GRC | Security Now! Notes for Episode #65

- Purchasing
- Sales Support
- Technical Support
- Contact Us
- Blogs, Twitter & RSS
- Privacy Policy
- Site Options
- Steve's Projects Page
- Steve's Old Resume

- General information
- What SpinRite Does
- User testimonials
- Purchase SpinRite
- FAQ
- Demo Videos
- Knowledgebase: SATA
- Knowledgebase: BIOS
- SpinRite v5.0 pages

- ShieldsUP!
- Password Haystacks
- Security Now!
- DNS Spoofability Test
- Perfect Passwords
- PPP Passwords
- Tech TV video clips
- Newsgroup Discussions

- Security»
  - Leaktest
  - Securable
  - Shoot the messenger
  - Unplug n' Pray
  - DCOMbobulator
  - MouseTrap
  - MouseTrapCmd
- Utilities»
  - DNS Benchmark
  - Wizmo
  - ID Serve
  - ClicKey
  - Free & Clear
  - IDentity (ASPI)
- Obsolete»
  - FIX-CIH
  - TIP (trouble in paradise)
  - OptOut
  - XPdite
  - NoShare
  - LetShare
  - Patchwork

- Recent»
  - Ultra-high entropy PRNG
  - Pure CSS web menus
  - NAT router security
  - PDA max battery life
- Pending»
  - GRC NetFilter
  - TrustPuppy
- Historical»
  - Worm wars of 2001
  - File downloader spying
  - Sub-pixel font rendering
  - Earthlink browser tag
  - ZIP & JAZ click of death
- Dormant»
  - OpenVPN
  - The Assimilator
  - ASPI ME
- Health»
  - Health Homepage
  - The Low Carb Choice
  - Vitamin D

- PDP-8 Computers
- Big Number Calculator
- Portable Sound Blaster

Resource links for Security Now! Episode #65:

Get "allSnap" here!

Our mention and strong endorsement of Ivan Heckman's wonderful and clean little Windows "allSnap" utility (which causes all Windows windows to snap to screen and other window borders) quickly caused Ivan's GeoCities bandwidth to exceed its allotment.

You may download the latest version (v1.30.5) of allSnap directly from GRC's server with this link:

Download allSnap v1.30.5

Why Is Security So Difficult?

Google's remote POP & SMTP configuration instructions
Accessed from the Gmail Support Page, this page provides clear step-by-step instructions for accessing existing Gmail accounts from traditional mail clients using secure POP and SMTP connections.
Microsoft's XML Core Services vulnerability notice
This is Microsoft's page discussing the newly discovered vulnerability in their XML Core Services ActiveX control which, in its default configuration can be (and is being) invoked by Internet Explorer and exploited to install malware onto unsuspecting users' computers. Until Microsoft repairs this defect, users who are at high risk of exploitation (surfing unknown sites with IE and scripting enabled by default) might wish to consider setting this vulnerable control's "KillBit" in their system's registry to prohibit Internet Explorer from invoking this control.
The "Set_927892_KillBit" registry file
This file, when opened on a Windows machine, will prompt the user whether they wish to modify their registry with this file, then will set the kill bit flag for this currently vulnerable ActiveX control. Note that since setting ActiveX kill bits is becoming somewhat routine, I put the unique Microsoft knowledgebase article number in the filename to distinguish it from any future similar files.

Gibson Research Corporation is owned and operated by Steve Gibson. The contents
of this page are Copyright (c) 2012 Gibson Research Corporation. SpinRite, ShieldsUP,
NanoProbe, and any other indicated trademarks are registered trademarks of Gibson
Research Corporation, Laguna Hills, CA, USA. GRC's web and customer privacy policy.

gipoco.com is neither affiliated with the authors of this page or responsible
for its contents. This is a safe-cache copy of the original web site.

gipoco.com is neither affiliated with the authors of this page nor responsible for its contents. This is a safe-cache copy of the original web site.