<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>IT Security Blog &#187; Operating Systems</title>
	<atom:link href="http://www.it-security-blog.com/category/operating-systems/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.it-security-blog.com</link>
	<description></description>
	<lastBuildDate>Thu, 02 Feb 2012 15:19:10 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Would You Download an Anti-Virus Freeware for Purchase?</title>
		<link>http://www.it-security-blog.com/it-security-basics/would-you-download-an-anti-virus-freeware-for-purchase/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/would-you-download-an-anti-virus-freeware-for-purchase/#comments</comments>
		<pubDate>Fri, 12 Aug 2011 10:09:38 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Spyware]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[freeware]]></category>
		<category><![CDATA[protecion]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=495</guid>
		<description><![CDATA[Getting hold of an anti-virus software these days is not as hard as before. Normally, you had to the nearest computer shop and ask around which best anti-virus software can keep your protected and then install it once you buy it outright. Through the years, software companies have allowed anyone to download their software, try [...]]]></description>
			<content:encoded><![CDATA[<p><center><a href="http://www.it-security-blog.com/wp-content/uploads/2008/11/save.png"><img src="http://www.it-security-blog.com/wp-content/uploads/2008/11/save.png" alt="" title="save" width="128" height="128" class="alignnone size-medium wp-image-496" /></a></center></p>
<p>Getting hold of an anti-virus software these days is not as hard as before. Normally, you had to the nearest computer shop and ask around which best anti-virus software can keep your protected and then install it once you buy it outright. Through the years, software companies have allowed anyone to download their software, try it and then eventually be given the option to buy it. Some are even lucky enough when <a href="http://www.blogherald.com/2008/11/11/mark-evans-launches-twitterati/">geniuses</a> develop certain key generators to which they can crack the trialware into the full version. But all that seems checked now. </p>
<p>To date, there are still an abundant number of sites like forums that house such cracks and codes. Some of them work but not as plenty as before. Software companies have religiously sought to skim them one by one, blacklisting said <a href="http://www.pro-blogging.com/blog-basics/there-will-always-be-a-source-for-blog-ideas/">codes</a> to which makes freeloaders scratch their heads and continue to get a working key just to avoid a couple of dollars. Sadly, that is not as rampant as before. </p>
<p>If you think about it, this may only be the tip of the iceberg. Software companies may soon follow the cue of Microsoft in blacking out their screens if they are using pirated versions. If Microsoft can do it, then why not companies like McAfee or Norton? They are not small time companies and for sure, they have the funds to make it work like Bill Gates did. </p>
<p>Cheaters cannot complain and so do pirated users. So if that happens, it will all be due to the nature of being a cheapskate that did these people in. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/would-you-download-an-anti-virus-freeware-for-purchase/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Biometrics + Physical security = Next best thing to unbreakable?</title>
		<link>http://www.it-security-blog.com/uncategorized/biometrics-physical-security-next-best-thing-to-unbreakable/</link>
		<comments>http://www.it-security-blog.com/uncategorized/biometrics-physical-security-next-best-thing-to-unbreakable/#comments</comments>
		<pubDate>Wed, 13 Jul 2011 13:24:02 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Physical Security]]></category>
		<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[identity-theft]]></category>
		<category><![CDATA[Secure workplace]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/uncategorized/biometrics-physical-security-next-best-thing-to-unbreakable/</guid>
		<description><![CDATA[Biometrics is seen as the next step in computer systems security and access control due to the failure of more primitive and fundamental security systems. Fingerprint scanners, passwords, security keys and even smartcards have failed miserably in providing the ultimate and most secure intrusion prevention method for just about anything. From your home, car, computer [...]]]></description>
			<content:encoded><![CDATA[<p><a href='http://www.it-security-blog.com/wp-content/uploads/2008/02/bio.jpg' title='bio.jpg'><img src='http://www.it-security-blog.com/wp-content/uploads/2008/02/bio.thumbnail.jpg' alt='bio.jpg' /></a><br />
Biometrics is seen as the next step in computer systems security and access control due to the failure of more primitive and fundamental security systems. Fingerprint scanners, passwords, security keys and even smartcards have failed miserably in providing the ultimate and most secure intrusion prevention method for just about anything. From your home, car, computer terminal at work to just about anything else that needs security, it has be come more and more of a must due to the increasing threat of identity theft and other computer related crimes in and out of the workplace.</p>
<p>Biometrics are security systems that are based on the differences the human body manifests in terms of eye structure, facial features and now vein geometry. We’ve all heard of <strong><a href=' http://www.dnai.org/'>DNA</a></strong> or the so-called blueprint for life and the way it makes each and every human different from everyone else on this earth (well, except for some genetic disorders and diseases that changes the DNA makeup). That is what biometrics takes advantage of as a source of a very unique key or method of identifying one from another person. </p>
<p>Your fingerprint is mapped when it is initially scanned into a computer system which convert’s your analog (actual) print into a digital map that is as unique as you are an individual. Iris scanners take into account the differences the iris has from each and every individual (through the use of a low powered light and scanner to obtain a picture of the eye’s iris which is also unique). <strong><a href='http://www.it-security-blog.com/uncategorized/more-on-biometrics-%e2%80%93-voice-recognition/'>Voice recognition</a></strong> takes into account, the differences our voices have from everybody else also converting it into a digital map or password of sorts. <strong><a href='http://science.howstuffworks.com/biometrics5.htm'>Vein geometry</a></strong>, uses a thermal imaging camera to take a picture of your hand or whole body which is sensitive to heat showing all the blood vessels which show as hotspots thus giving you a unique id of sorts as that is also mapped and converted into digital form. All of the above biometrics systems rely on our individual differences which are quite unique to us and add onto it, other more basic security measures such as a physical key (password, key or other devices) to give the ultimate security system preventing intrusion. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/uncategorized/biometrics-physical-security-next-best-thing-to-unbreakable/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>How to Handle a Virus</title>
		<link>http://www.it-security-blog.com/it-security-basics/how-to-handle-a-virus/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/how-to-handle-a-virus/#comments</comments>
		<pubDate>Tue, 28 Jun 2011 08:02:58 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[anti-virus]]></category>
		<category><![CDATA[freeware]]></category>
		<category><![CDATA[protection]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[trialware]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/it-security-basics/how-to-handle-a-virus/</guid>
		<description><![CDATA[One of the common problems that PC owners have these days is finding out that they have a virus residing in their PC. Don’t be comforted by the fact that you have an anti-virus software running. Viruses will always find a way. Also, if you do have one, are you sure it is licensed? Apparently, [...]]]></description>
			<content:encoded><![CDATA[<p>One of the common problems that PC owners have these days is finding out that they have a virus residing in their PC. Don’t be comforted by the fact that you have an <a href="http://www.it-security-blog.com/">anti-virus</a> software running. Viruses will always find a way. Also, if you do have one, are you sure it is licensed?</p>
<p>Apparently, most people fail to realize the value of a good anti-virus software when it comes enabled with all the features included. Some are fine with the trial version as long as they are protected. At least that is what they think. But the real value of a good anti-virus software comes out when you get the full version that comes with the actual cleaning tool when you get one officially. </p>
<p>For most trial versions, you may be surprised to note that once they are able to detect a certain virus, you can only discover them but not clean them. If you do try to clean them, it will tell you to get the full version at a certain price of course. </p>
<p>There are some software that clean certain viruses but these are mostly low in threat. But the graver ones are the issues you have to content with. If you really want a fully protected PC, chances are you better consider an investment that can really protect you from such virus issues, most of which can really hurt you as far as computer files and documents are concerned.  </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/how-to-handle-a-virus/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Price for Downloading Cracked Software</title>
		<link>http://www.it-security-blog.com/operating-systems/the-price-for-downloading-cracked-software/</link>
		<comments>http://www.it-security-blog.com/operating-systems/the-price-for-downloading-cracked-software/#comments</comments>
		<pubDate>Tue, 21 Jun 2011 12:26:47 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Spyware]]></category>
		<category><![CDATA[cracked]]></category>
		<category><![CDATA[kasperksy]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[trojans]]></category>
		<category><![CDATA[viruses]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/operating-systems/the-price-for-downloading-cracked-software/</guid>
		<description><![CDATA[Whether you are downloading a trialware or files from Bittorrent, the chances of cracking or using the full version has severely dwindled in the past months. For one, other than possibly downloading infected software with Trojans and malware, unlocking these supposed protection software has taken a bad hit by the advanced efforts of private software [...]]]></description>
			<content:encoded><![CDATA[<p>Whether you are <a href="http://www.downloadinglegally.com/applications/download-songs-from-lastfm/">downloading</a> a trialware or files from Bittorrent, the chances of cracking or using the full version has severely dwindled in the past months. For one, other than possibly downloading infected software with Trojans and malware, unlocking these supposed protection software has taken a bad hit by the advanced efforts of private software companies to crack down on piracy. </p>
<p>Take for example <strong>Kaspersky Internet Security 2009</strong> which has cracked the whip on licenses by blocking them once you start updating the software. While you can install and crack them, they are rendered useless in the end since once you hit that update option, your key is automatically blocked. Worst, malware and Trojans start coming in (a scenario which I don’t understand if it was made on purpose by the vendor in sending malware) infecting the systems folder where Windows is installed. </p>
<p>Before you know it, dozens of files in the form of dll’s start showing and mind you, they are dangerous. So if that was the case, it makes you think if you were better off not using an anti-virus software at all. </p>
<p>But such is the price to pay for trying to pull a fast one. Everyone loves free things and free software is surely to be an eye-catcher. But if the return is tons of viruses and malicious programs that can wreck your computer, you better think twice before downloading them again. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/operating-systems/the-price-for-downloading-cracked-software/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Patch Up or Lose your Information</title>
		<link>http://www.it-security-blog.com/it-security-basics/patch-up-or-lose-your-information/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/patch-up-or-lose-your-information/#comments</comments>
		<pubDate>Wed, 20 Apr 2011 02:48:36 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[patches]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[viruses]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=411</guid>
		<description><![CDATA[You just have to look at how Microsoft always announces certain patch releases for their software these days. Nothing is definite and safe just yet especially if you consider hackers and computer geeks trying to discover flaws in certain computer software such as an operating system. There will always be something discovered and the loophole [...]]]></description>
			<content:encoded><![CDATA[<p>You just have to look at how Microsoft always announces certain patch releases for their software these days. Nothing is definite and safe just yet especially if you consider hackers and computer geeks trying to discover flaws in certain computer software such as an operating system. There will always be something discovered and the loophole can be entirely critical and dangerous. </p>
<p>Unlike in the latter 1990’s, today we rarely see <a href="http://www.it-security-blog.com/">patches</a> being given since they have more or less covered the security threats ranging from viruses to malware today. There are still recommended patched needed. But surely, they are not as rampant and dangerous compare to before. And to make sure that you are using authentic software, they make use of software authenticity codes to know if you are using genuine software or not. </p>
<p>Microsoft can be commended for this but it still remains that there are still a lot of flaws as far as their software releases are concerned. But to make sure that customers do not experience these unfortunate mishaps, a continuous research and development for such threats has to be implemented. We can see these days that something will suddenly break out and if you are not protected, chances are you are missing a patch. </p>
<p>As much as possible, apply these patches. If you are in doubt, read on them or even ask for technical support. Security breaches in the IT world are common and to stay away from such a discomfort, it is best to be updated and make sure you are well-protected. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/patch-up-or-lose-your-information/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Implement a Strict IT Policy</title>
		<link>http://www.it-security-blog.com/it-security-basics/implement-a-strict-it-policy/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/implement-a-strict-it-policy/#comments</comments>
		<pubDate>Fri, 29 Oct 2010 16:34:29 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Physical Security]]></category>
		<category><![CDATA[Privacy & Anonymity]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[it]]></category>
		<category><![CDATA[management]]></category>
		<category><![CDATA[policy]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=462</guid>
		<description><![CDATA[It is perhaps the headache of any IT head when it comes to implement policies to have a smooth running network and department. But while the essence of a good security system is evident, it is really the implementation part that is hard to accomplish. For one, the transition and building of security awareness from [...]]]></description>
			<content:encoded><![CDATA[<p><center><a href="http://www.it-security-blog.com/wp-content/uploads/2008/09/nsa-web-artwork.gif"><img src="http://www.it-security-blog.com/wp-content/uploads/2008/09/nsa-web-artwork-300x182.gif" alt="" title="nsa-web-artwork" width="300" height="182" class="alignnone size-medium wp-image-463" /></a></center></p>
<p>It is perhaps the <a href="http://www.thehealthblog.net/womens-health/female-incontinence-symptoms-and-causes/">headache</a> of any IT head when it comes to implement policies to have a smooth running network and department. But while the essence of a good security system is evident, it is really the implementation part that is hard to accomplish. </p>
<p>For one, the <a href="http://www.wallstreetfighter.com/2008/09/ratigan-explains-markets-with-sushi.html">transition and building</a> of security awareness from various threats that can easily make their way towards an acclaimed secure network is abundant. Manually or transmitted, suspicious files will always find a way especially if you are not that adamant towards making sure that all bases are covered as far as the security of your system and data is concerned. </p>
<p>Many people fail to appreciate that value of the data they have gathered. They fail to appreciate the value of a strict IT policy mainly because all they care about is a workstation to use and opening files (both internal and external) as they please. So if you put all these things together, you can imagine the problems that an IT guy has to work with. But to some, taking the initiative such as passwords and some hardware exclusions has to be made. </p>
<p>If you notice, some drives like the usual floppy drives or even USB ports are either missing or disabled. To make them work, certain permissions and passwords are set for them to be enabled. Only the IT administrator would know these <a href="http://www.bizcrunch.net/news/cutting-the-cost-of-business-travel/">security measures</a> and basic as they may seem, they really help a lot. </p>
<p>This is just a basic but effective way that IT personnel use. There are the usual network policies but for the sake of people who want to making it doubly sure, old and basic practices such as this is perhaps the best way to go.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/implement-a-strict-it-policy/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Choosing the Right Person to Hold Network Security Access</title>
		<link>http://www.it-security-blog.com/it-security-basics/choosing-the-right-person-to-hold-network-security-access/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/choosing-the-right-person-to-hold-network-security-access/#comments</comments>
		<pubDate>Fri, 22 Oct 2010 19:30:12 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[computer tampering]]></category>
		<category><![CDATA[felony]]></category>
		<category><![CDATA[FiberWAN]]></category>
		<category><![CDATA[San Francisco Department of Technology]]></category>
		<category><![CDATA[terry childs]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=409</guid>
		<description><![CDATA[If there is one thing to be learned from Mr. Terry Childs, a talented network engineer who was jailed due to computer tampering, you better be careful at who you choose to have administrative rights as far as network access and security is concerned. Apparently for some reason, Mr. Childs has refused to turn over [...]]]></description>
			<content:encoded><![CDATA[<p>If there is one thing to be learned from Mr. Terry Childs, a talented network engineer who was jailed due to computer tampering, you better be careful at who you choose to have administrative rights as far as network access and security is concerned. Apparently for some reason, Mr. Childs has refused to turn over the <a href="http://www.it-security-blog.com/">administrative passwords</a> for the larger part of the San Francisco Department of Technology FiberWAN. </p>
<p>A petty issue with a run-in that he had with his agency had was said to be the cause of it all. But while that may sound off-topic, he has been tagged as becoming unstable and apparently this has lead to his being charged with four felony counts of computer tampering. The bail was set at $5 million dollars which most people including his lawyer said was crazy.</p>
<p>Let this be a lesson that the power of technology, once it goes to the wrong hands, may be entirely catastrophic. While technology breakthroughs are something to look up to, it remains that the people behind them have to be likewise trusted. Better yet, it would be best to have the technology guy and an authorized executive have access to make sure that nothing of this nature would occur as well. </p>
<p>Childs was said to be maniacal at the start so you have to wonder, why did you entrust the guy with the passwords and rights to the network security? Surely this was already a problem at the start and now that it has escalated towards paralyzing most of the operations only one man who is obviously psychologically disturbed holds the key to it. No wonder the bail was set at such a crazy amount of $5 Million! </p>
<p><a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/07/16/BA4011PFJP.DTL">Source</a> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/choosing-the-right-person-to-hold-network-security-access/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Precautions with Bluetooth Connections</title>
		<link>http://www.it-security-blog.com/it-security-basics/precautions-with-bluetooth-connections/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/precautions-with-bluetooth-connections/#comments</comments>
		<pubDate>Tue, 13 Jul 2010 14:39:19 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[Spyware]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[Wireless Security]]></category>
		<category><![CDATA[bluetooth]]></category>
		<category><![CDATA[cabir]]></category>
		<category><![CDATA[connectivity]]></category>
		<category><![CDATA[viruses]]></category>
		<category><![CDATA[worms]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/it-security-basics/precautions-with-bluetooth-connections/</guid>
		<description><![CDATA[Among the features that most mobile phones have today is that of features that include the Bluetooth and Infrared connectivity as a means of wireless connections. While such advancements has made it easier for people to transfer files such as images and sounds from one phone to another, it also becomes a loophole to allow [...]]]></description>
			<content:encoded><![CDATA[<p>Among the <a href="http://www.bloggygeek.com">features</a> that most mobile <a href="http://www.bloggygeek.com">phones</a> have today is that of features that include the <a href="http://www.downloadinglegally.com/">Bluetooth</a> and Infrared connectivity as a means of wireless connections. While such advancements has made it easier for people to transfer files such as images and sounds from one phone to another, it also becomes a loophole to allow viruses to infect the operating system of mobile <a href="http://www.bloggygeek.com">phones</a> today. </p>
<p><a><center><img id="image177" height=86 alt="Cabir Bluetooth Precaution" src="http://www.it-security-blog.com/wp-content/uploads/2007/01/cabir.thumbnail.jpg" width="128" /></center></a></p>
<p>Worms such as Cabir, have become the onslaught of rampant mobile phone intrusions, something that uses the <a href="http://www.downloadinglegally.com/">Bluetooth</a> <a href="http://www.it-security-blog.com">connectivity</a> as a means of infecting mobile phones of today. Once they get through, malfunctions and error messages are sure to ensue, making it a need for the software <a href="http://www.it-security-blog.com">systems</a> of mobile <a href="http://www.bloggygeek.com">phones</a> of today to be either formatted or disinfected with available <a href="http://www.it-security-blog.com">anti-virus</a> and worm removers such as Panda Software. </p>
<p>Inconvenient as it may seem, it is advisable for mobile <a href="http://www.bloggygeek.com">phone</a> owners to refrain from activating their <a href="http://www.downloadinglegally.com/">Bluetooth </a>connections to avoid such infections and untoward intrusions at any time. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/precautions-with-bluetooth-connections/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>April 13:  Security Patch Day</title>
		<link>http://www.it-security-blog.com/operating-systems/april-13-security-patch-day/</link>
		<comments>http://www.it-security-blog.com/operating-systems/april-13-security-patch-day/#comments</comments>
		<pubDate>Sun, 11 Apr 2010 14:45:22 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Adobe]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[security patch]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=652</guid>
		<description><![CDATA[Mark your calendars, IT security enthusiasts. April 13, 2010, Tuesday, is the day when Microsoft is releasing patches for Microsoft Windows and Microsoft Office. It is a big day, and it actually has been dubbed as Microsoft’s Patch Tuesday. More than Microsoft, however, Adobe is also planning to release patches of its own. The patches [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.it-security-blog.com/wp-content/uploads/2010/04/microsoft-managed-services.jpg"><img src="http://www.it-security-blog.com/wp-content/uploads/2010/04/microsoft-managed-services-300x225.jpg" align="left" alt="" title="microsoft-managed-services" width="300" height="225" class="alignleft size-medium wp-image-654" /></a>Mark your calendars, IT security enthusiasts.  April 13, 2010, Tuesday, is the day when Microsoft is releasing patches for Microsoft Windows and Microsoft Office.  It is a big day, and it actually has been dubbed as Microsoft’s Patch Tuesday.   More than Microsoft, however, Adobe is also planning to release patches of its own.  The patches are for Adobe Acrobat and Adobe Reader.  All in all, there will be 27 issues to be addressed by the patches.</p>
<p>Do we have any details about the patches?  People can wait for a couple more days, of course, but for those of you who are hungry for information – as I am sure you are – you’re lucky enough to have someone like <a href="http://www.pcworld.com/businesscenter/article/193871/batten_down_the_hatches_for_microsoft_and_adobe_patches.html">Amol Sarwate</a>.  He’s the manager of the Vulnerability Research Lab of Qualys.  He says:</p>
<p><em>&#8220;There are 11 security bulletins that affect a range of Windows operating system components as well as Microsoft Office and Microsoft Exchange. This is a fairly large update and will keep system administrators busy on Patch Tuesday. Out of the 11 security bulletins, five are rated Critical and affect components in Windows 2000, XP, Vista, 2003, 2008 and Windows 7. If left un-patched, an attacker could execute code or programs on the victim&#8217;s machine and therefore all are categorized as remote code execution.&#8221;</em></p>
<p>Both companies are releasing the patches through their automatic update features.  If you’re the safe kind, your auto updates are probably enabled. If you have experienced extreme slowdown because of these updates before and you’ve disabled them, then better turn them on before Patch Tuesday.  You wouldn’t want to miss this.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/operating-systems/april-13-security-patch-day/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows 7 Hit By Zero-Day Exploit</title>
		<link>http://www.it-security-blog.com/operating-systems/windows-7-hit-by-zero-day-exploit/</link>
		<comments>http://www.it-security-blog.com/operating-systems/windows-7-hit-by-zero-day-exploit/#comments</comments>
		<pubDate>Fri, 13 Nov 2009 09:57:30 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[bugs]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[Windows 7]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=637</guid>
		<description><![CDATA[Windows 7 fans were rejoicing when Microsoft released a patch on Tuesday because their system was not affected in any way by the six security issues. The rejoicing was short-lived, however, as news has been released that there IS a bug that can crash a Windows 7 system. The bug has been named Zero-Day Exploit [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/11/windows_7_preview-300x224.jpg" align="left" alt="windows_7_preview" title="windows_7_preview" width="300" height="224" class="alignleft size-medium wp-image-638" />Windows 7 fans were rejoicing when Microsoft released a patch on Tuesday because their system was not affected in any way by the six security issues.  The rejoicing was short-lived, however, as news has been released that there IS a bug that can crash a Windows 7 system.  The bug has been named <strong>Zero-Day Exploit</strong> and was discovered by <strong>Laurent Gaffie</strong>.  </p>
<p><a href="http://www.pcworld.com/businesscenter/article/182093/protect_your_pcs_from_windows_7s_zeroday_exploit.html">PC World provides further details</a>:</p>
<blockquote><p>The issue is in the SMB (Server Message Block) protocol that forms the backbone of Windows file sharing. When triggered, the flaw results in an infinite loop which renders the computer useless.</p>
<p>Tyler Reguly, Lead Security Research Engineer with nCircle, explains &#8220;Exploitation of this vulnerability occurs when a user attempts to browse to Windows Share hosted on the malicious server. On Windows 7, the DoS (denial of service) will occur as soon as you type ‘\\<ip>\&#8217; in the search box. &#8221; The vulnerability actually impacts both Windows 7 and Windows Server 2008 R2. </ip></p></blockquote>
<p>While the threat is very much real, experts say that the chances of the bug being exploited are quite low:</p>
<blockquote><p>There are currently a couple different proof-of-concept exploits circulating, but there are no reported attacks in the wild at this point. Because the flaw only enables an attacker to crash the system, and doesn&#8217;t provide any unauthorized remote access that could lead to compromising information or performing other malicious activities, the odds of the exploit being actively used by attackers is fairly slim. </p></blockquote>
<p>So what are Windows 7 users supposed to do now?  Currently, Microsoft has not yet released a patch to deal with the threat.  I suppose the only sensible thing to do is to be more careful with regard to visiting web sites, especially if you are unsure of its legitimacy.</p>
<p><em>Photo courtesy of Megaleecher</em></p>
]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/operating-systems/windows-7-hit-by-zero-day-exploit/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

