Archive for April 2005

Does Apple have Trademark Attorneys?

Does Apple have trademark attorney’s or do they just ignore what they say?
The company seems to have a long history of selecting names without regard to other rights holders. Apple has had problems with the Beatles for the name Apple itself.
Ars Technica recounts a list of other questionable product names.
Bundled remote control software named Rondevoux even through there was already software existing with that name that did the same thing.
OS release named OS-9 even through there was already an Operating System by that name.
Now their new version of the OS is named Tiger, which isn’t making Tiger Direct very happy.

Scott Richter, where’s your cash?

I’ve been enjoying reading about the bankruptcy hearing involving Scott Richter and Optinrealbig. Microsoft has a large judgment against Scott for spamming. Spamroll has details.

SAV 10 KB

I’ve been reviewing the Symantec Antivirus Corporate Edition version 10 Knowledge Base and found some interesting things.
1. They recommend running a secondary server in each server group. Being a small install base I’ve never done that. It does sound like as long as I backup everything I should be ok.
2. “Because Symantec Client Security 3.0 and Symantec AntiVirus Corporate Edition 10.0 contain a realtime spyware scanning component, Symantec does not recommend running third-party realtime spyware scanning programs on the same computer.” http://tinyurl.com/arxay
3. A new setting called tamper protection that can have problem if you run other antispyware products. http://tinyurl.com/8657m

SAV 10 Maintenance Steps

What are routine maintenance steps should be performed on a Symantec Antivirus Environment?
1. Confirm that all clients appear correctly in Symantec System Center.
2. Confirm that virus definitions are propagating to all clients.
3. Empty local Quarantines and Central Quarantine.
4. Review logs for anomalies.
5. Use the Audit Network function in the Symantec System Center to confirm that all clients on the network have antivirus protection.
For help with this, read the document How to find unprotected computers on a network using the Audit Network feature in the Symantec System Center.
SAV DocID= 2005041311261648

SAV 10 Manuals available

Symantec Anti-Virus manuals are available (assuming Symantec doesn’t rejigger their website again this weekend)
The SAV 10 knowledgebase is also up.

In-Convenience Checks

General security advice would tell you to stop your credit card company from sending you those darn convenience checks. Besides the incredibly high use fee they seem to always have, there is a real threat that someone will steal them.
As seen in infosec news blog , Hints from Heloise today reports that is easier said than done.

“I wish you “good luck” in trying to get your credit-card company to stop sending those pesky checks. I called and wrote trying to get them stopped because of my concerns about identity theft. The checks just kept coming. I finally requested that my account be closed and told the company that the reason for this was the checks. In return, I received several letters urging me to keep the account open. Finally, I got a letter that said my account had been closed, regrettably.
One month later, I received a letter telling me that even though the account was closed, the company would keep it on its “inactive list.” To reopen the account, I only needed to use my card again or use one of the enclosed checks! It seems to be a battle that cannot be won.”

Blocklist Woes

SPAM blocklists are kind of obsolete. They are prone to false positive, and they dont have a very advanced view of a message. Its just a list saying, “I dont want to talk to this IP address”. A good blacklist can remove the bulk of the unwanted email and leave the rest of the mail to be scanned by heuristics/Bayesian logic.
The problem comes in when considering who manages the blacklist. For a list to remain trusted, the manager of the list needs to avoid doing stupid things. The RBL is used by RoadRunner, USA.net, BT, Telstra, AOL and Message Labs and many others. So mistakes on this list have huge ramifications. The manager of RBL broke the trust of its users this week when it added AOL to the blocklist. (after complaints, AOL was removed from the list this afternoon)
Reports are that this was one spamming incident and this action was taken by RBL when AOL did not respond within 24 hours. Does that sound like reasonable action when dealing with the email of 30 million people?
RBL has been a rather effective spamfilter (in conjunction with other tests), but now we all have to reconsider whether we can in good confidence continue to use it.

Making comparisons.

Not too long ago a colleague was arguing that Internet Explorer was like Vioxx. Vioxx had recently been recalled for known side-effects. Why take something with known side-effects when aspirin is available.
I wonder if the analogy isn’t the reverse here. It is commonly believed that if introduced today Aspirin would never make it to market. Too many side effects. There have even been deaths from Aspirin. Where as until recent years, Vioxx was seen as a great thing.
I don’t know. The mind kind of wanders as you read about critical Firefox security vulnerabilities.

SARC Website back to normal

SARC Website back to normal… but for how long.
http://myitforum.techtarget.com/blog/cmosby/archive/2005/04/24/5440.aspx

Berkeley Prof Tries Social Engineering to Regain Laptop

This one is making the rounds.
A Berkeley professor had his laptop stolen. In attempt to get it back he warns the class that he had important papers on the laptop and if it isn’t returned soon the FBI, CIA,NSA, DoD, GRU, NASA and the space aliens will all be working hard to get the theif. lol
Audio
Transcript