Get Thunderbird to launch Firefox/Chrome browsers in Linux!

This isn't like Windows!

If your like me you probably clicked a link in Thunderbird and thought you would be taken to your favorite browser but that isn't the case with Linux. The pop up screen asking you which application to launch is quite similar to Windows but there is a problem. If you have had no experience with Linux then you might ask yourself "Where's the program files?" It seems that Windows and Linux differs from each other in that aspect. I did have to do some things to get Thunderbird to get it to launch a browser. This quick tutorial will help those new to Linux to do what they have always done on Windows. I will warn people that clicking on links in your emails is the first way to get a virus or a credit card stolen but that is for another topic and discussion!

Some Preparations are in order!

For some of use this is something that should already be included, but it seems that Mozilla didn't add some important config scripts into the Thunderbird application for Linux. Thanks to Google, I found the answers and I thought I would also share them with people so it would be much easier for others to enable launching the browser in Thunderbird.

You will need to add these strings in Thunderbird:

In Thunderbird: edit > Preferences > Advanced > Config Editor

Right click anywhere in the list and click ADD > String. Then add these strings with values!

• String: network.protocol-handler.app.http Value: x-www-browser


• String: network.protocol-handler.app.https Value: x-www-browser


• String: network.protocol-handler.app.ftps Value: x-www-browser

Once that is done, your ready for the next step of the process.

Where Do I find these files?

Most cases you will find these files in only one place and that is almost like a C: Drive. In order to find the right program, you first need to go:

1. /usr/bin/firefox.sh (shell script)


2. /usr/bin/chromium-browser.sh (shell script)


3. /usr/bin/rekonq.ex (Executable)

These are the two files you will need to tell Thunderbird to launch the right application when you click on a link. You should only need to do this once for each type of link from http, https, and the last one is the file transfer protocol but if you do this, I see no reason why you would be able to launch your favorite browser. Depending on which browser you have installed, it should be easily found in the the bin directory and you should be able to launch your browser even if it is not a well known browser. .

Let's Rock Linux

Paul Sylvester

Does Linux need an Anti-Virus?

Anti-virus Programs and Linus Torvalds

Hey let's face it with the recent virus problems Machnitoshes has had, we've got a bit of problem on our hands.   I've come to the realization that there must be a way to protect my Linux operating system much better.   Although there are several different programs out there that can be used with Linux.  I however wanted to talk about the necessity of having a program installed and running to better protect me from doing something bad.   Hey I admit it, I occasionally click on links when I shouldn't and also occasionally like to see what is in my spam folder just to make sure I am not missing something that I should.

Is Anti-virus Really needed for Linux?

There have been advocates for Anti-virus programs for the Linux community over the past few years.   I have been one of those myself.

 

Any antivirus/spyware needed?

 

I have been an advocate of "Linux" "doing" "enabling" antivirus/spyware for over 6 years now....it WILL hit "us" sooner or later....but given the money involved I think.....MUCH later....so....no, for now, do not worry about it at all.

If you get "something" that says it is "checking your computer" it is because WINE has automatically been enabled and the malware is seeing that and NOT Kubuntu....so....ummmm....close the browser....re-open and get on with your malware free life.

Via Kunbuntuforums.net

Now I tell you,  What is wrong with this picture?   Are the Linux users acting a little like Apple users, and thinking they can't get a virus.   I won't say that right now there are any viruses in the wild but I would caution everyone not to consider your system invulnerable even though there aren't as many reports of virus out in the wild.   It will hit us next if not this year probably in a year or two.

Linux is Next for sure!

I don't say that lightly, I am sure in the coming years to even months that the malware writers and virus writers will be looking at Linux more and more.   With Apple just being hit and finally admitting that they have been hit with a virus, you can bet that some of the Apple users will convert to Linux just because they were using Apple's believe that they were immune to viruses and malware.   They will come and when that comes the eyes of the world will be on Linux users.   It will be our job to get ready for these nefarious users and fight them off.   So I call to the community to get ready for this to happen.   I know it is coming almost as much as I know I am going to keep blogging.   Only time will prove me right, but I know it is going to happen and if your not ready then you can only blame yourself.

Stay Safe

Paul Sylvester

Related articles

• What kind of anti-virus software can you install on an iPad (wiki.answers.com)


• How to Remove Mac Defender/Security/Protector Fake AntiVirus Phishing Malware (mydigitallife.info)


• What's the difference between an anti-virus and an anti-spyware ... (sanjoseppl.com)


• Run your anti-virus program. (newsiam.wordpress.com)


• Repulsing a Mac malware attack (guardian.co.uk)


• Blackhat SEO and Fake anti-virus - Like chocolate and peanut butter (blogoholic.in)

Apple Needs to Worry about Security and Virus!

Let's Face It, Mac isn't Virus Free no more!

I know I've been saying this for a few years, but In all truthfulness it is more of a fact than a few years ago.   Apple needs to change their policy on how they do commercials.   I don't say that light hearted because I actually think the commercials are really funny sometimes but that is besides the point.  They have not in the past changed their tactics because of the new malware that is going about.   Some experts are saying this malware doesn't require you to enter a password or even have you allow or deny the installation.  Although, I have no Apple computer to test this observation, it seems quite possible depending on how people have their system setup.   Thought most Mac users are not thinking about security or even the possibility of a virus because of the advertisements that Apple has put up in the past.   More and more their seems to be a growing number of viruses and malware for the Macintosh.

Security Through Obscurity is No More with Apple!

I say that know that in the past most Apple users always thought since the Operating system of the Apple was not well known that they could get away with installing unknown software or programs that Windows users would think twice on.   I honestly don't see how people would download bit torrent files thinking that they were safe on the Mac because "Apple Could never get a Virus" advertising has stuck in their minds.   Yet Apple has in the past fought this through new changes to their advertising but the fact remains anytime you think of a Macintosh, you first thought would be about it being Virus.   I know some of you probably though the first thought would be the speed and ease of the Operating, and although that is true that isn't my thought when I think of a Apple Operating System.

Don't Presume anything!

I might not be a Mac User but I don't presume anything when it comes to running a Windows or even a Linux Operating System.   That Being said when Apple finally realizes that they are no longer able to hide from the bad guys, then we will see them start fighting back.   Until then though, most Mac Users will make the mistakes they have always done because of Apple stance and the ignorance of the problem.  I have said how hackers will start targeting Apple Users and this seems to be the case even now.   If you have a Mac Machine, I suggest looking for a good Antivirus and sticking with them.   You are not longer safe not having an Antivirus software installed on your system.

Stay Safe!

Paul Sylvester

Related articles

• 5 ways to stay safe from fake anti-virus malware attack on Macintosh (infoworld.com)


• My final word on the whole "Macs don't get viruses" thing (technovia.co.uk)


• Apple finally acknowledges malware; readying software fix (thestar.com)


• Do You Use a Mac? Safeguard It Against "MacDefender" Malware by Understanding the Scam and Getting the Fix! (managemypractice.com)

How to Get a Free VPN for Ubuntu/Kubuntu!

Is there a Free VPN for Linux?

Use Coupon Code “savenow15” AND SAVE 15% on the lifetime of your account!I had to search both high and low.   It took me several hours and searching to find a viable option for me.   I wanted to share this so others wouldn’t have to work as hard to surf safer on the web.   If your like me, I like to go to free wifi spots to blog or even just surf the web.   I don’t want anyone getting my personal information so I would always have to use Windows.   I really got fustrated having to always load Windows when It was just easier to load up Kubuntu.   I know in the past this was something that was never really an option because you’d have to be a real geek to do anything like this.   Thanks to the open community of Linux, we have a viable option now for those who aren’t technically geeks but would still like to keep their web surfing secret from prying computers on an open wifi spots.

How to setup your free VPN for Kubuntu!

• If you haven’t updated to Kubuntu 11.04  or later then you will need to make sure you have that version or later for this tutorial to work.  You can also use Ubuntu 11.04 or later but the screenshots will be for Kubuntu, so there may be some difference in looks and names but should be relatively the same.


• Book Mark the FREE US PPTP VPN site — This is essential because the problem with this free VPN service is that changes every 12 hours.   This however isn’t a big problem because if your using a VPN for Wifi Hotspots.   It just means everytime you go to a wifi spot you will be unsecure until you go to the bookmark and change the password.  To Bookmark the site you can easily just press CLT-D.

If you have done those two steps then you are ready to setup your VPN.

Setting up the VPN

This is going to be relilitivly simple, because if your using the Linux you will know some of this already.

• Go to your Network Manager —  There are 2 ways to do this.   You can find it on your toolbar either being a Ethernet or Wireless icon, just right click it and choice “Network Manager Settings” or you can click the “Start > Applications > Settings > System Settings > Network Settings”.


• Once there you will want to click VPN

Click to see larger picture

• Click the Add Button

• As you can see if you have booked mark that page I told you earlier to go to.  You will need to add the Gateway, username and password(remember this password is only good for a few hours, so remember this step). Then click “Advanced”

• You will only need to do this once.   Uncheck all in the Authentaction area but the MSCHAPv2 and Check “Use MPPE Encryption” but do not check the “Use Stateful Encryption”, if it is checked uncheck it.   Then click OK!


• Hit Ok or Apply and exit out of the manager.   You may have to reboot to get the new settings to activate.   I had to with my current system but that was only when creating the new VPN, after that it work fine.

You will need to edit the password everytime you want to use the VPN but if you have made it this far than you should be all set to use the VPN to safely surf the web.   In order to change the password just remember the first 2 steps and instead of adding a new VPN just edit the one you created and change the password and hit Apply when done.   I hope this has helped other Linux users to surf the web safely on free wifi spots.   Enjoy!

*Update*

There seems to be a kde4d Bug and ntrack bug that causes the menu bar and toolbar to freeze.   Just thought you’d like to know!!

*Update #2*

There are another site that you should also check out for a Free VPN Service:

• us.hotfreevpn.com (Doesn’t require a new password)

If I find more sites that you can use to get a free VPN with PPTP then I’ll update this as soon as I find them!

Paul Sylvester

Related articles

• Kubuntu: Kubuntu 11.04 Released (kubuntu.org)


• David Wonderly: Kubuntu Council (wonderly.com)


• Harald Sitter: Kubuntu Council? What is this? (apachelog.wordpress.com)


• Harald Sitter: Kubuntu 11.10 Sneak Peak (apachelog.wordpress.com)


• With Linux, All you Really need is Google! (paulstechtalk.com)

Are your ready for your last post??

A Great post by Derek K. Miller!

I was reminded by a great post by Derek and it was yes sadly his truelly last post.    If you didn't know Derek and kept reading blog you'd have heard nuances of his problems.   You also have grown to know about his family through his blog post and yet you'd only touched the surface of this man by reading his blog posts.   I didn't know him personally but that last blog post made me want to know him.   It was inspiring and well written and made everyone cherish the person he once was.   I come to think each blog should have something like this to let our readers know that there will be no more blog posts from us.   This is one reason I thought about making an educational post about getting ready to die posts?

How to Get ready for Death!

We've all wondered how we'd have our last blog post published and who'd do it.   That part is yours to decide but I am going to talk about the fundelmentals and let you decide just how you'd it.   I personally feel there are three ways to it:

• Family -- This is the most trustworthy choice because the family members will almost always want your wishes carried out.


• A Will -- This is common in the United States and I am sure in other parts of the world but it is one way to let someone know you have a final post and to publish it.


• A Lawyer -- This is another common way to make sure your post is published by giving access to your blog through a lawyer.

As you can see these are my ideas of how to publish that last post.   All though these are just a few, I thought the list might give you an idea to publish in your own way.    I won't say these are the only ways but these are my ways and I don't see any other ways to do it.

How will they log in?

This problem is common for blog owners because they want to protect there blog from being used for wrong doing.   So you'd probably be one of those who has an really good password that no one has access to it.   I currently use Lastpass and would tell people even with the last problem they had, it is still the best password manager you could have.   One way to give people the access to your blog and all that information that they will need after you die is to give your families or lawyer  several one time passwords for your Lastpass password database.   Now I say that because some of us bloggers have affiliate sales and there may be a need to switch the commission to someone's elses name for them to use the money to keep the blog going.   It just depends on what you want the money to be used for.   A way you can think of it is, it will help pay for your funeral expenses and pay the persons back in the long run.    You'll just want to make sure they know that the domain and hosting should be paid first to keep the money coming in but is little from the money you'll be receiving each month.

Give Admins rights to someone you trust!

This is something that people will have to decide if it is right for you.   You can give someone who you trust their own account on your blog.   Although this is something that you have discuss well in advance.  I don't recommend this tactic because of the possibility that someone could brute force that account and no one would be the wiser.   It however is important to come up with your own way to have that last post publish that your readers can know that their won't be any more post by you and that they can morn for your death because you were part of their lives and you could very well be missed.

Paul Sylvester

 

 

Related articles

• Lastpass still the best there is! (paulstechtalk.com)


• The Last Post of Derek Miller - Blogging After Death (johnchow.com)


• I'm dead (offonatangent.blogspot.com)


• Derek K. Miller Says Goodbye With A Final Blog Post (laughingsquid.com)


• Derek K Miller's Last Post (adultonsetatheist.blogspot.com)


• RIP Derek K Miller (insideview.ie)


• The death of a skeptic (blogs.discovermagazine.com)


• Goodbye, Derek (nottobetrustedwithknives.com)

Lastpass still the best there is!

Lastpass had been broken!

In a recent blog post by the Lastpass team, they talked about how they saw data being sucked from one of their servers.   They hit the panic and Paranoia button because they know how important it is for our passwords to be safe.   They have inititated a password reset for some accounts.   There openness only shows me they want to be as plain as possible.   That is why I thought I should at least talk about this recent Lastpass Hack as some would say.  I have said it in the past but I will say it again.   Lastpass is the best there is and I support there efforts a 100 percent.

Lastpass has implemented a forced password on some users!

I’m not saying everyone is effected but if your one of the few who they have forced you to change your password, I would certainly do it.    The most part if your unsure, the best possible advice I could give you right now is to just hold tight.   We know that they working hard to resolve the issues and that you will probably be next in line.   Just hold off until we know more.

Are you in offline mode?

This is the other problem right now with Lastpass but don’t worry.   You can download the proper files needed to keep your self busy while they fix the problem.   I am using Linux but if your need to have access to your Lastpass passwords, go download the offline versions of Lastpass and use them until they have fixed the problems associated with the passwords.    I have installed the Pocket Password from Lastpass on my Kubuntu system without a hitch. This will be a valuable edition for when I am not able to get connected online.

Lastpass I am still a USER and I thank you for your hard work!

Paul Sylvester

Related articles

• LastPass Hack of the Day (geeks.thedailywh.at)


• LastPass Security Breach? (ghacks.net)


• LastPass Says Hackers May Have Stolen Password Data (businessweek.com)


• LastPass Users Urged to Change Their Last Password (techland.time.com)


• The Last News You Want to Hear is LastPass Hacked. Now What? (cloudave.com)


• LastPass forcing members to change passwords (news.cnet.com)


• Use Lastpass? Change your master password asap (sunbeltblog.blogspot.com)

Security and Privacy go hand in hand! Or does it?

Image by sfpanda_pix via Flickr

Privacy Really?

I've been commenting on Gail Garners Blog about how Google mail is putting ads in the emails.  Now I have done at least one post about Privacy and you not having it.  If you haven't read my  post then I will give a outline of that post.

It basically boils down to some main points that I will discuss on this post:

• No-one is Immune on the Net -- Anyone and everyone has some information floating out on the internet and even celebrity information that they don't want you find can be found if you look hard enough.


• Know the Information before anyone else -- Seriously if you want to keep track of what is being put out on the net about you.   Have Google email you when either name or some other information that you are looking for gets put out on the net.


• Be Ready for Anything -- There isn't much you can do to actually be ready for Anything but it is more of a statement to yourself that "Nothing will surprise you.".   Sometimes just taking a long hard look at your life and remembering some of this can be quite concerning, so you should be ready for someone to find out and have an answer for them.


• Our life are infinitesimal compared to the scheme of things --  Everyday, I am constantly thinking what can I do to make someone's else happy.   I find blogging makes me happy but I always want to make others just as happy as I am sometimes.   I sometimes like to wake up in the morning and just thank God for each day I can bring something new to my readers!

How Security is involved in Privacy

If you read the title and was a little curious why security is crucial to privacy.   It does not take a rocket scholar to figure this out.  If your are one to worry about your privacy then you should be also worrying about what information is leaking out on the internet from sources that you have no control over.   This means you have to figure out just how far you willing to go.

• Friends --  Sometimes your privacy is left to who you decide who your friends are.   They might accidentally mention your name or some other random tidbit about you.   It all depends on who your really trust and tell them not to share your information.


• Family -- Almost the exact same people as friends but since they are your family, there may or may not be trust so you will have to deal with them in your own way.   This is why I grouped them separately!


• Services -- If your ever signed up for Facebook or other social websites than you have not truely read the Terms of Service.   Most of them, if not all, require to the user to have personal information on there server.   In turn, someone could get on there server illegally and copy all those names and information.

As with my previous post about epsilon having been hacked.   If you have a computer or the internet then your information is slowly being leaked and there is nothing you can do about it.   You can minimize it but that is about all.

I want to hear from you.   Do you think you can still be invisible on the internet?  Leave a comment or ask a question.   I'd love to hear what you have to say!

Paul Sylvester

Related articles

• EU's e-Privacy Directive & the Cookie Problem [Jon Claiborne] (ecademy.com)


• Privacy settings on Facebook (e1evation.com)


• On Privacy in Social Networks: What Drives Users? (readwriteweb.com)


• Privacy group wants Google cash (bbc.co.uk)


• FTC Smacks Down Google Over Privacy Issues With Buzz (technologizer.com)


• Privacy and Google (telecomcanadaen.wordpress.com)


• Google to be audited on privacy (bbc.co.uk)

Why I never volunteer for bacon!

Image by pjsherman via Flickr

All Dogs love bacon!

If your wondering what I am talking about.   I will explain it to you in ways that you probably never considered.    If you have ever signed up to websites and they ask you if they could share your email address and name to 3rd parties.   3rd parties are like Epsilon Marketing and they make there money by selling products to people who have volunteered to receive bacon advertisements.

Security is nothing to Epsilon!

I won't go into detail about why because if I did you would probably agree with me just because of what happened.   Most likely Epsilon will loss a lot of customers and businesses due to the security breaches.    It just depends on how people feel about this company and why anyone should trust them after this breach.   I always tell anyone who signs up for a service to always makes sure to opt out of those emails.   I don't know about you but I know right now Epsilon has Egg on their faces and wouldn't mind sticking their heads in the sand.

Don't Get Caught Spear Phishing!

Now since the hackers have your name and your Email address, you probably are wondering what can I do not to get fooled.   I thought it would be a good idea to give some good guidance for those who might want to prevent this from happening in the first place.   You don't want them to get your sensitive information.    I don't want anyone to know my passwords or even my credit card numbers.   They will try to fool into giving out this information because there is some kind of urgent response about some kind of problem with your account.

Some stuff to consider:

• No Company will call you asking for personal information


• Nothing is so important as to go to the website directly


• If they don't sound professional then tell them you will go visit the local bank or institution


• Just because they know your name doesn't mean they are real


• Don't click links in emails that you don't trust, always go the sites that you trust by typing it in your browser

These are just a few ways to help prevent yourself from being phished but nothing can prevent it but yourself. So remember to think before you click and think before you give out any information to unknown emails or people.

Related articles

• How to get ahead of spear phishing (securityskeptic.typepad.com)


• Epsilon Epidemic (chainmailcheck.wordpress.com)


• Favorite Epsilon Hack Articles (secure-value.com)


• BBB Warns of First Epsilon Data Breach Phishing Email (walletpop.com)


• Your Email Address Was Stolen. Now What? (readwriteweb.com)


• Targeted phishing scams could rise after Epsilon data breach (physorg.com)

Achievecard in the Mail and they have my Social Socurity Number?? WTH??

As you can see Achieve Card sent my wife an unsolicited mail with this card in it.   In order to “activate it” You must your last 4 of your Social Security Number!!  Now I talked about Netspend doing this also but they didn’t keep the IP‘s of who referred them.   This seems to be the same way and I am very concerned.   I would like to stop these companies from getting my Social or my wife’s Social.

Don’t tell me you don’t have my Social, You just tell me you do!!

When I made the blog post about Netspend, There was a comment from Staff101 and he said they didn’t have my social but if that is the case with this card. Then why would they have the pin being the last 4 of my SSN(see picture above)?? Again, if you are going to comment telling me that you don’t have my social. Your gravely mistaken, and that really concerns me and others. My privacy and security is essentially something that I take seriously. I haven’t called this company because they are probably like Netspend and will tell me they don’t have the information on who gave them the information. I am not happy and would like to find the person/company doing this. This seems to be a continuing problem.

Should I Activate this Achievecard??

Well, I will tell you I am not going to activate this card because of all these problems:

• Better Business Bureau (Rating D Minus)


• Achieve Card Mastercard Complaints


• 
  I get my glasses from GlassesUSA. They have a Satisfaction Guarantee and even Prescription Sunglasess for when your out doors. Give them a try, and I know you'll like them!
  

List of malware sites for Sept 1, 2009

Well with it being the end of the month it was to be expected here is a long list of sites.   So please read these carefully.

[intlink id="4403" type="post"]Personal Antivirus Scareware Site and How to Remove them:[/intlink]

• live-virus-scanner9.com


• tryantivirusscan.com


• antispyware-scanner2.com


• bewareofvirusattacks2.com


• antivirus-scanner6.com


• valueantivirusshop1.com

[ad][intlink id="4217" type="post"]Internet Antivirus Pro Scareware[/intlink]*SUPERAntispyware gets rid of these too*

• adjudg.info


• atwain.info


• caretz.info


• gaudad.info


• krapen.info


• nevils.info


• outliv.info


• penvie.info


• stampo.info


• ticedu.info


• unwept.info


• gelded.info


• dolchi.info


• figgle.info


• botled.info

[intlink id="3977" type="post"]Rogue Antivirus scareware sites[/intlink]:

• securepcshield.com


• myprotectedzone.net

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

AVG 8.5 Free Version Best on my system

Pcworld has a released there top free Antivirus software picks.     Now let's be clear on this, I am an a average user, and have tested these products out on my own laptop plus others and here is what I find.

According to Pcworld, Avira Antivir Personal is the top pick and claims to block 98.9 percent of samples:

Such less-than-friendly default behaviors make Avira AntiVir Personal a better choice for tech-savvy users who know how to muck about in the settings. If you're willing to put up with a somewhat clumsy interface and the recurring pop-up ads, in return you'll enjoy top-notch, free protection against malware. It's not a bad trade-off by any means.

[Via Pcworld : Avira Antivir Personal Antivirus]

[ad]Now with Pcworld saying it isn't a bad trade-off to have the Pop-ups and the default behaviors of this program, it doesn't make me want to use this program since I am a gamer and the pop-ups would interfere with playing online games, not to mention if your not that tech savy person you'd have a lot of head scratching to  figure out this program.

Then we go to the Second pick and Avast Antivirus Home in this pick Pcworld claims to blocking 98.2 percent of samples tried with this program:

Avast Antivirus will do a decent job protecting a PC from malware, but if you're willing to put up with a less-than-perfect interface (and some ads), you're better off going with Avira's top-notch blocking.

[Via Pcworld : Avast Antivirus Home Edition]

Now unless you want to be scratching your head on this product you have to go through the Tutorial that pop-ups after installation to walk you through how to use this product.   Then there are some more ads that popup during the day that reminds you that this is a free program and suggesting you pay for it.   Also you will have to register with Avast  to get a personal free license to be able to keep this program running on your system.  The interface of this Antivirus makes you think you will be playing music, which can cause some confusion when it comes to understanding this product.

Third place was AVG 8.5 Free edition according to PcWorld.   With there being no pop-ups reminding me this is a free product.   Also the easy to understand interface also makes this very user friendly.   I also like the Linkscanner and blocked 95.8 percent of the samples meaning it is still rather good to use for the daily user who wants a less intrusive  pop-ups or ads.   AVG has not yet done a pop up with me but it is far less annoying than the others because of the interface and the ads that are shown in the main program.

Now if you want to add even more security to your system and keep it cheap as possible I would suggest Downloading and using  SUPERAntiSpyware and Malwarebytes.  These with AVG 8.5 Free edition to better protect your system and these don't interfere with AVG and actually helps boosts the removal of virus, Trojans, and Malware.



Download Malwarebytes

Download SUPERAntiSpyware















If your current antimalware software let an infection through, you may want to consider purchasing the PRO version of SUPERAntiSpyware or Malwarebytes License to protect your computer in the future. SUPERAntiSpyware Professional or Malwarebytes License features highly advanced Real-Time Protection to ensure protection from installation or re-installation of potential threats as you surf the Internet (Both are trusted Vendors by CCSS Forums).

Buy Lifetime Subscription SUPERAntiSpyware For $30, save $8.90 if you order now. This is a special offer from this website.

List of Fake AV sites for Aug 22, 2009

If you know anything about the Malware writers they are always registering new domains and here is the newest ones they are using:

[intlink id="3607" type="post"]Personal Antivirus Scareware Site[/intlink]:

• antispywarebestscanner.com
[ad]

• professionalvirusscanv3.com


• professionalcomputerscanv2.com


• scan-your-pc-now.com


• professionalspywarescanv8.com

[intlink id="4217" type="post"]Internet Antivirus Pro Scareware[/intlink]:

• hopest.info


• suffic.info


• cressy.info


• unowed.info


• inclin.info

[intlink id="3977" type="post"]Rogue Antivirus scareware sites[/intlink]:

• securitytoolsite.com (Fake Scanner)


• webscansecurepc.com (Fake Scanner)

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

List of Malware sites for Aug 21, 2009

It has been kinda busy today for the Antivirus scareware sites but here they are.

[intlink id="3607" type="post"]Personal Antivirus Scareware Site[/intlink]:

• check-for-malwarev3.com


• safeonlinescannerv4.com

[intlink id="4217" type="post"]Internet Antivirus Pro Scareware[/intlink]:

• fatuus.info

[intlink id="3977" type="post"]Rogue Antivirus scareware sites[/intlink]:

• antivirusplus2010.com


• mybestantivirusplus.com


• internetantivirusplus.com


• antivirusplus09.com


• antivirus-plus-now.com


• yesantivirusplus.com


• goodantivirusplus.com


• i-antivirusplus.com


• nextantivirusplus.com


• antivirusplus-ok.com


• getavplusnow.com


• antivirusplusnow.com


• getantivirusplusnow.com


• realantivirusplus09.com


• freeantivirusplus09.com


• addedantivirusstore.com


• addedantivirusonline.com


• myplusantiviruspro.com


• yourcountedantivirus.com


• easyaddedantivirus.com


• addedantiviruslive.com


• addedantiviruspro.com

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

Securing Your Wordpress blog

In the last few blog post we talked about:

• How to Setup your Own Blog, The Easy Way


• Picking the Hosting Provider & Setting up your Domain


• Setting Up Wordpress

This post we discuss securing your Wordpress blog and creating even more of a Wordpress Firewall, as I call it.   You don't know what bot or person might be lurking around your blog to get access to installing malware or worse off taking control over your blog for there own nefarious reasons.

Photo by: Terry Mun

Now since you have installed Wordpress and have it working now what do you want to do blog?  Blogging will be coming later in this series but for right now we want to take a good look at removing your Default Admin user.   Like the default routers admin profiles and password this makes it even easier for a hacker to try to find out the password.  Although You should never use a simple password.   You should always use numbers and letters in random order to make a really strong password and have it at least 8 characters long.  The longer it is the better off you at preventing unauthorized access to your blog and your blog posts.

Prevent access to Wp-admin and or image directory from bots.  This can be good you can also use this in combination to disallowing every IP but yours to help prevent people from gaining access to your pictures or you admin login page.   This is all preference and how secure you want to control access to admin page.   I feel if you have good security in place you should be in good shape.   If you don't have a permenant or static IP and have a rotating IP you can however increase your security by password protect the wp-admin directory from unauthorized people.

I've also been using a few plugins to help protect your admin page from hackers, they can help prevent unauthorized access by limiting how many times you can attempt an a login:

• Login Logger - keeps track of recent logins to Wordpress for all users, as well as all failed logins. It records username, time, IP address and how long since each login attempt as well as time since last active for each user.


• Limit Login Attempts - Limit the number of login attempts possible both through normal login as well as (WordPress 2.7+) using auth cookies.  By default Wordpress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.

I have talked about [intlink id="3698" type="post"]Wordpress security plugins and other things[/intlink] you can do to better protect our Wordpress blog.   I would suggest looking at that and make sure you harden your security for Wordpress so that you don't have a problem with hackers.   Although these are just a few you should go check out the Wordpress article from the creators of Wordpress and also consider using some of those recommendations to keep your Wordpress blog secure.

On the next blog post we will talk about Blog themes and how they help your audience.   We are almost done but do stay tuned.

Scareware Adviser from securitybrowseradviser.com

It looks like I have been added to this website but it is a fake URL Hijacker that wants to sponsor [intlink id="3607" type="post"]Personal Antivirus Just Scareware[/intlink]. Yep you guessed it they are blocking this url from trying to be displayed some of the people are still ignoring the warning and coming to my site  anyways.


So the first question is how do I know this is a fake site warning. Well I did my research I went to Phishtank.com and check to see if my URL was being blocked. I also clicked the link to see what this link went “Activate my Web protection software”. It sent me to this site:



[ad]As you can see this site “ieprotectionlist.com” calls itself the [intlink id="3607" type="post"]Personal Antivirus[/intlink] and look it even says “Malicious behavior detected”. I start looking for anything about this software no links to contact them or no links to learn more about this product. This is how I know this is a scareware site. If you seem to be getting these warnings it is time to go download[intlink id="2205" type="page"] real antivirus software[/intlink].

[ad]As you can see the Securitybrowseradviser.com is a scareware sponsor for the [intlink id="3607" type="post"]fake Personal Antivirus software[/intlink] that it is linking to. So if you getting this it is time to remove it.

I would Recommend SUPERAntivirus Pro although the Free version is good to remove this scareware or spyware. I have found it does find all the programs and where they are located. If you feel like you want to do it yourself be warned that is a cumbersome process and might hurt your system more than letting a program do it for you.

I will be doing a review of SUPERAntivirus Pro in the next few weeks, I do think it does the job plus more. When I do a scan with this product it actually finds more than expected.

Canadian Pharmacy at it again : ownsouthme.com

I received an email that got past my email settings and here it is:

Hi there,

Because of the economic crisis, things are not going well for online business. So here is a pharmacy which sells % 60 cheaper than other stores on the net. If you have pharmaceutical needs, try them before they go out of stock. You may read the advertisement below if you are interested :

[ad]No doctor needed anymore! Get what you want easy and faster than ever before!
We have all the best medicines of the industry packed and waiting for your order!
Of course we got the best blue men's friends and we sell them with the hugest discount right now!
More about us:
- Man's Health, Anti-Depressants, Antibiotics, Cholesterol, Diabetes, Diuretic medicines
- Pain, Sexual Health, Erectile dysfunction, Sleep Aids and Weight Loss medicines
- Worldwide shipping
- % 60 cheaper than other pharmacies (limited with stocks)
- Always full anonymity
- Always making you a happy customer!

Choose us and you will feel well: Always!

hxxp://www.ownsouthme.com

As you can tell if you went to the site it would be a redirect domain and go to greatpharmtraditions.com.  I've talked about [intlink id="3680" type="post"]Canadian Pharmacies[/intlink] in the past but there are a few things to look at to prove that it is a fact.  I did a Search for the phone on the bottom of the screen to see what pops up and you will be amazed at what is on the first Google search page.   A Rip-off Report about how they sent Generics and not the real deal.   I also did a whois look up of  greatpharmtraditions.com and the site is located in Russia.   There are others who have blogged about the phone number in question at the bottom of the screen, so yo must be careful where you buy your medications.  As always it is simply far less risky to buy them from you local pharmacy.   If you have any doubts the best bet is not to do it in the first place.

How to Send Files Securely -- Securezip

I've been testing out Securezip the last few days and I am convinced this is the best option people can use to send files through email.

How does Email work?

So Let's get down to the basics of Email.   Email uses DNS just like the web pages it also can be Sniffed if you are using a public hotspot or other unecrypted networks.   We've seen people talk about Email Privacy and documents alone can be the most private thing we have.

Email has to be sent through several different servers that you have no control to get to its final destination.   So if your really paranoid you know that a server could be used for the man in the middle scenario.   In which some server claims to be the final destination and here it is copied and sent on to the true person.

Securing your Email

As you can see email privacy is as easy as telling people everything they want to know about you.  Email Security is always going to be an ever evolving technology, because those who want to listen will tend to find ways to listen. You could use PGP Email Encryption to prevent people from reading your emails but what about the files?

[ad]Softpedia has an excellent screen shots of the Securezip.   I would strongly recommend check the screenshots out first.     Here are Three points of interest for people who want to consider Securezip:

1. You can Digitally Sign the zip the File --  This is good to start doing to prevent people from claiming they are you and sending files that aren't really from you.   So this would help prevent people from spoofing you sent you the file.


2. Passphrases --  Also good to use because even if someone takes physical control of your computer they will still need to know the passphrase to open the file.


3. Public and Private Keys -- Each person has a certificate from Comodo where as you install a private key into your system and only your system can open it or encrypt it.   You can send this file to multiple people to be able to open this file up.

So in short this is the best possible way to keep your files safe from hackers and man in the middle attacks.   Although if you only have one securezip and not PGP, people would still be able to read your emails so to be safe on the internet you should also encrypte your private emails to better protect your privacy

[Download Securezip]

A-Squared Emergency USB Stick - Portable Antivirus Kit

[gallery link="file" order="DESC" columns="2"]

IT Security warfare is an interesting domain. It is a never ending race between the security software developers and malware writers. And since the security software always act after the development of the malware, they are always behind in this race.

But this fact poses a serious threat to the security of your system as a user. If you are not careful and regularly updating your antivirus applications, you might be late, and if the malware might get a chance to get the entry to your system, it can play havoc there.

Today’s Intelligent Malware…

Today’s malware are much more intelligent than their predecessors. They not only do the damage intended by their developers, but also make it difficult for security software to identify them. They try to disable your antivirus applications, they modify your system files so that you are not able to access the security software websites and forums, they hijack your browser homepages, they disable the update procedure of your security software and use all such tricks, which make their detection difficult.

What is the Solution?

In a such a situation, you need a security tool, which remains aloof from your system and can be used as and when required. A-Squared Emergency USB Stick is one such portable tool, which can be used in such a situation.
A-Squared Emergency USB Stick is a combination of two free security tools from the reputed security vendor EMSI. These tools are…

A-squared Free:

[ad]With a-squared Free you have got the powerful a-squared Scanner including graphical user interface. Search the infected PC for Trojans, Spyware, Adware, Worms, Dialers, Keyloggers and other malign programs.

a-squared Command line Scanner:

This scanner contains the same functionality as a-squared Free but without a graphical user interface. The command line tool is made for professional users and can be used perfectly for batch jobs

You can download this and save it in your USB Flash Drive. In some unfortunate instance, when the security software installed in your system is not able to detect any malware, and the malware damages your system files, then there are chances that this USB stick remains protected, because it may not have been inserted in your computer at the time when the malware has been doing its job.

Once you are aware about the presence of the malware, you can try to use this portable antivirus kit to clean your system. The command line tool coming with this portable antivirus toolkit is especially useful because many of the present day malware can potentially disable the GUI interface of the popular security software.

[Download A-Squared Emergency USB Stick]

[This is a Guest Post from Silki Garg, who enjoys writing about Internet and PC Security Issues. Check out her latest articles on ClamWin Portable Virus Remover and Windows Security Options Tool WinPatrol.]

Wordpress Security Tips -- For the untrained :

I was reading over at Malware Diaries, about a hacker that doesn't secure his exploits.  What gets me is that I am so surprised that he did that, then I thought about it and I read what Trend Micro had to say about it:

Creating a website is indeed a big task but, considering the present threat landscape, monitoring it and keeping it secure from attacks is a bigger one.
Website administrators have the responsibility to keep their systems malware free, secure web server files from unauthorized access, and keep their website clean of malicious codes, for their own sake and most especially, their visitors’.

[via Trend Micro blog]

[ad]Now admittedly Trend talks about the [intlink id="3578" type="post"]Gumblar[/intlink] and how they compromise websites with either a FTP password stealer or and SQL Injection.  These are a common practice with hackers and thief to get the credentials to use your server for their means.   So I wanted to talk about some things you can do to better protect your Wordpress blog.   Since I have a Wordpress Blog this was something I know about.

• Wordpress Security Scan --  This is a great plugin to help you identify and also suggests how you can fix them to prevent a hacker from getting in the first place.


• Block Wp-Folders from being Indexed --  This can be done by going to your robots.txt file and making sure it says:



Disallow: /wp-*



• Protect your Wp-admins folder -- Attackers can use brute force attacks to without much waiting to get access to your Wp-admin page so you should:

1. Login Logger Plugin -- This is good to see if anyone is trying to login and keeps a log for those instances where you might need to block a certain IP in the .httpaccess file section.


2. Limit Login Attempts plugin -- This has a set amount of login before that IP is locked out for a certain amount of time.  You can have it set to what you want an hour or more, it just depends on your preference.


3. Bad Behavior -- This is a good little plugin to help with spam such as referral spam and comment spam. I've been using it for the past few months and my referral spam has dropped drastically to almost Zero.

These are just a few things I've done to help protect my blog and protect my community and users.   I will not disclose everything because I have to keep those bad guys from getting in but I have I hope started you in the right direction.   I would also suggest using something like [intlink id="2646" type="post"]Roboform[/intlink] that comes with a password generator to use that with your wordpress login password.  This will also help prevent from gaining access easily.

You've got hacked thanks to Twitter : Don't "email me at"

I was reading a blog post about Spammers Harvesting Sorrow From Twitter.

Something came to my mind, so I did a little research and a lot of thinking and it finally came to me. It is easy for someone to find your email and use it for there own means. There are several different scenarios I can come up with:

[ad]

• Impersonating someone you know --  It is quite simple to find out who we know and who we follow.  You can always find someone who you don't know the email address of and make it seem like your them to get even more information from the person.


• Receiving Viruses, Trojans, or worms --   Although if you have a good Anti-virus this one won't be getting to you but  according to ESET : 10 percent of computer users didn't know if they had anti-virusware installed. This means that there are going to be some success for malware authors to send out a virus to every who twitters there email address and still have success.


• Try to guess your password --  If they have your email address, which is almost like your SSN in some respects, they could go to Facebook and try to get into your account by doing a Dictionary attack or a Brute Force Attack.  They may even try to hack into your email address just to get access to all the other accounts.

I am sure I am going to miss others that could possibly happen but this isn't about what could happen this is about ways to prevent this type of stuff.   Chris Pirillo seems to think that if we use the "AT" and "dot" in place of the real things that no Bot would be able to figure that.   I say no because this is the easiest thing for a bot to do is to copy everything after the "Email me at"  and put it in a text file.   Then the person harvesting the email address would just have to go through and find all them that have the "dot" and "at" and change them to what they should be.  I have been watching the search terms for the last few hours and it seems there is a new person posting there email address every 5 minutes or so.  Have you don't it in the past?

In short, if you want someone to email you it is always best just to send a Direct message to them so no other eyes can see it.  I'd also suggest installing some [intlink id="2205" type="page"]Free Anti-virus and Firewalls[/intlink] if you haven't already to better help your protect your personal information.  Remember only you can prevent from getting your personal information stolen.