Wednesday, October 28, 2009

Firefox (Mozilla) 3.5.4 released

Mozilla has released an update to the Firefox browser, bringing the current version to 3.5.4.  While not a major release, I think it's a good idea to install the update - if only to stop the annoying update prompts.  Actually, there are a number of security fixes included, so go ahead and update and be done with it. 

Open Firefox, click Help - Check for updates, then follow the prompts.  Or download the full installer here: http://www.mozilla.com/en-US/


Here are the Release Notes:

Fixed in Firefox 3.5.4



MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15)


MFSA 2009-63 Upgrade media libraries to fix memory safety bugs


MFSA 2009-62 Download filename spoofing with RTL override


MFSA 2009-61 Cross-origin data theft through document.getSelection()


MFSA 2009-59 Heap buffer overflow in string to number conversion


MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS()


MFSA 2009-56 Heap buffer overflow in GIF color map parser


MFSA 2009-55 Crash in proxy auto-configuration regexp parsing


MFSA 2009-54 Crash with recursive web-worker calls


MFSA 2009-53 Local downloaded file tampering


MFSA 2009-52 Form history vulnerable to stealing


Tuesday, October 27, 2009

CCleaner - New Version 2.25.1025 Released

The latest version of CCleaner was released yesterday. Since CCleaner lacks an internal updater, you'll need to download the current version and install it. No need to uninstall the previous version first. The free version will do for most.

Go here to read more about it: http://www.ccleaner.com/

Or download it here: http://www.filehippo.com/download_ccleaner/

Upgrade and run CCleaner today. Your computer will thank you.

Monday, October 19, 2009

Adobe Reader Update 9.2

Adobe released Reader 9.2 last week, and there are several ways to update.  The easy way is to open Reader, click on Help - Check for updates, then follow the prompts.  If you have a lot of computers to update and don't want to wait for a 40+ MB download on every one, download the new version, copy it to your server or USB drive, then to each computer to run.  Here's the smallest version I found: http://www.filehippo.com/download_adobe_reader/

Or, you can go directly to Adobe (be sure to UNCHECK the box for Norton Security Scan, or any other add on they want to include): http://get.adobe.com/reader/?promoid=BUIGO

Wednesday, October 14, 2009

Surge Suppressors - What Do I Need?

Planning to write about surge suppression for a long time, I've been reading as much as possible from many sources online. It's a topic people ask about frequently, and one that needs to be addressed more often than when you set up your first computer.

There is a surprising amount of debate about surge suppression, and real facts are hard to find. Debate aside, most agree that some level of surge suppression is absolutely necessary. I am not an electrical engineer, but I'll tell you what I've read and continue to recommend and use good surge suppression. 

A good place to start (though some disagree) is the How Stuff Works web site. This is a long, informative article, well worth the time to read.

Harris, Tom.  "How Surge Protectors Work."  05 January 2001.  HowStuffWorks.com. <http://electronics.howstuffworks.com/surge-protector.htm>  14 October 2009.
 
There is are differences between a surge suppressor, a surge protector (not possible) and a uninterruptible power supply (UPS). The best protection is a whole-house surge suppressor. They're not expensive, and you should have a chat with your electrician about having one installed.

Nothing will protect your equipment against nearby lightning - therefore, there is no such thing as a surge "protector"**. This post focuses on power disturbances; spikes, surges and brownouts.

A surge suppressor, of the grocery-store $5-10 variety is good pretty much only as an extension cord, while providing you a false sense of security. And a surge suppressor connected to your outlet via a 3-to-2 prong adapter (common) is useless. The ground is what provides the protection, and if you defeat the ground you have no protection. Have your electrician upgrade your outlets (cheap) when installing that whole-house surge suppressor.

You need to know surge suppressors have a limited life.  Many suppressors, after handling one good spike or surge, can no longer provide suppression. They commonly "fail open", which means they still supply power to the outlets, but the device(s) that provide surge suppression are used up. The better suppressors will have a light to show they are still providing suppression. There is no way to test a suppressor.  Replace it with a model that indicates its status. If your suppressor is more than a couple years old, replace it now.
 
The better surge suppressors ($20 - 50) will provide better suppression, status indicators, reset buttons, line conditioning and possibly ports for phone line and Ethernet pass-through. 
 
If you do run your phone line or Ethernet cable through a surge suppressor, it's possible extra noise will be generated, resulting in poorer dial-up or Internet performance. You'll need to weigh the benefits against the hit on performance.  I can tell you I've replaced lots of dial-up modems after lightning storms. Many times we carefully plug the computer and other equipment into suppressors, and forget about the phone line coming into the computer.

Delicate electronics (computers) are susceptible to power fluctuations. When the power dips, a brownout occurs. Although the electronics in your computer can withstand some fluctuation, your data probably cannot. If your computer happens to be copying, backing up data, downloading or calculating at the time a brownout occurs, there will be data corruption. Eventually you'll find the corrupt data and won't know what happened or when. It happened to me during a backup, and I've been struggling to recreate 10 years worth of email for a month.
 
Appliances in your home or office can cause many power fluctuations throughout the day, including refrigerators, air conditioners, washers and dryers, even microwaves and coffee makers. Line conditioning protects computer equipment from power fluctuations. It's the main reason I use surge suppressors.
 
An uninterruptible power supply (UPS) contains a battery that will power your system briefly, should the power drop to an unacceptable level. The idea is that you will have time to close everything that's open on the computer and power down safely.  The UPS also provides some surge suppression and line conditioning.
 
How do you pick out a suitable surge suppressor? 
  • Look for a UL label that states "Transient Voltage Surge Suppressor", or UL 1449.
  • Clamping voltage of under 400 V
  • Energy absorption of at least 400 joules - 600 or more is better.
  • Response time less than one nanosecond
  • More details here: http://www.djsociety.org/Surge_1.htm
How do you pick out a suitable UPS?
 
** Actually, there is something that will protect your equipment from lightning - and surges, spikes and brownouts. Plug everything into surge suppressors, then unplug the suppressor from the wall. Do this when there's a threat of storms, or when you'll be away for a few days, or when the body shop next door fires up it's welder. Seriously, it's that cheap and simple. JUST UNPLUG IT!