Defensive Computing

Adding a second router: Living with the new setup

This is the last posting in a trilogy about adding a second router to a Local Area Network to provide an additional layer of protection for high value computers.

The first thing I noticed after setting up a network as described in the previous posting was that a newly protected computer, plugged into the second router just worked. All the hard work is in configuring the new router. Any computer using DHCP, which is the norm, shouldn't need any changes to enable the additional protection.

One side effect of the new LAN segregation is remote control. On the network more

Using a second router: A techie how-to

Previously, I wrote about using a second router to provide additional protection to high-value computers--specifically, to protect computers used by adults from those used by children on a shared Local Area Network (LAN).

That article was mostly conceptual, this one covers the nitty-gritty technical details.

First, the good news. Adding a second router has no effect on the first router and no effect on the untrusted (kids) computers. Each is blissfully ignorant of the following changes.

In describing the steps, the existing/first router will be referred to as the kids router since the untrusted kids computers connect to it. more

Browser patches yearn to be free

All web browsers have bugs, but when simply viewing a web page can infect your computer with malicious software, the speed with which bugs are found and fixed is critical. It may be the most important yardstick by which to measure any web browser.

For Windows users, the choice between Firefox and Internet Explorer isn't a contest at all. Microsoft is slow in fixing IE bugs, being locked into a once a month cycle. Not Firefox.

Mozilla released version 3.02 of Firefox on Tuesday. It had a bug. Happens all the time. What doesn't happen all the more

Bug fixes for Java on OS X

Everyone knows that Mac is safer than Windows because almost all malicious software targets Windows. But every rule has exceptions, and in this case, the exception has been Java.

Java is unusual in that any company can write a Java runtime environment for any operating system. Microsoft, at one point, provided one for Windows, but those days are long gone. ThinkPad laptops still come with a Java runtime developed by IBM. Netscape used to ship its own Java runtime as part of the Navigator Web browser. Today, most Windows users get their Java runtime from Sun Microsystems, the company that more

A second router protects adults from kids

If you live in a home where parents/adults have one or more computers, children have their own computer(s), and everyone shares a single Internet connection, then you should consider a second router.

While the main function of a router is to let multiple computers share a single broadband connection to the outside world, it is also invaluable in offering firewall protection. Firewalls that run on your computer have their place, but you are much safer with the additional protection offered by the firewall in a standard, ordinary, consumer-grade router. Previously, I suggested that even someone with only one more

Defending instant messaging

On the Internet, no one knows you're a dog. That, of course, was the caption to the classic cartoon from The New Yorker magazine. This anonymity comes into play even when instant messaging with someone you know. All the responses from your friends' computer may not actually be coming from your friend. Some may be inserted by malicious software running on your friend's computer.

As Randy Abrams, director of technical education for ESET, the company that produces the NOD32 antivirus program, put it last month:

"Instant messaging is a very successful means for the bad guys to get more

Harassment from a Gmail user

Previously I suggested not letting children receive email from Gmail because they hide the source IP address making it easier for bad guys to hide. In contrast, the free webmail services from Yahoo and Hotmail do not hide the source IP address.

In response, Google pointed me to an item at the Gmail help center called Harassment from a Gmail user. Below is what Google has to say regarding harassing emails from a Gmail user.

"... if you feel that you are in danger, we suggest contacting your local authorities.

Because message headers and senders can be spoofed using a variety more

Don't let children receive email messages from Gmail

When it comes to the question of whether an IP address is personal or not, Google seems to swing both ways.

In February, Google software engineer Alma Whitten wrote Are IP addresses personal? on the Google Public Policy blog. In the posting she said "... in most cases, an IP address without additional information cannot [identify you]."

But someone commenting on the posting pointed out that Gmail goes out of its way to hide the IP address of the sender of a Gmail-originated message. The item User IP addresses from the Gmail help says:

"Protecting our users' privacy is something we more

What does your IP address say about you?

Last week Google announced that they were protecting user privacy (their words not mine) by modifying IP addresses in their activity logs after 9 months. Fellow CNET blogger Chris Soghoian felt this was a sham because it ignored cookies, but it brings up an interesting point, just what does your IP address say about you? Or, in other words, does your IP address point to you?

In some ways, an IP address does identify you or else there would be no need for Google to "anonymize IP addresses" in order to "address regulatory concerns" (again, their words not mine).

What'more

A new reason not to install XP SP3

The September 11th edition of the Windows Secrets newsletter included a couple stories about Windows XP SP3, trying to answer the questions of when and whether to install it. Back in April, when Service Pack 3 was released, I advised against rushing into it. But, it's been almost five months, is it safe to go into the SP3 water?

According to Scott Dunn, who wrote the lead article, you don't need to install Service Pack 3 for another year and a half. He says "... overall support for SP2 expires in early 2010, [so] you'll need to have more