And the winner is…

Two “winners” items today. One good. One vile.

Let’s start with the bad news:

* Oracle extends its adware bundling to include Java for Macs

“For years, Oracle has tormented Windows users by bundling adware with its Java installer for Windows PCs. With the most recent update of Java for the Mac, Oracle has begun including the same adware as part of a default installation, using the same deceptive techniques.” Read more..

[I cannot print what I’d like to say about that..]

And now the good:

* This year’s security app all-stars

“If reading about Superfish and Gazon has made you want to put your PC in a panic room and your Android in an armory, you’re not alone. Protecting your privacy and your gear requires constant vigilance and regular software updates — of all your software, not just the antivirus apps. If you’re searching for a new or updated security app, check out AV-Test’s and AV-Comparatives’ recent award winners. These independent labs benchmark effectiveness, speed, usability, and other factors, so when they crown apps as the best, that’s the result of rigorous tests. Read on for the lab results and our reviews.” Read more..

[The “FREAK” vulnerability made news after this was written, apparently..]

* * *

Today’s quote: “Those who are not looking for happiness are the most likely to find it, because those who are searching forget that the surest way to be happy is to seek happiness for others.” ~ Martin Luther King Jr.

Copyright 2007-2015 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

All we really have, in the end, are our stories.
Make yours great ones. Ones to be proud of.

omg! Yahoo! | Stealthwear | Friday Fun

Let’s get things rolling, and help the weekend arrive..
(AKA “A few Items of Interest”)

Beardless Ben Makes First Post-Oscars Appearance

First up, Silk (the web browser in my Kindle Fire) recommended to me a website, which, I had never heard of. It’s named omg! Yahoo!. Naturally, I click on anything “Recommended for Paul”, so I discovered that omg! features the latest Celebrity Gossip and photos (Did you know that Affleck has shaved his beard? And that Aaahnahld S. has a new gal pal?) and more. (As in.. plenty of ads..)

OMG. Please pass me a barf bag! But if your tastes and “likes” include Access Hollywood and/or ET, be sure to check out the great pics the stalker parasites paparazzi snapped of Famous People today.

Do you .. Yahoo?

(Must be a ‘glitch’ in their algorithm.. I have never looked at “Hollywood news”, Celebrity, or Gossip items… and I don’t Yahoo!)

* Very interesting (to me) .. How To Avoid The Predator Drone. Well.. that’s what I might have named the article.. But check out: DIY Anonymity on the Internet

“A recent fashion show in London presented Stealth Wear, meant to explore “the potential for fashion to challenge authoritarian surveillance.” Featuring an “anti-drone hoodie,” to thwart thermal imaging, with an “off pocket” to mask mobile phone location signals, these fashion accessories may exemplify a larger trend — the drive to find personal means to maintain anonymity in response to ever more powerful and ubiquitous methods used to track our activities, both licit and illicit.” Read more..

* Oracle investigating after two more Java 7 zero-day flaws found

“Polish security researchers have discovered yet more zero-day vulnerabilities in Java, the beleaguered Web plug-in, that led to the successful intrusion of Facebook, Apple and Microsoft in recent weeks.” Read more..

* A free version of Microsoft Office? (Legal???) Are Microsoft’s free Office Web Apps good enough for you?

“When you think of Microsoft Office, you probably think of retail software that commands a premium price. Surprise! The latest iteration of the Office Web Apps are free and surprisingly powerful. How do they stack up against Google’s offerings?” Read more..

[ah.. the wonders of the cloud..]

* Reader submitted ‘podcast’.. Why internet addiction is a controversial diagnosis

“Isaac Vaisberg is a self-described recovering Internet addict. He’s getting treatment through a pioneering new program in Washington State. And this spring, Internet Use Disorder will be officially recognized as an area that warrants further study. But not everyone thinks this is progress.” Listen

[IUD.. I thought that was something different..]

Okay. Enuff dat. Here’s our Friday Fun Video:

well… omg!

Update: What can you (Dear Reader) tell me about Fandango? Various young people have told me that it is THE website and smartphone app for anyone considering going to the movies… (Use the “Leave a Comment” link, below.)

Today’s quote: “The secret of success is learning how to use pain and pleasure instead of having pain and pleasure use you. If you do that, you’re in control of your life. If you don’t, life controls you.” ~ Tony Robbins

Copyright 2007-2013 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

All we really have, in the end, are our stories.
Make yours great ones. Ones to be proud of.

A few interesting items…

* An inside look at Internet Explorer 10’s mysterious Flash whitelist

“In Windows 8 and especially on Windows RT, your ability to run Flash programs hosted on the web depends on whether a site is included on Microsoft’s Compatibility View list. So what does it take to get added to that list? And what can you do if a favorite Flash-based site won’t work?” Read more

* Nine changes to the default Word 2013 settings (short slideshow)

“Some of the default settings in Word 2013 just don’t work for him, so before he does anything else Mark Kaelin changes them.” View on site

A lot of you had your Yahoo! Mail accounts hacked (and everyone in your Contacts list received an email containing a dangerous link…). If you haven’t done so in a while, you probably want to change your password. (And yes, you have to be suspicious. Just because a link seems to come from a friend, doesn’t mean they really sent it to you..)

* Yahoo Mail users hit by widespread hacking, XSS exploit seemingly to blame (Update: Fixed)

“Late last night reports started coming in suggesting that Yahoo Mail users have had their accounts hacked. While “hacked” is a very broad term nowadays, it does appear that Yahoo email accounts are being compromised after users click on a malicious link they receive in their inboxes.” Read more..

* Java zero-day infections pick up steam

“An exploit that takes advantage of a gaping hole in Java has exploded across the globe, according to security firm Kaspersky Labs.” Read more..

Related: Remove Java (+ A Friday Fun Video )

And this article seems a bit late to the game to me..

* Ditch the problem router and move to Wireless-N

“If you’ve been having problems with your Wireless-G Wi-Fi, it might be time to consider an inexpensive upgrade to Wireless-N.” Read more..

Well, I’m out of time. Have a great day, everybody!

Today’s quote: “What I just said is the fundamental, end-all, final, not-subject-to-opinion absolute truth, depending on where you’re standing.” ~ Steve Martin

Copyright 2007-2013 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

All we really have, in the end, are our stories.
Make yours great ones. Ones to be proud of.

Major Java Security Fix Now Available – Oracle Recommends Immediate Action

Folks, due to a severe vulnerability, that is currently being exploited (attacked) by hackers, Java needs your attention. And no, this is not just for Microsoft Windows.

Oracle issues major Java security fix; recommends immediate action

“Amid some controversy, Oracle issues a patch to fix up some nagging Java security vulnerabilities.” Read more..

And, last time I checked.. “immediate” means “right now”.

Copyright 2007-2012 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

All we really have, in the end, are our stories.
Make yours great ones. Ones to be proud of.

Security Warning: Disable Java Now

Security Warning: Disable Java Now

“Researchers report a new zero-day vulnerability in Java that’s serious enough we should all just disable Java for now–here’s how.” Read more..

Many now think that the “military grade” level that malware (aka “virus”) has now reached, has rendered our defenses useless. I am not sure that’s exactly true.. but maybe it will be by next week. Here is a very good read by one of the best writers on the subject: Is the death knell sounding for traditional antivirus?

“Antivirus developers need to run malcode in their labs in order to create malware-identifying signatures. What happens if they can’t?” Read more..

But I guess all the news is not dire..  friend and fellow blogger Rick Robinette has one today that I know you’re going to want to see: A Huge List of FREE Computer Security Products and Services

“One of my favorite tech sites is Gizmo’s – The Best Freeware…  Today, during a visit I came across a huge list of FREE computer security products and services that is maintained on their site. The list is not a list of specific recommendations, but is a “comprehensive documentation of the security products available”… I […] Read more..

But I have to be honest here folks; every week I learn more that has me seriously evaluating “going off the grid”. I have been ‘joking’ for years – if you knew what I knew about the Internet, you wouldn’t use it” – and each day that ‘joke’ gets unfunnier.

Go ahead. Read, and see why.

Important: Don’t let the UN steal the Internet

“If the UN seizes control of the Internet, they’ll take the Internet from the voices of freedom and give it to nations who’d prefer to either kill it or refashion it into another tool of state control.” Read more..

Today’s quote: “A word to the wise ain’t necessary – it’s the stupid ones that need the advice.” ~ Bill Cosby

Copyright 2007-2012 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

All we really have, in the end, are our stories.
Make yours great ones. Ones to be proud of.

Oracle – The Worst Tech Company?

I am tired of asking nicely, been doing so for years, so now I am just going to say it. IMHO the people at Oracle (who purchased Sun, which brings us Java) should be legally reprimanded. Whether it should prove they’re too lazy, simply morons, or deliberately sleazy makes no difference to me at this point. In my mind they’re criminally lazy and/or criminally stupid and/or criminally sleazy.
And/or all three.

And there’s no excuse. If it were at all possible, I would not get near anything they produced.

Why am I so angry? Yesterday, I told my browser, Firefox, to “Find Updates” for my Add-ons and Plug-ins. (Click on the “Tools” menu, then “Add ons”.)

and it turned out I needed to update my Java. So I did. Of course I did! Java is a known favorite target of the hackers (because it’s an easy target? Because it’s weak code? Because it’s everywhere?).

Here is Unpardonable Sin 1

Note there is no “Back” button, or “do not install this crap” option visible

Recommend?? I cannot print the words I use when I see this. To call them “angry and salty” is gross understatement. In case you do not know, Ask.com has a reputation as the greasy used-car salesman of the Search engine set. In case you do not know, browser “toolbars” are spyware. (I’ll further tell you, I assess how “savvy” someone is by counting their installed toolbars. And I’ll tell you you won’t find any on my machines, or those of my family, or my clients.)

When I see this kind of thing built into an installer – particularly for an update – I know I am dealing with either a ‘starving artist’ independent programmer (freelancer) or bottom feeders. These latter types are counting on the fact that you “average computer users” are ignorant and/or mentally lazy and/or unobservant, in hopes of penny-packet profits.

But it gets better. Unpardonable Sin 2

Even though it is 2012, the programmers at Sun/Oracle still do not build an old version uninstaller into their installer package .. even though a 1st year programming student would know to do this.
Doing so is fundamental. Basic. ABC.

That means the old, insecure (and “vulnerable”) version of Java – the one I am trying to replace (aka “update”) IS STILL THERE. Still saying, “here I am! Attack me!

So I have to go into Control Panel > Programs and features > Uninstall a program and remove the old version(s) manually. And I have to go into my browsers and disable/uninstall the old plug ins. Even though it’s 2012, the “average computer user” does not know to do this. They assume that because they clicked “Update now” they’re safe. And they should be.

I think such a basic failure is reprehensible.

Inexcusable.

And the toolbar business, vile.

The most polite words I can use. Oracle management and employees, shame on you. (And in case you’re wondering, yes; I feel this way about  Adobe, and their “Flash”, too.)

Important Tech Tip: Do yourself a favor. Take a moment – right now – and open your Add/Remove Programs in the Control Panel, as described above.

1) Uninstall any (non-Security) toolbars you find listed.

2) Uninstall any old versions of Java, Java runtime, Java Update, Java Deployment Toolkit. (At the time of this writing, version 7 update 5 is the most current.)

3) Reboot (aka “restart your computer”)

Now you’ll be less vulnerable to hackers and “drive-by downloads“, less spied on, and your web browsing will probably be faster.

Bonus Important Tip: Next, visit Secunia’s online scanner and have it scan your machine for any other outdated (aka “vulnerable”) items of software. To get started, click here. (You want to do this every so often, as a habit — say, once a week, or every two weeks at the most. Or, if that’s too much trouble, download and install their PSI (onboard) updater.)

.. counting on the naivete of people for profit.. leaving insecure code behind.. that’s snake-belly low, any way I look at it.

(For those of you wondering what “Java” really is.. well, think of it like the motor oil in your car. It doesn’t really do anything for you, like, say, your windshield wipers do, but you probably need it for the engine to run smoothly. Kinda.)

Today’s reading:

* Which is the most popular antivirus software?

Summary: “Using a data set consisting of 120,000 data points, researchers from OPSWAT estimate that Avast is the market share leader in the antivirus software market.” Read more..

* Free App Encrypts, Destroys Mobile Messages

“Startup Wickr launches today with iPhone, iPad, iTouch app that ‘leaves no trace’ of text, video, and picture messages.” Read more..

~     ~     ~

Today’s quote: “Even if it’s a little thing, do something for those who have need of a man’s help, something for which you get no pay but the privilege of doing it. For, remember, you don’t live in a world all your own. Your brothers are here too.” ~ Albert Schweitzer

Copyright 2007-2012 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

All we really have, in the end, are our stories.
Make yours great ones. Ones to be proud of.

Java, the new Adobe (+How To Protect Yourself)

Sun’s Java Earns Unhappy Distinction — The Hackers’ Favorite Target

Cybercriminal exploit attacks on Java have multiplied tremendously in number and they are proving to be incredibly effective. First reported by Krebs On Security last week, now the Microsoft Malware Protection Center has a notice about the wave of Java exploitation they found when reviewing their monitoring data.  In fact, the MMPC discovered that by the beginning of this year the number of exploits on Java code vulnerabilities well surpassed the number of Adobe exploits they monitored.

“What I discovered was that some of our exploit “malware” families were telling a scary story – an unprecedented wave of Java exploitation.  In fact, by the beginning of this year, the number of Java exploits (and by that I mean attacks on vulnerable Java code, not attacks using JavaScript) had well surpassed the total number of Adobe-related exploits we monitored.”

Java is everywhere, but few people know what it is, or that it is even installed, as Java runs in the background. Java is used in a wide variety of computing platforms: from embedded devices and mobile phones on the low end, to enterprise servers and supercomputers on the high end.

What you should do: As I have mentioned here many times, the way these “exploits” get stopped is via vendor-released “patches” – better known as updates. Updates are your friend, and you want them.
(As a matter of fact, the Java patches have been out for some time..)

Keep your software up-to-date. Here’s the how to for Java.
1) Click the Start button then Control Panel.

2) Locate and click the Java icon

3) The Java “control panel” will open. Click on the Update tab.

4) Click the Update Now button. Then, OK.

Did you notice how the “Check for Updates Automatically” description says that Java will check for patches and hacker fixes on the 14th of each month?
In today’s world, that’s ridiculous. Once a month? C’mon.
So let’ fix that.
5) Click the Advanced button…

.. and change the radio button to either Weekly, or better yet, Daily. Then click OK.

Then click Apply and then OK again.

Sadly, folks, you are not done. Java has a nasty habit of leaving old versions of itself behind when it updates (why is that, Sun? Huh? Huh?) and these need to be removed.

1) You should still be in Control Panel so click on Programs and Features (“Add/Remove Programs” in Windows XP/Older)
1a.) Click “Uninstall or change a program” if you have to.

2) A list of the installed programs will “populate”. Look for, and then remove (click Uninstall) all but the most recent version of Java you find in the list. That is, all but the highest numbered one. There may be several entries…

Okay. now you’re done.

I know, I know! Seems like a pain. Sun could do a much better job with this. But, listen, please. Safety and security measures are always a bit inconvenient and require extra attention and effort. Your computer is no different. Take the time. Make the effort.

When you cross the street, you look both ways to make sure it’s safe. Staying safe on the Internet is similar. It takes some common sense steps — Stop. Think. Connect.

• Stop: Before you use the Internet, take time to understand the risks and learn how to spot potential problems.
• Think: Take a moment to be certain the path is clear ahead. Watch for warning signs and consider how your actions online could impact your safety, or your family’s.
• Connect: Enjoy the Internet with greater confidence, knowing you’ve taken the right steps to safeguard yourself and your computer.

STOP. THINK. CONNECT. Protect yourself and help keep the web a safer place for everyone.

* My thanks to Bryce at Technibble for the great write up which brought this to my attention.

Copyright 2007-2010 © “Tech Paul” (Paul Eckstrom). All Rights Reserved.

---

>> Folks, don’t miss an article! To get Tech – for Everyone articles delivered to your e-mail Inbox, click here, or to subscribe in your RSS reader, click here. <<

---

Share this post :