July 27, 2006
Should you use Windows Live Messenger?
Windows Live Messenger — the successor to MSN Messenger — hit the stands a week ago on Wednesday. That was version 8.0.0787. Ancient history. Less than two days later, Microsoft released a new version, 8.0.0792. Hooo boy. Here we go again. Read more »
IE bugs not fun for users 
As I mentioned in my last column, the Metasploit project has been holding a Month of Browser Bugs. Every day, a new vulnerability is published, the majority affecting Internet Explorer. Releasing these flaws may be fun for Metasploit, but it certainly isn't for the rest of us, who are forced to wait while Microsoft catches up on its patches. Read more »
Patching isn't just about Microsoft
There are products that need major patching this week, but they aren't all from Microsoft. We're so used to Microsoft programs having security implications if we don't patch that we forget the many other software programs that can impact our systems. Read more »
Readers review alternatives to Windows Update
The shock waves caused Microsoft's decision to quietly install Windows Genuine Advantage through its security update mechanism are still being felt my readers. The marketplace for non-Microsoft antivirus packages, security suites, and the like is crowded with well-known competitors. contrast, the field of Windows Update alternatives is new and the players are little-known. Until more reviews have been published major test labs, I'll keep bringing you my findings and the comments of Windows users who are doing their own analyses. Read more »
A bad month for Microsoft products
This is, of course, a Windows-centric newsletter. That means that sometimes it can be difficult writing about security issues without picking on Microsoft. Drive-downloads still mostly affect Internet Explorer, not other browsers, and Microsoft Office products are showing cracks in the foundation.I'll explain below. Read more »
July 20, 2006
Shavlik will lift download restrictions
I announced in the July 13 newsletter that Shavlik Technologies, a well-known patch-management vendor, had released a free and capable replacement for Microsoft's Windows Update (WU) service. The Shavlik program, known as NetChk Protect, is free for up to one year, can remotely update 1 to 10 PCs from a single PC on a network, and supports far more programs than Microsoft's offering does. Read more »
Human space invaders geek the place up
You've seen the old Space Invaders arcade game — but have you seen it played with live bodies? Read more »
July 13, 2006
Free Windows Update alternative is released
In my last issue, I reported that Microsoft's in-house Windows Update routine is now likely to download marketing gimmicks such as Windows Genuine Advantage to your PC. I advised all Windows users, other than novices, to turn off Automatic Updates. Read more »
Internet Explorer back under the microscope
With all of the Microsoft Office vulnerabilities that have been popping up lately, I almost missed the discovery of more holes in my favorite insecure browser. With that in mind, let's jump right in and get started. It looks like Internet Explorer needs another good once-over. Read more »
Two patches you should jump on
If I were a gambler, there are two July 11 announcements (MS06-035 and MS06-036) that I'd bet will bite people who fail to patch, generating headlines that you'll start seeing soon. This month is also our last chance to say goodbye to Windows 98, 98SE, and Me. As of July 11, these Windows versions are no longer supported Microsoft. Read more »
Readers write a book on WGA problems
I can't remember a time when the newsletter has received more heartfelt tips from readers than the controversy of the last two months over Microsoft's automatic downloading of Windows Genuine Advantage, which phoned home every 24 hours. More than 300 well-thought-out comments streamed in. We'll never be able to respond in full to everyone individually, but we hope this section will serve to recognize everyone's help while giving you the useful info you need. Read more »
Live Safety Center: does it work?
My last column explained why Microsoft needs the free Windows Live Safety Center to keep antitrust lawyers off its butt. A few days ago I tested Windows Live Safety Center on a real zero-day Excel exploit. Does it work? Or is Microsoft blowing smoke? Frankly, I was amazed. Read more »
New-style rootkits are on the horizon
Portions of the security community have been abuzz lately with talk of a new rootkit technology dubbed "Blue Pill." The name is an obvious Matrix reference, especially given that the same researcher named an earlier rootkit detector that she wrote "Red Pill." The latest buzz started with an eWeek article on her work. Read more »