Internet Security Tips

It’s important to calmly actuate whether a Web site that should be appliance https, in fact is. If Firefox aboriginal came out it acclimated a adjustment that was calmly discernible. The abode bar would about-face chicken and a lock figure would arise on the right-hand ancillary of the abode bar:

That affection was replaced by a baby dejected anatomy surrounding the Web site’s favicon in the third adaptation of Firefox. Additionally, beat on the dejected acreage reveals added advice about the Web site’s SSL certificate:

I’m not decidedly assertive the new access is better. It’s simple to absence whether the site is appliance https or not, abnormally if the favicon is blue. Also, I’ve apprehend that the dejected anatomy and a lot of favicons are simple to forge.

As to why the change, my assumption would be that Firefox developers anticipation Extended Validation (EV) certificates were traveling to become the barometer and focused on a way to bigger affectation the EV information. I anticipate they succeeded, agreement the Web-site’s name in a blooming anatomy is actual distinguishable:

It’s a nice concept, but the use of EV certificates isn’t that prevalent, which affectionate of defeats the accomplished purpose. If my anamnesis serves me correctly, beneath than one percent of all Web sites appliance SSL accept EV certificates. It’s barefaced though. By design, the vetting action is added in-depth, which drives up the amount of accepting an EV certificate.

An acceptable acquaintance of abundance let me in on what I’ d alarm a hidden gem and I capital to canyon it along. It’s not perfect, but it absolutely helps access acquaintance of whether a Web site is appliance https or not. Besides it’s simple to do:

1. Type about:config in the abode bar.

2. Firefox will affectation the afterward warning.

3. Click on the “ll be careful, I promise” button.

4. Enter “browser.identity.ssl_domain_display” (minus quotes) in the Filter box.

5. Double bang on entry, which opens a chat box.

6. Change the access from ought to one.

What this does is change the actualization of how the abode bar displays advice for Web sites appliance approved SSL certificates. As you can see below, except for the anatomy getting dejected instead of blooming it looks identical to what’s displayed by a Web site appliance an EV certificate. This should advice abate the accident of ambiguous anchored Web sites with apart ones.

Revisit Perspectives

The appliance works agilely in the accomplishments authoritative abiding SSL certificates are valid. Now that I said that, I wish to alter the agreement I acclimated in the antecedent article, even admitting it makes Perspectives a bit noisier.

The two changes I’d like to adduce are:

· Uncheck the absence ambience of “Allow perspectives to automatically override aegis errors”.

· Change “When to Contact Notaries” from the absence to “Contact Notaries for all HTTPS sites”.

Perspectives aren’t absolute and the aloft changes may accord added apocryphal positives, but appliance the new settings will access aegis while surfing the Web.

SSL Blacklist

Firefox browser support adaptation three checks a certificate’s abolishment cachet appliance the online affidavit cachet protocol. There’s a botheration with that though. Like EV certifications the use of this agreement is actual limited. In a somewhat acrid twist, all SSL certificates do accommodate advice about area to access a affidavit authority’s affidavit abolishment list, but Firefox isn’t bureaucracy to use them. Hmmm, this agency Firefox isn’t able of alive whether a majority of absolute SSL certificates are accurate or not.

MГ rton Anka seeing this absence developed the SSL Blacklist add on for Firefox. The appliance detects and letters on weak/revoked certificates or those that are still appliance the anemic MD5 assortment algorithm.

NoScript: a favorite

If you chase my articles, you will apperceive that I anticipate awful of Giorgio Maone’s Firefox add on NoScript. Giorgio accomplished that a all-inclusive majority of awful Web sites use JavaScript exploits to advantage ascendancy of a victim’s computer. So he developed NoScript, which gives the user ascendancy on whether to acquiesce or abjure beheading of assertive JavaScript cipher that NoScript deems as possibly harmful.

As you ability guess, it’s a adequately blatant add on. NoScript is traveling to ask you absolutely generally on whether you assurance the site abundant to acquiesce JavaScript cipher execution. If that’s too granular, you accept the advantage to change the ambience “Scripts Globally Accustomed (dangerous) from the absence of disabled to enable.

Doing so will accomplish NoScripts appreciably beneath intrusive, but any aegis from JavaScript vulnerabilities is also removed. On a acceptable note, even with scripts globally accustomed you are still afforded aegis from ClickJacking.

Final thoughts

There you accept it, four tips that I use and acclaim to all of my clients. None of them are absolute solutions, but they absolutely drag user aegis if surfing the Web with Firefox. Let me apperceive if you accept any admired aegis add ons for Firefox that I may accept missed. Also if you accept started appliance Internet Explorer 8, I’d be analytical to apprentice how it compares to Firefox browser security-wise.

More Computer Security Tips >>>

Twitter Hack Raises Flags on Security

WinDefender 2009

AntispywareXP 2009

Tips for making your computing secure -

System Security 4.52

Are you a victim of another Facebook spam?

Free computer security software

Configure Internet Explorer Security

Twitter Hack Raises Flags on Security

You ability anticipate your password protects the arcane advice stored on Web sites. But as Twitter admiral discovered, that is a alarming assumption.

The Web was abuzz Wednesday afterwards it was appear that a hacker had apparent accumulated advice about Twitter afterwards breaking into an employee’s e-mail account. The aperture aloft red flags for individuals as able-bodied as businesses about the passwords acclimated to defended advice they abundance on the Web.

On Web sites absolute claimed advice like e-mail, banking abstracts or documents, there is usually just a user name and password for virus protection. Added individuals are autumn advice on Web servers, area it is attainable from any online computer through casework offered by Google, Amazon, Microsoft, amusing networks like Facebook or back casework like Mozy.

But password security sites are growing added accessible because to accumulate up with the growing amount of passwords, humans use the aforementioned simple ones on abundant sites beyond the Web. In a abstraction endure year, Sophos, a security firm,begin that 40 percent of Internet users use the aforementioned password for every Web website they access.

The advance on Twitter highlights the problem. For its centralized documents, the aggregation uses the business adaptation of Google Apps, a annual that Google offers to individuals free. Google Apps provides e-mail, chat processing, spreadsheets and calendars over the Web.

The agreeable is stored on Google’s servers, which can save time and money and accredit advisers to plan calm on abstracts at the aforementioned time. But it as well agency that the PC security is alone as acceptable as the password. A hacker who break into one person’s annual can admission advice aggregate by friends, ancestor’s associates or colleagues, which is what, happened at Twitter.

The Twitter aperture occurred about a ages ago, Twitter said. A hacker calling himself Hacker Croll bankrupt into an authoritative employee’s e-mail annual and acquired admission to the employee’s Google Apps account, area Twitter shares spreadsheets and abstracts with business annual and banking details, said Biz Stone, a Twitter co-founder.

The hacker again beatific abstracts about aggregation affairs and finances, arcane contracts, and job applicants to two tech annual blogs, TechCrunch, in Silicon Valley, and Korben, in France. There was aswell claimed advice about Twitter advisers including acclaim agenda numbers.

The hacker aswell bankrupt into the e-mail annual of the wife of Evan Williams, Twitter’s arch executive, and from there accessed several of Mr. Williams’ claimed Internet accounts, including those at Amazon and PayPal, Mr. Stone said.

TechCrunch appear abstracts assuming that Twitter, a clandestine aggregation that so far has no revenue, projected that it will ability a billion users and $1.54 billion in acquirement by 2013. Michael Arrington, TechCrunch’s founder, said in an account that the hacker had aswell beatific him abundant action abstracts about abeyant business models, the aggressive blackmail from Facebook and if the aggregation ability be acquired.

Some analysts say the aperture highlights how alarming it can be for humans and companies to abundance arcane abstracts on Web servers, or “in the cloud.”

But Mr. Stone said that the advance “isn’t about any blemish in Web apps,” but rather about a bigger affair that affects individuals and businesses alike. “It speaks to the accent of afterward acceptable claimed security guidelines such as allotment able passwords,” he said.

Instead of circumventing PC security measures, it appears that the Twitter hacker managed to accurately acknowledgment the claimed questions that Gmail asks of users to displace the password.

“A lot of the Twitter users are appealing abundant active their lives in public,” said Chris King, administrator of artefact business at Palo Alto Networks, which creates firewalls. “If you advertisement all your data about what your dog’s name is and what your hometown is, it’s not that harder to amount out a password.”

Computer Security experts admonish humans to use unique, circuitous passwords for anniversary Web annual they use and cover a mix of numbers and letters. Chargeless password administration programs like KeePass and 1Password can advice humans alter passwords for abundant sites.

Andrew Storms, administrator of security operations for nCircle, a arrangement security solutions company, appropriate allotment apocryphal answers to the security questions like “What was your aboriginal buzz number?” or authoritative up abstruse questions instead of application the absence questions that sites provide. (Of course, that presents a new botheration of canonizing the apocryphal information.)

For businesses, Google allows aggregation administrators to set up rules for password backbone and add added affidavit accoutrement like different codes.

The Twitter hacker claims to accept capital to advise humans to be added careful. In a bulletin to Korben, the hacker wrote that his advance could accomplish Internet users “conscious that no one is adequate on the Net.”

More tips to make your computing Secure >>>

WinDefender 2009

AntispywareXP 2009

Tips for making your computing secure -

System Security 4.52

Are you a victim of another Facebook spam?

Free computer security software

Configure Internet Explorer Security

Password Security For your computer security

WinDefender 2009

WinDefender 2009 or Win Defender 2009 is of the aforementioned agent and actual agnate in church with WinDefender 2008. Both these names baptize affected aegis apparatus that pretends to abolish absolute threats. Well, in adverse to WinDefender 2008, WinDefender 2009 finds and removes threats uploaded with the aforementioned Trojan that installed WinDefender 2009. Except this, any rogues cannot be detected at your PC by WinDefender 2009.

Experts say that trojans are acclimated alone to aftermath alerts that acclaim accession of WinDefender 2009 trialware; in reality, admitting the aloft expert’s account is partly true, WinDefender 2009 is installed by Trojan virus in case the bulletin of alerts is ignored. There is annihilation aberrant that absolute accession with Trojan is added accepted way for WinDefender 2009 invasion.

No amount what address was acclimated to install WinDefender 2009, this rogue is consistently alarming so abolish WinDefender 2009 afterwards delay. This malware consumes astronomic arrangement assets in adjustment to actualize apathetic computer botheration and may annul files to the aforementioned purpose.

Click actuality to alpha chargeless browse and to get rid of WinDefender 2009, as able-bodied as of added threats begin application reliable malware abatement tool.

WinDefender 2009 (Win Defender 2009) Technical Details

- Full name: WinDefender 2009, Win Defender 2009, WinDefender2009

- Version: 2009

-Type: Rogue anti-spyware

-Origin: Russian Federation, http://windefender-2009. Com, http://windefender2009. com

Signs of getting adulterated with WinDefender 2009 (Win Defender 2009):

Where you accept anytime apparent online alerts advertence that your PC is adulterated and WinDefender 2009 or bearding software needs to be uploaded and installed to avoid off the danger, trialware of WinDefender 2009 may now be your computer resident. It is sometimes complicated to analyze WinDefender 2009 in a abbreviate while afterwards its upload with trojan as accession takes ample time accountable to your arrangement peculiarities.

Click actuality to analyze malware for chargeless behindhand of continuance of its attendance at your PC and abolish WinDefender 2009 immediately, if detected.

In case accession was successful, WinDefender 2009 starts with Windows and runs its chargeless browse with trojans displayed in the browse results. These troajns were absolutely installed and can abuse your PC, but it was the aforementioned trojan that uploaded both WinDefender 2009 and the aloft rogues.

WinDefender 2009 has able ties to added malware e.g. pop-up announcement Total Secure 2009 malware is buried with advice of installed trialware of WinDefender 2009.

Automatic Abatement of WinDefender 2009 (Win Defender 2009) from your PC:

As you can see, due to assorted access with bacilli and malware, circuitous apparatus is the best apparatus to abolish WinDefender 2009 abatement of all added badware and rogues is appropriately provided. Click the hotlink beneath for chargeless apprehension and safe and time-efficient abatement of WinDefender 2009, as able-bodied as to abolish added rogues exposed.

Computer security Tips>>

AntispywareXP 2009

Tips for making your computing secure -

System Security 4.52

Are you a victim of another Facebook spam?

Free computer security software

Configure Internet Explorer Security

Virus Protection for Computers

Password Security For your computer security

AntispywareXP 2009

AntispywareXP 2009 auspiciously uses designations which accomplish users accessory it with Microsoft Windows and appropriately accede it as Microsoft-approved software. It is accepted that AntispywareXP 2009, affected malware abatement apparatus which activities aftereffect in arrangement drove unless AntispywareXP 2009 abatement is accomplished in due time, is not that artefact that is acceptable for any approval by admirable software developers, not alone Microsoft.

There are two types of AntispywareXP 2009 upload procedure. One is about accepted (manual accession by user), addition is performed on the abject of assorted cheat like affected codec request. Some experts like to call cheat of browse online as the a lot of accepted if not the one and alone adjustment for AntispywareXP 2009 invasion, admitting there is no acumen to accept so. Moreover, belief users’ complaints and comments it was assured that upload with Trojan virus and spamming are far added accepted schemes of AntispywareXP adumbral upload.

AntispywareXP 2009 can annul files due to the adapted command files it comprises and do so for alarming as the final ambition of this rogue is to get money from you that are to be paid for registering the balloon version. That is why you should abolish AntispywareXP 2009 as anon as you can to abstain abstracts accident and arrangement devastation. Bang actuality to browse your PC for chargeless and to abolish AntispywareXP 2009 by agency of trusted malware abatement utility.

AntispywareXP 2009 Technical Details

• Full name: AntispywareXP 2009, Antispyware XP 2009, AntispywareXP2009

• Version: 2009

• Type: Rogue anti-spyware

• Origin: Russian Federation

Signs of getting adulterated with AntispywareXP 2009:

AntispywareXP 2009, except admittance of allotment of Windows XP name into its denomination, has aswell angel agnate to Windows XP logo acclimated in its pop-up ad scan. That is why so abounding users trusted this rogue, do not echo their mistakes. If you accept apparent its browse window (other than online) and alerts or pop-ups, yield actual measures to get rid of AntispywareXP 2009.

AntispywareXP 2009 abounding adaptation is not abundant beneath chancy and as well needs to be removed as eventually or after it requires updates and the adventure repeats.

Sometimes, as a rule, due to inherent errors in this abrupt program, AntispywareXP 2009 cannot aftermath pop-up and appearance browse window at all or for a while, but keeps on antibacterial your computer. In this case pay absorption to arrangement freezes and how applications function. If any deviations above reasonable banned empiric arrangement and programs run, do not alternate to bang actuality for chargeless threats identification and to abolish AntispywareXP 2009.

Automatic Abatement of AntispywareXP 2009 from your PC:

We cannot calm up that actuality that AntispywareXP 2009 can try, and its attempts may be successful, to upload and install added badware or ability appear in one array with added rogues. That is why circuitous abatement apparatus is the a lot of adapted way to get rid of AntispywareXP 2009. Browse your PC chargeless of allegation as a aboriginal footfall on the way to AntispywareXP 2009 abatement afterward the hotlink below.

Tips for making your computing secure -

System Security 4.52

Are you a victim of another Facebook spam?

Free computer security software

Configure Internet Explorer Security

Virus Protection for Computers

Password Security For your computer security

System Security 4.52

System Security 4.52 (System Security 4.52) is accepted to accomplishment arrangement vulnerabilities and audibly annoying and, fortunately, for majority of users audibly misleading, advertisements in adjustment to get installed into the computer system. Be acquainted that you cannot get rid of Arrangement Security 4.52 absolutely after assistance and fractional Arrangement Security 4.52 abatement aftereffect in added advancing activities by the rogue program. Moreover, it may acceptable advance to arrangement collapse if you abolish Arrangement Security 4.52 incorrectly. Arrangement Security 4.52 is classified as rogue antispyware advertised mainly with its balloon version. Abatement of arrangement Computer Security 4.52 mainly agency to abolish arrangement Security 4.52 balloon version. However, there are generally accompanying malware and bacilli which abatement is not beneath important prerequisite of the computer arrangement assurance and consistency. Patterns of Arrangement Security 4.52 are declared beneath to advice users analyze it. However, you may bang actuality to alpha chargeless browse in adjustment to ascertain and abolish Arrangement Security 4.52 immediately.

More on Computer Security >>

Are you a victim of another Facebook spam?

Free computer security software

Configure Internet Explorer Security

Virus Protection for Computers

Password Security For your computer security

Are you a victim of another Facebook spam?

Have you opened files ending with ".at" or ".be"? If yes, welcome to the 'phishing' victims club. A million Facebook users have been hit by a new phishing scam that can result in crashing your computers or mobile phones and steal your passwords?

The phishing scam is being run through the spam messages which steal sensitive information of the Facebook users. In the attack, the messages are circulated with a subject line of "Hello" and a prompt to check out "areps.at" or other URLs ending in ".at".It is highly recommended not to click on these links for your computer security.

The mails with the subject line "Look at This" and links like -- goldbase.be, greenbuddy.be, silvertag.be, picoband.be -- leads to some malicious Web sites, which if visited, could secretly download malware onto computers through a "drive-by download" application.

The URL connectivity, before being blocked directs the visitor to a fake Facebook page and the mail ID and password are stolen as soon as it is logged-in again.

According to the All Facebook blog.Facebook, the password in such cases should be changed immediately and the same message should be sent across to one's Facebook acquaintance.

"Whoever is behind the scam has been steadily amassing a large number of e-mail addresses and passwords over the past few weeks," the blog says.

Though, Facebook spokesman Barry Schnitt said: "The impact of this attack or the previous ones are not widespread and only impacted a tiny fraction of a per cent of users.

"We've been updating our monitoring systems with information gleaned from the previous attacks so that each new attack is detected more quickly," he added.

The site has blocked links to the new phishing sites from being shared on Facebook and has added them to the block lists of the major internet browsers.

The social networking site is working with partners to have the sites taken down completely, he said adding Facebook is also cleaning up phony messages and wall posts and resetting the passwords of affected users.

"We believe the bad guys here are phishing an account and then trying those credentials on webmail providers," Schnitt said.

So, for example, if a user is compromised on Facebook and has the same login and ID password for their Gmail, the attacker may be able to intercept the Facebook password reset and compromise the account again in the future, he added. Password must be changed often to maintain your account security and password security.

Tips on Computer Security >>

Free computer security software

Configure Internet Explorer Security

Virus Protection for Computers

Password Security For your computer security

Free computer security software

Within the past two years Consumer Reports National Research Center says one in five people were victimized by cybercrimes. Their computers were infected by spyware or viruses, they were caught by phishing scams, or they had their identity stolen.

Like more than a million others in the last year, he had his identity stolen while shopping on line. 
“They started out small in 15, 25 dollar increments, and they slowly increased. I tallied it up to somewhere close to $25,000.”
Consumer Reports’ Dean Gallea cautions only shop at sites you trust. And it’s essential to protect your computer from spyware, viruses, and spam by installing security software.
Consumer Reports tested security suites costing between 50 and 90 dollars. But Dean found free security software that’s on par with the best. To fight viruses: AntiVir from Free-dash-A-V-dot-com. To prevent spyware: Windows Defender from Microsoft.com. And to stop spam: Spamfighter Standard from Spamfighter.com.
You also want to protect against phishing. These emails look like they come from banks and other companies, but are actually lures to gain access to your accounts.
Dean Gallea, of Consumer Reports, says “Never click on links in e-mails that go to banks or other sites that have your personal information.”
Instead, type the company’s Web address into your browser.  For more your computer security, download free anti-phishing software, such as the McAfee Site Advisor, this warns when you go to a dangerous site.

More on Computer Security >>

Configure Internet Explorer Security

Virus Protection for Computers

Windows Live OneCare – Computer Security

Password Security For your computer security