July 4, 2008

5 Critical Steps to Protecting Your Computer on the Internet

Spyware, viruses and worms... oh my!

If you are connected to the internet, you need to make sure you get your computer set up properly if you want to avoid problems down the road.

With all the viruses, spyware and other threats on the internet today, no computer should be set up without the proper protection.

And that protection needs to be in place as soon after you hook up your new machine as possible.

The following five steps will make your computer a much harder target for threats. You still won't be completely immune to problems, but 99% of the time the threat will pass you by, looking for the easy mark.

1. Running a Personal Firewall

A personal firewall is software that basically makes your computer invisible to hackers, worms and other threats that can infect your computer over the internet.

Setting up a firewall is the absolute first thing you should do if you're going to connect to the internet. Without a firewall, your computer could get infected in as little as one minute after connecting.

If you have a brand new computer running Windows XP Service Pack 2, there is a firewall built into Windows. It will already have been turned on when you first set up your computer.

If you're running an older version of Windows, even an earlier version of Windows XP, there is no firewall automatically set up for you. In this case there are two possibilities:

- Your computer came pre-loaded with a firewall such as Norton Internet Security or McAfee Internet Security
- You have no firewall installed and should download one ASAP.

If you don't have any personal firewall software installed, you should do so right away. Zone Alarm is a very good firewall program that has a version that you can download and install for free.

You can download the free version of Zone Alarm here.

2. Turn on Windows Updates

Again, if you're running Windows XP Service Pack 2 this is already set up, but otherwise you should turn on Windows Updates. Microsoft releases updates for security problems and other bugs in Windows on a regular basis.

These updates will keep your computer running better, and they often fix security issues that could compromise your information or privacy.

If you are running Windows XP Service Pack 2, you can double-check that automatic updates are turned on by clicking Start, then click Control Panel, then double-click Security Center. The window that opens will tell you if automatic updates are turned on, and lets you turn them on if they're not.

To turn on automatic updates in earlier versions of Windows XP, click on the Start menu, click Control Panel and then double-click on System. On the "Automatic Updates" tab, click the option to "Automatically download the updates and install them on the schedule I specify."

To turn them on in Windows 2000, click on Start, click Control Panel and then double-click on Automatic Updates. Again, click the option to "automatically download the updates and install them on the schedule I specify."

Now when Microsoft releases updates, they will be downloaded for you automatically and Windows will tell you when they are ready to be installed.

3. Install & Update Antivirus Software

Most new computers come with antivirus software these days. You might have Norton, McAfee, PC-Cillin or another brand. No matter what program you have, you will need to update it when you get connected to the internet.

It doesn't matter how new your computer is - there will be new viruses, and new updates for the antivirus software, since it was loaded.

The exact process is different for each brand of antivirus program, but most of them will have an icon in the bottom right corner of your desktop, beside the time. The icon might be a picture of a shield (McAfee), a stethoscope (Norton) or something else.

In most cases, if you point to the icon for your antivirus and click the right mouse button, a menu will pop up with an update option. It could be simply called update or could be something like Live Update or Download Latest Updates. If you click on the update option (with the left button this time) it will install the newest updates for you.

If you're not sure which icon is for your antivirus software, just point to each one for a few seconds and a little title should pop up telling you what it is.

4. Install Anti-Spyware Software

Spyware - and other things known as adware and malware - is becoming as big a problem as viruses. Spyware programs can cause a lot of problems with your computer, not to mention they can track your personal information and you never know where it's being sent.

Some new computers might includes antispyware software, but most of them don't yet. There are quite a few anti-spyware programs available, some free and some not. The one I recommend is from Microsoft and is one of the free ones.

One of the reasons I like it is because it always runs in the background and will automatically catch a lot of spyware before it gets on your computer.

Many of the other programs don't catch it until you run a scan. Not only does this allow things to get on your computer, it also means you have to actually remember to run a scan.

You can download the free Microsoft Antispyware from here.

5. Set up a Free Email Account

This last item is not as critical as the first four, but I would highly recommend you set up an email account with one of the free services like Hotmail or Gmail.

Once you're on the internet, you'll find a lot of useful information that you want that requires you to provide an email address. In some cases, these people will end up sending you a bunch of spam.

If you use a free email account to sign up for anything that you don't know for sure you can trust, it's not going to fill your main email with a bunch of junk.

This goes for anything really, not just online information. If you're entering a contest or signing up for anything offline and you don't know where your information could end up being used, I would suggest using your free email address.

If worse comes to worse, and your free email address gets inundated with spam, you can always just set up a new one and let the old one expire.

Some of the better free email services are www.hotmail.com, www.gmail.com and www.yahoomail.com.

If you've had your computer for a while and never done any of these things, you should still take these steps to get it set up properly. It will definitely save you a lot of time - and possibly money - as you use your system.

How to Take Ownership of a File or Folder in Windows XP

If you must access a file or a folder that you do not have access to, you must take ownership of that file or folder. When you do this, you replace the security permissions to have access.

If you are using Windows XP Professional, you must disable Simple File Sharing. By default, Windows XP Professional uses Simple File sharing when it is not joined to a domain. If simple file sharing is enabled, you see the simple file sharing user interface appears instead of the Security and Sharing tabs.

To see hidden files:

1. On the Tools menu in Windows Explorer, click Folder Options.
2. Click the View tab.
3. Under Hidden files and folders, click Show hidden files and folders.


Note: To access Windows Explorer, click Start, point to All Programs, and then click Windows Explorer.

How Do I see the Security Tab in XP Home?

If you are using Windows XP Home then download this Security Configuration Manager file from Microsoft. SCESP4I.EXE
Double click to run it and then type in C:\TEMP\SCM and press OK
Then using Explorer browse to the C:\TEMP\SCM folder and locate the file named: setup.inf then Right click on it and select Install
Once the installation is completed you need to restart your computer.

Note: To use Security settings your hard drive must use NTFS.

Note: To allow for specific users to access the share folder after the simple file sharing is disabled, you should configure both the NTFS permissions on the Security tab and the share permission on the Sharing tab of the share folder. NTFS permissions can only be set on a partition using NTFS file system. If you remove the Every Group from the NTFS permission, you cannot access the share folder over the network.

How to turn off simple file sharing

1. To disable simple file sharing, follow these steps:Click Start, and then click My Computer.
2. On the Tools menu, click Folder Options, and then click the View tab.
3. In the Advanced Settings section, clear the Use simple file sharing (Recommended) check box.
4. Click OK.

How to take ownership of a folder

1. To take ownership of a folder, follow these steps:Right-click the folder that you want to take ownership of, and then click Properties.
2. Click the Security tab, and then click OK on the Security message (if one appears).
3. Click Advanced, and then click the Owner tab.
4. In the Name list, click your user name, or click Administrator if you are logged in as Administrator, or click the Administrators group. If you want to take ownership of the contents of that folder, select the Replace owner on subcontainers and objects check box.
5. Click OK, and then click Yes when you receive the following message:

You do not have permission to read the contents of directory folder name. Do you want to replace the directory permissions with permissions granting you Full Control?

All permissions will be replaced if you press Yes.

Note: Folder name is the name of the folder that you want to take ownership of.

6. Click OK, and then reapply the permissions and security settings that you want for the folder and its contents.

How to take ownership of a file

Note: You must be logged on to the computer with an account that has administrative credentials.

1. To take ownership of a file, follow these steps:Right-click the file that you want to take ownership of, and then click Properties.
2. Click the Security tab, and then click OK on the Security message (if one appears).
3. Click Advanced, and then click the Owner tab.
4. In the Name list, click Administrator, or click the Administrators group, and then click OK.

The administrator or the Administrators group now owns the file. To change the permissions on the files and folders under this folder, go to step 5.

5. Click Add.
6. In the Enter the object names to select (examples) list, type the user or group account that you want to give access to the file. For example, type Administrator.
7. Click OK.
8. In the Group or user names list, click the account that you want, and then select the check boxes of the permissions that you want to assign that user.
9. When you are finished assigning permissions, click OK.

Here is an alternative method
For Windows XP Home Edition ONLY! - we need to add the Security Tab to Explorer

Download this Security Configuration Manager file from Microsoft. SCESP4I.EXE
Double click to run it and type in EXACTLY or copy / paste the following path to extract it to.
If it is not correct then this method will not work. C:\TEMP\SCM
Then click OK

NOTE! Close all open applications as you will need to restart the computer after the end of this routine

Copy this entry and click on START - RUN and paste it into the run box and click OK:

RUNDLL32.EXE SETUPAPI.DLL,InstallHinfSection DefaultInstall 132 C:\TEMP\SCM\setup.inf

This will start the installation of the Security Configuration Manager that you downloaded earlier.

It will then ask you to restart your computer. Please restart your computer now when asked.

July 2, 2008

What’s So Great About Firefox?

The Web is all about innovation, and Firefox 3 sets the pace with dozens of new features, including the smart location bar, one-click bookmarking and blindingly fast performance. View the top new features!!


Foxkeh

July 1, 2008

Comprehensive Guide to .htaccess

I am sure that most of you have heard of htaccess, if just vaguely, and that you may think you have a fair idea of what can be done with an htaccess file. You are more than likely mistaken about that, however. Regardless, even if you have never heard of htaccess and what it can do for you, the intention of this tutorial is to get you two moving along nicely together. If you have heard of htaccess, chances are that it has been in relation to implementing custom error pages or password protected directories. But there is much more available to you through the marvelously simple .htaccess file.

An htaccess file is a simple ASCII file, such as you would create through a text editor like NotePad or SimpleText. Many people seem to have some confusion over the naming convention for the file, so let me get that out of the way. .htaccess is the file extension. It is not file.htaccess or somepage.htaccess, it is simply named .htaccess

In order to create the file, open up a text editor and save an empty page as .htaccess (or type in one character, as some editors will not let you save an empty page). Chances are that your editor will append its default file extension to the name (ex: for Notepad it would call the file .htaccess.txt). You need to remove the .txt (or other) file extension in order to get yourself htaccessing--yes, I know that isn't a word, but it sounds keen, don't it? You can do this by right clicking on the file and renaming it by removing anything that doesn't say .htaccess. You can also rename it via telnet or your ftp program, and you should be familiar enough with one of those so as not to need explaining.

htaccess files must be uploaded as ASCII mode, not BINARY. You may need to CHMOD the htaccess file to 644 or (RW-R--R--). This makes the file usable by the server, but prevents it from being read by a browser, which can seriously compromise your security. (For example, if you have password protected directories, if a browser can read the htaccess file, then they can get the location of the authentication file and then reverse engineer the list to get full access to any portion that you previously had protected. There are different ways to prevent this, one being to place all your authentication files above the root directory so that they are not www accessible, and the other is through an htaccess series of commands that prevents itself from being accessed by a browser, more on that later)

Most commands in htaccess are meant to be placed on one line only, so if you use a text editor that uses word-wrap, make sure it is disabled or it might throw in a few characters that annoy Apache to no end, although Apache is typically very forgiving of malformed content in an htaccess file.

htaccess is an Apache thing, not an NT thing. There are similar capabilities for NT servers, though in my professional experience and personal opinion, NT's ability in these areas is severely handicapped. But that's not what we're here for.

htaccess files affect the directory they are placed in and all sub-directories, that is an htaccess file located in your root directory (yoursite.com) would affect yoursite.com/content, yoursite.com/content/contents, etc. It is important to note that this can be prevented (if, for example, you did not want certain htaccess commands to affect a specific directory) by placing a new htaccess file within the directory you don't want affected with certain changes, and removing the specific command(s) from the new htaccess file that you do not want affecting this directory. In short, the nearest htaccess file to the current directory is treated as the htaccess file. If the nearest htaccess file is your global htaccess located in your root, then it affects every single directory in your entire site.

Before you go off and plant htaccess everywhere, read through this and make sure you don't do anything redundant, since it is possible to cause an infinite loop of redirects or errors if you place something weird in the htaccess.

Also...some sites do not allow use of htaccess files, since depending on what they are doing, they can slow down a server overloaded with domains if they are all using htaccess files. I can't stress this enough: You need to make sure you are allowed to use htaccess before you actually use it. Some things that htaccess can do can compromise a server configuration that has been specifically setup by the admin, so don't get in trouble.