<?xml version="1.0" encoding="UTF-8"?> <rss version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
><channel><title>Fundamental Provocation &#187; Security</title> <atom:link href="http://www.ajaymatharu.com/tag/security/feed/" rel="self" type="application/rss+xml" /><link>http://www.ajaymatharu.com</link> <description>Blog by Ajay Matharu</description> <lastBuildDate>Sun, 06 Nov 2011 15:09:39 +0000</lastBuildDate> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.3.1</generator> <xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" /> <item><title>Disable User Account Control (UAC) in Vista</title><link>http://www.ajaymatharu.com/disable-user-account-control-uac-in-vista/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=disable-user-account-control-uac-in-vista</link> <comments>http://www.ajaymatharu.com/disable-user-account-control-uac-in-vista/#comments</comments> <pubDate>Tue, 07 Jul 2009 04:19:05 +0000</pubDate> <dc:creator>Ajay Matharu</dc:creator> <category><![CDATA[Microsoft]]></category> <category><![CDATA[Technology]]></category> <category><![CDATA[Performance]]></category> <category><![CDATA[Security]]></category> <category><![CDATA[UAC]]></category> <category><![CDATA[User Account Control]]></category> <category><![CDATA[Vista]]></category> <category><![CDATA[Windows]]></category><guid isPermaLink="false">http://www.ajaymatharu.com/?p=1224</guid> <description><![CDATA[Hi Guys, Many of you must be bugged off with the security alerts in Vista, You can however disable that feature to annoy you. Here are the steps to be performed to disable UAC on Vista, 1. Click the round blue Windows Start button. Now click Control Panel 2. From the Control Panel, click User [...]]]></description> <content:encoded><![CDATA[<p>Hi Guys,</p><p>Many of you must be bugged off with the security alerts in Vista, You can however disable that feature to annoy you.<br /> Here are the steps to be performed to disable UAC on Vista,</p><p>1. Click the round blue Windows Start button. Now click Control Panel<br /> 2. From the Control Panel, click User Accounts and Family Safety<br /> (or User Accounts if your in classic view)<br /> 3. Click the option to Turn User Account Control on or off<br /> 4. Uncheck the box next to Use User Account Control (UAC) to help<br /> protect your computer and click OK<br /> 5. Restart when prompted</p><div class="wp-caption aligncenter" style="width: 566px"><img title="Turn off user Account Control(UAC)" src="http://ajaymatharu.files.wordpress.com/2009/05/1.gif" alt="Turn off user Account Control(UAC)" width="556" height="214" /><p class="wp-caption-text">Turn off user Account Control(UAC)</p></div><div class="wp-caption aligncenter" style="width: 584px"><img title="Turn off user Account Control(UAC)" src="http://ajaymatharu.wordpress.com/files/2009/05/2.gif" alt="Turn off user Account Control(UAC)" width="574" height="290" /><p class="wp-caption-text">Turn off user Account Control(UAC)</p></div> ]]></content:encoded> <wfw:commentRss>http://www.ajaymatharu.com/disable-user-account-control-uac-in-vista/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Conflicker strikes back</title><link>http://www.ajaymatharu.com/conflicker-strikes-back/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=conflicker-strikes-back</link> <comments>http://www.ajaymatharu.com/conflicker-strikes-back/#comments</comments> <pubDate>Sun, 08 Mar 2009 16:02:32 +0000</pubDate> <dc:creator>Ajay Matharu</dc:creator> <category><![CDATA[Technology]]></category> <category><![CDATA[Virus]]></category> <category><![CDATA[Conflicker]]></category> <category><![CDATA[Downadup]]></category> <category><![CDATA[Security]]></category> <category><![CDATA[Windows]]></category> <category><![CDATA[Worm]]></category> <category><![CDATA[Worms]]></category><guid isPermaLink="false">http://www.ajaymatharu.com/?p=1033</guid> <description><![CDATA[The Conficker/Downadup worm managed to slither onto millions of PCs worldwide at its height, but after it initially infected a computer it only really acted to spread itself, and didn&#8217;t cause further harm. Until now. Symantec reports today that it has found a new variant of the virulent worm that will identify antivirus software or [...]]]></description> <content:encoded><![CDATA[<p>The Conficker/Downadup worm managed to slither onto millions of PCs worldwide at its height, but after it initially infected a computer it only really acted to spread itself, and didn&#8217;t cause further harm. Until now.</p><p>Symantec reports today that it has found a new variant of the virulent worm that will identify antivirus software or security analysis tools running on the infected PC, and attempt to shut down those programs. This is a strong signal that the worm&#8217;s mysterious creators haven&#8217;t abandoned their creation in the face of worldwide attention, as some in the industry have theorized, but may still have plans to make a buck off their work.</p><p>To protect against the Conficker worm, first make sure you&#8217;ve installed the patch that closes a <a href="http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx" target="_blank">targeted hole in the Microsoft Server Service</a>. Next, protect any network shares and administrator accounts with a strong password, as Conficker will try to guess easy ones.</p><p>Finally, you can block the worm&#8217;s third infection, which hijacks thumb drives and other removeable media, by disabling Autorun on Windows. PC World has a <a href="http://www.pcworld.com/downloads/file/fid,76805-page,1/description.html?tk=rel_news" target="_blank">download available</a> that can automate that step for Windows XP users, and Microsoft has posted <a href="http://support.microsoft.com/kb/953252" target="_blank">manual instructions</a>.</p> ]]></content:encoded> <wfw:commentRss>http://www.ajaymatharu.com/conflicker-strikes-back/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Is Firefox secured enough</title><link>http://www.ajaymatharu.com/is-firefox-secured-enough/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=is-firefox-secured-enough</link> <comments>http://www.ajaymatharu.com/is-firefox-secured-enough/#comments</comments> <pubDate>Fri, 20 Feb 2009 07:08:12 +0000</pubDate> <dc:creator>Ajay Matharu</dc:creator> <category><![CDATA[Browsers]]></category> <category><![CDATA[Firefox]]></category> <category><![CDATA[Technology]]></category> <category><![CDATA[Web]]></category> <category><![CDATA[Internet]]></category> <category><![CDATA[Mozilla]]></category> <category><![CDATA[Security]]></category><guid isPermaLink="false">http://ajaymatharu.wordpress.com/?p=908</guid> <description><![CDATA[Mozilla&#8217;s open source Firefox browser has made a significant dent in Internet Explorer&#8217;s dominant market share. Much of its popularity is due to the wide availability of third-party add-ons that significantly extend Firefox&#8217;s functionality &#8212; allowing Firefox to disable Java or JavaScript on the fly, perform JavaScript whitelisting, even host ActiveX controls, for example. Firefox [...]]]></description> <content:encoded><![CDATA[<p>Mozilla&#8217;s open source Firefox browser has made a significant dent in Internet Explorer&#8217;s dominant market share. Much of its popularity is due to the wide availability of third-party add-ons that significantly extend Firefox&#8217;s functionality &#8212; allowing Firefox to disable Java or JavaScript on the fly, perform JavaScript whitelisting, even host ActiveX controls, for example. Firefox has always pushed the boundary in terms of features and functionality, and it can boast both growing enterprise support and the ability to run on Windows, Mac, and Linux. One claim Firefox can&#8217;t make is a high granularity of security control.</p><p>Firefox does not automatically ask for elevation when installing, so be sure to run as administrator beforehand if you want it to install the browser into the normal Program Files folder in Windows Vista or another user-securable location. If installed on Vista, Firefox runs as a single process (Firefox.exe) with medium integrity, DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization) enabled, and file system and registry virtualization disabled. The latter is a feature in Vista that allows users to run applications without having administrative privileges.</p><p>Like Google Chrome, Firefox has a JavaScript engine that converts JavaScript source code into native machine code; Firefox uses an open source engine called <a href="https://wiki.mozilla.org/JavaScript:TraceMonkey" target="_blank">TraceMonkey</a>. Unlike Chrome, in which the V8 JavaScript engine is always on, Firefox&#8217;s JavaScript support can be enabled or disabled across the browser. By using the <a href="http://noscript.net/">NoScript add-on</a>, you can enable JavaScript (and Java and Flash) on a per-site basis.</p><p>Although add-ons such as NoScript, and plug-ins such as Adobe Flash, bring many useful capabilities to Firefox, at the same time they come with problems and security issues of their own. Firefox has a built-in add-on manager that allows you to browse available extensions, install and uninstall them, and enable and disable them, but again, they can&#8217;t be enabled or disabled with per-site granularity.</p><p>Security can be defined through the normal Tools &gt; Options menu or by typing &#8220;about:config&#8221; in the URL bar. The latter option opens up hundreds of behind-the-scenes settings, similar to what might only be found among the registry settings of other browsers. Serious users always configure security using the about:config method, although detailed descriptions on each option can be a little hard to find.</p><p>Firefox has a &#8220;safe mode&#8221; that can be launched to recover from disasters. Even better, whereas Internet Explorer only disables all add-ons by default, Firefox Safe Mode allows you to erase the history files, return browser settings to the defaults, make other necessary changes, and then automatically restart in normal mode. It&#8217;s a great little feature.</p><p>Firefox passed 9 of the 21 password handling tests on the <a href="http://www.info-svc.com/news/2008/12-12/pm-evaluator/" target="_blank">Password Manager Evaluator</a>. Firefox allows locally stored passwords to be protected by a separate master password, and even tells you how strong your master password is.</p><p>Naturally, Firefox&#8217;s popularity has brought out the attackers. Many different attacks &#8220;in the wild&#8221; specifically target Firefox users, making it the second-most-attacked browser behind Internet Explorer. Firefox 3.0 has had at least 39 separate vulnerabilities in less than six months (as compared to 154 vulnerabilities for Firefox 2.0 during its lifetime). Seventy-five percent of these exploits were ranked high-criticality, and a third allowed complete system compromise.</p><p>One of the common complaints about Firefox is its lack of support for the enterprise. Although Mozilla doesn&#8217;t directly offer tools to ease large installations or to centrally manage Firefox through Group Policy, these are available from independent providers including FirefoxADM and FrontMotion.</p><p>All in all, Firefox is a sophisticated open source browser that has earned its place as a market leader. Like Internet Explorer, Firefox enjoys widespread popularity and third-party support. And like Internet Explorer, it continues to struggle with frequently found vulnerabilities, perhaps due in part to the vendor&#8217;s commitment to SDL (Security Development Lifecycle) processes, which initially lead to more vulnerabilities being uncovered during testing. Firefox makes a good browser choice for anyone, but especially for users who want to purposefully avoid Internet Explorer (and ActiveX) or who don&#8217;t need the finest granularity (e.g., multiple security zones) in their browser&#8217;s security.</p> ]]></content:encoded> <wfw:commentRss>http://www.ajaymatharu.com/is-firefox-secured-enough/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> </channel> </rss>
