Tag: hackers

Gmail flaw shows value of strong passwords

August 06, 2009 by Jason

The disclosure of a back door allowing bad guys to repeatedly guess Gmail passwords should remind us all to protect our accounts with long and strong character strings.

There’s a straightforward way to protect your online accounts  use signin phrases that are easy for you to remember but hard for others to guess.

The latest vulnerability affecting Gmail accounts was recently revealed by security researcher Vicente Aguilera DĂ­az in a posting on the Full Disclosure security list. (Aguilera previously revealed a Gmail flaw known as session-riding, which Google subsequently fixed, as reported by WS contributing editor Scott Spanbauer)

According to Aguilera’s new security alert, Google allows anyone with a Gmail account to guess another Gmail user’s password 100 times every two hours, or 1,200 times per day. No “captcha” keeps hacker bots from guessing passwords in this way. Worst of all: If a hacker controls, say, 100 Gmail accounts, 120,000 guesses can be made per day. Because Gmail accounts are free, many hackers control far more than 100 accounts, of course. Read More»

IE zero-day flaws cry out for switch to Firefox

December 17, 2008 by Jason

There’s no easy way to secure IE against similar flaws that will inevitably be discovered and used by hackers to their advantage in the future. For this reason and in response to pleas for help by many Pctipsbox readers here’s my recommendation on the best way to surf the Web more securely:

Step 1: Switch to Firefox, Opera, Chrome, or another contender and configure it to be your default browser. Use IE only to visit sites that require Microsoft-specific technology probably because they rely on ActiveX to function. (For example, you need to use IE to download patches at the Windows Update site.) I recommend Firefox because of the numerous add-ons available for that browser, some of which I describe in Steps 2 and 3.

Step 2: Install the Firefox add-ons known as User Agent Switcher (see UAS’s download page) and IE Tab (download page).

User Agent Switcher lets you change your browser’s identity. If a Web site demands the use of IE but actually works fine with other browsers, you can change the name of the operating system and browser the site thinks you’re using. Many “IE only” sites render perfectly well in Firefox and other browsers. Read More»

How to Check Windows XP Product Activation Status

November 23, 2008 by Jason

Windows XP has less stringent Windows Product Activation algorithm compared with Windows Vista. For example, PC computers from branded OEM (original equipment manufacturer) is activated out-of-factory, and most hackers and pirates go for volume licensing (commonly known as VL or VOL) version of Windows XP Professional which when installed with a volume product key (VLK), does not require user to activate again online or by phone.

However, Windows XP does require product activation too. Doesn’t need (as in the case of when using OEM or VLK product key, which is instantly and automated activated) to perform steps to activate Windows XP doesn’t mean that Windows XP is not activated, and activated Windows XP is one of the requirement for the installed copy of operating system to be considered by genuine by Windows Genuine Advantage (WGA) Validation Tool.

To check, view or verify the Windows XP current activation status, open Run command from Start Menu, and run the following command: Read More»

Seven tips for working securely from wireless hotspots

May 19, 2008 by Jason

Wireless hotspots are changing the way people work. These wireless local area networks (LANs) provide high speed Internet access in public locations as well as at home and require nothing more than a notebook PC with a wireless card. From coffeeshops to restaurants, airports to hotel lobbies, hotspots are ubiquitous. They are the de facto connection method for travelers and remote workers to access the Internet, their e-mail, and even their corporate networks.

Hotspots range from paid services, such as T-Mobile or Boingo, to free connections at your local coffee shop or library. But they all have one thing in common: These are all open networks that are vulnerable to security breaches. And that means it’s up to you to protect the data on your PC. Here are a few tips to make working in public locations more secure. Read More»

Using Secure Login in Firefox

July 27, 2007 by Jason

if you allow Firefox to store your passwords you might be worried about the recent security holes found in the password manager. The solution to these problems is to use the Secure Login extension to prevent Firefox from automatically filling in password fields, but at the same time giving you the automation that saves you time. In fact, using the hotkey means that this method is probably even quicker.

The regular Firefox password manager will automatically fill in the password fields for you, which gives malicious sites and hackers the chance to use javascript to read the password. Granted, this isn’t a common occurrence, but it’s still wise to be wary. Read More»

Hackers Target QuickTime and WinZip

May 17, 2007 by Jason

Although it seem unlikely virus writers and hackers are going to give up looking for and attempting to exploit loopholes in Microsoft products, it seems some of them may be turning their attention to other popular applications. According to security experts at Symantec the defences on one of its PC’s, used as bait to attract and trap virus writers, was breached through known vulnerabilities in Apple QuickTime and WinZip. Read More»

Major Security Update for Apple OS X

April 27, 2007 by Jason

Okay, so Apple PCs are still a lot safer than Windows PCs, but the next time an Apple owner smugly reminds you of the fact, just ask him or her whether they’ve installed the security update issued in April 19th. This fixes no less than 25 security flaws in OS X and it includes three patches for ‘Zero Day’ bugs, and vulnerabilities that would allow hackers to gain access to data. So far this year Apple has issued at least one security update each month and whilst the level of threat and number of attacks are nowhere near the level PC owners have to put up with, it does appear that Apple owners may no longer be as safe as they once used to be. Read More»