PC Security: Holey Software!
New security bugs appear weekly, letting hackers attack your data. Here's why apps are so full of holes and how you can protect yourself.
Kim Zetter
Batten Your PC's Hatches
Feel as if your PC is under siege? In addition to installing antivirus and firewall software, there's a lot you can do to guard against intruders. Follow this list to help secure your PC.
Disable File Sharing: File sharing lets networked computers pass documents back and forth, but it also lets strangers steal files from your PC over the Net. Consider enabling file sharing only when you need to give someone access to files, and then disabling it afterward. And use password protection for shared files so that only the person you designate can read them.
FIX: To disable file sharing, go to Start, Settings, Control Panel, Network, Configuration, File and Print Sharing. Make sure the option boxes are not checked and then click OK.
Bolster Your Browser: The Web harbors bad code that can exploit your browser's ability to run scripts.
FIX: Adjust the security in Internet Explorer or Netscape Navigator. You can change IE's security via its sliding bar (depending on your version of IE), or you can choose specific functions to control. To use the sliding bar, go to Tools, Internet Options, Security. Select Internet Zone, click Default Level, and move the bar from Low to Medium or High. Low provides almost no protection from Web hazards; Medium disables many scripts but allows cookies; and High disables virtually all scripts and cookies. To set specific functions, select Custom Level and set controls one by one. Be warned: This is more complex. In Netscape, choose Edit, Preferences, and then Advanced in the Category window.
Configure Outlook and Outlook Express: Outlook allows you to disable macros in e-mail attachments or to let some macros through--such as those that are digitally "signed" by trusted sources. You can also have Outlook adopt the security options you define in IE. In Outlook Express, you can set e-mail security levels based only on the settings you've chosen for IE's Internet and Trusted Sites Zones.
FIX: To allow Outlook to let only trusted macros through, go to Tools, Macro, Security and click High. Then, to ensure that Outlook is using your IE security settings, click Tools, Options, Security. You should see the Internet Zone icon in the Secure Content list box. While you're at it, click on Attachment Security and make sure it's also set to High.
Display File Extensions: Many viruses have an extension to the file name, such as .vbs (Visual Basic Script), or a double file extension, as in AnnaKournikova.jpg.vbs, that tips you off. But the default setting in Windows hides them, so you're tricked into opening a malicious attachment.
FIX: Display full file extensions in Windows Explorer by clicking Tools, Folder Options. Select View and check Show all files (in Windows 9 x) or Show hidden files and folders (in Windows 2000 and Me). Some extensions are visible only with a Registry tweak. You can see even those extensions by installing a free copy of Extension Manager. Then, before opening any attachment, right-click the message in your in-box and click View Attachments (but don't click the attachment). If the file has two extensions, it's probably up to no good. If the extension is .bat, .com, .exe, .lnk, or .pif, it is an executable file and may attack your system.
Patch Holes: New security holes are constantly being uncovered in operating systems, browser programs, antivirus scanners, and applications. Don't be caught with your system open.
FIX: Install the latest patches from software vendors. Our next page, "Essential Patches for the Worst Security Holes," details these.
--Stuart J. JohnstonPrint 65% more pages than with refilled inks. Trust Original HP Inks. Hit Print Reliably.
SMB Networking Center
Solve Tech Issues Fast
Featured APC Accessories For Your System
10% Off Entire Cart at Online Store
-
APC Back-UPS ES
Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
- APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.
Focus on Personal Productivitysponsored by Microsoft
- Personal Finance 2.0 These free and fee-based Web services not only aggregate data from your online bank accounts, they give you tools for managing your money.
- High-Tech Travel Tips Plenty of stories provide advice for elite mobile professionals. But what about you, the unproductive traveler?
People who read this also read:
Best Prices on Security Software
Norton Internet Security 2009 - 1 User/3 PCPrice: $29.97
Norton Internet Security 2009 - 1 User/1 PCPrice: $15.95
Norton 360Price: $25.00
Internet Security 2009Price: $15.99
Norton Internet Security 2009 - 1 User/3 PC, Small BoxPrice: $20.50
Internet Security 2009Price: $24.95
- 2007 Microsoft Office Suites Comparison This paper compares and contrasts four suites of the 2007 Microsoft Office system: Microsoft Office Standard 2007, Microsoft Office Professional Plus 2007, Microsoft Office Enterprise 2007 and Microsoft Office Ultimate 2007. This paper is intended to help organizations understand the applications and capabilities offered, and to identify the suite that best fits their needs.
- Windows Vista Migration: The Business Proposition It's not so much a matter of "if" but "when" for most organizations regarding migration to Windows Vista. Laying the groundwork now for this migration can yield higher ROI than waiting until later. This Computerworld Technology Briefing explains it all.



