Microsoft Privileges

I was absolutely stunned to read that Microsoft gives its users Administrator rights and is only now thinking about removing them.

Every Windows users is assigned a security level, this can vary from a Restricted User who can't do things like add software or access system files up to an Administrator who can do anything and go anywhere.

Windows sets users up as Administrators unless it's told differently. In other operating systems like Mac OS X you do not get Administrator (or Root) privileges unless your specifically given them. If Windows set up restricted user accounts out of the box then we wouldn't be seeing the tidal wave of spyware and rubbish on Windows computers.

The main reason we don't set kids and office workers as Restricted Users is because many Windows applications don't run well without Administrator rights. We've tried it at many offices and homes and people have begged us to give them rights. Sadly, many of the worst offenders are Microsoft products.

Realising that Microsoft workers themselves have admin rights explains why this has happened. Microsoft's internal testing would never pick up the mess that restricted users find themselves. What's more they wouldn't know which of the software and hardware companies were supplying bodgy code that won't work without full rights.

The fact that Microsoft workers aren't forced into Restricted or Power User groups only confirms to many of us that Microsoft just doesn't get it when it comes to security. We can only hope that the upcoming Microsoft Vista does a better job than the previous attempts.

Diana Epps has a far more well thought out view on this on her blog. It makes good reading and explains the issues well. The comments also put forward some good perspectives on this.

Rootkits wreck havoc. Or do they?

The AusCert annual computer crime survey has some very alarming statistics: One in five corporate networks and twice as many public sector systems are infected with rootkits.

That's a serious statement. A rootkit is a set of files that hides itself deep in the system and is very difficult to find, they are often installed by spyware or hackers to take control of a system without the user knowing. One of these on your system means you have been bad infected with a virus, spyware or something much worse.

Personally, I don't believe a word of it. Given most corporate networks have some degree of security, if 20% of them were infected we'd be seeing 50% of home systems likewise affected. Tens of thousands of Australian computers would be pumping out spam, attacking the Pentagon and being a generally nuisance.

I suspect the replies to the survey have been misinterpreted. Many system administrators might have said "yes, we've had a virus infection" because they found a few java.byte trojans in a contractor's Mozilla cache. Either way, it's a silly and hysterical statement which the media thankfully hasn't picked up.

Mind you, I might use it in our market to scare up some work.

Only joking. Maybe.

Beating the Microsoft Word bug

Microsoft have warned of a serious bug in Word 2003 that is being exploited by a Trojan horse. Apparently one large US organisation has been targeted by it. Microsoft recommend only opening word attachments in Word Viewer.

This might be an opportunity to switch to sending attachments in PDF format. This is a far more secure and compact way of sending attachments. The free CutePDF is one of our favourites or you can buy a commercial product like Adobe Acrobat or PDF Factory.

Another alternative is to switch to Open Office or another office substitute. While the alternatives are good, they are not always compatible with all the features in MS Office. This is particularly true if you use the tracking features in Word.

If you need to exchange Word documents for editing, we'd recommend setting up a Restricted User account on your computer and doing your work in that account. Naturally you should have a firewall and an up-to-date antivirus. Being careful about who sends what is also important.

To date, it appears this exploit only works in Word 2003. Unfortunately we have no further details of the exploit or how to work around it. For the meantime you should be very careful about what you open.

How spyware gets on your computer

Two interesting links this weekend show how the spyware writers get their wares onto people's computers. An article in The Enquirer explains the most common spyware terms for getting infected. Anti-virus company Sophos announced how it's detected and stopped a rootkit exploit based on an online poker game.

The most common spyware terms only confirm what us techs see every day. The bulk of the terms are music download terms, others are screensaver and ringtones. Do a search on any of these, and you can be sure the top results will all be spyware related.

Sophos' detection of a rootkit using an online poker game illustrates the risks with online games. The only positive thing I can think of with this is that it targets adults instead of kids.

If people must go to these sites then it's important to run your Windows system in a restricted user profile, have an up to date antivirus and a firewall.

MYOB and VOIP

Accounting software company MYOB is reselling Engine VOIP boxes. Apart from asking just what experience MYOB has as a reseller, I can't help but being irritated that they are neglecting their core business on silly diversions.

Our MYOB customers outnumber Quickbooks by five to one. So MYOB is the leader in Australian small business accounting software, however their product has basically not changed for nearly ten years. There's been a few add-ins bolted on, but someone familiar with the bugs and quirks of MYOB 7 would not be lost on MYOB 15.

I guess we should be happy MYOB sticks with a stable product. But there are quirks which should have been addressed years ago. A decent form editor and better integration into MS Office would be a nice start.

I can't help but thinking this deal with Engin is just another example of management seeking buzzwords rather than improving their core product.

Why spyware writers are scumbags

In our household we're not too keen on the kids spending too much time on computers, but when they do we let the kids use the computer in the kitchen (yes, we do have one in the kitchen as well as a wireless access point). Every computer we have gets a nightly virus and spyware scan. Tonight's virus scan picked up a Java verify exploit in one of the kid's profiles.

The Java verify exploit is classic spyware. It takes advantage of a bug in the Microsoft java machine to take control of the browser. Once in, the little bugger can do anything.

So how does a ten year old get spyware into a machine? By visiting game cheat sites, that's how. Another example of how scumware writers target children as well as unsuspecting adults.

The sooner these people are shut down and thrown in gaol, the better.

Incidentally, each kid has their own profile as a limited user and is encouraged to use Firefox rather than Internet Explorer. So the spyware would have trouble doing any harm. This illustrates why all parents should take security seriously.

Google Schmooogle?

Sensis Head, Bruce Akhurst, claims "We're not attempting to be a Google". Well that puts him at odds with his boss, who reckoned the Sensis Search was going to leave Google irrelevant in the local market. It should be noted though that Bruce was backpedalling on Sol's bragging almost straight away, as was reported on the ABC the night Sol said it.

As a Telstra shareholder, I'm disappointed they aren't planning to spin Sensis off. It might just be that Sensis is at the peak of it's power: Google are dominating the search engine market, News Corp and Craigslist introducing their own local searches and Sensis' investments in Trading Post, Kaz and Invizage not doing so well. Perhaps Sol should have taken the money six months ago.

Internet Explorer a mistake

John C. Dvorak makes an interesting point in his PC Mag column about Internet Explorer being Microsoft's biggest mistake. In John's view, Internet Explorer distracts Microsoft from concentrating on their operating and office products, creates most of their antitrust problems and compounds security problems in Windows. He suggests they should ditch Internet Explorer and do a deal with Mozilla.

He's quite right about the security flaws. Take Internet Explorer out of Windows and you have a much more stable and secure system. However I think John overlooks why IE was developed in the way it was.

In 1995, Microsoft had been caught napping by the Internet and Netscape appeared to be a real risk. So MS had to bury Netscape, the quickest way was to integrate IE into Windows giving functions that Netscape could never do. It worked.

As John points out, the cost of that was years of litigation and massive security problems for Windows users. But IE did achieve it's task. It's notable that since Netscape's effective demise that there was barely any development in Internet Explorer until Mozilla and Opera started gaining traction.

Microsoft strike me as a company in trouble. Even the biggest companies have trouble juggling too many balls at the same time. I agree with John: It's time for MS to drop Internet Explorer and concentrate on their OS and Office products.

Windows becomes Nagware

Microsoft today released an update to their Windows Genuine Activation Notification program. Instead of making this mandatory for users wanting to install MS updates and add-ins it will now nag any users it suspects are using a non-licensed copy.

I'm ambivalent about this. The people most affected by this are those buying or selling systems with pirated copies of XP, the more done to put these people out of business, the better. On the other hand, I am certain we'll see some people driven mad by this system when it falsely detects them as using a pirate copy.

A slightly irritating point with this is how MS released this update out of sequence with their usual "Update Tuesday". I guess anti-piracy is a higher priority than the security of user's systems.

Synchronising files

One of the banes of our lives is synching files. We have a number of customers who have really suffered with this and it's a problem we have to struggle with. Now we're having a play with Microsoft's Power Toys and the Synch Tool.

In general, we've had good experiences with the various power toys, particularly Tweak UI. So it will be interesting to see how the Synch Tool behaves. The hope is that it's a lot more reliable than Microsoft's Briefcase or Laplink.

Wireless networks and false experts

We've always warned customers about leaving their wireless networks unprotected, so it was with interest we read today's Australian IT's article about Wireless hacking. Although I'm not sure whether logging on to unsecured network is "hacking". What really worries me are the people our big businesses and corporates outsource their IT to.

Kim Valois, global head of security at Computer Sciences Corporation, claims wireless hacking isn't really illegal at all, saying "It's not really illegal, it's like leaving the door open and someone coming in and watching your cable TV." Well Kim, I dunno what the law is where you're from, but that's called trespass around these parts.

She's later quoted as saying "most home wireless networks did not even have passwords" which I assume means encryption. If she'd made that comment two years ago, it would probably been correct, these days it would be 25% at most. I'd be fascinated to know the source of Kim's figures, maybe it's from how well her colleagues setup their own networks.

Reading Kim's comments, I'm not surprised CSC is retrenching 5,000 employees.

It's strange how wireless networks bring out odd opinions. My favourite is George Ou's blog on ZDNet, where he claims all our advice is useless. I can only assume George doesn't lock his car or front door because determined bad guys will break in anyway.

All this reminds me of Bob Rosenberger's False Authority Syndrome. The worrying thing is some of these people should be authorities.

Nightlife computers: Spam or filtering

One thing I try to do with upcoming radio spots is to tie up early what the topic will be. The producers and presenters have a hard enough job without having to make up topics on the fly. Also, being well prepared means I've checked my facts so I'm less likely to make an idiot of myself on air.

Sometimes it comes undone. This week is an example. I thought we'd tied up Internet filtering as being the topic, but the Thursday night promo talked about spam. So now I'm confused about what we'll be talking about.

It will be a shame if we don't go the Internet filtering as I've spent a lot of time on it. On the other hand, spam is an issue we haven't looked at closely for over two years, so we're due to revisit it.

The other topics we'll be looking at is growling at MS about their patch SNAFU, Boot Camp, the Mozilla update and Spam Act. It's going to be a busy night.

Microsoft fix breaks Windows

So Microsoft tell us they hold back fixes until their monthly "patch Tuesday" to ensure quality. So much for that idea.

There's a simple solution. Use Firefox. Although there is a major update to Firefox out too.

Government obsessed with T3

The Federal opposition's communications spokesman, Stephen Conroy, claims broadband services are suffering because the government is focused on propping up Telstra for the T3 sale.

It's an interesting claim with a bit of truth, but the real problem for Australian communications is that it is bundled with broadcasting. The minister of communications under any Labor or Liberal government is really the minister for keeping the Packers and Murdochs onside. Everything else is just a distraction.

What we really need are separate broadcasting and communications ministers. This would go some way to separating communications policy from the games our party pollies play to keep their paymasters onside. The only danger with such an arrangement is that the communications minister would find themselves out of cabinet while the broadcasting minister would probably be number three after the treasurer.

180 Solutions and kiddy porn

If one didn't need any more evidence of just how bad the spyware problem has become, Suzi Turner describes how 180 Solutions' Zango spyware affiliate is hijacking browsers to kiddy porn sites.

The really irritating thing about 180 Solutions is that it is an incorporated US business. It isn't a shadowy crime syndicate, pimply script kiddy or third world scammer, it has offices and managers sitting in Seattle. They even have private equity investors prepared to invest $40 million US dollars into their business.

On the surface of it, you can't blame the investors. An article by Washington Post's Brian Krebs claimed that 180 Solutions is making a million dollars a week peddling this stuff. There sure is profit in convincing users to install advertising software on their systems.

The problem is that most users aren't convinced: They are duped, they have no idea this muck is being installed on their systems. While 180 Solutions can claim this is just the behaviour of a few rogue affiliates, those of us who have to deal with cleaning it up know it is not the case.

180 Solutions and other spyware peddlers are creating great damage and offense with their use of this software. Hijacking consumers products with pornography and false advertising wouldn't tolerated in any other field and it shouldn't be tolerated in personal computing. It needs to be stopped.

Australia's first spam prosecution

It's good to see the first prosecution under the spam act, the big question now is to see what penalty Justice Nicholson imposes. The Spam Act allows the court to "The Court may order the person to pay to the Commonwealth such pecuniary penalty, in respect of each contravention, as the Court determines to be appropriate." So the fines could be anything from a dollar to the tens of millions.

Whether Wayne Mansfield has any money to pay these fines is another question. This case can't have been cheap to defend, and Wayne has lost in the courts before. Although with industries like unsolicited email and other Internet based scams it never ceases to surprise me how much money can be made.

To be fair to Mr Mansfield, he probably hasn't made billions. His spam seems to have only promoted his own businesses. He's certainly not accused of hijacking South Korean mail servers and pumping out billions of messages promoting dodgy investments and viagra. His mistake is that he just doesn't understand how much unsolicited email irritates people.

Interestingly, Wayne has his own blog where he shares some of his wisdom. Sadly, he doesn't give us his point of view on the proceedings. Although he does have some interesting links such as the one to Ivan Levinson's website.

This site has some terrific tips on writing advertising copy and emails, one of the first is "How to use e-mail to fire up sales (without getting flamed)". In it, Ivan describes what he finds to be spam at it's worst. It's a shame Wayne didn't read this article before he discovered unsolicited email.

Tech support blues

One of the most common whinges we hear from small businesses and home is "we can't get decent tech support".

It's true, they can't.

But they only have themselves to blame. Imagine you owned a car that you never serviced, never checked the oil or water and, when it did break down, you picked up the Yellow Pages to find the cheapest mechanic that could do it now. That's exactly what people do with their IT.

I had a client call at 8.00am this morning, Easter Thursday, who's moved offices and finds their computers won't work. They need them fixed now. We can't get anyone to them.

The problem I face, along with the entire industry, is that this idea of picking up the phone and hollerring for a tech just doesn't work. I can't employ staff if I don't know how much work I'll have on next week. Equally, you can't expect to get 24/7, two hour response support unless you are prepared to pay for it.

Australia falling behind?

Charles Wright's Bleeding Edge blog raises the issue about Australia's failure in communications policy, specifically in the area of broadband access.

While I agree that Australians are being ripped off by a government that understands little and cares even less about IT or communications broadband, it is only one part of a much bigger picture where we are being let down by the people we vote to be our leaders.

There's very little point in having super fast broadband if our industries don't need it. Graeme Phillipson keeps pointing out that our governments just don't want to buy Australian technology preferring to buy foreign than to support local developers. The situation is probably no different in the corridors of big business.

An even bigger problem is education. Even if we had a vigorous IT industry with super-fast broadband, it would be starved of skilled workers. We're just not offering our kids the education to compete in the high-tech world.

Of course if we did educate our kids, it would make no difference anyway. A school leaver choosing a career in science either has to immigrate or take a vow of poverty. It's much more lucrative to become a builder, property developer or commercial lawyer.

It seems to me Australians made a decision some ten or fifteen years ago: We'd rather not compete. It's much easier to be the lucky country riding on the back of wool, wheat, bauxite, iron ore, uranium, gold or whatever commodity is booming this year. Creating new and innovative technologies is something other people can do.

Charles is right in decrying the lousy state of broadband in Australia, but I can't help think the great Senator Alston was right, all we'd do with real broadband is download porn and pirated music.

More on Windows Vista

I'm a great fan of Robert Cringley's column and this weeks raises a very good point about Vista's slippage. He blames Dell. According to Cringely, Dell require six months to test a platform prior to release which they wouldn't have had with a Christmas release.

Previous articles have claimed HP were worried about Dell beating them to market. HP's channel based distribution can't get product out as fast as Dell's direct model. It sounds feasible that both the big boys were worried about Microsoft's timetable.

This is actually good news for Vista. Had MS rushed this to market, we'd have seen Vista shipping at best on second tier PC's. At worst, a lot of those PCs would have been badly tested and put together giving the new Windows distribution a bad name.

It also means more time for us to digest the new features. New operating systems are always a traumatic period for computer techs. Although nowhere near as stressful as when the customer comes to pay the bill.

Rebate madness

Today's Crikey has a good poke at HP and Officeworks about rebates. Correctly, in my view, pointing out that advertising a product for $599 that actually retails at $699 and requires the customer to harass the manufacturer for a $100 refund is deceptive advertising. Crikey goes further to look at the process which involves finding the form on the website, downloading it, filling it in, posting it off and waiting months for the rebate to arrive.

I noticed the number of rebate schemes on offer at Ingram Micro's Expotech last week. It seems these are going to become common popular in Australia this year. This is not good for consumers.

Why would a manufacturer go to the effort of setting up such a scheme? Handling rebates involves all manner of costs in processing the claims, paying the money and dealing with complaints. Why not just knock a $70 or $80 off the wholesale price?

The reason is many, if not most, buyers won't claim the thing, an article two years ago in PC World claimed up to 60% of customers don't apply for available rebates and of those that do, half have problems. Of those that do, a good number will either mess up their application or the processing company will. Either way, the headline price is not what many customers end up paying.

Rebates a rotten idea. They rip-off the customer and they damage both the retailer's and the manufacturer's reputations. Careful shoppers and resellers who care about their reputations should avoid them.