Multipleplatforms

See the links to all these stories and more at: Mulitpleplatforms.com
6-27-04 noon PT
Security Round Up
The following is a collection of advice from various experts on steps PC users should take to protect their computers from the new round of attacks that started Thursday.

Leo Laporte The Tech Guy on KFI recommends:
1. Stop using Internet Explorer! Use Mozilla, Firefox, or Opera instead.
2. Update your anti-virus and scan your system now. If you don't have an anti-virus, download AVG free from Grisoft.
3. Run Windows Update regularly. Better yet, turn on automatic updates. There is no fix yet, but at least you'll get the patch the minute it's available.
Source: The Tech Guy on KFI, Leo Laporte

From Symantec:
Symantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":

1. Turn off and remove unneeded services. By default, many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server. These services are avenues of attack. If they are removed, blended threats have less avenues of attack and you have fewer services to maintain through patch updates.
2. If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.
3. Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services.
4. Enforce a password policy. Complex passwords make it difficult to crack password files on compromised computers. This helps to prevent or limit damage when a computer is compromised.
5. Configure your email server to block or remove email that contains file attachments that are commonly used to spread viruses, such as .vbs, .bat, .exe, .pif and .scr files.
6. Isolate infected computers quickly to prevent further compromising your organization. Perform a forensic analysis and restore the computers using trusted media.
7. Train employees not to open attachments unless they are expecting them. Also, do not execute software that is downloaded from the Internet unless it has been scanned for viruses. Simply visiting a compromised Web site can cause infection if certain browse
Source: Symantec


Sophos Recommends

1. Use anti-virus software
2. Install anti-virus software on all of your desktops and servers, and ensure they are kept up to date.
3. Run a consolidated email filtering solution at your email gateway as well to protect your business from the threats of email-borne viruses and spam.
4. Consider filtering potentially malicious emails at the email gateway as this can provide a level of pro-active protection against new virus threats. Block file types that are often virus carriers; these include EXE, COM, PIF, SCR, VBS, SHS, CHM and BAT file types. It is unlikely that your organisation will ever need to receive files of these types from the outside world. Block any file with more than one file type extension.
5. Stay informed about the latest virus threats.
6. Computers connected to the outside world should be properly protected from internet threats via firewalls.
7. Many software vendors issue advisories on security issues. For instance, Microsoft runs a mailing list which warns of security loopholes and issues found in Microsoft's software and advises on patches which are available for protection.
8. Make regular backups of important work and data, and check that the backups were successful. You should also find a safe place to store your back-ups, perhaps even off-site in case of fire.
9. Disable booting from floppy disks

Source: Sophos


Microsoft Recommends:
Microsoft continues to recommend that all customers visit Microsoft to take the three key steps to protect their PCs. The three key steps are:

1. Use an Internet Firewall on all PCs and Laptops: An Internet firewall can help prevent outsiders from getting to your computer through the Internet. If you use Microsoft Windows® XP, enable the built-in firewall.
2. Update Your Computer: Windows includes the automatic updates feature (Windows Update) which can automatically download the latest Microsoft security updates. Windows 98 SE and Windows ME can be updated from .
3. Use Up-to-Date Antivirus Software: Installing, configuring and maintaining antivirus protection is absolutely essential. Customers can access current anti-virus protection at the following sites:
? Symantec
? F-Secure
? Computer Associates
Source: Microsoft Press Release

Multiple Platforms Recommends
Follow Leo’s advice and read the rest to get more valuable hints (back-up, etc.). We have been Leo’s echo in trying to get PC users to switch from Internet Explorere to any other browser. Mozilla.org has several great browsers available free so make the switch today. Apple users of Internet Explorer do not appear to be at risk in this latest hack attack.

Apple Recommends:
Ten reasons a Mac Is a Better Idea than a PC.
1. The Mac...It Just Works
2. It Doesn’t Crash
3. It’s a Digital Jukebox
4. Delivers The Promise Of Digital Photography
5. Best Solution, In Fact, For All Things Digital--iLife
6. Built To Go Everywhere
7. The Internet Is Integrated
8. Office is Office and then Some
9. It Works Effortlessly With PCs
10. It’s Beautiful
Source: Apple-Make the Switch


Check out the How-to/Tips page for these additions:

Apple Tips
1. I Forgot My OSX Admin Password
2. What is firmware?

Windows Tips
1. Removing the Outlook Express Icon
2. Disable System Restore in XP/ME
Happy Computing!