It seems that someone has been impersonating Twitter direct messages with links to a phishing site. I received no fewer than three of these over the weekend. Luckily, in all cases Chrome reported all the links as phishing sites. (I really did know better but I wanted to see how well Chrome’s phishing filter worked.) The twitter blog has more details.
Archive for the Category ◊ security ◊
Here’s another security scanning package. Secunia PSI will check your computer via scan, then on the fly, for known insecure software and programs that have passed their end-of-life (i.e. no longer being updated) and are therefore considered insecure. By default, the program will only report programs that are "easy to fix" and this is 100% accurate. In most cases, all you’ll need to do is click the "Download Solution" button and run the downloaded update.
I’ve got to say, I thought my new home computer was secure until I ran this program. It’s now 100% ok on the easy level and 98% on the Advanced level. (In some cases fixing an advanced problem will actually break some older software so you’ll probably never be perfect.)
Are you concerned about visiting random sites that may be unreliable or not to be trusted? What if there was a way to know what other Internet users thought of that site you’re about to visit? Well, there is the Web of Trust, a Firefox and IE add-on which will signal you green, yellow, or red on Google search results. Green means it’s safe, yellow is questionable, and red means stay away. For each result you can get detailed information on just why that rating exists. Additionally, you can rate sites and contribute back to the community. If you’re still not sure how this can help you check out the short online demo video.
Before you get rid of those old computers (I know you’re just looking for an excuse to do so,) be sure to totally erase those hard drives first. Especially if you’re getting rid of a staff computer which may have ever contained or even accessed patron records! There are several free tools available which have been reviewed by the folks over at the ReadWriteWeb blog.
Here’s another great video from the folks at commoncraft on phishing. Keep this one in mind the next time someone asks for help responding to one of those e-mails.
In XP machines, Microsoft’s own software contained 42 percent of the vulnerabilities attacked, while 58 percent were in third party software. For Vista machines, Microsoft’s software had 6 percent of the vulnerabilities attacked, with third-party software containing 94
percent of the flaws.
‘Nuff said. (Source: PC World)
Here’s a situation. You’ve got a secured WiFi signal in your library and you’re trying to connect to it with a new computer. Trouble is, it’s been so long since you’ve connect a new computer everyone’s forgotten the key to the secured WiFi signal. What are you to do? Well, you could reset the router to factory settings but you’ll loose every other setting and you’ll need to re-secure the connection and enter the new key into every computer. A better solution? Run WirelessKeyView on a laptop that’s previously been connected to that secured WiFi signal.
This handy little program, easily run off a flash drive, will report to you the keys for every secured WiFi signal a particular computer has every been attached to. Find the right SSID, copy down the key, enter it into that new computer, and you’re all set.
Yes folks, if you haven’t figured it out yet, this is also a massive security hole. If you’ve told a computer to remember a WiFi key, I can just plug in my flash drive, run this program, and have that key in seconds. Please act accordingly.

