Archive for the 'Windows Software' Category


Google Toolbar evil?

Thursday, August 3rd, 2006

Boy, that would bring in comments…. Googling Google highlighted some behaviour of the Google toolbar that seems a bit fishy. It appears that it blocks attempts to modify the default search provider in Internet Explorer. This was first reported over at Google blogoscoped and appears to be a bug (after the toolbar process is closed […]

Possible Windows Scheduler local privilige escalation

Thursday, August 3rd, 2006

Sans has a writeup on Windows local privilige escalation using the Windows scheduler and among other things it might be worth starting out by saying that typically, only Administrative group users in Windows XP are allowed to access the Windows Scheduler. However, I have read reference of some installs that even give guests that capability. […]

Firefox 1.5.0.6 is out

Wednesday, August 2nd, 2006

That was a quick turn around…. It appears as though some of the multimedia streaming issues were severe enough to require a quick turnaround for Mozilla Firefox 1.5.0.6 Sans had the initial heads up…. But it looks as though it’s now officially out (and labeled as a stability update.) Download page.    Send article as […]

Mozilla Firefox user-agent spoofing

Tuesday, August 1st, 2006

Sometimes you run across a site that’s a browser snob. You know the type…. you visit it in Mozilla Firefox or (anything other than IE) and it says, “you must use Internet Explorer version 6 or newer to use this site. Well, some browsers have nice ways of changing the user agent through the menus, […]

More reason to be cautious with Firefox plugins

Tuesday, August 1st, 2006

Again…. this article referring to an exploit related to the cross platform plugin capability in firefox, is a GOOD reminder to be cautious when looking at potential plugins to install for mozilla firefox. In fact, the advice is usually do NOT install software (including plugins) from untrusted sources. By all means, please investigate any piece […]

Another McAfee security product flaw

Tuesday, August 1st, 2006

Sans has info on a security flaw affect several McAfee security products. It could allow remote code execution. The 2007 versions of the products are not affected and a patch is expected soon. For your information, here are the affected products: McAfee Internet Security Suite 2006, McAfee Wireless Home Network Security, McAfee Personal Firewall Plus, […]

Firefox 1.5.0.5 out and be cautious with extensions…

Monday, July 31st, 2006

Well, let’s start with the extensions first. Like ANY software, you should be cautious installing something from an untrusted source. If you think an extension looks neat and cool – look for reviews and third party information before installing it. That much said…. never install an extension that comes attached as an unexpected email…. Apparently, […]

Internet Explorer 7 as High Priority update and the ability to prevent it’s auto-download

Monday, July 31st, 2006

The news has come that Internet Explorer 7 will come out as a high priority security update when it’s released later this year. This should mean good things for the folks that are still using IE6 as it will bring quite a few security enhancements. (On a side note, my test of Vista with IE7 […]

Pulling GPS coordinates from Google Earth kmz files

Thursday, July 20th, 2006

We’re planning a quick trip out of town and I’m using the lowly free version of Google Earth that doesn’t integrate with a GPS device. So, I had got a series of places tagged in “My Places” and had sent the kmz file to myself via email. (My primary intent was to try and load […]

Microsoft Issues advisory on Powerpoint flaw

Tuesday, July 18th, 2006

Here’s the link to Microsoft’s advisory. The main workaround seems to be…. Don’t open or save powerpoint attachments that you receive from untrusted sources, OR that you receive unexpectedly from trusted sources…. So, the only real workaround is what SHOULD be common practice. Whether or not there is a vulnerability in the news you should […]

Google
 
Web www.averyjparker.com