the application. There's no rootkit protection or linkscanner. And there's no email or instant messaging integration. For those features you'll have to shell out $35 or $55 for the standard or "internet security" versions. But as freeware antivirus applications go, AVG is packed with features like real-time protection, daily updates, and complete system scans at regularly scheduled intervals.

Update: As several readers have pointed out in the comments, when you install AVG Free 8, you will likely find a bunch of advanced features like linkscanning and email protection. The AVG web site has a comparison chart showing that these features are included in the commercial version but not the free version. It's not clear if Grisoft is including free trials of these functions or if the chart is wrong.

Researchers develop new robot-proof CAPTCHA

Posted Apr 23rd 2008 4:00PM by Brad Linder
Filed under: Internet, Security, web 2.0

CAPTCHAs are becoming both ubiquitous and useless. When you visit many web sites, you have to decipher some tough-to-read text and enter it in a box before you can leave a comment or send an email. But hackers are getting better and better at developing automated systems to crack CAPTCHAs, which means that you have to squint at the screen for nothing.

But some researchers at Penn State University have developed a next generation CAPTCHA system that asks users to actually use their noggin a bit. There are two tests. The first requires you to click the center of a composite image, while the second presents you with a list of ten words and asks you to pick the right one to describe a randomly generated image.

The test is difficult for computers to solve because the images have a bunch of random colors, textures, and other features designed to confuse an automated program. But human being should have no problem deciphering the visual information in the images.

The test page is partially down today thanks to a Slashdot mention, but you can still see screenshots of the tests.

Consumer advocates want Do Not Track anti-cookie registry

Posted Apr 17th 2008 3:30PM by Brad Linder
Filed under: Internet, Security

You know the federal Do Not Call registry that lets US telephone customers sign up for a list to avoid telemarketers? Two consumer advocacy groups are asking the Federal Trade Commission to basically create the same kind of registry -- for the internet.

Now, let's pretend that a US agency could regulate the way that internet companies track your data for advertising and other purposes. How exactly would that work? One way would be for the the FTC would have to require every advertising firm and web site that's accessible in the US to use a potentially enormous list of consumers to figure which computers they can place cookies on and which computers they cannot.

Or the burden could be placed on consumers to sign up for a service like the Network Advertising Initiative, which places its own cookie on your computer to alert over a dozen major advertisers that you have chosen to opt-out of targeted ads. But if you happen to clean out your cookies accidentally, you'll need to reinstall the software. or if you happen across a page from a company that hasn't signed on, you could still be tracked.

We're not saying that consumers shouldn't be able to opt out of targeted advertising. We're just saying that the people asking for federal regulation seem to be either incredibly ambitious or they lack a basic understanding of how the internet works.

[via Techdirt and CNet]

Ad-Aware 2008 Beta released with redesigned interface, Vista compatibility

Posted Apr 16th 2008 6:00PM by Simon Kerbel
Filed under: Security, Utilities, News, Windows, Freeware, Beta

Spyware beware: Lavasoft has just announced a beta of its popular anti-spyware software Ad-Aware.

Ad-Aware remains one of the most popular free anti-spyware solutions out there, with over 280 million downloads worldwide. That a big, hard to visualize number, but we'll put into context for you: that's four times the downloads of any laughing baby on YouTube.

The new features of Ad-Aware 2008 include:

New rootkit removal system
Reduced use of computer memory
Faster updates
64-bit platform support and full Vista compatibility

What's not to love?

Actually, we don't love the redesigned interface, which looks like it took some hints from the web 2.0 designers: lots of big round buttons, and text that reflects itself, as if it were sitting at the edge of a still summer pond. That was cool, like, five years ago.

If you want to take a closer look at Ad-Aware 2008, you're in luck: everyone is invited to be a beta tester.

Ad-Aware 2008 is Windows only.

Avira updates AntiVir free anti-virus suite

Posted Apr 15th 2008 1:00PM by Brad Linder
Filed under: Security, Windows, Freeware

Avira has released AntiVir Personal 8.1, a free antivirus appliation. Like popular free antivirus applications from Grisoft and Avast!, Avira offers a free basic security suite in the hopes of convincing some users to spring for a commercial version. The main difference between Avira and the competition, as far as we're concerned, is that Avira AntiVir will occasionally pop up nagware asking you to upgrade.

Pop ups aside, Avira AntiVir is pretty powerful, and the latest update brings a few improvements like increased scan speed and a redesigned visual interface. Another new feature, which isn't available in the free version, is the ability to create a system rescue CD.

Unlike some other antivirus applications, you can install AntiVir without uninstalling or even turning off your current antivirus program, which is always a plus.

[via gHacks]

Microsoft: Vista UAC was supposed to piss you off

Posted Apr 11th 2008 5:30PM by Brad Linder
Filed under: OS Updates, Security, Windows, Microsoft

One of the first things Windows XP users will notice if and when they switch to Vista is the User Account Control, affectionately referred to as UAC or "Why the hell does this window keep popping up!" The UAC prompt is a security feature that will alert you if you are about to make changes to your computer that could technically expose it to some threats.

Some users get around this by disabling or modifying the UAC using programs like TweakUAC. Others insist that Microsoft put it there for a reason, and disabling will result in your computer bursting into a ball of flames. But if you're tired of looking at UAC prompt after UAC prompt, here's something that should give you a little comfort: Microsoft knew all along that the UAC prompt was annoying and designed it to be that way.

Microsoft product manager David Cross says the goal was to make users think twice about making changes to their system willy nilly. It's also designed so that software developers will think of ways to write programs that don't burrow too deeply into your operating system. The less system configuration changes a program makes, the less often you're going to see a UAC prompt.

Cross says that 88% of Vista users have not disabled UAC, and 66% of Windows sessions do not lead to a UAC prompt showing up. And that makes sense if you're someone who just runs the software that came with your computer and a handful of other applications. But if you're constantly looking for cool new programs to add features to your computer -- in other words, a typical Download Squad reader -- we're guessing you see the UAC prompt a lot more often than most users.

1 million viruses, worms, and trojans on the loose

Posted Apr 11th 2008 3:30PM by Brad Linder
Filed under: Internet, Security

The internet is a scary place. No, we're not talking about predators out to rob you or offer candy to your kids. We're talking about malware like viruses, worms, and trojans. According to security company Symantec, the amount of malware on the internet has reached an all-time high, with over 1 million malicious programs in circulation.

A surprsingly large number of those threats were developed in the last year, with 711,912 new pieces of malware coming out in 2007 compared with 125,243 in 2006.

The good news for Linux and OS X users is that most of these threats are targeted at computers running Windows. And the good news for Windows users is that most of these applications are variations of older threats, which means if your anti-virus software is up to date, you should be relatively safe.

Of course, Symantec puts reports like this out there in order to sell its own security software. But there are several excellent free anti-virus suites that will also help protect your computer from most threats.

[via BBC News]

Create easy to remember, hard to guess passwords with Password Bird

Posted Apr 10th 2008 2:00PM by Simon Kerbel
Filed under: Security, Web services

Password Bird is a simple online service that will create a password based on a number of personal markers. Because the password is culled from a few names and dates that are important to you, the hope is that the password will be easy to remember but remain hard to crack.

So how does it work? When you visit Password Bird, you are prompted to enter in three items:

A name that is important or special to you
A word that is special to you
A date that has personal significance

After that, you hit the create password button, and Password Bird goes to work. The next page will show you the customized password. If you don't like the password, Password Bird can quickly generate a new one based on the personal markers; or, you can choose to start over completely with a new set of words and dates.

The question is, does Password Bird make secure, yet easy to remember, passwords? In our test, we used the name Simon, the word Technology, and 1/1/2000 for the date. Here's what Password Bird came up with:

00simogy
01tecmon
ogysim00
simtec20

It doesn't take the guy from A Beautiful Mind to see a pattern here.

What do you guys think? Useful service or not?

[via Technobuzz]

Trend Micro release Web Protection Add-on

Posted Apr 10th 2008 12:00PM by Brad Linder
Filed under: Security, Windows, Commercial

The security minded folks at Trend Micro have released a new tool that provides real-time protection from internet threats. The Web Protection Add-On monitors any HTTP request made by any program on your computer, so it's not simply an add-on for one web browser. Rather, it will scan every URL you visit and every file you download. If the program finds malware, it will provide a pop up warning message.

The program provides some level of protection against bots and other malicious code. You can also configure it to use a Proxy server. But it's meant to be used in conjunction with other anti-virus, anti-spyware applications. The Web Protection Add-On isn't meant to be a complete Windows security suite.

Trend Micro's Web Protection Add-On is available now as a 60-day free download. There's no clear indication of what the full version of the program will cost.

[via AppScout]

Next Page >

#	Blogger	Posts	Cmts
1	Brad Linder	180	19
2	Simon Kerbel	25	3
3	Romeo Wahed	15	0
4	Todd Ritter	11	3
5	Kristin Shoemaker	11	12
6	Danny Mendez	10	6
7	Jason Clarke	8	6
8	Christina Warren	7	3
9	Ian Dumych	6	5
10	Jay Hathaway	4	0
11	Gordon Finlayson	3	0
12	Michael Schleifstein	2	0
13	Emily Price	2	1
14	Grant Robertson	2	2
15	Dolores Parker	2	1
16	Lisa Hoover	1	1
17	Nik Fletcher	1	0
18	Chris Ullrich	1	0
19	Peter White	1	0
20	Cory Bohon	1	0

Joystiq hands-on: Roogoo (XBLA) EA purchases Napster creator's social networking site Ask Joystiq helps protect your DS screen	TUAW preview: Schmap for iPhone & iPod Touch Adium adds Facebook Chat support; emo kids cheer worldwide Apple posts job listings for Munich Apple Store
Yahoo acquires Inquisitor: Oh no? Photoshop Express gets Flickr support CallerComplaints: Track down telemarketers and umm... complain	9ff proves the GT9 is stupid fast, tops 253 mph Nick Hogan sentenced to 8 months in jail Spy shots: Fisker Karma makes an appearance in California
Carl Freer dishes dirt on the new Gizmondo Canon Rebel XSi review roundup Vostro 500 appears on Dell's support site	Option Update: FedEx puts active into lower Q4 view on fuel costs Look for Boeing's shares to rise with the 787 Dreamliner Closing Bell: $126 Oil trumps deficit... week ends down

Freenet 0.7 released: Decentralized, anonymous publishing

The Internet Archive, busy protecting us from ourselves

Yahoo! adds malware warnings to search results

Happy Belated Birthday - Spam turns 30

Jotti's Malware Scan: Online virus scanner

WordPress 2.5.1 security update

AVG 8.0 Free released, now with protection from spyware

Researchers develop new robot-proof CAPTCHA

Consumer advocates want Do Not Track anti-cookie registry

Ad-Aware 2008 Beta released with redesigned interface, Vista compatibility

Avira updates AntiVir free anti-virus suite

Microsoft: Vista UAC was supposed to piss you off

1 million viruses, worms, and trojans on the loose

Create easy to remember, hard to guess passwords with Password Bird

Trend Micro release Web Protection Add-on

Download Squad Features

View Posts By

RESOURCES

RSS NEWSFEEDS

Sponsored Links

Download Squad bloggers (30 days)

Most Commented On (60 days)

Recent Comments

Urlesque Headlines

BloggingStocks Tech Coverage

More from AOL Money and Finance

More Tech Coverage

Weblogs, Inc. Network