Sunday, August 17, 2003
Blasted Worm
Will Site-specific viruses become the norm?
The past week has seen lots of hoo-hah (sorry, media frenzy) about the Blaster worm and its deleterious effects upon 32-bit Windows versions. And in a very Klez-like move, rejuvenates itself. Of course, Blaster tries to be more cunning, but past August 16, it can re-attack on any day of September thru December. Come January 2004, and Blaster will remain dormant until the 16th of that month, before coming back to life. This post-16th day danger remains until August. Whereupon the cycle shall repeat itself.
Worm_MSblast.A (W32/Lovsan.worm, W32/Blaster-A, W32.Blaster.Worm, Worm.Win32.Lovesan) specifically targets Windows NT, 2000, XP, 2003/.Net Server. And seeks to exploit the RPC DCOM Buffer Overflow vulnerability that allows a remote attacker to gain Administrative access (full control) to an infected computer and execute any and all executable code on the target computer.
The worm continually scans IP addresses to seek out vulnerable computers running either Windows 2000 or XP with an open Port 135 to self-propagate. Blaster then attempts to create a remote shell on TCP Port 4444 and if successful instaryucts the infected computer to begin downloading code through UDP Port 69.
Infected computers are used to launch a DDoS (Distributed Denial Of Service) attack against windowsupdate.com -- a URL used by Microsoft to release system updates and patches -- between 16-31 January to August, and any time from September thru December. However, for the moment, the effect of MSBlast.A has been nullified since this specific URL has been suspended by Microsoft. But it's just a matter of time before an enterprising hacker modifies the worm's code to launch a DDoS against another URL. Or worse, against a range of IP addresses!
Installing the RPC update is just one of the many steps you can take. I also recommend installing Microsoft's Service Pack 4 for Windows 2000 or Windows XP Service Pack 1. If you are running a not-so-legal copy of either, search the Net for instructions on how to 'slipstream windows 2000 xp install'. You should use a firewall; even if you are part of an office network. Nobody is safe anymore. Even if your company has specific restrictions on installing software get yourself some protection.
Make sure your firewall blocks access to Port 135. This is the same port used by Windows Messenger service to send messages to another Windows computer. Do note that this Messenger service is different from the instant messaging (MSN/Exchange/.Net) Messenger service. And limit sharing of your computer's drives and other resources; even when on a network. Implement a 30-day password policy (i.e. changes passwords every 30 days). And make sure that even read-only access to your shared drives requires a password.
Do regularly check your computer for MSBLAST.EXE (check Task Manager's running processes: Ctrl+Alt+Del or right-click on the System Tray). And each anti-virus vendor has a system scanner. I, once again, believe in Trend Micro's version.
To manually remove the worm (if infected) bring up Task Manager and find MSBLAST.EXE in the list of running processes. Select it and click the End Process button. Refresh (View > Refresh Now) to make sure that the file has indeed been stopped. As an extra layer of security. Close Task Manager, wait at least 5 minutes, then re-open and recheck.
You will need to steel yourself for some Registry editing to remove the worm's auto-start capability. Open Registry Editor (Start >Run type Regedit and press Enter). In the left panel locate HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run. And in the right panel, find and remove "windows auto update" = MSBLAST.EXE. Then close the Registry Editor. And restart your computer.
Watch out for Troj/Backdoor-ARR (Troj/GrayBird.A); a new Trojan pretending to be a Blaster worm patch from Microsoft! It arrives as an email attachment and enables infected computers to be accessed and controlled remotely via the Internet. This access includes stealing passwords, sending emails and recording keystrokes.
The infected message titled "updated" is supposedly sent from 'webmaster@microsoft.com' and the message body reads
And finally, the firewall and open-port scanning abilities of Steve Gibson's ShieldsUp service have been greatly enhanced. I recommend visiting this site weekly to (re)check if your firewall is working as it should and that your data and computer are blocked from known threats. Ideally, you should get an all green signifying complete stealth (no computer present). As opposed to spots of blue (port found) or red (port open and responding to pings). The service is extremely popular with over 20 million visits!
However do be careful with the results. Avoid blindly blocking everything that the site finds is open in a knee-jerk reaction. Windows 2000/XP need several ports to remain open if you connect to the Internet via cable Ethernet or a shared LAN proxy server.
G Menon Click Here to Send me Mail
Will Site-specific viruses become the norm?
The past week has seen lots of hoo-hah (sorry, media frenzy) about the Blaster worm and its deleterious effects upon 32-bit Windows versions. And in a very Klez-like move, rejuvenates itself. Of course, Blaster tries to be more cunning, but past August 16, it can re-attack on any day of September thru December. Come January 2004, and Blaster will remain dormant until the 16th of that month, before coming back to life. This post-16th day danger remains until August. Whereupon the cycle shall repeat itself.
Worm_MSblast.A (W32/Lovsan.worm, W32/Blaster-A, W32.Blaster.Worm, Worm.Win32.Lovesan) specifically targets Windows NT, 2000, XP, 2003/.Net Server. And seeks to exploit the RPC DCOM Buffer Overflow vulnerability that allows a remote attacker to gain Administrative access (full control) to an infected computer and execute any and all executable code on the target computer.
The worm continually scans IP addresses to seek out vulnerable computers running either Windows 2000 or XP with an open Port 135 to self-propagate. Blaster then attempts to create a remote shell on TCP Port 4444 and if successful instaryucts the infected computer to begin downloading code through UDP Port 69.
Infected computers are used to launch a DDoS (Distributed Denial Of Service) attack against windowsupdate.com -- a URL used by Microsoft to release system updates and patches -- between 16-31 January to August, and any time from September thru December. However, for the moment, the effect of MSBlast.A has been nullified since this specific URL has been suspended by Microsoft. But it's just a matter of time before an enterprising hacker modifies the worm's code to launch a DDoS against another URL. Or worse, against a range of IP addresses!
Installing the RPC update is just one of the many steps you can take. I also recommend installing Microsoft's Service Pack 4 for Windows 2000 or Windows XP Service Pack 1. If you are running a not-so-legal copy of either, search the Net for instructions on how to 'slipstream windows 2000 xp install'. You should use a firewall; even if you are part of an office network. Nobody is safe anymore. Even if your company has specific restrictions on installing software get yourself some protection.
Make sure your firewall blocks access to Port 135. This is the same port used by Windows Messenger service to send messages to another Windows computer. Do note that this Messenger service is different from the instant messaging (MSN/Exchange/.Net) Messenger service. And limit sharing of your computer's drives and other resources; even when on a network. Implement a 30-day password policy (i.e. changes passwords every 30 days). And make sure that even read-only access to your shared drives requires a password.
Do regularly check your computer for MSBLAST.EXE (check Task Manager's running processes: Ctrl+Alt+Del or right-click on the System Tray). And each anti-virus vendor has a system scanner. I, once again, believe in Trend Micro's version.
To manually remove the worm (if infected) bring up Task Manager and find MSBLAST.EXE in the list of running processes. Select it and click the End Process button. Refresh (View > Refresh Now) to make sure that the file has indeed been stopped. As an extra layer of security. Close Task Manager, wait at least 5 minutes, then re-open and recheck.
You will need to steel yourself for some Registry editing to remove the worm's auto-start capability. Open Registry Editor (Start >Run type Regedit and press Enter). In the left panel locate HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run. And in the right panel, find and remove "windows auto update" = MSBLAST.EXE. Then close the Registry Editor. And restart your computer.
Watch out for Troj/Backdoor-ARR (Troj/GrayBird.A); a new Trojan pretending to be a Blaster worm patch from Microsoft! It arrives as an email attachment and enables infected computers to be accessed and controlled remotely via the Internet. This access includes stealing passwords, sending emails and recording keystrokes.
The infected message titled "updated" is supposedly sent from 'webmaster@microsoft.com' and the message body reads
[.]
Microsoft began investigating a worm reported by Microsoft Product Support Services (PSS). A new worm commonly known as W32.Blaster.Worm has been identified that exploits the vulnerability that was addressed by Microsoft Security Bulletin MS03-026.
Download the attached update program. [.]
Attachment: 03-26updated.exe (319,670 bytes)
And finally, the firewall and open-port scanning abilities of Steve Gibson's ShieldsUp service have been greatly enhanced. I recommend visiting this site weekly to (re)check if your firewall is working as it should and that your data and computer are blocked from known threats. Ideally, you should get an all green signifying complete stealth (no computer present). As opposed to spots of blue (port found) or red (port open and responding to pings). The service is extremely popular with over 20 million visits!
However do be careful with the results. Avoid blindly blocking everything that the site finds is open in a knee-jerk reaction. Windows 2000/XP need several ports to remain open if you connect to the Internet via cable Ethernet or a shared LAN proxy server.
G Menon Click Here to Send me Mail
Saturday, August 02, 2003
The Internet's Still an Interesting Place to Be
When sitting back and (virtually) smelling the roses, I usually chance across interesting stuff. The only problem with the daily information deluge is dealing with it. This even after cutting back on the newsletter newsletters subscribed. Or sites visited to mark overnight change. I usually put off reading personal messages and newsletters until the weekend. So while monitoring simultaneous PCQ Linux and Windows 2003 .Net Enterprise installs I decided to rock.
Calculate Spam's ROI?
Found an interesting Spam Calculator from Trend Micro. This maps employees with spam received (as a percentage), and adds IT maintenance service costs to generate per-employee and annual organization spam costs. To use this online service (http://www.trendmicro.com/form/spam/calculator.asp), you may need to complete a form. But once done data sharing, calculate the ROI (return on investment) expended on spam control.
Although the calculator works in dollars, use your local currency costs. And replace the currency symbol with your own when using the figures generated. The example I used was for my company:
The cost of spam for IT services was Rs 8,182. And the total cost to organization was Rs 15,182. But my cost savings using Trends anti-spam solutions were a mere Rs 760. Evidently, my organization doesn't have a spam problem. Oh happy day! But if we had 3000 or more users with all other costs constant, savings with spam-control would exceed Rs 50,000!
On the free software front there's a new Firebird release. v0.6.1 (http://www.mozilla.org/products/firebird/) brings several interface and feature improvements.(http://www.mozilla.org/frontpage/productIconFirebird.png). To use, don't install over a previous version. Use a fresh folder. The new build seems to have improved cache access even when offline. And the list of 3rd-party extensions (http://texturizer.net/firebird/extensions.html) available has grown too.
I liked TTLO (Things They Left Out) that adds productivity features including using the mouse-wheel to scroll a line at a time, enlarge text or scroll through the History. Another cool add-in the Mycroft search extensions. Firebird also supports theme. But the included one works for me.
There's also a new Thunderbird 0.1(http://www.mozilla.org/projects/thunderbird/) mail and news client available too. It's based on the module included with Netscape (and Mozilla). I had tested an earlier version. But rejected it after being unable to configure an IMAP server account. Or for that matter, multiple mail accounts.
The new build in true Mozilla tradition is available as a Zip download of just 8.9 MB! Builds (http://ftp.mozilla.org/pub/thunderbird/releases/0.1/) are available for Linux, MacOS, and Win32. Feature enhancements customizable toolbars, separate UI extensions (http://texturizer.net/thunderbird/extensions.html), themes support, easy mail compose (similar to Opera M2 but more intuitive and simplified menus. Of course, I do have to test to see whether Thunderbird is good or still needs more work.
That's it for now. Next week, people.
When sitting back and (virtually) smelling the roses, I usually chance across interesting stuff. The only problem with the daily information deluge is dealing with it. This even after cutting back on the newsletter newsletters subscribed. Or sites visited to mark overnight change. I usually put off reading personal messages and newsletters until the weekend. So while monitoring simultaneous PCQ Linux and Windows 2003 .Net Enterprise installs I decided to rock.
Calculate Spam's ROI?
Found an interesting Spam Calculator from Trend Micro. This maps employees with spam received (as a percentage), and adds IT maintenance service costs to generate per-employee and annual organization spam costs. To use this online service (http://www.trendmicro.com/form/spam/calculator.asp), you may need to complete a form. But once done data sharing, calculate the ROI (return on investment) expended on spam control.
Although the calculator works in dollars, use your local currency costs. And replace the currency symbol with your own when using the figures generated. The example I used was for my company:
- 20 souls
- average annual salary of Rs 120,000
- receive 40 mails a day
- of which 60% are spam or junk
- 10 hours per month on IT-related activities
- IT person's salary identical to other employees average
The cost of spam for IT services was Rs 8,182. And the total cost to organization was Rs 15,182. But my cost savings using Trends anti-spam solutions were a mere Rs 760. Evidently, my organization doesn't have a spam problem. Oh happy day! But if we had 3000 or more users with all other costs constant, savings with spam-control would exceed Rs 50,000!
On the free software front there's a new Firebird release. v0.6.1 (http://www.mozilla.org/products/firebird/) brings several interface and feature improvements.(http://www.mozilla.org/frontpage/productIconFirebird.png). To use, don't install over a previous version. Use a fresh folder. The new build seems to have improved cache access even when offline. And the list of 3rd-party extensions (http://texturizer.net/firebird/extensions.html) available has grown too.
I liked TTLO (Things They Left Out) that adds productivity features including using the mouse-wheel to scroll a line at a time, enlarge text or scroll through the History. Another cool add-in the Mycroft search extensions. Firebird also supports theme. But the included one works for me.
There's also a new Thunderbird 0.1(http://www.mozilla.org/projects/thunderbird/) mail and news client available too. It's based on the module included with Netscape (and Mozilla). I had tested an earlier version. But rejected it after being unable to configure an IMAP server account. Or for that matter, multiple mail accounts.
The new build in true Mozilla tradition is available as a Zip download of just 8.9 MB! Builds (http://ftp.mozilla.org/pub/thunderbird/releases/0.1/) are available for Linux, MacOS, and Win32. Feature enhancements customizable toolbars, separate UI extensions (http://texturizer.net/thunderbird/extensions.html), themes support, easy mail compose (similar to Opera M2 but more intuitive and simplified menus. Of course, I do have to test to see whether Thunderbird is good or still needs more work.
That's it for now. Next week, people.
Sunday, July 20, 2003
Operatic Glories
Opera 7.2 Beta features improved mail client, plus great WinZIP alternate, and the death of a good utility.
Another significant software upgrade is Opera 7.20 Beta 1 (Build 2981) available in both Windows and Linux versions. But the copy (3 MB non-Java / 13.2 MB with Sun JRE; Windows, shareware) I downloaded is disappointing.
A critical learning is not to install this Beta over an existing Opera build. Or be prepared for lots of rendering problems. The new rendering engine is more intolerant than ever before of poor bandwidth conditions, slow DNS resolution and of non-standard compliant CSS. I also experienced several JavaScript-related errors.
Even Opera's own page was not immune to browser vagaries and it took me 3 refreshes just to get the page to display as it's designer intended! The problem appears related to the Synchronous DNS setting. But worked differently at different instances.
This Opera Beta also induced several system restarts. As well as 100% CPU utilization. It caused Windows 2000 to crash not once, but 3 of the 7 times I used it prior to writing this column!
On the positive side, the M2 email and news client has certainly improved. It had fewer problems with IMAP mail accounts or with retrieving POP mail from one of my (notoriously slow) ISP accounts. It also managed to render HTML-format mail correctly; even in print.
If you install a fresh copy of Opera 7.20 Beta 1, you will find that in-page image rendering has really improved. I tested Opera 7.20 with cached sites in Google, as well as the actual URL. But didn't experience long white-out periods on-screen.
In one quick test, 28 images were rendered in under 48 seconds with an average throughput of 1.2 kbps. I also found that an irritating Hotlist bug that would create new folders as branches of an existing folder is fixed. As is bookmark import from pre-Opera 6.x versions.
WinZIP and WinRAR make way, PowerArchiver 2003 v8.5, the ultimate archiving tool is here! This shareware (2.5 MB, Windows, Shareware) is the best compression client available. It's supported the Deflate 64 standard far longer than WinZip (whose v9 Beta supports the format).
PowerArchiver also has other resource- and time-optimization features like a direct-to-zip option. And internal file viewer that supports many images and text formats. The new version is also much faster with a smoother interface that supports Windows XP ClearType.
A great and free registry cleaner, JV Power Tools, has gone shareware without any warning. There's a fair amount of online angst that some Beta testers received free copies. But other didn't and instead were expected to pay the app price of $30.
JV PowerTools used to be a great application once and the zero price made it even more attractive. I began using it in 1997, but regrettably by mid-2002 the software seems to have peaked. And began to do more harm than good.
However, if you get a chance checkout the free RegScrubXP 3.25 (580 kB, Windows, freeware) and EasyCleaner 2 Beta 1 (788 kB, Windows, freeware). These work with Windows 2000 and later. I've just downloaded a copy, and plan to check them out soon. Get ahead of this column and live life dangerously.
Microsoft will shortly be releasing consumer versions of DirectX 9.0b. This features enhanced security and privacy features. However, there's a leaked Developer Edition available for download.The release packages include both the SDK as well as an end-user runtime.
And finally there's Popout Prism: a unique new Web browser from Xerox's Palo Alto Research Center (PARC). This features a thumbnail overview of a Web page with attention-grabbing pop-outs generated dynamically from user-input URLs and keywords. Although this software supposedly improves productivity, I was unable to test it out. I run the most recent version of the Sun JRE (v1.4.x) but Prism insists on JRE 1.3. I treid everything, from uninstalling my newer JRE for the Prism varaint to downloading the complete copy of the latter with JRE 1.3 included. However, all attempts failed! The JRE set itself up fine. But Popout Prism kept giving an incorrect Java version number error! This is (perhaps) yet another reason why PARC rarely gets to profit from its inventions. Their other famous missed opportunities include the mouse and a windows-like graphical user interface.
G Menon Click here to email me
Opera 7.2 Beta features improved mail client, plus great WinZIP alternate, and the death of a good utility.
Another significant software upgrade is Opera 7.20 Beta 1 (Build 2981) available in both Windows and Linux versions. But the copy (3 MB non-Java / 13.2 MB with Sun JRE; Windows, shareware) I downloaded is disappointing.
A critical learning is not to install this Beta over an existing Opera build. Or be prepared for lots of rendering problems. The new rendering engine is more intolerant than ever before of poor bandwidth conditions, slow DNS resolution and of non-standard compliant CSS. I also experienced several JavaScript-related errors.
Even Opera's own page was not immune to browser vagaries and it took me 3 refreshes just to get the page to display as it's designer intended! The problem appears related to the Synchronous DNS setting. But worked differently at different instances.
This Opera Beta also induced several system restarts. As well as 100% CPU utilization. It caused Windows 2000 to crash not once, but 3 of the 7 times I used it prior to writing this column!
On the positive side, the M2 email and news client has certainly improved. It had fewer problems with IMAP mail accounts or with retrieving POP mail from one of my (notoriously slow) ISP accounts. It also managed to render HTML-format mail correctly; even in print.
If you install a fresh copy of Opera 7.20 Beta 1, you will find that in-page image rendering has really improved. I tested Opera 7.20 with cached sites in Google, as well as the actual URL. But didn't experience long white-out periods on-screen.
In one quick test, 28 images were rendered in under 48 seconds with an average throughput of 1.2 kbps. I also found that an irritating Hotlist bug that would create new folders as branches of an existing folder is fixed. As is bookmark import from pre-Opera 6.x versions.
WinZIP and WinRAR make way, PowerArchiver 2003 v8.5, the ultimate archiving tool is here! This shareware (2.5 MB, Windows, Shareware) is the best compression client available. It's supported the Deflate 64 standard far longer than WinZip (whose v9 Beta supports the format).
PowerArchiver also has other resource- and time-optimization features like a direct-to-zip option. And internal file viewer that supports many images and text formats. The new version is also much faster with a smoother interface that supports Windows XP ClearType.
A great and free registry cleaner, JV Power Tools, has gone shareware without any warning. There's a fair amount of online angst that some Beta testers received free copies. But other didn't and instead were expected to pay the app price of $30.
JV PowerTools used to be a great application once and the zero price made it even more attractive. I began using it in 1997, but regrettably by mid-2002 the software seems to have peaked. And began to do more harm than good.
However, if you get a chance checkout the free RegScrubXP 3.25 (580 kB, Windows, freeware) and EasyCleaner 2 Beta 1 (788 kB, Windows, freeware). These work with Windows 2000 and later. I've just downloaded a copy, and plan to check them out soon. Get ahead of this column and live life dangerously.
Microsoft will shortly be releasing consumer versions of DirectX 9.0b. This features enhanced security and privacy features. However, there's a leaked Developer Edition available for download.The release packages include both the SDK as well as an end-user runtime.
And finally there's Popout Prism: a unique new Web browser from Xerox's Palo Alto Research Center (PARC). This features a thumbnail overview of a Web page with attention-grabbing pop-outs generated dynamically from user-input URLs and keywords. Although this software supposedly improves productivity, I was unable to test it out. I run the most recent version of the Sun JRE (v1.4.x) but Prism insists on JRE 1.3. I treid everything, from uninstalling my newer JRE for the Prism varaint to downloading the complete copy of the latter with JRE 1.3 included. However, all attempts failed! The JRE set itself up fine. But Popout Prism kept giving an incorrect Java version number error! This is (perhaps) yet another reason why PARC rarely gets to profit from its inventions. Their other famous missed opportunities include the mouse and a windows-like graphical user interface.
G Menon Click here to email me
Sunday, July 13, 2003
Software Freedom(e) For Now
More on Worm_Mylife.M plus new Popcorn mail client
There's a new virus, Worm_Mylife.M, that arrives embedded in a mail attachment and pretends to be a Julia Roberts nude. Previous version of this virus have been embedded in supposed nudes of Shakira, Anna Kournikova and Britney Spears.
This destructive, mass-mailing worm targets Microsoft Outlook users running Windows 95, 98, NT, ME, 2000 and XP. And begin by dropping (saving) a copy of itself to the local computer. It also prompts the user to open or save MYLIFE.MPG. The worm creates a registry entry that reloads it every time Windows restarts. The virus replicates by mailing itself to every contact in the Address Book.
The destructive payload triggers if the current path where the worm's executed is the Windows %System% folder. And if the current minute of the hour is greater than 50. If both conditions are met, the worm deletes the contents of %System%\. of %Windows%\*.sys, as well as the contents of d:\, e:\, and f:\. For viruses such as this, prevention is better than cure. Make sure to scan mail attachments before actually opening them.
Newly updated software begins with Popcorn 1.45b that besides bug fixes and code-level enhancements, also supports APOP authentication. This protocol is used for secure login using MD5 digital signatures. Also improved is the "Mailbox info for all Profiles" dialog that lists the mailbox, message count and box size instead of the previous version's complex calculation showing the difference between total message size less read message size.
There's also an included REG patch file to make Popcorn the default mail client. As well as Also new options to poll mail accounts on startup. And to minimize the application on close to the system tray. The downside is that to close and exit Popcorn you need to right-click its tray icon and choose exit. A minor annoyance. There's also an option for a user-definable spell check for new mail. However, this requires a connection to the Internet. And spell-checks just 1 word at a time. Instead I recommend using the free CleverKeys add-in spell checker.
My test run shows remarkable improvements in polling speed and downloading mail headers, processing them, reading marked messages and deleting mail. System resource use is still very low -- under 4 MB -- for supported features. Double-clicking a mail profile in the Poll Accounts dialog is a quick shortcut to the mailbox. Popcorn's also a neat app to view with attachment-riddled email. Especially as it reads all mail as plain text. This means that HTML is rendered in its pure code form and attachments are read in pure ASCII format as well.
Use PopCorn to view your mailbox and you will never intentionally get a virus. But Popcorn a hopeless client to use if you do have to deal with attachments or fancy-formatted messages. I use Popcorn (126 kB, Windows, freeware) to check my mailbox contents and delete junk before downloading my mail into Outlook Express.
G Menon Click here to email me
More on Worm_Mylife.M plus new Popcorn mail client
There's a new virus, Worm_Mylife.M, that arrives embedded in a mail attachment and pretends to be a Julia Roberts nude. Previous version of this virus have been embedded in supposed nudes of Shakira, Anna Kournikova and Britney Spears.
This destructive, mass-mailing worm targets Microsoft Outlook users running Windows 95, 98, NT, ME, 2000 and XP. And begin by dropping (saving) a copy of itself to the local computer. It also prompts the user to open or save MYLIFE.MPG. The worm creates a registry entry that reloads it every time Windows restarts. The virus replicates by mailing itself to every contact in the Address Book.
The destructive payload triggers if the current path where the worm's executed is the Windows %System% folder. And if the current minute of the hour is greater than 50. If both conditions are met, the worm deletes the contents of %System%\. of %Windows%\*.sys, as well as the contents of d:\, e:\, and f:\. For viruses such as this, prevention is better than cure. Make sure to scan mail attachments before actually opening them.
Newly updated software begins with Popcorn 1.45b that besides bug fixes and code-level enhancements, also supports APOP authentication. This protocol is used for secure login using MD5 digital signatures. Also improved is the "Mailbox info for all Profiles" dialog that lists the mailbox, message count and box size instead of the previous version's complex calculation showing the difference between total message size less read message size.
There's also an included REG patch file to make Popcorn the default mail client. As well as Also new options to poll mail accounts on startup. And to minimize the application on close to the system tray. The downside is that to close and exit Popcorn you need to right-click its tray icon and choose exit. A minor annoyance. There's also an option for a user-definable spell check for new mail. However, this requires a connection to the Internet. And spell-checks just 1 word at a time. Instead I recommend using the free CleverKeys add-in spell checker.
My test run shows remarkable improvements in polling speed and downloading mail headers, processing them, reading marked messages and deleting mail. System resource use is still very low -- under 4 MB -- for supported features. Double-clicking a mail profile in the Poll Accounts dialog is a quick shortcut to the mailbox. Popcorn's also a neat app to view with attachment-riddled email. Especially as it reads all mail as plain text. This means that HTML is rendered in its pure code form and attachments are read in pure ASCII format as well.
Use PopCorn to view your mailbox and you will never intentionally get a virus. But Popcorn a hopeless client to use if you do have to deal with attachments or fancy-formatted messages. I use Popcorn (126 kB, Windows, freeware) to check my mailbox contents and delete junk before downloading my mail into Outlook Express.
G Menon Click here to email me
Sunday, July 06, 2003
Wither Customer Service?
Does it begin before or after the sale
For a change, I'm venturing into a zone that many address daily: customer service. The issue: how to define boundaries?
Is is more important to win a customer. Or steal them from a rival. Is it fair to take their money then run (aka never deliver on promises). Or be prepared to go the extra mile to ensure that happy customers are satisfied customers who become your best evangelists?
In my professional life I have experienced many examples of service terrible. And a near equal where service was outstanding.
Remember, it's not important to be there during the good times. But it is to be there during the bad. And my good is probably your b-a-d and vice versa.
Recent bad karma includes a horrific experience with India biggest book shop. My saga began by their site emailing me (in May 2002) about some great bargains. I paid online for both a book and music title. But it wasn't until September 2002 that I even managed to get delivery of the book. Those 4+ terrible months I battled it out with the site attempting to find a non-anonymous robot/list manager who would just listen to my problem.
It's only after "outing" the site in print did I receive mail from a human. But all they managed to do was deliver on 50% of the order. The music title never seemed to be in stock. So instead of reversing the charges, they "credited" the amount instead to my account. Where it sits nearly a year later. Without even the interest it would have earned me had it been banked.
Contrast this with service from India's largest virtual supermarket (no names again because my publishers hate being sued). This site, on several occasions, have reversed card charges because they were unable to supply items ordered online. Customer care took a bit of a hit post-dotcom doom and is now email-support only. But there are still humans responding. And for emergencies there are telephone numbers as well.
There's a large Indian bank aggressively attempting to gather credit card customers. They have right sales pitches and offer wondrous schemes. But follow-up needs serious overhaul.
I have been contacted not once, but three times. By three different process executives. All to sign-up for a credit card based on my purchase of some infrastructure bonds.
Times one my completed application got lost. Times two they expected me to visit the nearest branch to complete a form. Times three required a xerox of an existing (rival) card's monthly statement.
But even this attempt failed on (what I think are) rather specious grounds: the statement was for the previous instead of the current month. I found it too much trouble to explain that you rarely receive card statements in the first week of every month. Card companies like to lull customers into a false sense of credit worthiness for at least 12 days into a month!
Of course the telemarketer insisted on multiple annoying calls to my mobile, office and home phones as to why I had decided against the card. The supposed benefits included its zero cost for year one, how it would improve my credit worthiness. And finally because her job depended on snaring my account!
And this is a bank that prides itself on customer service. Yet is equally unable to give me an account statement on request because their computers are down. Every day during business hours! Contrast this dis-service with another credit card issuer who gifted me a free card because I never delayed a monthly payment over a two-year period.
And there's the local pizza chain that loves calling with really stupid offers precisely at 3 PM every Sunday afternoon. Not before or after. Exactly at. So much so I'm boycotting their products because of the "pissed beyond basic annoyance" factor. So what lessons have we learnt. Here goes:
I'm singing their praises for now. If you want to know more, click the link.
G Menon
Does it begin before or after the sale
For a change, I'm venturing into a zone that many address daily: customer service. The issue: how to define boundaries?
Is is more important to win a customer. Or steal them from a rival. Is it fair to take their money then run (aka never deliver on promises). Or be prepared to go the extra mile to ensure that happy customers are satisfied customers who become your best evangelists?
In my professional life I have experienced many examples of service terrible. And a near equal where service was outstanding.
Remember, it's not important to be there during the good times. But it is to be there during the bad. And my good is probably your b-a-d and vice versa.
Recent bad karma includes a horrific experience with India biggest book shop. My saga began by their site emailing me (in May 2002) about some great bargains. I paid online for both a book and music title. But it wasn't until September 2002 that I even managed to get delivery of the book. Those 4+ terrible months I battled it out with the site attempting to find a non-anonymous robot/list manager who would just listen to my problem.
It's only after "outing" the site in print did I receive mail from a human. But all they managed to do was deliver on 50% of the order. The music title never seemed to be in stock. So instead of reversing the charges, they "credited" the amount instead to my account. Where it sits nearly a year later. Without even the interest it would have earned me had it been banked.
Contrast this with service from India's largest virtual supermarket (no names again because my publishers hate being sued). This site, on several occasions, have reversed card charges because they were unable to supply items ordered online. Customer care took a bit of a hit post-dotcom doom and is now email-support only. But there are still humans responding. And for emergencies there are telephone numbers as well.
There's a large Indian bank aggressively attempting to gather credit card customers. They have right sales pitches and offer wondrous schemes. But follow-up needs serious overhaul.
I have been contacted not once, but three times. By three different process executives. All to sign-up for a credit card based on my purchase of some infrastructure bonds.
Times one my completed application got lost. Times two they expected me to visit the nearest branch to complete a form. Times three required a xerox of an existing (rival) card's monthly statement.
But even this attempt failed on (what I think are) rather specious grounds: the statement was for the previous instead of the current month. I found it too much trouble to explain that you rarely receive card statements in the first week of every month. Card companies like to lull customers into a false sense of credit worthiness for at least 12 days into a month!
Of course the telemarketer insisted on multiple annoying calls to my mobile, office and home phones as to why I had decided against the card. The supposed benefits included its zero cost for year one, how it would improve my credit worthiness. And finally because her job depended on snaring my account!
And this is a bank that prides itself on customer service. Yet is equally unable to give me an account statement on request because their computers are down. Every day during business hours! Contrast this dis-service with another credit card issuer who gifted me a free card because I never delayed a monthly payment over a two-year period.
And there's the local pizza chain that loves calling with really stupid offers precisely at 3 PM every Sunday afternoon. Not before or after. Exactly at. So much so I'm boycotting their products because of the "pissed beyond basic annoyance" factor. So what lessons have we learnt. Here goes:
- Telemarketers must learn when to call
- Never call on designated holidays (days you're working but your customer ain't)
- L-I-S-T-E-N to the customer
- The customer is always right
- Web site's should have telephone numbers as a security blanket; preferably toll-free
- Fist try and find a solution before fixing the problem
- Fix the problem before you need to find a new solution.
I'm singing their praises for now. If you want to know more, click the link.
G Menon
Monday, June 30, 2003
Mo' Betta Blogging
How to get yourself noticed in web log universe
Last week it was basic blogging needs. This spawned more research into the subject. I think I'm a sucker for punishment. Having had one Web site killed on account of personal blog-generated traffic. Now here I am trying to make my new site get more. I was checking my site stats. In 2002 the site got under 10 visitors in all. Now in May-July 2003, it's received more than 300; mostly courtesy my blogs and reciprocal links from other sites.
Blog Search Tools
Having published my blog, I needed to publicise it. However blog tools like Blogger only do so much. You still need to submit your blog to a blog search engine. I do have a listing on Blogwise but needed to do more.
I began with Blog Search Engine. This claims a site review within 48 hours of submission. Of course, as with most other free blog listings, you don't have to add a link back to the site. But you are (subtly) encouraged to promote your new association to improve your submission.
There's also Blogarama, a Blog Directory. Submission is free but you have to add two link backs: one to improve your listings. Another to get your readers to send their comments about your blog.
On the other hand, MIT's Blogdex, has fewer rules. All it asks for is your blog URL and email address (to which a submission verification is sent. You have 48 hours to respond).
Like other community-driven Web sites, there is Bloglists akin to porn and warez site link aggregators. You submit a blog link, then embed the service's link script into the blog. Based on the visitors who click the link, your ratings rise or fall.
When Drives Go Bad
My PC hard drive began emitting strange clicks. Each of which caused Windows to restart then display a disk error. All this in spite of S.M.A.R.T. (Self-Monitoring, Analysis and Reporting Technology) being enabled to alert about incipient drive failures. So before I lost everything, I decided to upgrade.
It took me the rest of the weekend to setup my new drive. Luckily, I have almost all the system software backed up to CD-R. Visual CD really helped me locate software without needing to insert any of the 100+ backup disks. This data cataloger indexes media like CD-R, CD-RW, hard drives and folders. You can later search catalogs without needing the physical disks. Of course, to open a specific file you still need the matched disk.
Visual CD uses a Windows Explorer view to soften the learning curve. And is really easy to use. Plus it comes at a great price: absolutely free. And like many great tools, what extends this app is its ability to save catalogs in non-proprietary formats like TXT and HTML. You can also view the contents of ZIP, RAR and CAB archives. And there is even a file splitter.
MyIE2 never ceases to amaze me with its usefulness. Once you begin using it, it's hard to switch. I used to think Opera was cutting edge but MyIE2 lets you select text on a web page, then drag sideways to search the term (using the default search engine). In Opera you can select text but then have to right-click to display the search menu; which isn't the same thing.
Opera's paste 'n go feature also requires 3 mouse commands. I prefer MyIE2's drag link to open in new window. Finally, Opera 7.1x has lots of CSS rendering issues. Which sort of give a lie to Opera's claim of being a standards-compliant browser.
I decided to check out NetCaptor and AvantBrowser, but neither excited me. The first was a disappointing revisit. It still has a resource leak (on Window 2000) that's big enough to pass an elephant through! The second consumes exactly the same amount of system resources (lots) when maximised or minimized. Yet doesn't have anything that MyiE2 lacks.
As an alternate I'll stick with MozillaFirebird. This despite being a massive 7 MB ZIP download. That needs lots of plug-ins but manages to render CSS the way the designer intended.
Click Here to Email Me
How to get yourself noticed in web log universe
Last week it was basic blogging needs. This spawned more research into the subject. I think I'm a sucker for punishment. Having had one Web site killed on account of personal blog-generated traffic. Now here I am trying to make my new site get more. I was checking my site stats. In 2002 the site got under 10 visitors in all. Now in May-July 2003, it's received more than 300; mostly courtesy my blogs and reciprocal links from other sites.
Blog Search Tools
Having published my blog, I needed to publicise it. However blog tools like Blogger only do so much. You still need to submit your blog to a blog search engine. I do have a listing on Blogwise but needed to do more.
I began with Blog Search Engine. This claims a site review within 48 hours of submission. Of course, as with most other free blog listings, you don't have to add a link back to the site. But you are (subtly) encouraged to promote your new association to improve your submission.
There's also Blogarama, a Blog Directory. Submission is free but you have to add two link backs: one to improve your listings. Another to get your readers to send their comments about your blog.
On the other hand, MIT's Blogdex, has fewer rules. All it asks for is your blog URL and email address (to which a submission verification is sent. You have 48 hours to respond).
Like other community-driven Web sites, there is Bloglists akin to porn and warez site link aggregators. You submit a blog link, then embed the service's link script into the blog. Based on the visitors who click the link, your ratings rise or fall.
When Drives Go Bad
My PC hard drive began emitting strange clicks. Each of which caused Windows to restart then display a disk error. All this in spite of S.M.A.R.T. (Self-Monitoring, Analysis and Reporting Technology) being enabled to alert about incipient drive failures. So before I lost everything, I decided to upgrade.
It took me the rest of the weekend to setup my new drive. Luckily, I have almost all the system software backed up to CD-R. Visual CD really helped me locate software without needing to insert any of the 100+ backup disks. This data cataloger indexes media like CD-R, CD-RW, hard drives and folders. You can later search catalogs without needing the physical disks. Of course, to open a specific file you still need the matched disk.
Visual CD uses a Windows Explorer view to soften the learning curve. And is really easy to use. Plus it comes at a great price: absolutely free. And like many great tools, what extends this app is its ability to save catalogs in non-proprietary formats like TXT and HTML. You can also view the contents of ZIP, RAR and CAB archives. And there is even a file splitter.
MyIE2 never ceases to amaze me with its usefulness. Once you begin using it, it's hard to switch. I used to think Opera was cutting edge but MyIE2 lets you select text on a web page, then drag sideways to search the term (using the default search engine). In Opera you can select text but then have to right-click to display the search menu; which isn't the same thing.
Opera's paste 'n go feature also requires 3 mouse commands. I prefer MyIE2's drag link to open in new window. Finally, Opera 7.1x has lots of CSS rendering issues. Which sort of give a lie to Opera's claim of being a standards-compliant browser.
I decided to check out NetCaptor and AvantBrowser, but neither excited me. The first was a disappointing revisit. It still has a resource leak (on Window 2000) that's big enough to pass an elephant through! The second consumes exactly the same amount of system resources (lots) when maximised or minimized. Yet doesn't have anything that MyiE2 lacks.
As an alternate I'll stick with MozillaFirebird. This despite being a massive 7 MB ZIP download. That needs lots of plug-ins but manages to render CSS the way the designer intended.
Click Here to Email Me
Sunday, June 22, 2003
Many Viewpoints All At Once
Blogging is the product of necessity
A couple of weeks ago my ancient (Internet timeline-wise) Web site was terminated by my ISP for excessive bandwidth after the site experienced over 400 visitors who consumed the entire month's (500 MB) bandwidth allocation in a day. I lost a fair amount of data since I used my Web site as a convenient place to save files between work and home. Or when I was on the road. I've since changed providers, and am now hosting with Netfirms, rated the best free Internet host.
I'm sure you're wondering how a simple technology columnist's site could get so much daily traffic. The answer's quite simple: I run a web log (blog). This focuses on content that catches my fancy. Some postings make it into this column. But most don't as they have little weekly value.
Regular readers may have noted my rather extraordinary focus of MyIE2: a free, MDI (multi-document interface) web browser based on IE but with improved security. Free publicity is a two-way street. As part of this quid pro quo, MyIE2's lead developer included a reciprocal link to my web site. My personal blog, Final-? QT? E-Musings about the Web, is the second traffic magnet.
What I Want
I've spent the better part of the last two weeks researching web blog software. And it's been an extraordinary journey. My needs were basic:
That doesn't seem like a tall order. But the majority of blog tools available online fall into two categories: hosted services and scripts. With a mixture of pay and free versions.
What I Got
Blogger is the most famous of the hosted services. This pioneer of free personal Web logs was acquired by Google in early-2003. And services have begun to go downhill ever since as Blogger's hardware seems unable to keep pace with the substantial increase in traffic. It's now pretty common stance to suffer database-related errors. Luckily for us poor publishers, these don't affect your actual blog which is a generated HTML file stored on your server (via FTP).
But one side-effect of Blogger outages has been an inability to auto-update my blogs. Or worse, having 2 identical posts added to the database. But you can't delete the extra one! I've also noticed that new blogs have different features from old blogs; down to the template chosen.
Choices?
The second (scripted) category of blog software like Moveable Type (MT), b2 and WordPress are mostly available in PHP and require a MySQL database. Luckily for me there are several CGI-powered scripts including MT and Blosxom.
Configuring MT is a nightmare even for very experienced users. And much as I would like to deploy it, the absence of a database remains a problem. The sole free online database host, FreeSQL, has been experiencing hardware problems culminating in a catastrophic (for all its users) disk drive crash last week. But is now up and running again.
I'd choose b2 as the easiest-to-deploy Blog script. Unfortunately, Netfirms supports PHP only with its Basic plan. Not for free users. Which left me with CGI. So I deployed Blosxom; even though its really meant for Mac OS and has some of the dirtiest, most convoluted scripting. But I still have time-out issues that seem unresolvable and I'm planning to discard using this script. And remaining for another week with Blogger.
Other Stuff: GIF Patent for US expires
In other (good) news, Patent #US4,558,302 expired Friday, June 20, 2003. Officially known as (a) "High speed data compression and decompression apparatus and method," or Unisys's GIF tax, it now enters the public domain. The GIF image format brought image compression to the Internet.
Unfortunately, patent-owner UNISYS Corporation rather doggedly insisted that Webmasters pay them royalty to use GIFs on Web sites (few did). The company also blocked all moves to improve the basic algorithm. One fallout has been an increased use of pJPEG (progressive JPEG) and PNG image formats.
A detailed chronology is available here. With an anti-view as well. But wait! The European, Canadian, and Japanese patents expire only in 2004: making open-source GIF tools illegal everywhere but in the US!
Other Stuff #2: Excellent antivirus wins another award
About a month ago I discarded out my free AVG Antivirus for a more powerful, and free for personal use, virus scanner. As I had lost all confidence in the former. It was unable to scan inbound email effectively. And despite daily signature updates didn't seem all right. Just a gut feeling. But I've learned to trust these hunches.
I replaced it with Avast. Which has served me very well. It's caught several infected mails. Including several HTML-format messages with an embedded IFrame! In comparison, AVG (running on a test system) failed to detect if message attachments were infected. So if you are still using AVG Free, discard it. Choose Avast instead. The latest Virus Bulletin test (June 2, 2003, Windows XP), Avast! 4 Pro detected all ItW viruses (known to be 'in the wild').
Other Stuff #3: Software Updates
There are also new versions of Mozilla and MyIE2 (naturally). New in MyIE2.7.1350 is an ability to open multiple Web pages in a single program instance. This results in a lower resource footprint. And supports special plug-ins and IE extensions to let you have an enjoyable surfing experience.
My favorite text editor, NoteTab Pro, too has been updated v4.95. The new version is essentially a collection of bug fixes with ongoing process improvements to the code. It adds a quite mode to disable some sound alerts, plus an updated help file and the ability to keep you posted on software updates and other developer news. I have the simplest sound control program: I keep my PC speakers almost permanently switched off!
Office 2003 Beta 2 Refresh has also been released via Microsoft's BetaPlace site. The updates comprise multiple individual downloadable patches for each Office System component.
The excellent Metaproducts Download Express has become pain-ware. This new term (coined by me) is for software that still free but times-out after an indeterminate period. Necessitating frequent downloads of updated versions. Download Express is also crippled-ware. With some advance features only available if you register. I'm sticking with LeechGet 2002 and the excellent Download Expert for now.
I've also been giving Blog (a software mentioned in a previous column) a detailed run through. Unfortunately, unlike in previous versions there are still stability issues. I've been experiencing constant database-related problems when updating web pages that the developer says are being fixed in the next release. I've also been unable to But at the end of the day
Security Stuff
As for the bad news, there's none. With no new worms looming on the horizon. Just lots of older worms and viruses still attempting to gain access to your computers, your data and your credibility. But In no particular order.
The only other security-related update has been to Zone Alarm. This now includes a hacker attacker (sorry, hacker identification center). As well as a cache cleaner and even outbound mail scanner. If you are one of many surfers using a pirated serial number watch out. Existing key generators I hear don't work with ZoneAlarm 4. And the copy "phones home" to verify the serial entered is a legitimate one.
I'm also quite certain that the new features added to the basic firewall won't improve things. Adding new features not part of the original mandate is a marketing-driven strategy. But my fear is that the best firewall will soon become the worst. With the core diluted with add-ons. I prefer the single task software approach as it works better.
That's it from me. Stay safe 'n secure.
G Menon Click Here to Email Me
Blogging is the product of necessity
A couple of weeks ago my ancient (Internet timeline-wise) Web site was terminated by my ISP for excessive bandwidth after the site experienced over 400 visitors who consumed the entire month's (500 MB) bandwidth allocation in a day. I lost a fair amount of data since I used my Web site as a convenient place to save files between work and home. Or when I was on the road. I've since changed providers, and am now hosting with Netfirms, rated the best free Internet host.
I'm sure you're wondering how a simple technology columnist's site could get so much daily traffic. The answer's quite simple: I run a web log (blog). This focuses on content that catches my fancy. Some postings make it into this column. But most don't as they have little weekly value.
Regular readers may have noted my rather extraordinary focus of MyIE2: a free, MDI (multi-document interface) web browser based on IE but with improved security. Free publicity is a two-way street. As part of this quid pro quo, MyIE2's lead developer included a reciprocal link to my web site. My personal blog, Final-? QT? E-Musings about the Web, is the second traffic magnet.
What I Want
I've spent the better part of the last two weeks researching web blog software. And it's been an extraordinary journey. My needs were basic:
- Preferably free
- Simple to deploy and configure
- Worked with my site hosting plan
- Offered admin privileges
- Blocked unapproved users from posting
That doesn't seem like a tall order. But the majority of blog tools available online fall into two categories: hosted services and scripts. With a mixture of pay and free versions.
What I Got
Blogger is the most famous of the hosted services. This pioneer of free personal Web logs was acquired by Google in early-2003. And services have begun to go downhill ever since as Blogger's hardware seems unable to keep pace with the substantial increase in traffic. It's now pretty common stance to suffer database-related errors. Luckily for us poor publishers, these don't affect your actual blog which is a generated HTML file stored on your server (via FTP).
But one side-effect of Blogger outages has been an inability to auto-update my blogs. Or worse, having 2 identical posts added to the database. But you can't delete the extra one! I've also noticed that new blogs have different features from old blogs; down to the template chosen.
Choices?
The second (scripted) category of blog software like Moveable Type (MT), b2 and WordPress are mostly available in PHP and require a MySQL database. Luckily for me there are several CGI-powered scripts including MT and Blosxom.
Configuring MT is a nightmare even for very experienced users. And much as I would like to deploy it, the absence of a database remains a problem. The sole free online database host, FreeSQL, has been experiencing hardware problems culminating in a catastrophic (for all its users) disk drive crash last week. But is now up and running again.
I'd choose b2 as the easiest-to-deploy Blog script. Unfortunately, Netfirms supports PHP only with its Basic plan. Not for free users. Which left me with CGI. So I deployed Blosxom; even though its really meant for Mac OS and has some of the dirtiest, most convoluted scripting. But I still have time-out issues that seem unresolvable and I'm planning to discard using this script. And remaining for another week with Blogger.
Other Stuff: GIF Patent for US expires
In other (good) news, Patent #US4,558,302 expired Friday, June 20, 2003. Officially known as (a) "High speed data compression and decompression apparatus and method," or Unisys's GIF tax, it now enters the public domain. The GIF image format brought image compression to the Internet.
Unfortunately, patent-owner UNISYS Corporation rather doggedly insisted that Webmasters pay them royalty to use GIFs on Web sites (few did). The company also blocked all moves to improve the basic algorithm. One fallout has been an increased use of pJPEG (progressive JPEG) and PNG image formats.
A detailed chronology is available here. With an anti-view as well. But wait! The European, Canadian, and Japanese patents expire only in 2004: making open-source GIF tools illegal everywhere but in the US!
Other Stuff #2: Excellent antivirus wins another award
About a month ago I discarded out my free AVG Antivirus for a more powerful, and free for personal use, virus scanner. As I had lost all confidence in the former. It was unable to scan inbound email effectively. And despite daily signature updates didn't seem all right. Just a gut feeling. But I've learned to trust these hunches.
I replaced it with Avast. Which has served me very well. It's caught several infected mails. Including several HTML-format messages with an embedded IFrame! In comparison, AVG (running on a test system) failed to detect if message attachments were infected. So if you are still using AVG Free, discard it. Choose Avast instead. The latest Virus Bulletin test (June 2, 2003, Windows XP), Avast! 4 Pro detected all ItW viruses (known to be 'in the wild').
Other Stuff #3: Software Updates
There are also new versions of Mozilla and MyIE2 (naturally). New in MyIE2.7.1350 is an ability to open multiple Web pages in a single program instance. This results in a lower resource footprint. And supports special plug-ins and IE extensions to let you have an enjoyable surfing experience.
My favorite text editor, NoteTab Pro, too has been updated v4.95. The new version is essentially a collection of bug fixes with ongoing process improvements to the code. It adds a quite mode to disable some sound alerts, plus an updated help file and the ability to keep you posted on software updates and other developer news. I have the simplest sound control program: I keep my PC speakers almost permanently switched off!
Office 2003 Beta 2 Refresh has also been released via Microsoft's BetaPlace site. The updates comprise multiple individual downloadable patches for each Office System component.
The excellent Metaproducts Download Express has become pain-ware. This new term (coined by me) is for software that still free but times-out after an indeterminate period. Necessitating frequent downloads of updated versions. Download Express is also crippled-ware. With some advance features only available if you register. I'm sticking with LeechGet 2002 and the excellent Download Expert for now.
I've also been giving Blog (a software mentioned in a previous column) a detailed run through. Unfortunately, unlike in previous versions there are still stability issues. I've been experiencing constant database-related problems when updating web pages that the developer says are being fixed in the next release. I've also been unable to But at the end of the day
Security Stuff
As for the bad news, there's none. With no new worms looming on the horizon. Just lots of older worms and viruses still attempting to gain access to your computers, your data and your credibility. But In no particular order.
The only other security-related update has been to Zone Alarm. This now includes a hacker attacker (sorry, hacker identification center). As well as a cache cleaner and even outbound mail scanner. If you are one of many surfers using a pirated serial number watch out. Existing key generators I hear don't work with ZoneAlarm 4. And the copy "phones home" to verify the serial entered is a legitimate one.
I'm also quite certain that the new features added to the basic firewall won't improve things. Adding new features not part of the original mandate is a marketing-driven strategy. But my fear is that the best firewall will soon become the worst. With the core diluted with add-ons. I prefer the single task software approach as it works better.
That's it from me. Stay safe 'n secure.
G Menon Click Here to Email Me
