July Computer Security News: Vista, MySpace & Suites

Here is your weekly summary of security alerts, fixescomputer.
and threats you need to know, to play safe on theThe attack seems to have been installed on perhaps
Internet.a few dozen pages. Most were soon removed by the
Thinking of Vista? Better Read This!administrators of the site.
If you are using Windows Vista or planning to makeThere are two parts to the attack. First, botnet
the jump soon, you had better know that the operatingsoftware is installed on your computer, turning it into a
system is spying on you. Some 20 or more programs,zombie that can infect other machines. Second, the
features and services are busy collecting data aboutmalware presents you with a fake login page, to try
you and your work habits.and get your user name and password.
All this information goes, you guessed it, straight toThe important point here is that this attack uses
Microsoft. If you read the Privacy Statement or Endseveral known flaws in Internet Explorer that have
User License Agreement (EULA), you would have abeen previously fixed. If you update your Windows
clearer idea of the record data harvest that Vista isonce a week, you are not at risk, even if you use
pulling in. Microsoft does not deny or hide it. In fact, youUpdating Windows regularly is one of the best things
consented to it merely by using the features.you can do to stay safe on the Internet. Do not
They claim they do not use the info to identify you. Butneglect it.
they could very easily do so. Among the dataAre Security Suites a Good Idea?
received is your IP address, of course, which is all theyI always recommend that you have anti-virus and anti-
really need to find you. Or a law enforcement agencyspyware programs running on your computer, as well
could demand that Microsoft turn over the data.as a firewall, among other programs. Many companies
And just what does dear old Mother Microsoft do withpublish great programs that will accomplish these
all that data? A close reading of the many usertasks.
agreements reveals it: absolutely any old thing theyThe trend in the last few years has been for
want or feel like.publishers to branch out and cover all three bases. For
Among the services and programs that harvest yourexample, a publisher that makes well-known anti-virus
data and send it on to Microsoft are: Windows Update,software comes out with a firewall and anti-spyware
Digital Certificates, Windows Media Player, Theprograms. And the maker of a great firewall issues an
Malicious Software Removal Tool, Internet Explorer 7,anti-virus program, and pushes it hard at you.
and Windows Defender. The company says if you doGetting all your security programs from one vendor is
not like it, just stop using the services or features.what we mean by a security suite, or collection of
That is not really practical in the case of Windowssoftware. So, is it a good idea?
Update. Thanks to Microsoft's sloppy code, we allIn a word, generally no it is not, for at least two
have to update our operating systems once a week.reasons. First, companies often specialize in one area,
And you thought the Windows XP Genuinesay anti- spyware programs. Their programs may
Advantage Notification Program was a pain...work great. But when they branch out to other areas,
What is a happy Internaut to do, other than turning offthe results may not be as good.
these programs? In many cases you can findSecond, if you get all your defensive programs from
alternatives from other companies (hint hint: Firefox).one vendor, there may be similarities in the structure
Also, you should have a good firewall installed on yourand organization of the programs. If a hacker
pc. It should alert you when Vista tries to phone home.succeeds in learning how to circumvent the anti-virus
Just say no.software, he may quickly gain control of other
Attack - Again - Update Windows Nowprograms from the same vendor.
Hackers are using accounts again to mount attacks onAnd you do not want to be at the mercy of one
unsuspecting surfers. The criminals succeeded incompany for all your security needs. What if they raise
installing fake navigation buttons on some user profiletheir prices? Or worse yet, go out of business? It is far
pages. When you click on them, you are taken tobetter to pick and choose the best programs from
malicious computers that then try to infect youramong many publishers.