Please visit the LangaList Home Page

Please note: Older issues may contain information that is now out of date


How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win a prize!)

An easier-to read formatted HTML version of this newsletter is available
<a href=" http://langa.com/newsletters/2005/2005-04-18.htm ">here</a>

The LangaList
Standard Edition

2005-04-18

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

Contents:

1) FireFox Pros And Cons
2) Using The "Event Viewer"
3) Update: Pape Tanor
4) Two Systems, One Setup?
5) OK To Trust "No Malware Found?"
6) Recommend This Newsletter And Win!
7) Ghosts In the Machine
8) More Reader Sites!
9) "Rootkits"
10) Just For Grins
11) Plus! Edition Highlights:

Next Issue:
2005-04-21

 

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )-------------

1) FireFox Pros And Cons

For an industry built on logic--- at their deepest level, computers are logic circuits--- blatant illogic somehow manages to cloud many issues.

Take FireFox http://www.mozilla.org/products/firefox/ , for example, a very nice browser from Mozilla.Org http://www.mozilla.org/ . It's free, Open Source, and the result of literally years of development. It's also a cross-platform application, available for Windows, Mac, and Linux--- a huge plus in computationally diverse environments because the configuration and training/learning curve is basically the same, no matter what platform the browser's installed on. Its human language support also is extensive, with versions in everything from Afrikaans to Welsh. No question: it's impressive software.

Some also like it simply because it's not from Microsoft. I think this approach has some merit: Whenever Microsoft loses serious competition in any software category, it grows complacent, and the pace of innovation slackens. IE6, for example, came out in 2001; an eternity ago, in computing terms. Except for a boatload of security updates and patches, it's still basically the same browser it was then.

But, US-CERT (United States Computer Emergency Readiness Team), a partnership between the Department of Homeland Security and the public and private sectors that impartially tracks all manner of security issues in operating systems and major applications, shows that the list of IE's current vulnerabilities is shorter than those for FireFox, Mozilla, and the other alternate browsers. Likewise, it also lists fewer Windows' vulnerabilities than for the other OSes.

The last time I mentioned a similar US-CERT finding, by the way, Linux partisans leapt up to tell me that US-CERT didn't know what it was doing. Linux *couldn't* have more security flaws than Windows! Everyone *knows* that Open Source software is so much better than anything from Microsoft--- right?

Well, to the dismay the more rabid anti-Microsoft partisans, reports from other independent observers corroborated CERT's findings.

For example, between July 1 and December 31, 2004, Symantec documented 13 serious vulnerabilities affecting Microsoft Internet Explorer, but found 21 vulnerabilities affecting each of the Mozilla-based browsers.

But don't take my word for it--- read the reports for yourself, see the methodologies for yourself, and decide for yourself: The article posted now (free!) at http://www.informationweek.com/story/showArticle.jhtml?articleID=160900911 has all the details and links you'll need.

I wrote that article to try to help readers interested in FireFox in particular and Open Source in general to make an informed decision. There are many, many excellent, proven, objective benefits to switching to Open Source software--- but there's also a lot of misinformation, and some very, very *bad* reasons to switch.

For example, the "common knowledge" that FireFox is "more secure than IE" simply is false. Switching to FireFox for that particular reason--- in the belief that you'll magically and automatically be more secure--- is just plain wrong.

But again, don't trust me, or any third party: Come see the source material for yourself, and make up your own mind. It'll only take a few minutes, and one way or the other--- whether you agree or disagree with me--- you'll have the facts at hand, and so can make an informed judgment, rather than one based on "common knowledge."

Click on over to
http://www.informationweek.com/story/showArticle.jhtml?articleID=160900911 !

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

"Great resource with more bang for the buck
than any other. Happily renewed my Plus! subscription
with a big smile. :)" --Michael Miyasato

Thanks, Michael

The LangaList Plus! Edition only costs around $1/month, and
is ad-free, spam-proof, and contains even more content---
tips, tricks, advice, downloads---
than the Standard Edition you're now reading.

Get all the details:
http://langa.com/plus.htm

--------------( the above is an advertisement )--------------

2) Using The "Event Viewer"

Fred: Picture this... your XP box crashes (maybe not as often as other MS OS's, but it will happen sooner or later). As it comes up, it says it is highly recommended that the C: disk be checked for problems, yada yada, nothing we haven't seen before, no doubt. So, it's doing its thing, when all of a sudden, it displays "file x truncated, file y cross linked with file z, Danger Will Robinson, danger!"

Unfortunately for those of us without eidetic memory, the results do not stay on screen for more than a second or two. Hitting the pause key does *nothing* and all those pithy messages disappear. You can do a file keyword search through the entire system and still not find that log. You can look in the Event Viewer - System and no errors appear. Whoa! If that wasn't a system error event, what was it?

In point of fact, it is an Application Event, and not even an error, just a plain informational event, given by the service "winlogon". Armed with these salient details, it is short work to call up the event in the Event Viewer (My Computer -> Manage -> Event Viewer -> Application) and retrieve the text that had been displayed on the startup screen.

Of course, that leads up to the more interesting question... are the problems with files x, y, and z real problems or something that doesn't really matter. If there's an easy way of doing that, it would be great to know!

Best Regards, Joseph Maddison

Thanks, Joseph. With luck, most of the event data stored in that log will indeed be merely informational--- FYI sorts of things. But anything flagged with a yellow "Warning" icon or a red "Error" icon deserves very close inspection: Click on the suspect items for more info, and for links to the appropriate section of the help file. You also can use a key word or phrase from the warning/error title or description to do a Google search or a search of the Knowledgebase at Microsoft.com

As for, "are the problems with files x, y, and z real problems or something that doesn't really matter?" It's quite rare for files in NTFS actually to become scrambled, even when such errors are reported. Alas, it's somewhat more common with FAT32 formats. One simple test is to examine the files; open them with the application that created them (eg DOC, XLW, PPT files, etc) , or run the program associated with them (for EXE, DLL, etc files). When in doubt, you can always reach into your most-recent backup and replace the suspect file with a known-good copy.

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

3) Update: Pape Tanor

Remember Pape Tanor, from Senegal? When he became one of the kids sponsored by LangaList Plus! subscribers, he was nine years old. He lives with his mother, one older brother and two older sisters in Senegal, in the village of Ouakam south of Dakar. His mother tries to support the family by selling cakes in the local market; the family of five has an  income of about US $775 per year. We've had several letters from Pape; you can read them all, and get additional background on Pape, here,: http://langa.com/plus2.htm#kids

Over the last few months, several new missives from Pape and his village aid workers have trickled in, including a drawing, a letter, a report card, a health report, and general info about what the sponsorship dollars are being used for:

Plus! subscribers click here:
http://www.langalist.com/Plus/kids/pape0504.asp

Standard Edition Subscribers click here:
http://www.freetune.com/kids/pape0504.htm

What's this all about? Well, those of us with computers and Internet access are vastly better off than most of the world's population.

Because of this, I decided that a portion of the LangaList Plus! subscription fees would be donated to registered/legitimate charities helping the underprivileged around the world. The contribution does not increase the cost of a Plus! subscription in any way; the donation is taken "off the top" of any profits. (This is described in the pages at http://langa.com/plus.htm )

Pape is one of 12 children sponsored on an ongoing basis--- week in, week out--- by the collective generosity of LangaList subscribers. Once a month, I bring you up to date on one of these dozen kids.

It's also more than just helping kids: LangaList Plus! subscribers also have collectively contributed to emergency earthquake relief efforts in India and to funds to help the victims of the Sept 11th attacks in the US, to the 2004 Tsunami relief efforts, and more. (To see all the donations so far, click to http://langa.com/plus2.htm#kids )

As the year goes on, and as more readers sign up for Plus! subscriptions, I hope we'll be able to sponsor more children and assist other charities around the world.

If you're already a LangaList Plus! subscriber, thank you! You can feel good about giving back a little to those less fortunate, and opening a door to the future for a child in otherwise-desperate circumstances.

If you're not yet a Plus! subscriber check it out: With a Plus! subscription, you can not only help yourself make the most of your hardware, software and time online--- but you also can help those less fortunate (like Pape) make the most of their very lives. Thanks for your help!

New Subscriptions:
http://langa.com/plus.htm

or give a GIFT SUBSCRIPTION to the Plus edition:
http://langa.com/plus_gift.htm

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

4) Two Systems, One Setup?

Fred, I do application development, so I need raw speed (but not fast/game graphics).

I travel now and then so I need a laptop with my entire development environment, which is somewhat dynamic...

These two needs seem incompatible. The fastest laptops are expensive, only about 2 gigahertz, difficult to over-clock, slow hard disk, without SATA, etc.

I believe this is a situation many of your readers may face.

I've been wondering about how I might have two machines, one laptop and one desktop.

I don't believe that just syncing (with Carbon Copy) or using the MS briefcase is enough. I want my entire machine, registry, newly installed programs, etc.

Do you think Ghosting would work?

When I'm about to go on the road, I'd Ghost the desktop to the laptop.  (This would require that the desktop hard disk size be no larger than the laptop. It would also be something that I'd start before going to bed!)

When I return from traveling, I'd Ghost back to my desktop.

This has the advantage of my having a backup of my machine when I travel.

But, I know there are hardware specific files (CPU chip drivers and, on my Dell Speedstep HD drivers, and, of course video card drivers).

I know Windows can be configured to query at startup for configuration (usually docked vs undocked). Perhaps that could handle the video card drivers?

But, I thought I'd run this idea past you. Any suggestions? Thanks for a great newsletter. ---Tom Field

No, I don't think that would work, Tom; or at least, it wouldn't work very well. There'll be too many differences between the machines: At best, you'd end up with messy installs, with each system carrying a ton of extra files, drivers, and such for the other. Imaging is really meant for preserving an exact setup for a given machine; or for a given group of machines with 100% identical hardware. It's not a good option for transferring entire in-use setups between dissimilar PCs. Plus, there will be all kinds of "product activation" issues; much of your newer software will think it's being pirated from one machine to another. So, I don't think conventional disk-imaging is the answer for you.

But here's an off-the-wall option that might work: If you can set up your entire work environment inside a Virtual PC, you *can* move the VPC setup and disk files from one host PC to another. No matter what hardware the host PC has, the VPC's virtual "hardware" is always the same. So, if you installed VPC hosting software on both your PCs, you *could* lift an entire VPC setup with all your installed apps and data intact, and simply drop it (via CD, network, whatever) into another PC,  and pick up from where you left off. The software won't even know it's been moved. More info on VPCs: http://langa.com/u/8y.htm and http://langa.com/u/9a.htm .

If that's too funky or won't work for any reason, then your best bet is to set up each PC with the same software, configured as similarly as possible; and with the same user name on both PCs (e.g. a "Tom" account on each system); and then use any normal backup or replication tool to clone the "My Documents" folder and any other folders you need from one PC to the other.

That's what I do with my notebook: Its hardware is too different from my desktop for imaging to work as a data-transfer method, but I have user accounts with the same name on each machine, and so I simply clone the important folders from my desktop to the notebook, and back again. I use Replicator ( http://langa.com/u/8z.htm ) but standard backups, or any number of similar tools--- even basic copying/pasting--- could work.

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )-------------

5) OK To Trust "No Malware Found?"

Hi Fred, I'm really enjoying the Plus! version of the newsletter.
 
I have a question regarding the Anti-Spyware / Malware scanners that are frequently discussed and recommended by you and other individuals. 
 
I use several things to keep mine clean..NAV, ZA Pro, AAware free version, router and licensed version of SpySweeper by Webroot.  In all your AntiSpyware/Malware discussions I've never heard you mention anything about SpySweeper and I'm wondering if you have and I just missed it.  Webroot SpySweeper seems to keep up with new threats and are constantly putting out news, new definitions and program updates as needed and they have "Active Shields" running when you're on the internet.
 
However, other than the initial install and scan SpySweeper never finds any threats other than an occasional cookie.  In the past I have always thought that was a good thing, but I'm beginning to wonder if it's just missing things.  In fairness I've tried other scanners as well and they come up empty also.
 
I'd like to know your opinion of this spyware tool.  Is it that good or is it missing things?
Thanks for the newsletters and keep them coming! ---Steve Jones

Once a system's been thoroughly cleaned and well-protected, it should stay pretty clean; finding no new threats probably just means everything's doing its job. But if in doubt, then--- just as you've done--- it's smart to try an alternate tool every now and again. If that alternate tool also comes up clean, odds are, you're OK.

This works for everything from Cookie-guardian kinds of tools up to whole-hog antivirus tools. For example, if you run NAV as your basic antivirus tool, every once in a while, turn off Norton AV and use one of the free online scans available from competing products (examples: http://langa.com/u/9d.htm ) to make sure NAV is working OK. (Remember to turn your primary AV back on when you're done.)

As for SpySweeper, no I haven't specifically recommended it. There are dozens of security products I've never tried and have not recommended--- there's only one of me here, and I can't possibly try everything!--- so my not mentioning a product doesn't necessarily mean it's bad. OTOH, if you check Usenet (e.g. http://langa.com/u/9b.htm ) you'll see SpySweeper gets mixed reviews from users--- some love it, some hate it. No tool works for everyone, but I'd rather see a higher ratio of "yeas" to "nays" in the software I choose, especially when the software isn't free.

SpySweeper may work fine for you, and if it does, great! But if it (or any other tool) doesn't, then the ones I've recommended give you a "known good" fallback position to use as a safe alternative. (See the list of some known-good security tools on page two of this article: http://langa.com/u/9c.htm )

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

6) Recommend This Newsletter And Win!

If you think the LangaList is a worthwhile read, maybe a friend would find it useful too! Just use the following link to recommend the LangaList---your friend may find a new source of useful information and you just may win one of three FREE ONE YEAR SUBSCRIPTIONS to the LangaList Plus! edition given each month. (If your name is drawn and you're already a Plus! subscriber, your current subscription will be extended by a full year.)

Check out the details at http://langa.com/recommend.htm . Thanks for recommending the LangaList--- and good luck!

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

7) Ghosts In the Machine

Our recent discussion of the Windows "Prefetch" ( http://langa.com/newsletters/2005/2005-04-07.htm#3 ) brought this interesting mail:

Hi Fred, This  is still the ONLY online publication I think it is worth subscribing to. Thanks for the great E-letter.

Reason I'm writing is to recount an interesting situation that occurred recently involving the XP prefetch file. A friend brought me his XP machine that was locking up on boot up displaying an error message that referenced an unknown .exe file.  At first suspecting Malware, I checked Google looking for the offending filename and was unable to turn anything up.  I then typed the filename into the XP "find files and folders" search window and found the offending file residing in the prefetch folder.

The problem it turned out was an orphan pre-fetch file trying to launch a program that had probably been removed by an anti-spy/malware tool.  (My friend had run three popular anti-spyware utilities just before the problem turned up.)  Deleting the file from the prefetch folder restored the machine to perfect operation.

I've never run across this before and thought it might be worth bringing up. My friend was at wits end and was about one step from formatting his hard drive and starting over! ---Brian Wynne

Nice detective work, Brian! I also hadn't heard of that exact problem, but caches in general (and the Prefetch is a form of cache) are often a source of "ghost" problems that keep coming back for no obvious reason. Some malware hides in the Temp files area, for example; failed installs also can remain there, causing "file locked" and other problems; even some of the problems we've discussed with Windows Update can be graced to orphaned entries and files in the Update history or download areas.

When faced with a mysterious problem, cleaning out the caches on a good way to make sure the PC is only dealing with "real" files and settings, rather than leftover snippets, failed installs, or other ghosts from the past!

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

8) More Reader Sites!

Do you have a home page or website? (It doesn't matter what size.) Please click over to http://langa.com/code.htm , and maybe you can join the hundreds and hundreds of LangaList readers who have "Loaded the Code!" (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites---some professional, some very personal:

View A Randomly-Chosen Reader Site From Among All Listed
http://langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://langa.com/readersites.htm

AtlasCopy (Ink)
http://atlascopy.com/

Tour Of Keith (UK)
http://www.tourofkeith.co.uk/

Baby Pix
http://www.matkowski.net/baby/

Puerto Rican family
http://netdial.caribe.net/~leask/

Frogman
http://www.frogman.org.uk/

Educational Assistance Services
http://reseas.com/

Mitchell Site
http://www.phoebe-snow.com/

Mickie and Minnie
http://philsandmarcia.com/pg01_mickeyandminnies_sitemap.htm

Longview Farms
http://www.longviewfarms.com/

Almost Empty Musings (some strong language)
http://almostemptymusings.blogspot.com/

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )-------------

9) "Rootkits"

Hi Fred:  Can you point to any articles you've done on "rootkits" and their removal? See: http://tinyurl.com/3uc8a   Thanks, Michael H. Bell

A timely question, Michael--- there's growing activity in this area. A "rootkit" is a kind of software that activates each time the system boots. Malware installed as a rootkit is hard to find and very difficult to control because it's up and running before most of the rest of the OS is ready; and certainly before the user interface is up. Rootkits can be a problem for 2K/XP and Unix-like OSes (including Linux, Mac OSX, etc.).

End-user tools are only just now becoming available for this class of malware; most presume a fair degree of knowledge on the part of the user. Examples:

http://research.microsoft.com/rootkit/
http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml
http://weblogs.asp.net/robert_hensing/archive/2005/01/14/353156.aspx
http://www.rootkit.com
http://www.diamondcs.com.au/processguard/
http://www.diamondcs.com.au/processguard/index.php?page=attack-rootkits
http://www.advances.com/software/rootkitshark.htm
http://www.google.com/search?q=rootkit

Reader Richard Schimpff also contacted me about rootkits and provided some links, including this: http://www.eweek.com/article2/0,1759,1785621,00.asp (Thanks, Richard!)
 
There's sure to be more activity in this area in the future: Stay tuned!

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

10) Just For Grins

Hi Fred: I received this in an email from a colleague. There is a lot of interest these days in Power point assisted presentations. And we've probably all seen some go wrong...

There's an interesting web page at http://www.norvig.com/Gettysburg/ which shows what the Gettysburg address might have looked like if President Lincoln had used power point to prepare it. It's one of those things that is so bad it's good.  Enjoy. ---Rich Couture

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList Free! ) ---

--------------( the above is an advertisement )-------------

11) Plus! Edition Highlights:

  • Free Replacement For "WinDoctor"
      (... and other commercial tools, too!)
  • "Fluxbox" + "Damn Small Linux"
      (another way to run Linux inside Windows)
  • Alternate, Free Panorama Tool
      (effortlessly stitch your photos together!)

The Plus! edition is only pennies per issue, and comes with a MONEY BACK GUARANTEE from Fred. How can you lose? Check out the details: http://langa.com/plus.htm

Click to email this item to a friend
http://langa.com/sendit.htm

return to top of page

(Give a gift subscription to the LangaList Plus edition!
Click <a href= " http://langa.com/plus_gift.htm ">here</a>)

See you next issue, 2005-04-21!

Best,

Fred
( Editor@Langa.Com )

Please recommend the LangaList to a friend! (And maybe win a prize!)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page


Administrivia:

UNSUBSCRIBE (instant removal!): http://langa.com/leave_langalist.htm

SUBSCRIBE (it's free!): http://langa.com/join_langalist.htm

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? OTHER PROBLEM? NEED HELP? See http://langa.com/help.htm

This newsletter is SPAM PROOF and requires two levels of subscriber confirmation before delivery begins: See http://langa.com/info.htm

About the advertisers: http://langa.com/privacy.htm#ads

Disclaimer: http://langa.com/legal.htm  In brief: All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from your choosing to use any information presented here.

This newsletter is a service of Langa Consulting LLC and is Copyright © 2005 Fred Langa / Langa Consulting LLC. All worldwide rights reserved. LangaList: ISSN 1533-1156

return to top of page


Please visit the LangaList Home Page