CyTRAP Labs - Wincurity - smarter protection

Previously we have discussed such issues as:

What does Microsoft’s SD3+C campaign really stand for?

Regulation that matters - Microsoft and European Commission battle it out about Windows Vista

LIMITED PORTABILITY

Windows Vista is becoming considerably less portable. Under changes to Microsoft’s licensing terms, buyers of retail copies of Vista will only be able to transfer their software
to a new machine once.

In the past, those who bought a retail copy of Windows needed to uninstall it from any machine before moving it to another machine, but there was no limit to how many times this could be done.

If they want to move their software a second time, they will have to buy a new copy of the
operating system. Hence, if after two years a user PURCHASES a new machine and retires the old one (e.g., its hard disk might be damaged not making it worth to replace it), the new machine needs a new version…. this will also apply to Word, Excel and all these programs of course

- Windows Vista license conditions a nightmare for corporate and home users

- Microsoft Windows Vista - Lizenzbedingungen verursachen Alpträume

Separate rules apply for the versions of Windows installed on new PCs, which is how most people get their copy of the software.

UNFORTUNATELY, in most cases, copies of Windows purchased on a new PC cannot legally be transferred to another machine.

USER RIGHTS AND PIRATING

As we have outlined before, ‘user account control’ uses a new security technology that requires that all users run in a limited standard user mode. Naturally, this helps in minimizing the ability of users to make changes that could destabilize their computers or inadvertently expose the network to malware through undetected worms or viruses.

Nonetheless, Windows Vista is making it more difficult to chose security software from other vendors as we outlined here:

Windows Vista - big brother and your security

Finally, because Microsoft is trying hard to reducing the pirating of its operating system, having problems with the licensed software that may lead Microsoft to believe you have a pirated version can cause you much headache and wasting time to proof otherwise with Windows Vista:

Trend - Windows Vista - ET calling home to report case of piracy

_MICROSOFT REVENUES and Windows Vista_

Now some price comparison sites offer Windows Vista in the System Builder Version whereby one receives a DVD and a CD-Keys as well as a thin instruction booklet and limited product support from Microsoft. Definitely enough for most users and allows you to save a bundle because prices are around:

- 85 euro for Windows Vista Home Basic (high street retail U.S. $199 plus sales tax, Upgrade from Windows XP 99.95 plus sales tax, — 213,76 Euro, 113,63 Euro Upgrade all taxes included in Europe), however, this product does not offer the new Vista graphic interface,

- 107 euro for Windows Vista Home Premium (high street retail Euro 329, and Euro 229 for an XP upgrade in Germany)

- 136 euro for Windows Vista Business

- 184 euro for Windows Vista Ultimate

Hence, if one does not require the flashy packaging, the above prices seem more reasonable if one considers upgrading. However, unless one has 2GB of ram, it is not recommended to upgrade.

What features do these editions offer - a comparison table

In Belgium and the Netherlands Aldi is offering today a PC with a free Windows Vista upgrade for 799.00 euro whereby the fancier version in Germany is costing 999 euro. Both come with Windows XP but offer a free Vista upgrade.

Aldi PC what you get in Southern Germany

Feature comparison of latest Aldi PC with free Windows Vista upgrade

Currently Microsoft makes about U.S. $ 80 on each Windows PC operating system it sells. Lifting this price by about $5 means 5 cents a share to its earnings by 2008.

The Windows PC division of Microsoft accounts for about 30% of its revenues today at the same time as other product cycles are set to peak. Estimates see overall growth settle in the lower to mid-teens of the total reveneues from this division alone. Even though it is expected that there will be a small percentage of users that upgrade their PCs to Windows Vista, this could add $800 - $1bn to Microsoft’s revenues within the next 12 months.

Most significant for Microsoft will be the adoption by large corporations that typically only comes 18 months to 14 months after launch.

Deutsche Version - siehe unten.

If you use Mozilla Firefox as your internet browser, Firefox 1.5.0.x will be maintained with security and stability updates until April 24, 2007. Thereafter, security patches and other fixes will no longer be issued.

We strongly encourage you to upgrade to Firefox 2 now:

Firefox Version 2.0 - English version

_Update Advice

Please be aware that you can install the latest Firefox version without having to first uninstall the old version. Your plug-ins as well as bookmarks and other information will be automatically integrated into the newly installed version (e.g., your home webpage, security preferences, and personal information).

DEUTSCH

Falls Sie Mozilla Firefox als Ihren Web Browser benutzen muessen sie beruecksichtigen das eas ab April 2007 keine Sicherheits-Updates und Patches mehr geben wird.

Deshalb sollten Sie die Version 2.0 gleich jetzt runterladen und installieren:

Firefox Version 2.0 - Deutsche Version

_Update-Hinweis

Bitte beachten Sie, dass Sie eine neue Version des Firefox problemlos ueber eine bereits vorhandene Version installieren koennen. Ihre bisherigen Daten werden automatisch uebernommen. Es ist nicht notwendig, die alte Version vorher zu deinstallieren, aber auch dabei werden Ihre persoenlichen Daten nicht geloescht. Plug-ins werden ebenfalls installiert fuer die neue Version und die Bookmarks sind auch weiterhin vorhanden.

Sunday we published the inaugural issue of

WinCurity this Week from CyTRAP Labs - better security for your PC & mobile (Windows CE, Windows 98, Windows XP and Windows Vista)

Whilst we are still trying to iron out some little bugs to make it look perfect in your in-box, if you would like to receive it you should go to:

CASEScontact.org subsription to critical IT security newsbites and advisories

Enter your e-mail address and also mark if you wish to get these postings from WinCurity as it happens via e-mail or RSS and/or as weekly newsletter. The choice is yours.

_What NEW DEVELOPMENTS can we report with the CASEScontact.org network?

As you read above we did publish the inaugural issue to WinCurity this Week from CyTRAP Labs. And whilst there is a lot of hype about RSS feeds, many of you seem to prefer to receive the news via e-mail as it happens (i.e. you get e-mail when the news are being posted on the Web) and also the weekly digest that gives you all the postings in one e-mail. People provide us with various reasons why they appear to prefer content via e-mail over RSS. One being that it makes archiving the stories and the tools for future use and search easy.

Incidentally, WinCurity this Week from CyTRAP Labs has began to have a new free tool for your PC or mobile just about every Friday or so. We usually take the trouble to test these tools and present you with the:

CyTRAP Labs Choice - free information security tools that help you better protect yourself

_OTHER OFFERINGS that help you protect your information and privacy better_

Don’t forget you can also subscribe to receive via e-mail or RSS the following news, advisories and alerts pertaining to better information security and prevention regarding privacy, identity theft, open source and vendor software:

- CASEcontact.org alerts about new threats (e.g., exploits, vulnerabilities and viruses) - as it happens (3-5 times a month - highly critical advisories for Windows user)

- CASEScontact.org guide or Ratgeber - protecting your PC better (English and Deutsch/German) (once a month)

- Information Security this Week from CyTRAP Labs - since 2000 - short and precise no compromise (once a week)

- CyTRAP Labs radio show - safeguarding your data against disaster - get the podcast that makes a diff. (once or twice a month)

Another helpful bookmark you should make is:

CyTRAP Labs glossaries - getting the jargon explained and making sense out of new emerging threats Click on Login as a guest to get FREE ACCESS - NO registration required)

The above not only provides you with explanations regarding InfoSec terms but, as importantly, links to additional resources (e.g., court documents, laws, white papers).
So take your pick, stay informed and prevent yourself becoming another victim of the cyberwars out there. Take a first step by protecting yourself better against data loss or cybercrime such as identity theft or phishing attacks by subscribing to these free offerings.

You can read this story in English here:

Wenn Sie schnell eine Datei auf Schaedlinge hin überpruefen wollen dann koennen Sie dies auch dank der Erweiterung ‘Dr. Web Anti-virus Checker’ installieren. Nach der Installation dieser Erweiterung fuer Firefox finden Sie nach einem Rechtsklick auf einen Download oder einen Link den neuen

- Kontext-Menue-Eintrag “Scannen mit Dr. Web”.

Wenn Sie ihn auswaehlen, dann oeffnet sich ein neues Fenster, die Datei wird an den Online-Sicherheitsdienst “Dr. Web” gesendet und ueberprueft. Sie koennen so feststellen, ob der Download von Malware infisziert ist oder nicht.

Es werden nur Dateien mit einer Maximalgröße von 10 MB überprüft.

_Datenblatt ueber die Software

Kosten	freeware
Name der Software	Dr.Web anti-virus link checker 1.0.14 (Firefox-Erweiterung)
Release Datum	2006-10-04
Plattformen	Firefox 1.0 - 2.0.0.* ALL Mozilla 1.7 - 1.8 ALL Internet Explorer Opera
Author	Dr. Web
Sprache	English, Deutsch, Arabisch, Spanisch, Franzoesisch, etc.
Dateigroesse	17 KB
Download von	kostenloser Dr.Web Erweiterung (Firefox und Mozilla)kostenlose Dr.Web Erweiterung fuer Operakostenlose Dr.Web Erweiterung fuer Internet Explorer
weitere Informationen	FAQ und weitere Informationen ueber den Dr.Web anti-virus link checker

Weitere Optionen in Sachen:

- kostenlose AntiViren Software fuer Ihren PC, wie auch

- das kostenlose scanning einer Datei

gibt es bei:

CASEScontact.org Ratgeber UPDATE 2: Wie Sie sich gegen Computer Viren effektive schuetzen koennen

Schauen Sie mal rein es lohnt sich.

You can get this posting in German: CyTRAP Labs Wahl - kostenloses Werkzeug - Virus Link Checker Plugin fuer Firefox, Mozilla, Internet Explorer und Opera Browsers

If you want to get a file checked online if you are suspicious that it might contain a virus, you can do this easily using the ‘Dr. Web Anti-virus checker’ add-on for your browser.

Once you have installed the add-on for Firefox (for the other browsers it works pretty much the same), right clicking your mouse when you are going over a link or download link, you will then find a new:

- context menu entry called ‘Scan with Dr. Web.’

If you click on it, dann a new window or Tab will open, the file will be sent to the online-service ‘Dr. Web’ that will scan the file for you. This allows you to see if the file is infected or not, before you decide to download it.

The service scans mailed files up to the size of 10MB.

_Facts about this software

cost	freeware
name of software	Dr.Web anti-virus link checker 1.0.14 (Firefox, Internet Explorer, Mozilla and Opera add-on)
Release Datum	2006-10-04
Plattformen	Firefox 1.0 - 2.0.0.* ALL Mozilla 1.7 - 1.8 ALL Internet Explorer Opera
Author	Dr. Web
Sprache	English, German, Arabic, Spanish, French, etc.
Dateigroesse	17 KB
Download von	free Dr.Web add-on (Firefox und Mozilla)free Dr.Web addon for Operafree Dr.Web add-on for Internet Explorer
weitere Informationen	FAQ and more information about the Dr.Web anti-virus link checker

Additional options for:

- free anti-virus software for your PC, as well as

- free online scanning of files you might be suspicious about regarding malware

you can get from:

CASEScontact.org guide UPDATE 2: Fighting off malware attacks the smart way

Check out the above, the goodies offered are worth your time.

Diesen Eintrag gibt es auf Englisch bei CyTRAP Labs’ Choice - free tool - virus link checker plugin for Firefox, Mozilla, Internet Explorer and Opera browsers

Wenn Sie schnell eine Datei auf Schaedlinge hin überpruefen wollen dann koennen Sie dies auch dank der Erweiterung ‘Dr. Web Anti-virus Checker’ installieren.

Nach der Installation dieser Erweiterung fuer Firefox (bei den anderen Browser geht dies aehnlich) finden Sie nach einem Rechtsklick auf einen Download oder einen Link den neuen:

- Kontext-Menue-Eintrag ‘Scannen mit Dr. Web’.

Wenn Sie ihn auswaehlen, dann oeffnet sich ein neues Fenster, die Datei wird an den Online-Sicherheitsdienst ‘Dr. Web’ gesendet und ueberprueft. Sie koennen so feststellen, ob der Download von Malware infisziert ist oder nicht.

Es werden nur Dateien mit einer Maximalgroesse von 10 MB ueberprueft.

_Datenblatt ueber die Software

Kosten	freeware
Name der Software	Dr.Web anti-virus link checker 1.0.14 (Firefox-, Internet Explorer-, Mozilla- und Opera-Erweiterung)
Release Datum	2006-10-04
Plattformen	Firefox 1.0 - 2.0.0.* ALL Mozilla 1.7 - 1.8 ALL Internet Explorer Opera
Author	Dr. Web
Sprache	Englisch, Deutsch, Arabisch, Spanisch, Franzoesisch, etc.
Dateigroesse	17 KB
Download von	Dr.Web Erweiterung (Firefox und Mozilla) Dr.Web Erweiterung (Opera) Dr.Web Erweiterung (Internet Explorer)
weitere Informationen	FAQ und weitere Informationen ueber den Dr.Web anti-virus link checker

Weitere Optionen in Sachen:

- _kostenlose AntiViren Software fuer Ihren PC_, wie auch

- das kostenlose scanning einer Datei von mehreren Scannern auf einmal

gibt es bei:

CASEScontact.org Ratgeber UPDATE 2: Wie Sie sich gegen Computer Viren effektive schuetzen koennen

Schauen Sie mal rein, es lohnt sich.

Electronic passports or so-called electronic identity cards are coming all across Europe from Greece to Switzerland, Spain to the UK and Belgium to Slovakia.

But when it comes to security and the risk for possible identity theft, these biometric identification documents leave much to be desired. You can check out some research reports, mishaps and more here:

e-passports cracked 1 - safety is non-existent

e-passports cracked 2 - German, Dutch and UK citizens beware and take care

e-passports cracked 3 - Budapest Declaration raises concerns about e-passports, privacy and citizens

e-passports cracked 4 - will more biometrics make a difference?

So be careful out there with your e-passport or electronic identification card.

When it opened its online doors 2004-09, MSN Music had high hopes of competing with Apple, touting the fact that songs bought from the site could be played on a variety of Windows Media-compatible devices. But success has been limited and Apple has maintained its dominance with a market share of at least 75 per cent with its

- the hard drive-based iPod family of 30GB (gigabyte) and 80Gb players,
- the iTunes online music store and
- iPod ecosystem accessories.

This market provides an attractive target for competitors even though as we have mentioned, the iPod ecosystem is under threat by the fact that:

Apple’s iTunes DRM system was reverse engineered and cracked

Since Tuesday (2006-11-14) Microsoft offers Zune to U.S. consumers, a 30Gb hard-drive based player (manufactured by Toshiba) that stores and plays digital music, photos and video. Pricewise it costs about the same as the 30Gb iPod alternative.

Microsoft has also launched its own ecosystem by offering Zune Marketplace (similar to iTunes music store), and a software program called Zune (like iTunes) that allows one to use this proprietary technology.

In fact the DRM technology used makes it impossible to use the songs played on Zune with any other device. q3 in the DRM FAQ answers this matter as follows:

‘The Zune software and devices only play protected music files from Zune Marketplace.’ More below:

About Digital Rights Management DRM and protected content in Zune
Ueber Digital Rights Management (DRM) und geschuetzten Inhalt in Zune

At 10 o’clock Pacific Standard Time (PST) 2006-11-08 Windows Vista was being released to manufacturing (RTM) (retail availability in the U.S. 2007-01-30). Because of the RTM date, there was no way that the Zune team could have made sure the final Vista bits would work with Zune’s.

Nonetheless, this mishap is surprising considering that songs downloaded from MSN Music can be played on Windows Vista

If I purchase a new PC that runs Windows Vista, will I be able to transfer my MSN Music to my new PC?

Nonetheless, Zune software is compatible with:

Windows XP Service Pack 2
Windows XP Media Center Edition 2005 Update Rollup 2

In a News.com story, Scott Erickson, a senior director of product management for Microsoft’s Zune effort, said Microsoft is working on Vista compatibility and is shooting to deliver on it by the time Vista is made available to businesses at the end of November. If Microsoft misses that date, Zune-Vista compatibility should be achieved before the Vista retail launch on January 30, Erickson said.

_PS1.

Microsoft allows you to re-download any content you purchase from the Zune Marketplace. Of course, it will be easier to just backup these files on an external hard-drive.

_PS2.

MSN’s music site began redirecting music purchasers to either the Zune Marketplace Web site or to RealNetworks’ Rhapsody site on 2006-11-14.