Complete COMPUTER SECURITY Information

A BHO is a small program that extends Microsoft's Internet Explorer. Examples of BHO usage include visible add-on toolbars in IE, but can also be hidden functions. Adware and spyware as well as browser hijackers often use BHOs to display ads or follow your moves across the internet, because a BHO has access to each URL you visit and can redirect you or display other pages than you requested (sites that infect your PC with Malware or ads, for example). BHOs often use ActiveX installation programs. PERSONALLY, I BLOCK Active-X from running from non-trusted sites. I am running PCWorld's free BHOdemon2 Version: 2.0.0.22, which notifies me when BHOs try to install (I can block the installation). I can also block installed BHOs from running. Advatrix, the Browser Hell Object

Bluetooth Vulerabilities

PC World says: Disable "open" Bluetooth on your phone or PDA. Bluebugging - stealing mobile phone commands Bluejacking - sending unsolicited text messages Bluesniping - using a laptop and powerful antenna to attack from a distance Bluesnarfing - stealing information War-nibbling: driving around looking for Bluetooth signals to attack iPhone's Bluetooth Bug Under Hackers' Microscope Securing Bluetooth Devices Detecting and Attacking Bluetooth-Enabled Cellphones at the Hannover Fairground existing Bluetooth hole has been opened wide - Security watch 6/6/6/05 Bluetooth - Information about Bluebugging - stealing mobile phone commands Bluejacking - sending unsolicited text messages Bluesniping - using a laptop and powerful antenna to attack from a distance Bluesnarfing - stealing information War-nibbling - driving around looking for Bluetooth signals to attack CLICK HERE for more information about BLUETOOTH

BROWSER HIJACKING

Has Your Browser Been Hijacked? Browser Hijack Blaster (free) - Stop Web sites from changing your home page without your permission. AdFree v3.1 - replaces animated banner ads with a dummy - free AdAware Plus, $27, also blocks hijacking

BROWSER REDIRECTION (mis-direction

BROWSER SECURITY

Browser Compatibility Tutorial IE attack then launches malicious Firefox attack - IE and Firefox Join In to Attack You Vulerabilities found in Apple's beta version of it's Windows Safari Browser Mozilla to Disable ANI Exploits' Path of Entry - 4/5/2007 Best Free Browser Protection Utilities - techsupportalert.com Scanit - browser security-check Web site Qualys - browser security-check Web site Play It Safe With the Right Browser Security Settings The Internet - Basics Safe Browsing Email Minimum Maintenance Browser Info & Updates - CNet

BROWERS - SURFING MORE SAFELY

Plugins/software to warn you of dangerous web sites. SiteAdvisor - McAfee - recommended by PCworld Scandoo (public beta) - toolbar - recommended by PCworld Mozilla fixes 9 Firefox Vulnerabilities, recently Note, as others have reported, that at least one reported bug in Firefox is unaddressed by these updates Firefox Still Tops IE for Browser Security

BROWSER VULERABILITIES

Click-to-Call Bug Found in iPhones, and probably are in other phone Browsers IE attack then launches malicious Firefox attack - IE and Firefox Join In to Attack You Firebug was discovered to have a vulnerability - update to version 1.04 FireFox users really need to install the Microsft ANI (Animated Cursor) Patch, issued 4/3/2007 - Security Bulletin MS07-017 More IE & Firefox Vulernabilities Bugs were disclosed for Firefox, IE, and even Opera, last week The Adobe Reader vulnerability also effects Browser plug-ins for IE and Firefox Opera users need to update to version 9.10 in order to eliminate two threats. vulnerability in Web-hosted PDF files revealed Adobe Reader 8 is not vulnerable to this problem. I just noticed that Adobe Reader 8 is available

BUSINESS DATA SECURITY

Protecting Personal Information: A Guide for Business - FTC

CERT

CERT - Home Computer Security CERT - Home Network Security Information Technical Cyber Security Alerts - US-CERT CERT - Computer Emergency Response Team - Carnegie Mellon US-CERT Vulnerability Notes Database

CERTIFICATES

Firefox EV Plug-In Only Supports VeriSign Certificates

CONFERENCES & CONFERENCE PAPERS

ACM Conference on Computer and Communications Security (CCS) - next: October 29 - November 2, 2007 Solutions to Real Security Problems - acsac.org - next: December 10-14th, 2007 Black Hat Security Conference Archives

COOKIES - COOKIE INFO

New Norton 360 (2008) Gets Tough With Tracking Cookies Cookie Central Both Ad-Aware & Spybot remove cookies Cookies, Internet - CIAC Unofficial Cookie FAQ Information About Cookies on Microsoft.com What is cookie? - A Word Definition From the Webopedia Computer HTTP cookie - Wikipedia, the free encyclopedia Howstuffworks "How Internet Cookies Work" Internet Cookies How to Enable Cookies Client Side State - HTTP Cookies - The original cookies specification HTTP Specifications and Drafts - Cookies Time for a new (HTTP) Cookie recipe? - Implementer's notes HTTP-wg Archive: errata for cookie spec O'Reilly Network -- Cookie Specification Vulnerabilities Bug ID: 4391956 Cookie: API should enforce Cookie spec when ... PROBLEMS WITH SPECIFIC COOKIES: Gmail cookie vulnerability exposes user's privacy CLICK HERE for more information about COOKIES

CROSS-SITE SCRIPTING (XSS)

Data Held for Ransom

Strange as it sounds, one of the newer dangers is software that Encrypts your data, and then demands that you pay a ransom to get access to your data. This technique targets Windows users. Cryzip is an early example of such a program. Cryzip locates 44 different file types, zips them into an encrypted zip file, deletes the original files, and then presents you with a ransom demand. Sometimes you can recover most of your files with an undelete program. Some free File Undelete programs are here, at PC World. Other Free File UNDELETE Software PC World recommends that you do not pay the ransom, nor go to any specified links. Instead, make a police report, using an uninfected computer, search the Internet for the text in the ransom "note". Kaspersky calls it Zippo and Panda Labs calls it ZippoCryptor. The latest Trojan to hold people's data hostage apparently has a flaw. The password for all systems is the same and is stored in plaintext on the victim's system, according to LURHQ. The password is C:\Program Files\Microsoft Visual Studio\VC98. New Trojan is Holding Data Ransom Data Ransom Attempt Shows Need for Vulnerability Management

DB, SQL,... Vulnerabilities

Is SQL Injection Still a Major Security Threat?

DOS - Denial Of Service

denial-of-service attack - Nationmanster Denial of Service Attacks - CERT Denial-of-service attack - wikipedia DOS Extortion Fading

DOWNLOADS

All Privacy & Security Downloads - PC World

DOWNLOADERS

Downloaders are simple Malware programs used to download dangerous programs that try to steal your identity, passwords, money, and everything else that they consider useful to them. Dealing With Downloaders Downloader after downloader

ELECTRONIC GADGEST ARE OFTEN INFECTED

Electronic Gadgets Often Full of Computer Viruses computer virus recently discovered on digital photo frame

Email

guerrillamail - disposable e-mail addresses which expire after 15 Minutes

EMULATION (WINE on Linux,...

Spyware Horror Story: Toxic Wine - A WINE Virus effecting Linux systems Linux/BSD still exposed to WMF exploit through WINE!

ENCRYPTION (Click here)

ENCRYPTION FLAWS

to break into a computer's encrypted hard drive? Just freeze the machine's memory chip Intuit Data File Encryption Crack (Backdoor) Discovered

ETHERNET / 802.11 SECURITY - subjects not covereed elsewhere

The Unofficial 802.11 Security Web Page CLICK HERE for more information about ETHERNET

EULA -

EULAs - End User License Agreement. Click here for more information about EULAs EULAnalyzer - checks EULAs for bad agreements

EXCEL ATTACKS

Pump-and-dump scammers turn to Excel Microsoft Posts Excel 'Zero-Day' Flaw Workarounds

FIBRE OPTICS SECURITY PROBLEMS

Fiber-optic networks can be eavesdropped on using equipment costing as little as $1,000

Firefox / Mozilla

FIREFOX - DOWNLOAD Latest Version (2.0.0.14) here

NoScript Version 1.6.4 - for Firefox - YOU NEED THIS PROTECTION Smart Ways to Use Mozilla Firefox Firefox 3 Beta 1 Is Out Firefox 3 Beta Boosts Usability, Security Firefox 3 Alpha Blocks Malware, Secures Plug-in Updates Firefox EV Plug-In Only Supports VeriSign Certificates Password vulnerability in Firefox 2.0.0.5 Microsoft: No Flaw In IE, says it's Mozilla's fault

FIREWALLS

I strongly recommend BOTH a Hardware Firewall and a Software Firewall (free ZoneAlarm works very well). ZoneAlarm (and other such software) can prevent those spyware and keylogger programs from "calling home" with your personal information. I am using ZoneAlarm Pro, version 7.0.462.000. Best Free Firewalls - techsupportalert.com What is firewall? - Webopedia How Firewalls Work - howstuffworks Understanding Windows Firewall in Windows XP Service Pack 2 - Microsoft Why you should use a computer firewall Firewall FAQ Firewall Q&A Programmatically controlling a UPnP Firewall - Knox North 2008 Firewall Software Report - toptenreviews.com Free Software Firewalls Differences and Features of Hardware & Software Firewalls Firewall Debate: Hardware vs. Software Hardware Firewalls vs. Software Firewalls Firewalls: Hardware and Software - AntiOnline (5/2004) Is the Windows XP firewall enough? What does a router (hardware) do? Internet firewalls: Frequently asked questions What You Should Know About Firewalls - PCWorld Home PC Firewall Guide Firewalls and Internet Security Firewall Reference Books The Windows (DOS) command: netstat -an will list all your open ports SEE Also: IP FILTERING SEE ALSO: What To Do

FIREWALLS, HARDWARE

These can be purchased as standalone "appliances", but people usually buy them bundled with Cable/DSL Routers. I and most security experts believe that even home users need both a Hardware Firewall and a Software Firewall. For people who know aobut firewalls, you can share your firewall intrusion logs with "DShield" a company dedicated to fighting intrusions. DShield provides a platform for users of firewalls to share intrusion information. DShield is a free and open service. If you use a firewall, please consider submitting your logs to the DShield database. You may either download one of DShield's ready to go client programs, or use their Web Interface to manually submit your firewall logs. Registration is encouraged, but is not required. DShield - Home Page DShield reports and database summaries DShield - A community approach to intrusion detection Firewalls: Hardware Do You Know � Hardware Firewalls Hardware Firewalls - cybercoyote LeakTest - Hardware Firewalls/NAT Routers Hardware Tips: Keep Your PC Hidden From the Bad Guys - PCWorld What Hardware Firewalls Does ScamBusters Recommend?

FIREWALLS, SOFTWARE

ZoneAlarm - Free and Professional - my favorite Comodo Firewall Pro - a good one COMODO FIREWALL PRO VERSION (3.0) IS AWARDED HIGHEST 5-STAR RATING FROM CNET's DOWNLOAD.COM Comodo Firewall Pro 3.0 - Review - PC MAGAZINE SmoothWall Express - smoothwall dot org Use SHIELDS UP (grc.com) to see if your Firewall works - Highly rated Software Firewalls - Norton Internet Security Software Firewalls Software Firewalls versus Wormhole Tunnels Software Firewalls: Made of Straw? Part 1 of 2 SEE ALSO - LINUX FIREWALLS See also: IP Info See also: IP Addressing See also: IP Masquerade See also: Linux IP Masquerade See also: IP ROUTING - START HERE and go down the page See also: IP Sub-Netting See also: IP Filters/Filtering, Port Forwarding & IP Firewall Administration See also: IP Management See also: IP Multitask

FLAWS / VULNERABILITIES / CVE - Software

National Vulnerability Database (NVD) - NIST - includes US CERT, CVE US-CERT Vulnerability Notes Database CVE - Common Vulnerabilities and Exposures Open Source Vulnerability Database - OSVDB Acticle about the above NIST Vulnerability Database OVAL - Mitre Standard Eases Vulnerability Research SPEFIC FLAWS: Gmail cookie vulnerability exposes user's privacy VML vulernability - MS fix is out - can be infected just by viewing a Web page - JAN 2007 Acer Preloaded Vulnerability - 1/16/2007

FREE SECURITY PROGRAMS

15 free security programs that work AVG Technologies will release AVG Anti-Virus Free 8.0

GOOGLE & GOOGLE DESKTOP VULNERABILITIES

Google Desktop Vulnerability - the fix is in version 5.0.0701.30540

GOVERNMENT, FEDERAL & OFFICIAL SITES - REPORTING PROBLEMS

National White Collar Crime Center (NW3C) More coming soon.

HACKERS, ANTI, Information

NOTE: Strictly speaking, "Hackers" are not neccessarily bad guys, but these days, "Hackers" is a commonly used term for people who do "bad things" to other people's computers and/or software.

Security Tip: Buy Password-Cracking Software Passware sells a large collection of programs for cracking passwords PGP users can be tricked - don't know if it's still true computer security resource - secureroot

HARDWARE DIAGNOSTICS

Hardware Diagnostics - PCworld Troubleshooting CLICK HERE for more information about FIRMWARE CLICK HERE for more information about HARDWARE

COMPUTER HARDWARE, PROTECTING YOUR

SURGE PROTECTORS WHOLE HOUSE Surge Protectors UPS / AVR Power Cleaners / AC line Filters GFI / GFCI / RCCB AFCI

HOME COMPUTER SECURITY SPECIFICS

(Computer) SECURITY RECOMMENDATIONS

The Ten Commandments of PC Security CBC News Indepth: Computer security - How safe is your computer? Researchers say they peeled The Onion Router The Encyclopedia of Computer Security Home Computer Security - CERT OnGuardOnline.gov provides practical tips from the federal government Microsoft - Security at Home Security Essentials - Microsoft Stay Safe Online. National Cyber Security Alliance Home PC Firewall Guide Guide for. Home. Computer. Security NIST Computer Security Division's CSRC Home page Federal Trade Commission - Consumer Information Security Security Tip No. 9 - Security for your privately owned home computer Home Computer Security Checklist - digitalchoke

HOSTS file

Access to/from Sites (URLs/Web addresses) listed in your "hosts" file are blocked or re-directed to specific IP addresses by Microsoft Windows. Hosts files were originally (an are still used) used in Unix, MAC OS, and now Linux and Windows operating systems as a method to prevent suspected, alleged, "bad/AD depositing/Spyware depositiong/..." sites from effecting your computer. The contents of your Hosts file may be edited. If you run Anti-Spyware or Anti-Virus programs, you may have to use one of those programs to edit the Hosts file (otherwise, those programs may try to proect your computer by NOT allowing you to edit to the Host file). Both your Anti-virus and Anti-Spyware programs will probably automatically add hundreds of suspected, alleged, "bad" sites to your Host file, in an effort to protect your computer from these sites. Normally, You the computer user, would have NO need to worry about, modify, nor setup your computer's Hosts file. Only Advanced users may wish to modify the Hosts file. Blocking Unwanted Parasites with a Hosts File MVPS HOSTS file is a free download - get a list of sites that MVPS says should be blocked Hosts file - Wikipedia, the free encyclopedia Host - Wikipedia, the free encyclopedia What is the Hosts file? Gorilla Design Studio Presents: The Hosts File - blocks major advertisers' hostnames The Hosts File and what it can do for you hosts-file.net - The Official Home of hpHOSTS: hpguru's HOSTS file

IDENTITY THEFT

Identity theft at the gas station - how to avoid - video Black Hat Lifts the Cover Off ID Theft Phishing Networks In An Instant, Retirement Savings Vanish Liberty Alliance takes on ID theft
Caught by a Phish Sunbelt Adds Detection for ID Theft Keylogger Spyware Researchers Discover ID Theft Ring The latest Identity Theft technique - 10/2004 Limiting Identity Theft Damage

IM - INSTANT MESSAGING

Critical AOL's IM FLAW Understanding How an IM Attack Works The Harm Public Instant Messaging Can Do to Your Business Minimizing the Security Risks of Instant Messaging How IM Causes Network Security Problems Instant Messaging Attacks - PCworld Windows Messenger users can't send messages containing certain strings including '.info'. Click here for more information

Complete Home Security and Home Maintenance

INTEL SECURITY INFORMATION

Interesting - latest Microsoft XP updates INCLUDE Intel's Processor Patches (see below) Critical Update for Intel Core CPUs - June 27, 2007 SEE ALSO: SPIM

INTERNET EXPLORER

Problems In Recent (December) IE Cumulative Update IE Automatic Component Activation Preview IE 7 Bug Reopens Debate Over Patch Responsibilities IE 7 Update Drops WGA Validation Requirement (updates available to illegal copies of IE) Microsoft: No Flaw In IE, says it's Mozilla's fault Internet Explorer 7 vulnerabilities can be used to prevent the user from leaving a Web page, even if it appears that they have done so IE attack then launches malicious Firefox attack - IE and Firefox Join In to Attack You Download IE7 beta 2? - IT'S a SCAM complicated and interesting tool for phishing attacks in IE7 Microsoft Investigates IE 7 Vulnerability TURN OFF JAVASCRIPT in IE - all versions - Microsoft says so - 6/2004 Turn OFF JAVA, at least from unknown sites. IE 7 Cautionary Tale Download tool to Remove Microsoft IE 7 beta 2 (only)

Intrusion Detection Languages / CISL

Common Intrusion Specification Language, or CISL A CISL Tutorial Common Intrusion Detection Framework, or CIDF

Intrusion Protection Systems - IPS

IPS Solutions Get Smarter IPS Devices Reach for High End

IP ADDRESS - Where is it located & who owns it?

IP address's location - networldmap Lots of lookups based on a given IP address - dnsstuff WhatIsMyIP.com 127.0.0.1 - IP Loopback Address CLICK HERE FOR MORE IP ADDRESS INFORMATION

ISO & ISO 17799

ISO 17799, ISO17799 and Computer Security News The ISO 17799 Information Security Portal See also ISO Standards See also: ISO Organization

JAVA and J2EE Security Problems

Java VM Privilege Elevation - vulnerability Java Security Traps Worsen - 5/9/2007 Tutorial: Developing real-time and safety-critical embedded Java applications - Part 1 Tutorial: Designing real-time and safety-critical embedded Java applications - Part 2 JAVA - Infected GIF files can take control of your computer These JAVA versions contain fixes for this vulernability. Older JAVA versions HAVE the vulernability. Sun Java 2 Runtime Environment 1.3.1_19 Sun Java 2 Runtime Environment 1.4.2_13 Sun Java 2 Runtime Environment 5.0.Update 10 Sun Java 2 Standard Edition SDK 1.3.1_19 Sun Java 2 Standard Edition SDK 1.4.2_13 More details on the above JAVA vulnerability CLICK HERE for more information about JAVA / J2EE / J2ME / J2SE / JAVA2 ...

Javascript Hijacking

JavaScript Attacks Get Slicker AJAX Apps Ripe Targets for JavaScript Hijacking sneaky JavaScript Datanotary Hijack - spywareinfo Preventing Web Site Hijacking or Theft Script Console - Javascript TitleTimer is a Javascript-prod ... JavaScript Hikacking - net-security CLICK HERE for more information about JavaScript

Keyjacking / Keylogging

There were 180 known, unique keyloggers in Aptril, 2006. Suggestions: 1] Use a Software Firewall (other than the Windows XP Firewall). 2] Don't use the same password for different sites. 3] Change passwords often. Sunbelt Adds Detection for ID Theft Keylogger Keyboard Spy: implementation and counter measures

Malware (Anti-Malware)

In law, Malware is sometimes known as a computer contaminant, for instance in the legal codes of California, Virginia, and several other U.S. states. WHAT TO DO IF YOU SUSPECT YOU HAVE AN INFECTED COMPUTER WHAT PROGRAMS ARE STARTED AT BOOTUP? WHAT IS RUNNING ON YOUR WINDOWS SYSTEM? Be very careful about opening ".HTA" (Hypertext-Application) Files: Five of the Dirtiest Malware Tricks McAfee Malware Trends - 1Q2007 Kaspersky Top 20 - 1Q2007 Malware, Spyware, Adware Or Trojan - What's the Fuss? Computer "Malware": Worms, Trojans, Back Doors and Viruses Defining Malware: FAQ - Microsoft Computer Security Threats - Chart of Characteristics - CACI HNS - Malware of the week: Piggi.B worm, ReverseClick.A trojan and ... Read & Run Me First - Malware Removal Guide Malware Breaks Under Pressure Free website lists programs with spyware & malicious adware - StopBADware.org Microsoft's Free Malware Remover - XP, WIN2K & WIN2003 ONLY Malware Removal - eurekster PC Magazine's Head Off Spyware, Viruses and Malware Series History of Malware Malware info - Noticebored Guide to Malware Incident Prevention and Handling - NIST CMEprovides single, common identifiers to