Internet Update
Thursday, February 8, 2007
Unlimited Menus - Application launcher
Posted by Wiz at 11:43 PM 0 comments
Labels: Freeware
Microsoft Warns of New Excel Vulnerability
Microsoft is investigating another zero-day vulnerability in its Office suite of productivity applications after confirming that a critical, unpatched flaw exists in Excel.
The flaw is called a "zero-day vulnerability" because there is no patch to fix it, which means that hackers can actively exploit it. While Microsoft's next scheduled round of Windows updates is next Tuesday, there is no word yet on whether a patch will be released at that time to fix the flaw.
Redmond is investigating a limited number of attacks designed to exploit the vulnerability in several versions of Office, including 2000, 2002, 2003, and 2004 for the Mac.
Excel Threat
In order for this attack to be carried out, according to a security advisory released by Microsoft, a user must first open a malicious Office file, which would typically arrive as an e-mailed attachment -- a common strategy among malware writers. If the attached file is opened, it would give the attacker the same user rights as the victim has.
The vulnerability also can be exploited through a Web-based attack. In this case, the attacker would host a Web site that contains an Office file designed to corrupt system memory and allow the attacker to execute arbitrary code on the targeted computer.
Although Excel is the focus of the vulnerability, other Office applications are potentially at risk, according to Redmond. And while Microsoft stressed in the advisory that attackers have no way of forcing users to visit a malicious Web site or open a malicious file, the company did not immediately respond to requests for comment on the possibility of issuing an Excel patch prior to the February 13 round of updates.
Some users are still waiting for patches for four other critical flaws in Microsoft Word, leaving that software open to attack on at least two fronts. Microsoft has noted that it is working on security updates for Office to address this string of vulnerabilities.
Vista Powered
Office users running productivity applications on Microsoft's new operating system, Windows Vista, could find extra protection because even users logged in as administrators still operate in limited-access mode. Indeed, for all the complaints about Vista's security alerts getting in the way of a smooth computing experience, analysts say the new operating system's enhanced security offers an improvement over Windows XP.
Directions on Microsoft analyst Michael Cherry compared negative user reaction toward Vista's hardened security to air travelers who complain about having to jump through security hoops at airports. When there is a terrorist threat, he said, people stop complaining about waiting in long lines. But when conditions calm, he added, they bark about having to take off their shoes and put them through the scanner.
"Everybody will complain about those user dialogs in Vista until there is an incident," Cherry said. "Then they will think it's wonderful. Security comes at a price."
Posted by Wiz at 10:10 AM 0 comments
Labels: Internet News
VeriSign Plans $100M Internet Upgrade
VeriSign Inc., which manages the ".com" and ".net" domain names registry and ensures Internet users can reach those locations, said it will spend more than $100 million in a massive infrastructure upgrade to combat a new wave of computer attacks and manage a surge in online activity.
Industry experts said VeriSign's investment comes at a critical time for the computing world. They pointed to hackers' powerful attacks this week on the computers that manage global Internet traffic as evidence of the mounting threat from online criminals.
Stratton Sclavos, VeriSign's chief executive officer, was scheduled to announce the upgrade Thursday in San Francisco at a security conference sponsored by RSA Inc., the security division of EMC Corp.
Sclavos said it's the company's largest investment in infrastructure upgrades and technology development. The overall investment is slated to boost capacity tenfold by 2010.
Sclavos said VeriSign, which operates two of the 13 so-called "root" servers that manage global Internet traffic, has an obligation to stay ahead of increasingly insidious and widespread Internet attacks.
"We're seeing a lot more sophistication in these attacks," he said. "And they're not just targeting thousands of users -- they're targeting hundreds of thousands or millions of users."
The Mountain View-based company said the expansion will increase its ability to process domain name system, or DNS, queries from 400 billion a day to more than 4 trillion a day. Those queries occur every time Internet users click on ".com" or ".net" Web sites or check e-mail and use applications that utilize those domain names.
VeriSign said it currently processes 24 billion such interactions daily, and it is preparing for dramatically higher activity as more users get online worldwide and conduct more of their business and leisure on the Web.
The investment also will boost bandwidth on VeriSign's systems from more than 20 gigabits per second to more than 200 gigabits per second.
The company promises reduced bottlenecks and ramped-up speed from infrastructure that is more broadly distributed around the world.
But Sclavos said security is also a key element of the upgrade, including the strengthening of security provisions and engineering improvements to bolster the ability to identify and track security threats around the globe.
"This is good for the whole Internet infrastructure," Sclavos said. "If the Internet's infrastructure fails, hundreds of billions of dollars in commerce and communications will be at risk. We can't afford for that to happen."
Will Stofega, a research manager with market researcher IDC, said the attacks this week that overwhelmed at least three of the 13 root servers highlight the growing threat posed by online criminals.
He said the last major round of large upgrades occurred during the dot-com boom and that VeriSign's investment could prod other companies into following suit.
"This is a very timely investment," Stofega said. "In a couple of years, we're going to start seeing some very, very serious types of attacks. If we don't start making these types of investments now, we're in trouble."
Posted by Wiz at 10:07 AM 0 comments
Labels: Internet News
Folder Guide - Access folders from the right-click menu
Download : Click Here
Posted by Wiz at 9:55 AM 0 comments
Labels: Freeware
Responding Heads - Control your PC via voice commands
Posted by Wiz at 9:32 AM 0 comments
Labels: Freeware
SideSlide - Customizable launchpad
Download : Click Here
Posted by Wiz at 9:20 AM 0 comments
Labels: Freeware