|
written by Brian Place
produced by Brian Place & Katerie Prior
Issue #12: August, 2005
Contents:
-
-
-
-
-
Fun & Cool!
• PODCASTING
• Reference: Cool Tools
• Fish Highway
• The iPod Flea
• Game: Bubble Bobble
-
Welcome Back to the BDPNetworks Newsletter!
It’s been a while since I was able to publish an issue, but I’m
excited to get back into writing the newsletter because I really enjoy bringing
you this information. We're going to present a lot of new, helpful, and hopefully
interesting items you can use at work or at play.
Passings
Before we begin, I want to recognize two people who were influential
to BDPNetworks and have passed away since the last newsletter: Susan
Thomas and Kelvin Scot.
I worked with Susan Thomas at Nova Networks back in
2000, and she was one of the best salespeople I've ever met. She always listened
carefully to customers' wants and helped them get what they needed. I hired
Susan to help out with our customer surveys a few years ago and with the information
she collected, she helped us shape our services to match our customers’ needs.
She was energetic, always optimistic, and simply fun to hang out with.
Kelvin
Scot taught me a lot about good information design. I learned from him
that good design often takes a lot of work! Kelvin created our logo, letterhead,
mouse pads, and website. He also suggested better ways to present information
to our customers and readers. He was soft-spoken, incredibly smart, and
very creative.
These two individuals were passionate about their chosen
fields and loved life. I wish I would have had more time to spend with
each of them. They will both be greatly missed.
Thank You
On a lighter note, I want to take a moment to
thank Dan Drury, who does most of the regular Maintenance & Support
Plan contract maintenance for some of our customers. His work frees up
my time and makes this newsletter possible! Dan does a great job making
sure our customers get what they need before they know they need it--and
has put a lot of miles on his car in the process. Please tell him "Thank
You!" next time you see
him.
This Issue: Windows Security Cheat Sheet - Revisited
Most of our past newsletters have been collections of loosely
related articles; this issue, which is all about Windows® Security, is a little
different. Since I last produced a comprehensive issue on Windows® security
in September, 2001, this field has become much more complex. In this issue,
I'll discuss four essential tools that you NEED to protect your Windows-based
PC: Virus protection, Patch installation, Firewalls, and Spyware protection & removal.
Without them, you risk serious slowdowns, identity theft, and even significant
data loss. This issue is a basic overview of the steps needed to secure
your Microsoft® Windows-based PC. In upcoming newsletters, I'll cover
more specifics related to passwords, fraud, identity theft, and other security
related topics.
Have A Question? It Might Be Worth $30
In the next issue,
we'll be starting a Q&A column based on reader
questions. If you have a question about business computing (home computing
is okay as well), please email it to me and it may appear in an upcoming
issue. When you send in questions, please let me know that I have your
permission to use your question in the newsletter by including your name.
If I use your question in a newsletter, you'll receive a $30 gift certificate
to a major online electronic retailer!
And now, without further ado, on
with the show...
VIGILANCE PREVENTS FUTURE SABOTAGE:
WINDOWS SECURITY and PRIVACY CHEAT SHEET
Running Microsoft® Windows® on a computer in 2005 is a big
challenge. At work or home, your computer is constantly at risk of being
attacked by a computer virus, internet worm, or a myriad of other security
problems. In addition, the "bad guys" constantly invent new ways
to attack your privacy with spam, adware/spyware, phishing scams, and more.
The threat isn’t being overstated: a recent report shows that 50% of
unprotected Windows machines will be compromised within 12 minutes of being
connected to the Internet:
http://www.zdnet.com.au/news/security/
0,2000061744,39200021,00.htm
At best, these problems slow your system
down. At worst, they can cause serious system stability problems or data
loss, expose personal and financial information to the wrong people, and
invite other hackers to use your computer to attack other systems across
the Internet. Unfortunately, the effects of these problems aren’t
always immediately obvious. Millions of Windows-based PCs continue to operate
with no real protection on them and their owners never realize that their
computer may be infected.
Many articles have been written about different
security issues, so it can be confusing to know exactly what you need to
protect your data. We've developed a "cheat sheet" that you can
use at home which will help when you need to repair a compromised system
or perform regular maintenance on your computer. Setting up and maintaining
basic PC security can be intimidating to some, but I hope you’ll
see that there are some simple, free things you can do to keep these problems
at bay.
Getting Started
Every computer that ever accesses the Internet
needs four security and privacy-related levels of protection: a firewall,
virus protection, security updates or “patches” provided by
Microsoft, and spyware protection. One way to remember these layers is
with the phrase, "Vigilance Prevents
Future Sabotage." The first letters of each word in this phrase stand
for Virus protection, Patches (Windows Updates), Firewall and Spyware removal.
All four levels of protection handle different types of threats. Currently,
there’s no single product on the market that does a great job handling
every type of threat so you should address these areas individually. They
are listed below in order of importance.
STEP 1: F is for FIREWALL
A basic firewall allows you to transparently
access services on the Internet while blocking other computers from accessing
your system without your permission. Businesses usually have good quality
hardware-based firewalls, which are specialized solid-state computers designed
to sit between a high-speed Internet connection and the computers inside
the office. For home, I strongly recommend the same: companies like Linksys,
Belkin, Netgear and others all manufacture inexpensive devices called "gateway
routers." These
can be purchased new for around $60, and will protect one or more computers
on a single high-speed Internet connection from unwanted inbound threats.
They'll also let you share a connection among multiple machines. They require
very little setup with most high-speed Internet connections and will continuously
block the bad stuff 24 hours a day, seven days a week.
If you don't have
a high-speed Internet connection, however, a gateway router doesn't make
a lot of sense. Similar devices are out there that work with dial-up modems
but they are expensive -- if you plan on upgrading to a Cable Modem or
DSL later on, you won't be able to reuse this device as a firewall for
the new service.
Instead, you can download and install Windows XP Service
Pack 2 (from Windows Update--see below) and enable its built-in firewall.
This solution is free (and recommended by Microsoft) and does a reasonably
good job at protecting you against "the bad guys."
There are other software packages that also act as a firewall under Windows,
but I don't recommend using any of them unless you have time to manage them.
Products like ZoneAlarm and Norton Internet Security tend to be more trouble
than they're worth. They put a heavy load on your system and constantly interrupt
you with benign information.
(NOTE: If you have Norton Internet Security, it
is possible to uninstall the software-based firewall but keep the virus protection
component, which is highly recommended (see below)).
Again: Linksys, Belkin, Netgear and others make inexpensive gateway routers
for home & small offices that can be purchased from stores such as Fry's
Electronics, CompUSA, Best Buy and Circuit City. Here's a popular wireless
gateway router from Linksys that will fit the bill--you can order it directly
from Amazon by clicking the link:
Linksys
Wireless Gateway Router --
has full 802.11g WiFi capability (current
"gold standard" in wireless access) as well as regular hard-wired capability
for PCs located close to the device.
If you have questions about selecting & setting up a firewall for
your home or office computer(s), please don’t hesitate to contact
us.
STEP 2: V is for VIRUS PROTECTION
Every Windows-based PC needs
active, real-time virus protection. Virus protection software checks
files for viruses, worms and trojans, and bits of malicious code that
often come into your system via e-mail or web sites. It works by checking
patterns in files against a master database of virus "signatures" or "definitions" (I
will use these two words interchangeably here) - so its dictionary of
these signatures needs to be updated regularly to detect new threats.
Instead of simply looking for viruses when you tell it to, however, your
virus protection stays resident in your system and monitors every file
accessed in real time.
Many new computers come with pre-installed virus protection,
such as Norton AntiVirus. These products are good, but you need to check
your virus definition/signature subscription regularly, even when the
software is supposed to be automatically updating its definitions. Most
pre-installed virus protection software has a limited subscription length
and when I examine new customers’ computers for the first time,
I often notice that their virus definition/signature subscription expired
six months ago. Even though the virus protection software is still actively
scanning, these computers are unprotected against newer threats and are
often infected by viruses because the subscription expired and the definitions
are old. This is why it is essential to check in on virus protection
regularly to make sure everything is running properly.
If you don’t have virus
protection or have software that has expired, I recommend two free products
for personal use: AVG and AntiVir, both available at the links below.
AntiVir: http://www.free-av.com
AVG: http://www.grisoft.com
After
installing virus protection software, force it to update its definitions.
Then, run a full system scan of your C: drive. If you have questions
about this or are concerned about the status of your virus protection
at the office, please don’t hesitate to call us.
STEP 3: P is for Patches: WINDOWS CRITICAL
UPDATES
Microsoft continuously
finds and fixes "soft" security spots
in its software. They publish these revisions as "patches," or
small bits of software code available from their Windows Update service.
This service works on every version of Windows from Windows 95 through
Windows XP. If you have never used it, I recommend you start by visiting
this web site with Internet Explorer:
http://windowsupdate.microsoft.com
(This is also available under Tools->Windows Update). When the wizard
appears, make sure you select all of the required and recommended updates.
Before
you apply updates, however, you should run your virus software. Your system
should be free from viruses before you apply patches since systems can
be rendered completely unusable by applying Microsoft-supplied patches
to an already compromised computer.
From time to time, you may perform a "Custom..." update and
pick additional products. Everything listed is generally safe with the
exception of driver updates. Microsoft doesn’t have a robust device
driver delivery program, and many of these are inaccurate "guesses" to
what you're running. If you aren’t having problems with a specific
device (i.e. sound or video card), I recommend you skip the driver updates
entirely.
If you are running Windows 2000 or Windows XP, you can automate
this process. Under Windows 2000, click Start->Settings->Control
Panel, then double-click "Automatic Updates" and pick a setting
that suits you. Under Windows XP, you'll find the same screen located at
Start- > Control
Panel->System->Automatic Updates. It is generally safe to have
these updates automatically installed on a regular basis.
STEP 4: S is for SPYWARE PROTECTION
After you have finished with the firewall, virus protection, and
Windows Updates, it pays to install and use anti-spyware software to keep
these privacy threats at bay. Spyware is more than just a privacy threat--
it can destabilize your system much like a virus.
There are only four software
packages I currently recommend for removing spyware: SpyBot Search and
Destroy, Ad-Aware Personal Edition, Microsoft Windows AntiSpyware, and
Webroot's SpySweeper.
Unfortunately, no single product eliminates all spyware,
since there isn’t a universally-agreed upon definition of exactly
what spyware is. You may have to run several tools to rid your system
of spyware, but you should keep at least one active at all times.
If you can,
purchase SpySweeper. This product is very easy to use and will monitor
your system in real-time for threats as they occur. At the moment, it seems
to be the most complete.
If you are running Windows 2000 or Windows XP,
you can download the free beta version of Microsoft Windows AntiSpyware
software; it is also quite good and automated. It will tell you what it's
doing without requiring intervention.
I am a long-time fan of SpyBot Search
and Destroy and Ad-Aware Personal Edition - both are free. We use SpyBot
Search and Destroy extensively-- and it's about your only good option when
you're running older versions of Windows. It has some real-time spyware
monitoring built-in as well.
It really doesn't hurt to keep all of these
products on hand at all times; I will talk more about scheduled maintenance
using these tools below.
REGULAR MAINTENANCE
EVERY TWO WEEKS
Check your virus protection subscription status. Ensure that your
virus protection software is still able to download updated definition
files.
-
Check your virus protection definition level. Virus definitions are
only released when there is a specific new threat, so they aren’t
updated daily. Even so, you should expect to receive a new definition
file at least once per week. If this isn’t happening, force it
to download the latest definitions and review your settings.
-
Do a comprehensive scan of your computer for viruses. Most software
has a weekly scan pre-configured, usually on a Sunday. If not, there
is usually a facility in the software for configuring this.
-
Visit Microsoft Windows Update on the web regardless of whether your
computer is set for Automatic Updates or not. Check the "Recommended" updates
to make sure nothing is being missed. It is OK to manually install
these updates even if Automatic Updates is turned ON.
EVERY MONTH
-
Perform all of the maintenance tasks listed under every two weeks.
-
Update your spyware definitions using the software of your choice.
If you are using real-time protection such as MS AntiSpyware or SpySweeper,
you may not have to do much after this. But it doesn't hurt to force
a full scan of your system for spyware with Ad-Aware or SpyBot Search
and Destroy.
-
Scan your system for spyware.
RECOVERING A COMPROMISED SYSTEM
-
Back up your data. If you think your
computer has been compromised by a security or spyware problem,
your first task should be to try to back up all of your personal
data to an external hard drive, thumb drive, or CD. Applying
patches and scanning for viruses can actually aggravate the situation
as some malicious software is aware of these tasks and will try
to thwart your progress.
-
Ensure your virus protection is working and current. Some recent
viruses actually disable popular antivirus software. Check to make
sure the real-time protection is active and working. If your definitions
are out-of-date, force an update. If your existing anti-virus software
isn’t working, download a copy of AntiVir (www.free-av.com) and
install it in addition to your current virus protection software (you
probably won't need to uninstall your existing software).
-
Scan your system for viruses.
-
Ensure your spyware definitions are up to date.
-
Scan your system for spyware. If you still believe your system is
compromised in some way, I'd recommend you run both SpyBot Search and
Destroy and the Ad-Aware personal edition in addition to your existing
anti-spyware software. Make sure the definitions are up-to-date on
each program (like virus protection).
-
When you believe you have cleared the problem, install all of the
latest Windows security updates. Uninstall AntiVir if necessary. You
really shouldn't continue to run your system for a long time with two
different virus protection packages.
These steps are only a basic introduction to personal Windows security,
but when they’re followed, they will eliminate and prevent a large
number of the stability and privacy problems associated with running Windows.
We will have more information in future issues about changing and managing
passwords, spam prevention and other basic Windows maintenance tasks.
If you have any questions about this or any other articles, please visit
our website or drop us a line at info@bdpnetworks.com. If we use your question
in a future newsletter, you will receive a $30 gift certificate to a major
online retailer!
What We Can Do For You: Information about BDPNetworks
BDPNetworks, LLC is owned and operated by Brian Place. Since 2001, BDPNetworks
has helped increase the productivity of small businesses in Seattle, WA
and the surrounding areas by providing outsourced, managed network support
and other computer consulting services. With over 20 years of combined
professional experience in this field, we know how to keep your network
running smoothly so you can concentrate on your business.
As a Managed Service Provider (MSP), we set up, secure, and maintain
computer networks for small businesses around the Seattle area. Our Maintenance & Support
Plan contracts specify an unlimited labor scope for practically everything
that needs to be managed on a business computer network--including security,
helpdesk, backups, virus protection, documentation, and disaster recovery--all
for a low, fixed monthly fee. We have accumulated a lot of experience providing
these services to other companies, so we'd love to show you how we can
dramatically boost productivity & cut costs in your own organization. If
you would like more information on this, please contact us via the website.
Do you know of an organization that could benefit from the services of
BDPNetworks? Then ask about our referral program! New clients receive
a free onsite consultation.
Past Articles: Revisited
In case you missed them, here's a quick rundown of some useful articles
we've published in other issues of the BDPNetworks newsletter:
Phishing: Email Scams Take People Hook, Line, and Sinker
eBay and Paypal scams are rampant--what is phishing, and how
can you recognize it?
http://www.bdpnetworks.com/nl/nl10.html#phishing
How to Buy a Business Desktop PC
Thousands of different computer systems are on the market.
Here’s what you need to know before you buy.
http://www.bdpnetworks.com/nl/nl10.html#howtobuy
Planned Obsolescence: How long should you hold onto a computer?
Most computers are designed with planned obsolescence in mind.
Learn how to plan for obsolescence.
http://www.bdpnetworks.com/nl/nl11.html#buy
Our Tools: RequestTracker
Get the most out of our e-mail-based ticketing system.
http://www.bdpnetworks.com/nl/nl11.html#tools
Fun & Cool
PODCASTING
Podcasting is "Where Wayne's World meets TiVo" or "Radio
by Subscription" and it's huge. You can subscribe to and download
any show on any subject under the sun--and a lot of the content is really
good! You don't even need an iPod: you can listen to these shows on your
PC. Download the latest iTunes, free music management software from Apple
(it works on PC or Mac) to get started and look for an in-depth article
on this phenomenon in the next issue of this newsletter.
Apple’s excellent free music management software, iTunes, runs on Windows
or Macintosh and supports Podcasts:
http://www.apple.com/itunes
Here’s a great place to find outstanding independent podcasts:
http://www.podcastalley.com
The iPod Flea
The next-generation iPod?
http://www.nytimes.com/video/html/2005/06/29/
technology/highbandwidth/windowsmedia/
20050629_GUEST_VIDEO.html
Cool Tools
Kevin Kelly's site chronicles the best tools--of all types--suited
to particular tasks. A printed book is available, as well. This site
is a fascinating study of modern industrial design and some of the
tools are incredibly useful around the house.
http://www.kk.org/cooltools/index.php
Bubble Bobble!
A classic late 80s video game you can play in your web browser.
http://www.linkdumper.com/game/bubble-bobble-2
Fish Highway
Exactly what it sounds like.
http://www.fishighway.com/
©2005 Brian Place for BDP Networks, LLC.
All Rights Reserved.
Content composed and edited by Brian Place. Additional content & editing
by Katerie Prior of The Writer's Confidant, http://www.writers-confidant.com.
Feel free to forward a copy of this to whomever you wish, but please
leave the contents intact.
If you would like to subscribe or unsubscribe to this newsletter, please
send a blank message to newsletter-subscribe@lists.bdpnetworks.com or
newsletter-unsubscribe@lists.bdpnetworks.com.
Alternatively, you can visit this location to subscribe, unsubscribe or
edit your subscription information:
Questions, comments, or concerns may be directed to newsletter@BDPNetworks.com.
Thank you for reading!
INFORMATION PROVIDED IN THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT
WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND FREEDOM FROM INFRINGEMENT.
|
