Windows Secrets

Enter your e-mail address to get a free subscription.

 

We guarantee your privacy: 1. We will never sell, rent, or give away your address to any outside party, ever. 2. We will never send you any unrequested e-mail, besides newsletter updates. 3. All unsubscribe requests are honored immediately, period.  Privacy policy


Newsletter
 
 

INTRODUCTION

Get a bonus download

At least four times a year, we license a special bonus download for our paying subscribers. This issue's bonus is:

Prefect Passwords A 41-page e-book excerpted from the new, 228-page printed book Perfect Passwords

To get your bonus e-book, upgrade to a paid subscription now
You'll receive the bonus e-book, and a full year of the paid version of Windows Secrets, by simply making a contribution of any amount — whatever you feel it's worth — between Mar. 30 and Apr. 26, 2006.

Mark Burnett, a former contributing editor of Windows Secrets, was able to obtain and analyze more than 4 million user passwords. This gives him great insight into just how weak most passwords are — and how to make them easy to remember, yet hard for hackers to break.

Mark says administrators shouldn't make users try to memorize short, "strong" passwords, such as 8Zp0YrA7. Instead, long passwords of 15 characters or more are actually stronger yet easier to remember if they consist of three words (misspelled, ideally) that rhyme or use humor. A good example would be My.Mord-Fustang. Longer passwords are harder to crack. The good news is that the techniques in Perfect Passwords make strong passwords easy to invent and remember.

Mark's intimate knowledge of the tools hackers use to break into people's accounts — and the speed at which those tools are improving — has transformed my thinking on passwords. I'm not the only one. A promotional blurb written by Kevin Mitnick, who was once jailed for hacking, says, "Please DO NOT read this book; I still wanna get your passwords!"

The e-book is a printable PDF file that's 578 KB in size. Your download time will range from a few seconds on a cable modem to approximately 2 minutes on a 56 Kbps dial-up modem.

To upgrade your subscription and get the e-book, use the following link: How to upgrade

If you wish to obtain the bound version, the book has a list price of $29.99 USD and can be ordered via the following links: United States / Canada / Elsewhere. (Note: In the "Elsewhere" link, the book's cover is incorrectly titled Password Roulette. Don't worry, it's the same book.)

We hope you'll enjoy our exclusive excerpt of Perfect Passwords. We look forward to bringing you even more secrets, and even more bonus content, in the year to come. —Brian Livingston, Editor

Contents  Index

 


Editor: Brian Livingston Windows Secrets Newsletter

Issue 72

2006-03-30

Contents  (Scroll down to Index)

INTRODUCTION
Get a bonus download

TOP STORY
Get a disposable e-mail address

WINDOWS GIZMOS
Images get wide and Bluetooth gets small

INDEX OF REVIEWS
New laptop tests reveal top winners

SECURITY BASELINE
The Security Baseline as it stands

WOODY'S WINDOWS
Changing registered owner in Windows and Office

PATCH WATCH
Gentlemen, and women too, start your testing

OVER THE HORIZON
Internet Explorer has triple security threat

PERIMETER SCAN
Unsafe at any speed?

USEFUL LINKS
Building a PC that's totally silent

WACKY WEB WEEK
Is water blue, or is it just reflecting the sky?

YOUR PREFERENCES
About your subscription

Newsletter Control Panel
Windows Secrets home page
How to subscribe
Change your delivery address
Change your preferences
Access past free issues
Access past paid issues
Upgrade to paid version
Search for info (WinFind)
Submit a Windows tip
Get subscription help
How to unsubscribe

Circulation: over 140,000


 
 
TOP STORY

Get a disposable e-mail address

By Brian Livingston

Every time you give out your e-mail address, you take a risk that your address will get on spammers' lists and you'll be bombarded with junk mail.

As a test (which I'll describe in my Datamation column in a few weeks), I entered an e-mail address into a signup box at one of those "get a free laptop" promotional sites. In less than six weeks, the address I provided was hit with more than 1,000 junk messages — over 23 per day — and they show no sign of slowing down.

I was willing to risk my Inbox being overrun in this way because I used a "disposable" e-mail address. This is an address with a different keyword that you add for each Web site or personal correspondent. Such addresses make it easy for you to filter incoming mail into different folders, if desired. To prevent "dictionary attacks," any mail sent to you without a valid keyword can be rejected. And, if an address you gave out is abused by spammers, as my test address was, you simply make all mail to that address bounce (as I eventually did to the promo site).

Disposable addresses let you register for free services on the Web without fear. At the same time, you get strong protection against spammers.

Protecting yourself against spammers and harvesters

My recently revised e-book, Spam-Proof Your E-Mail Address (see below), describes easy ways to encode any address you place on a Web site. This prevents your addresses from being collected by "harvester" programs. Harvesters are software bots that scour the Internet, copying e-mail addresses and adding them to spam databases. Studies show that harvesting is the most common way spammers build up their multi-million-name lists.

Keeping harvesters from getting your address is important, but you also need to protect any addresses you enter into forms at Web sites. In the e-book's 2nd edition, I mentioned SpamGourmet.com, one of dozens of services offering disposable addresses. SpamGourmet allows you to insert an integer number up to 20 when inventing a new address. For example, I might register at Amazon using an address like the following:

amazon.20.secretspro@spamgourmet.com

In that case, SpamGourmet would accept no more than 20 messages from Amazon before deactivating the address. This number allows you to receive confirmation notices and the like, but your alias would automatically shut down if Amazon started sending you a lot of junk. If desired, you can configure certain addresses so SpamGourmet doesn't stop at 20 messages but will forward to you an unlimited number from contacts you trust.

SpamGourmet is free but has drawbacks. Administering each address is an extra step. Also, there's no way to log in to SpamGourmet to see your messages. You must provide a separate, valid address — one that you maintain at some other domain — in order to receive the messages forwarded to you from SpamGourmet.

After researching the market, I've decided that Yahoo.com's AddressGuard is currently the best value in disposable addresses. The service isn't free, requiring $19.99 per year. But this reasonable fee also gives you all the features of Yahoo Mail Plus. This premium account provides 2GB of storage, strong antispam filtering, no graphical ads in your Inbox, and the elimination of the promotional lines of text Yahoo tacks onto the end of its outgoing free messages.

Before I explain Yahoo's disposable-address technique, let's first look at an approach that doesn't work — Google's free Gmail.com service.

Gmail's disposable addresses are the worst

Gmail provides a form of free disposable addresses, but it turns out to be fairly worthless. You first obtain an ordinary Gmail address, like so:

brilivings6789@gmail.com

You then build disposable addresses at Gmail by adding a plus sign (+) and a word that represents the contact you've given that address to. If you register an e-mail address at Amazon.com, for example, what you enter might look like this:

brilivings6789+amazon@gmail.com

Unfortunately, many Web apps reject or mishandle e-mail addresses that contain a plus sign. The plus sign is legal on the left side of e-mail addresses, according to Internet standards. But it's an illegal character in Web addresses (URLs). Due to the confusion, many major Web sites mistakenly strip the symbol out before accepting an e-mail address. Other sites just choke, displaying nothing but an error message with an e-mail address containing a plus sign is entered.

Such well-established sites as Cingular, Bank of America, and eBay mishandle e-mail addresses containing plus signs, according to an experiment by blogger Wayne Burkett

(Note to Windows Secrets Newsletter subscribers: You may reliably use a plus sign anywhere to the left of the at sign in your delivery address. All of our signup forms on the Web accept such addresses. Also, we encode the plus sign to make it a valid character whenever the address must appear in a URL, such as in our change-your-address links.)

Adding insult to injury, if a Gmail address that contains a plus sign is ever harvested, it's very easy for spammers' computers to leave out the plus sign and the characters leading up to the at sign. This automatically lets them add your true Gmail address to their spam databases.

Yahoo makes custom addresses easy

In contrast to Gmail's flawed design, my vote for the best provider of disposable e-mail addresses is Yahoo AddressGuard. This feature allows you to create up to 500 alias addresses, which is plenty. (I've created fewer than 300 aliases in over five years, and I'm super-active at signing up for lists.)

When someone responds using one of your alias addresses, Yahoo delivers the message to your Inbox or to a personal folder of your choice. Here's how it works.

1. Realname. You start out with a Yahoo ID, which you give out to no one. For example:

brian.livingston.6789@yahoo.com

You then create disposable addresses using a different basename. This is followed by a hyphen and a different keyword for each contact you give your address to. The resulting addresses look as follows:

basename-keyword@yahoo.com

2. Basename. You choose a basename that's different from your Yahoo ID. You give out the same basename in all of your disposable addresses but a unique keyword for each contact. For example, my basename might be secretspro.

3. Keyword. The keyword you make up for each disposable address reminds you which contact you gave it out to. You'll probably insert the brand name of any Web site that requires a valid e-mail address. If I want to register with Amazon.com, for instance, I could choose amazon as the keyword. The disposable e-mail address I'd give Amazon, therefore, would be:

secretspro-amazon@yahoo.com

Spammers who gain access to one of your disposable Yahoo addresses can't simply truncate the hyphen and the keyword and get your valid address. If spammers did send e-mail to a truncated address, such as

secretspro@yahoo.com

the messages would just bounce, since that isn't a valid Yahoo address.

Yahoo makes it easy. You can create new addresses as you need them, using either the Mail Options page or the Yahoo Toolbar.

Create free disposable addresses on your server

If you maintain a domain name of your own, you may be able to create your own free disposable addresses, which would be the most convenient of all. Say your domain name is example.com. You could create your own realname, basename, and keyword system, just as Yahoo does. Your e-mail addresses might look like this:

brian.livingston.6789@example.com would be your realname, which you'd never give out;

secretspro@example.com would be your basename (mail sent to this address would bounce); and

secretspro-amazon@example.com is the style of disposable addresses you'd give to your contacts.

When you receive mail that was sent to a disposable address, and you reply, your system must insert the disposable address into the outbound message's From and Reply-To fields. The best disposable e-mail services correctly format such replies automatically.

If you don't run a mail server of your own, or all of the above sounds too complex, Yahoo is a low-cost alternative that's easy to set up and manage. Although you can't automatically forward mail from your Yahoo aliases to another e-mail address of your own, you can retrieve messages from Yahoo using any POP3-enabled mail client. You can also, of course, log in to Yahoo from anywhere in the world to check for messages.

In addition, Yahoo.com is a well-established domain name these days. It would arguably be more respectable-sounding when telling people your address than trying to explain a niche domain name like SpamGourmet.com.

Some Windows Secrets readers are already using the trick I describe above. As of yesterday, 12,000 or approximately 8% of the delivery addresses in our subscriber database end in @yahoo.com. Of those addresses, 143 include a hyphen somewhere to the left of the at sign. About 1 in 5 of the hyphenated addresses, in turn, use a familiar-sounding keyword such as -brian or -winsecrets. These readers obviously made up a special address just for us — which is exactly what disposable addresses are for.

To send us more information about disposable addresses, or to send us a tip on any other subject, visit WindowsSecrets.com/contact. You'll receive a gift certificate for a book, CD, or DVD of your choice if you send us a comment that we print.
Brian Livingston is editor of the Windows Secrets Newsletter and the coauthor of Windows 2000 Secrets, Windows Me Secrets, and eight other books.

Contents  Index


ELECTRONIC BOOKSHELF

Spam-Proof Your E-Mail Address, 2nd Ed.

Spam-Proof Your E-Mail Address, 2nd Ed. By Brian Livingston

I've inserted my new recommendation of Yahoo's disposable addresses (see above) into a minor update of Spam-Proof Your E-Mail Address, 2nd Ed. I don't believe in making purchasers of my books buy them again just to get a small amount of new information. Therefore, all of the updated material is shown above for your reading pleasure.

If you've never purchased a copy of the e-book for yourself, however, you should give it a look. The 32-page, printable PDF gives you step-by-step instructions that can eliminate 97% of the spam that would otherwise clog your e-mail account. After months of experiments, we found that spam-proofed addresses actually receive little or no spam. These tests show that you can reduce your volume of spam to practically nothing, not just battle an unstoppable and ever-growing flood. The methods we describe work with Windows, Apple, and Linux and don't require any filters or block lists — but you can use those in addition to the book's techniques, if you wish. More info

Contents  Index


FEEDBACK FROM OUR LAST ISSUE

Rebooting before and after patches is good

I wrote last issue that some Windows patches pop up a dialog box every 10 minutes reminding you to reboot. Your PC can reboot if you inadvertently press a single key. This can cause you to lose your work, so I described ways to delay the reminders. I emphasized, on the one hand, that it's important to reboot after patching, because Microsoft techs say patches can leave Windows in an "unstable state" until it's rebooted. But, I added, "No one's given me any verifiable examples of this."

I only make blanket statements like that, of course, to flush out exceptions I haven't heard of. Sure enough, a perfect example was sent to me by Susan Bradley, who writes the Patch Watch column in the paid version of the newsletter. (How to upgrade.)

Susan explains how Small Business Server 2003 was recently hosed by Windows Server Update Services, which knocked out Microsoft's own Remote Web Workplace and Outlook Web Access. In addition, Redmond's Internet Security and Acceleration Server (ISA) had a problem with Microsoft hotfix 915045 (which at this time can be obtained only by special request and is not publicly available):
  • "The Exchange webdav patch, which the Exchange team did not flag as needing a reboot, came down on an SBS box if you had set WSUS to 'auto install.' [This patch is described in Microsoft Knowledge Base article 888619.]

    "It caused RWW/OWA and other services not to work. The machines had to be rebooted. Thus there is an example of a patch that you had to reboot a box otherwise it screwed up a bunch of stuff.

    "ISA 2004 SP2 hotfix KB 915045 also ends up causing SBS to need a reboot or the services on the system have to be manually restarted.

    "Requiring rebooting before and after patching is not a Microsoft thing but an admin thing.

    "You have a system that has been up for X number of days. If you reboot before you patch, then you know you have a working system before patching. If you don't reboot beforehand, you aren't sure if any issue is due to the patch or some other condition of the box ahead of time.

    "Prebooting is just a 'best practice from the school of patching,' not a mandatory thing.

    "I'm not a person who thinks 'uptime' is necessarily a good thing. If you can bounce the box, and every month it reboots just fine, this ensures you have a good working box. A year from now, if we didn't ever reboot, how would I know which patch or issue caused the problem? It helps me keep the window of 'when was that introduced' to only 30 days."
So, once again, remember that's it's important to reboot as soon as possible after installing Windows patches that require it. For those of you who run corporate networks, I'm sure many will quarrel with Susan's concept that servers should be rebooted every 30 days to make sure nothing has broken the startup process. Makes sense to me — but that's a topic that reasonable people can surely disagree about! --Brian Livingston

Contents  Index

 
 
FORWARDING INSTRUCTIONS

Please share this information with your friends
You're encouraged to refer your friends and colleagues to this free newsletter. Because most e-mail programs don't correctly display a formatted message that's been forwarded, simply call people's attention to the permanent Web address of this issue: WindowsSecrets.com/comp/060330.

 
 
WINDOWS GIZMOS

Images get wide and Bluetooth gets small

Brian Livingston The latest developments in computer wizardry bring you (a) one of the widest monitors ever, (b) a new high-definition digital camera, and (c) a Bluetooth music system that allows you to play your music collection on any speakers you like without unsightly wires.

These capabilities may not come cheap, but if you want the best, you might find that investments like these are worth a bit of a premium.


Dell UltraSharp Widescreen 3007WFP 30" Dell is new Editors' Choice LCD
PC Magazine has just named Dell's giant new widescreen monitor as a better bet than Apple's much-vaunted 30" Cinema HD Display. The editors say the Dell UltraSharp Widescreen 3007WFP, among other things, has a faster response time (11 ms grey to grey) than Apple's own trophy display. At 2560 x 1600 resolution, both monitors require dual-link DVI boards, such as those driven by nVidia's 7800 or ATI's X1800. But the Dell beats Apple on street price: $2,300 compared to about $2,500. Dell UltraSharp Widescreen 3007WFP

Samsung Digimax L85 First high-def point-and-shoot camera
Samsung has finally released the long-awaited device owners of high-definition displays have been waiting for: the Digimax L85 8-megapixel camera. Besides taking widescreen, 16-by-9 still images with its 5x optical zoom lens, the $450 shooter's HDMI port allows it to output directly to HD TVs and other digital video devices. It can also record VGA-resolution videos at 30 fps, take three auto-bracketed photos consecutively, and perform image-to-text conversion of text you snap. Samsung Digimax L85

Logitech Wireless PC Speakers Remote audio uses Bluetooth, not Wi-Fi
There are plenty of products out now that employ 802.11b or g to send tunes from one room to another. But now Logitech has delivered a simpler system for under $150. You just plug the transmitter (leftmost device in photo) into any Windows 2000 or XP USB port, attach the small receiver (at right) to any stereo system or headphones, and start your MP3s using the included remote control. Bluetooth reliably pushes the signal 100 feet or more — not as far as Wi-Fi but without the setup hassles and DRM restrictions. (There's no need to encrypt the signal unless your listening habits include classified debriefings.) Logitech Wireless Music System

——————
For non-U.S. sources of information on a product reviewed above, enter the model name into a search box at one of the following links: Canada / U.K. / Elsewhere

Windows Gizmos reviews only recently released products that create new market categories. Once enough competing products have emerged for comparative tests to be conducted, the results will be summarized below in the Index of Reviews.

Contents  Index

 
 
INDEX OF REVIEWS

New laptop tests reveal top winners

Vickie Stevens New reviews of laptops, MIMO Wi-Fi routers, and digital SLR cameras have changed the lineup of products that the top reviewers are calling the best.

In the collected wisdom that we permanently maintain at WindowsSecrets.com/Reviews, we track four categories of notebook computers: business laptops, ultraportables, desktop replacements, and tablets. In this issue, we cover business and desktop-replacement laptops, which have several new test results just out from a variety of labs. Also changing their lineups this week are the best wireless routers (which use proprietary means to speed their signals beyond 802.11g throughput) and the latest in D-SLRs.

BUSINESS LAPTOPS
Four excel in the business category
Lenovo Thinkpad T60 Sharp Widenote PCM4000 Apple PowerBook G4 (12-inch) Lenovo Thinkpad Z60t
In new results released by labs at both PC Magazine and CNET, the Lenovo Thinkpad T60 (photo 1) scores the top marks. Lenovo's Z60t model is also a winner in Laptop Magazine's tests and came out 2nd-highest ranked (just behind the T60) by CNET.
Lenovo Thinkpad T60 (top-rated by PC Mag, CNET)
Sharp Widenote PCM4000 (Laptop Mag, Consumer Reports)
Apple PowerBook G4 (12-inch) (CNET, Macworld)
Lenovo Thinkpad Z60t (Laptop Mag)
Link to all laptop PC ratings and full reviews

DESKTOP-REPLACEMENT LAPTOPS
New top picks for PC-replacements
Dell Inspiron 6000 Toshiba Qosimo G35-AV600 Lenovo Thinkpad R52 Dell Inspiron XPS Acer TravelMate 8204WLMi
Dell's Inspiron 6000 (photo 1) is currently recognized by three publications as the best modestly-priced desktop replacement system on the market. Meanwhile, Toshiba's Qosmio G35-AV600 earns kudos from CNET and Laptop Magazine as one of the best designs for those seeking multimedia capabilities.
Dell Inspiron 6000 (top-rated by PC Mag, Consumer Reports, PC World)
Toshiba Qosimo G35-AV600 (CNET, Laptop Mag)
Lenovo Thinkpad R52 (PC World, Consumer Reports)
Dell Inspiron XPS (Wired Test, Maximum PC)
Acer TravelMate 8204WLMi (PC Mag)
Link to all laptop PC ratings and full reviews

WIRELESS ACCESS POINTS
Editors name best in MIMO routers and cards
Belkin Wireless G Plus MIMO Router Linksys Wireless-G with SRX200 WRT54GX2 Netgear RangeMax 240 WPNT834 Linksys WRT54GX4 Router
Notable in the latest test round of wireless routers and laptop cards is the Belkin Wireless G Plus MIMO, which snags the top spot from PC World and Tom's Hardware Guide simultaneously. And, for raw speed, PC Magazine finds that the Netgear RangeMax boasts throughput up to 240Mbps, comparable to wired Ethernet, while most MIMO routers reach about 108Mbps.
Belkin Wireless G Plus MIMO and Notebook Card (top-rated by PC World, Tom's Hardware)
Linksys WRT54GX2 with SRX200 and WPC54GX Notebook Adapter (Laptop Mag)
Netgear RangeMax 240 WPNT834 and WPNT511 CardBus Adapter (PC Mag)
Linksys WRT54GX4 with SRX400 and WPC54GX Notebook Adapter (Maximum PC)
Link to all wireless ratings and full reviews

DIGITAL-SLR CAMERAS
Four winners surface in D-SLR camera shootout
Canon EOS 5D Nikon D200 Canon EOS Digital Rebel XT Olympus EVolt E-300
Two cameras stand out in the scramble for digital SLR supremacy: The first is Canon's EOS 5D, which is the pick of the imaging mavens at Digital Photography Magazine and Maximum PC. The other is Nikon's D200, the Editors' Choice as determined by two of the more geeky reviewers. The 5D's imaging cousin, the Canon EOS Digital Rebel, also boasts top honors in Popular Photography Magazine.
Canon EOS 5D (top-rated by Maximum PC, Digital Photography)
Nikon D200 (PC Mag, CNET)
Canon EOS Digital Rebel XT (Popular Photography)
Olympus EVolt E-300 (PC World)
Link to all camera ratings and full reviews

——————
For non-U.S. sources of information on a product reviewed above, enter the model name into a search box at one of the following links: Canada / U.K. / Elsewhere

The Index of Reviews summarizes only head-to-head comparative tests by respected industry reviewers, not individual ratings of single products. Vickie Stevens is research director of WindowsSecrets.com.

Contents  Index

 
 
THE SECURITY BASELINE

The Security Baseline as it stands

By Brian Livingston

Based on the latest published tests, the best four products to give your PC comprehensive protection against hackers are (1) a Linksys hardware firewall, (2) ZoneAlarm Security Suite 6 (or Panda Platinum Internet Security 2005, which recently received a high rating in PC World tests), (3) Webroot Spy Sweeper for antispyware protection, and (4) an update-management tool of your choice. See details below.

Linksys WRT54G Router ZoneAlarm Security Suite 6 Webroot Spy Sweeper GFI LANguard Network Security Scanner
1. Hardware firewall. For small-office Wi-Fi networking, the most affordable secure firewall is the Linksys Wireless-G WRT54G router (photo 1, about $60 USD street), which also offers four ports for wired Ethernet. If you wish to install third-party Linux firmware, get the WRT54GL ($70). To cover more than a few adjacent rooms, consider the Linksys WRT54GX ($160), which doubles the usual "g" range. Be sure to enable WPA or WPA2, either of which provide strong Wi-Fi security. The WRT54G and WRT54GX are PC Magazine Editors' Choice winners.

2. Security suite. ZoneAlarm Security Suite 6 (photo 2, $60 street) is rated as the best all-in-one software firewall, antivirus program, and antispam filter — now with antispyware scanning and Windows OS kernel protection. It's received Editors' Choice awards from both PC Magazine and CNET. With the ZA Security Suite, there's no longer any reason to purchase separate antivirus, antispam, and software-firewall applications. (Turn off ZA's real-time spyware protection so this can be handled by your antispyware program, shown below.) Note: One magazine, PC World, recently rated Panda Platinum Internet Security 2005 higher than ZA Security Suite.

3. Antispyware program. For individual PC users, the most effective remover of spyware is Webroot Spy Sweeper 4.5 (photo 3, under $35 per year), according to comparative tests published by PC Magazine. The previous version, 4.0, was also top-rated in tests by PC World. (Note: PC Mag has also given an Editors' Choice to Encore PC Tools Spyware Doctor 3.2.) For businesses that are looking for a centrally managed solution for 10 or more seats, Webroot's Spy Sweeper Enterprise ($240 per year for 10 users) has won the latest comparative review by Windows IT Pro and was rated a Best Buy by SC Magazine.

4. Update management. Individual users should opt into the new, free Microsoft Update, an improvement over Windows Update. You should also turn on the auto-download features of any installed apps you may have. For small to medium networks, Microsoft provides the free WSUS (Windows Server Update Services), which automates the downloading of critical patches for Windows, Office, and Exchange. For larger businesses, GFI LANguard Network Security Scanner (photo 4, $375 for 25 users) is a broader product, top-rated by WindowSecurity.com and MCSE World. The latter site also publishes a helpful tutorial on LANguard NSS and Shavlik's HFNetChkPro ($900 for 25 users).

——————
For non-U.S. sources of information on a product reviewed above, enter the model name into a search box at one of the following links: Canada / U.K. / Elsewhere

The Security Baseline section appears in every issue. It summarizes the top ratings of trusted reviewers in four categories of products that every PC needs for protection against threats.

Contents  Index

 
 
HERE'S A TIP

You're reading the free version of the Windows Secrets Newsletter
Subscribers to the paid version receive additional information in each issue. Some of the extras this week are:

Woody Leonhard Woody Leonhard / Woody's Windows. You get a pointed look at Microsoft's operating system through our guru's flat screen:
  • Changing registered owner in Windows and Office
  • Tweaking the Registry safely
  • Finding RegisteredOwner in the Registry
  • Changing Windows' owner and organization

Susan Bradley Susan Bradley / Patch Watch. We tell you which official patches have problems and, more importantly, how you can work around them:
  • Gentlemen, and women too, start your testing
  • Your personal patch action plan
  • Avoiding daylight saving time headaches
  • Running with nonadmin rights

Chris Mosby Chris Mosby / Over the Horizon. The steps you need to take NOW to protect yourself, because patches aren't yet available for some known threats:
  • Internet Explorer has triple security threat
  • Latest IE flaw already being exploited
  • HTA applications can run without permission
  • Excessive event handlers causes IE DoS

Ryan Russell Ryan Russell / Perimeter Scan. How you can use free or commercial software to automate patching and upgrading, whether you're responsible for 5 PCs or 50,000:
  • Unsafe at any speed?
  • Still suffering from drive-by installs
  • Having theoretical security vs. getting practical
  • Latest IE vulnerability exposure

Paid subscribers can access all old and new paid newsletter content
Make a contribution to support our research into Windows and you'll immediately be able to read and search through scores of valuable articles. In addition, paid subscribers are entitled to download valuable content that we license for you at least once every calendar quarter.

To upgrade, simply make a contribution of any amount you choose
If you do this by MONTH 00, 2006, you'll instantly be sent the full, paid version of today's newsletter.

To upgrade to the paid version of Windows Secrets, please visit WindowsSecrets.com/upgrade. Thanks in advance.

Contents  Index

 
 
USEFUL LINKS

Building a PC that's totally silent
The drone from PC fans is getting so loud in some offices that it's a serious work distraction. But a specialty manufacturing company announced a new kind of computer case in January that eliminates the need for fans and thereby eliminates almost all PC noise. (By Brian Livingston, Datamation) More info 

Shushing a noisy PC — on a budget
If you don't have a ton of funds, but the drone of the PC fans in your office is driving you batty, it's isn't necessary to spend a lot of money to get a lot of relief. (By Brian Livingston, Datamation) More info 

Contents  Index

 
 
WACKY WEB WEEK

image
Is water blue, or is it just reflecting the sky?
The humor site 2Spare.com has just posted a hilarious Top 10 list of "science stuff you got wrong at school."

Besides the article itself, by far the funniest part of the page is the comment area. A reader swears that only one side of the Moon ever receives light from the Sun. (That's Mercury, dude. Only one side of the Moon is ever seen from Earth.)

Bimbo alert: 2Spare seems to carry a lot of dating ads, and who knows what they'll be advertising when you visit. Just a thought. See the list

Contents  Index

 
 
INDEX

Use the index below to jump to any topic

INTRODUCTION
Get a bonus download

TOP STORY
Get a disposable e-mail address
Protecting yourself against spammers and harvesters
Gmail's disposable addresses are the worst
Yahoo makes custom addresses easy
Create free disposable addresses on your server
Spam-Proof Your E-Mail Address
Rebooting before and after patches is good

WINDOWS GIZMOS
Images get wide and Bluetooth gets small
30" Dell is new Editors' Choice LCD
First high-def point-and-shoot camera
Remote audio uses Bluetooth, not Wi-Fi

INDEX OF REVIEWS
New laptop tests reveal top winners
Four excel in the business category
New top picks for PC-replacements
Editors name best in MIMO routers and cards
Four winners surface in D-SLR camera shootout

SECURITY BASELINE
The Security Baseline as it stands

WOODY'S WINDOWS
Changing registered owner in Windows and Office
A rose by any other name
Tweaking the Registry safely
Finding RegisteredOwner in the Registry
Changing Windows' owner and organization
Office may be easier — or maybe not

PATCH WATCH
Gentlemen, and women too, start your testing
Your personal patch action plan
Avoiding daylight saving time headaches
BackupExec patches are back
Running with nonadmin rights
MTUs, packet sizes, and tweaking them
RealPlayer products need updates
What's new on WSUS?

OVER THE HORIZON
Internet Explorer has triple security threat
Latest IE flaw already being exploited
HTA applications can run without permission
Excessive event handlers causes IE DoS

PERIMETER SCAN
Unsafe at any speed?
Still suffering from drive-by installs
Is IE that much less secure?
Having theoretical security vs. getting practical
Latest IE vulnerability exposure

USEFUL LINKS
Building a PC that's totally silent
Shushing a noisy PC — on a budget

WACKY WEB WEEK
Is water blue, or is it just reflecting the sky?

YOUR PREFERENCES
About your subscription

Contents  Index

 
 
ABOUT YOUR SUBSCRIPTION

The Windows Secrets Newsletter is published twice a month on alternating Thursdays. Issues appear 2 days and 16 days after Microsoft Patch Tuesday (the 2nd Tuesday of each month). Only the first issue of the month is published in August and December to allow vacation breaks. A short "news update" is sometimes published between regular newletters.

Publisher: WindowsSecrets.com LLC, 300 Queen Anne Ave. N. #456, Seattle, WA 98109 USA. Vendors, please send no unsolicited packages to this address (readers' letters are fine).

Editor: Brian Livingston. Contributing Editors: Susan Bradley, Woody Leonhard, Chris Mosby, Ryan Russell. Research Director: Vickie Stevens. Program Director: Brent Scheffler.

Trademarks: Windows is a registered trademark of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, WinFind, Windows Gizmos, Index of Reviews, Security Baseline, Briefing Session, Windows Patch Watch, Perimeter Scan, Update Management, and Wacky Web Week are trademarks and service marks of WindowsSecrets.com LLC. All other marks are the trademarks or service marks of their respective owners.

How to subscribe: Anyone may subscribe to this newsletter by visiting WindowsSecrets.com/info.

Privacy guarantee

HOW TO UNSUBSCRIBE: To unsubscribe from the Windows Secrets Newsletter, Copyright © 2006 by WindowsSecrets.com LLC. All rights reserved.

Contents  Index



Get the latest on Windows.

Enter your e-mail address to receive the free Windows Secrets Newsletter twice a month.

 
For instance: jan@example.com