Windows Secrets logo

 

 

   
       
   
Windows Secrets Newsletter • Issue 90 • 2007-01-04 • Circulation: over 265,000

Windows Secrets & LangaList logo
  

Simplified logo for LangaList/Secrets
Our logo is changing from the old Windows Secrets & LangaList design (left) to simply Windows Secrets (above). Fred Langa and I explained this new year's transition when we announced the merger of our two newsletters last fall. Fred's great tips are still in our free weekly newsletter. And we continue to provide LangaList Plus content as well as intrepid gurus such as Mark Edwards and Woody Leonhard in our paid version. We're working hard to bring you the best secrets we can. Thanks for your support! —Brian Livingston, Editorial Director
    
LANGALIST TIPS   How to ease your password hassles
USEFUL LINKS   Microsoft pressures Windows 2000 users
WACKY WEB WEEK   Samorost 2 is an enticing game world
LANGALIST PLUS   Get control over your browser and desktop
WOODY'S WINDOWS   Vista timesaver #1 — bring back my menus
PERIMETER SCAN   Buyer's guide to upgrade-checking software
YOUR SUBSCRIPTION   How to change your address or unsubscribe

   
   

For links to every subtopic in this issue, scroll down to the Index

   
   
ADS

Free PC Performance Scan   Free PC performance scan
Run PC Pitstop's free Optimize scan to automatically diagnose problems with your computer and receive a custom report detailing how you can speed up your system without the expense or hassle of adding new hardware.
www.pcpitstop.com

Remotely monitor your PC from anywhere   Remotely monitor your PC from anywhere
SnoopStick is a USB device that allows you to securely monitor activity on your PC from any Windows-based computer, anywhere. Monitor IM, browser activity, e-mail, and control access to Internet services. Great for parents and employers.
www.snoopstick.com

Backup your data with ZipBackup   Backup your data with ZipBackup
Finally, a backup program that is easy to use. ZipBackup's Wizard makes backups a snap for beginners. Filtering, scheduling and disk spanning make it a powerful tool for experts. For a limited time, Windows Secrets readers receive 25% off.
www.zipbackup.com

See your ad here

   
   
LANGALIST TIPS

How to ease your password hassles

Fred Langa By Fred Langa

Just as in 2006, one of 2007's top themes is likely to be online security.

So, let's begin the New Year with some very useful password security tips and tools, and then look at an "update aggregator" service — and more!

The way to use easier but safer passwords

My Dec. 14 story, "A free but high-powered password generator," yielded some great reader mail, such as this note from Eldin Leighton:
  • "I've been using a free, very small, but effective program called Acerose Password Vault for over two years. The program includes a very strong password generator and it stores all password entries in one file that is also password protected and encrypted. I've had no problems with it whatsoever. If one is traveling, this program is small enough to fit on a memory stick, so it could be used on any computer, since nothing has to be installed in order to use it.
Thanks, Eldin. That password article also generated some good debate right here among the Windows Secrets staff, too. Different people have different methods of producing relatively secure, hard-to-crack but easy-to-remember passwords.

Editorial director Brian Livingston, for example, pointed out the technique recommended in Perfect Passwords, a book by Mark Burnett, our former contributing editor and a friend of well-known hacker Kevin Mitnick.

Brian says, "Mark spent years studying millions of passwords that ordinary people had created and analyzing the latest cracker tools that try thousands of passwords a second. He concludes in his book that the best passwords are 15 or 16 characters long, ideally 3 words separated by punctuation, with one or more of the words misspelled. The presence of meaningful word-like strings makes such passwords memorable without people having to write them on stickies pasted to their monitors. Both the length and the lack of dictionary words are what makes the password strong."

That's great advice, and indeed it may be the very best way to remember passwords without external aid. But my problem is password proliferation: I currently have separate passwords for over 450 Web sites and services.

While some of those sites (discussion boards, for example) are extremely low-risk and thus don't require ultra-high security passwords, others (banks, PayPal, credit-card sites, my business-related sites, etc.) do need very safe passwords. I prefer not to use the same password over and over on different sites, and there are simply too many separate sites for me to remember all the passwords without assistance.

For me, the solution is RoboForm. This program is available in a free version that stores a limited number of logons/passwords, and a $29.95 "Pro" version without that limitation.

RoboForm Password Generator Figure 1. RoboForm not only generates high-security passwords, but also automatically fills in Web forms after you've entered them once.

RoboForm works with your browser (including IE 7 and Firefox 2.0) to recognize Web-based forms (such as logon boxes).

If you've previously visited a site, and RoboForm was active, the software will automatically fill in the form with your correct user name and password (and any other information the site may require). If it's your first visit to the site, RoboForm will automatically memorize whatever login, password and other information you provide to that site, and will automatically enter that information as needed on future visits.

RoboForm then deep-encrypts and stores your logins, passwords and related info on your hard drive (or on a thumb drive for portable use).

RoboForm also has an excellent, built-in password generator that can produce random passwords — letters, numbers and punctuation — of any specified length up to an incredible 512 characters.

At each day's first use of RoboForm, you have to enter one master password to enable the software. It then takes over the task of managing all your logins and passwords from there. Thus, you only have to remember one high-security password (or passphrase, using Brian's excellent method) to have access to all your other passwords, no matter how many you have.

Maybe I just need more ginkgo biloba. But barring a better memory, a tool like RoboForm is the only way I can keep all my passwords straight!

Are third-party update tools safe?

Reader and frequent contributor Steve Groginsky recently discovered AutoPatcher, an interesting free tool. But it's of a class of tools that raises a yellow "caution" flag:
  • "Have you seen AutoPatcher yet? I came across it in the MajorGeeks RSS just now. The program is apparently a compilation of Windows updates and a way to automatedly install the selected updates off-line without user input.

    "I read all about it on the AutoPatcher site, and it looks good. It's freeware, although unfortunately, adding all the new patches and components added to the size. For the full release of AutoPatcher XP, this means 330 megabytes and requires a high-speed connection to download. Another option is to order a CD or DVD on the site.

    "The author emphasizes the efficacy of using AutoPatcher to install updates on several computers, but I think that it makes a perfect companion to a slipstreamed install disk [as I describe in an InformationWeek column —Fred] in case it is needed after reinstalling Windows. There are 'Full' and 'Lite' updates issued periodically, so you only need to get a bigger one once, and there are separate versions for different versions of Windows."
I agree, Steve. AutoPatcher seems to be a good tool, and has evolved over the years since I first covered it in the LangaList back on Jan. 26, 2004. (Windows Secrets also has more recent coverage in the July 13, 2006 issue.)

My concern with third-party update sites is that you're tinkering with the core software. Some low-level patches require a reboot or that you temporarily disable your antivirus tools. It's unlikely, but these actions can subvert a third-party updater into a medium for malicious Trojan software.

More pertinent is the fact that AutoPatcher doesn't support new Microsoft patches until several days after they've been released. For example, Microsoft released new patches on Dec. 12 last month, but the update package from AutoPatcher wasn't available until Dec. 21, as explained at its site. Many people don't wish to wait this long to install critical patches.

Plus, programming errors in the update-bundling software itself can introduce new problems that are absent from Microsoft's official updates. (Lord knows, Microsoft's updates have enough problems on their own!) The AutoPatcher December release contained just such a programmatic error — sort of a bonus bug — a fact explained by the developers in the post linked to in the previous paragraph. A fix must be downloaded separately, until the site releases its January 2007 update package.

AutoPatcher has a long and honorable track record, and I believe it to be an above-board operation. Still, you should be aware of the potential dangers of using any third-party update aggregator, and use all such services with caution.

How to quickly drain your capacitors

In my Dec. 14 article, reader Michael Thomas recommended that you wait at least 10 seconds before turning your computer back on when performing a full power-down. That short delay allows the system's capacitors to lose their charge. This, in turn, completely resets any status information that may be held in your PC's components.

Several readers, including Darryl Howerton, offered a small speed-up tip:
  • "An easier way is to simply press the power button after unplugging the computer or turning the power supply switch off.

    "This will cause the capacitors to drain almost immediately, eliminating the wait."
You're right, Darryl, thanks. I've also found that the more caffeine I've had, the longer those 10 seconds can seem. I'll remember this tip for my next caffeine-overdose day!

Remote options to help you support friends

As a Windows Secrets reader, you're probably the one that co-workers, family and friends turn to for help with their PCs. Perhaps Andrew Miller's question will relate to your situation, too:
  • "I recently spend an hour on the phone with my mother trying to explain how to copy a couple of files from a CD-ROM to her computer. I wished I'd taped the conversation. It was like all the funny help desk stories you hear.

    "I first had to explain that the mouse was not a something that would bite her, and that the cup holder had another purpose.

    "Anyway, my question is what is the best, easiest, and cheapest way to setup remote access to her PC, so I don't have to go through this again."
There are many options, Andrew. XP has three related "remote control" tools built in: Remote Desktop, Remote Desktop Web Connection, and Remote Assistance. (You can read a full description in my InformationWeek column, "XP's 'Remote Control' Option.")

XP's tools may be worth trying, because you probably already have them in some form — but there are limitations.

For example, only XP Pro can be a full "host" or server for Remote Desktop. XP Home can only be the "client" that logs into the server. And you can run into problems with some firewalls, too.

Fortunately, there are other excellent (and free!) tools available if the XP tools won't cut it.

There's LogMeIn, for example. It's a free, Web-based tool that gives you basic remote control over any PC to which you have access. (A Pro version of the service offers more options, but costs $20 per month for a two-PC setup.)

TightVNC and UltraVNC are well-regarded free, open-source, remote-control tools.

Finally, Paul Thurrott's column in the paid section of the Mar. 24, 2005, newsletter reviews even more remote-control options, both free and commercial. (He recommends LogMeIn for users who don't need heavy file-transfer capabilities.)

One of those tools will certainly do the trick for you — and your Mom!

Fred Langa edited the LangaList e-mail newsletter from 1997 to 2006, when it merged with Windows Secrets. Prior to that, he was editor of Byte Magazine and editorial director of CMP Media, overseeing Windows Magazine and others.

Contents  Index

   
   
ADS

Get your product seen by 270,000 readers   Get your product seen by 265,000 readers
Does your company offer a product or service? Now you can place an ad in the Windows Secrets Newsletter and be seen by more than a quarter of a million active buyers of PC hardware and software. Bid as much or as little as you like to get the ideal ad placement.
www.WindowsSecrets.com

See your ad here

   
   
USEFUL LINKS

Microsoft pressures Windows 2000 users
Companies that rely on Windows 2000 face tough, end-of-lifecycle choices as Microsoft pushes upgrades to Windows Vista, 2003, and Longhorn Server. (By Brian Livingston, InformationWeek) More info

Contents  Index

   
   
WACKY WEB WEEK

Samorost 2 is an enticing game world

Samorost 2 You're in a fantastical series of worlds that seem to be floating in space, populated by strange creatures. You're in Samorost 2!

Samorost 1, which was created in 2003 by game developer Jakub Dvorsky while he was a college student in Prague, was good. But Samorost 2 is even more surreal and wonderful. It's such a change of pace from most online games that it's in the running for three prizes, including Best Game, in the prestigious GameShadow Innovation in Gaming Awards.

The object of the Flash game is to direct a little, white-clad character to rescue his kidnapped doggie from bug-eyed aliens. But you'll spend a lot of your time simply admiring the stunning scenes that Samorost 2 provides as a backdrop.

If the game feels a bit obscure when you first click "Play," read up on a few Somorost secrets divulged by IndyGamer founder Tim W. in his Blogspot fan page. (Warning: it gives away a lot of tricks!) Play the game

Contents  Index

   
   
TELL A FRIEND

How you can share this information

We love it when you send your friends links to our articles. But please don't forward your copy of our e-mail newsletter to people, which subjects us to spam complaints. Instead, simply suggest that your friends visit this issue's permanent Web address, shown below. A complete index at the bottom of the Web page provides you with hyperlinks to any article you'd like to recommend.

The address of this issue is http://WindowsSecrets.com/comp/070104

   
   
INDEX

The following topics appear in the free version

LANGALIST TIPS   How to ease your password hassles
  The way to use easier but safer passwords
  Are third-party update tools safe?
  How to quickly drain your capacitors
  Remote options to help you support friends
   
USEFUL LINKS   Microsoft pressures Windows 2000 users
   
WACKY WEB WEEK   Samorost 2 is an enticing game world
   
You get all of the following in the paid version

LANGALIST PLUS   Get control over your browser and desktop
  Tame those annoying Outlook prompts
  Firefox requires upgrade to be Vista default
  How to protect your privacy in a Flash!
  The right way to update Windows XP
  Taming your PC's boot sequence
  Turn your "My Computer" icon into a toolbar
  Restore a missing "Send To" shortcut in Explorer
  Are rewriteable CDs safe for backups?
   
WOODY'S WINDOWS   Vista timesaver #1 — bring back my menus
  Where the heck did they put the menus?
  MS is a dedicated follower of fashion
  Menu, menu, who's got the menu?
  How to get your explorer menus back
   
PERIMETER SCAN   Buyer's guide to upgrade-checking software
  BigFix is a solution for large enterprises
  Secunia Software Inspector finds out-of-date code
  Microsoft MBSA checks only Redmond apps
  Pedestal's WebAudit underperforms other scanners
  eEye reports on update, configuration problems
  HFNetChkPro scans networks from a central machine
  Run 'em all and see for yourself
   
YOUR SUBSCRIPTION   How to change your address or unsubscribe

Paid subscribers can access all old and new paid newsletter content
Make a contribution to support our research into Windows and you'll immediately be able to read and search through scores of valuable articles. In addition, paid subscribers are entitled to download valuable content that we license for you at least once every calendar quarter.

To upgrade, simply make a contribution of any amount you choose.
If you do this by Jan. 10, 2007, you'll instantly be sent the full, paid version of today's newsletter.

To upgrade to the paid version of the Windows Secrets Newsletter, please visit our upgrade page. Thanks in advance.

   
   

Contents  Index

   
   
YOUR SUBSCRIPTION

The Windows Secrets Newsletter is published weekly on the 1st through 4th Thursdays of each month, plus occasional news updates. Vacation breaks occur in late August, Thanksgiving Week, and Christmas/New Year's.

Publisher: WindowsSecrets.com LLC, 300 Queen Anne Ave. N. #456, Seattle, WA 98109 USA. Vendors, please send no unsolicited packages to this address (readers' letters are fine).

Editorial Director: Brian Livingston. Editor: Fred Langa. Contributing Editors: Susan Bradley, Scott Dunn, Woody Leonhard, Chris Mosby, Ryan Russell. Research Director: Vickie Stevens. Program Director: Brent Scheffler.

Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, LangaList, LangaList Plus, WinFind, Security Baseline, Patch Watch, Perimeter Scan, Wacky Web Week, the Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of WindowsSecrets.com LLC. All other marks are the trademarks or service marks of their respective owners.

HOW TO SUBSCRIBE: Anyone may subscribe to this newsletter by visiting our free signup page.

WE GUARANTEE YOUR PRIVACY:

1. We will never sell, rent, or give away your address to any outside party, ever.
2. We will never send you any unrequested e-mail, besides newsletter updates.
3. All unsubscribe requests are honored immediately, period.  Privacy policy

HOW TO UNSUBSCRIBE: To unsubscribe from the Windows Secrets Newsletter,
Copyright © 2007 by WindowsSecrets.com LLC. All rights reserved.

Contents  Index