What web browser do you use? If you’re like over 60% of the population (as of May), you probably use Internet Explorer, most likely because it comes with Windows. There are a number of other choices out there, and they all have things to offer that IE does not.
What does this have to do with security? Well, for starters, Windows includes Internet Explorer with the base operating system. Because of the way the components of IE are tied to the components of Windows, Microsoft successfully argued to the antitrust courts that it was impossible to truly uninstall IE. Sure, as a result of those antitrust proceedings you can have a different browser as your default, but IE is still there, hiding in the background. Because of this collusion between IE and Windows, I believe IE has an easier path into the operating system in the event of a security breach. What I mean by this is that a malicious website that exploits a vulnerability in IE is more likely to break through into Windows itself, as opposed to a similar vulnerability in a browser that is simply installed on top of the operating system.
My browser of choice is Mozilla Firefox. There are many reasons for this. First of all, in my experience it loads pages considerably faster, and crashes less often. Second, it is extremely customizable. You can load different themes to totally change the look and feel of the browser, and you can install add-on applications that perform different tasks to make the browser more useful to you. Since you can choose which add-ons you install, your browser can become very personalized.
Again, what does this have to do with security? A lot of these add-ons are used to enhance the security of an already reasonably secure browser. For instance, I use an add-on to block advertisements, which can prevent certain malicious pop-ups from loading. My favorite add-on is known as NoScript, which is an amazing tool if you can deal with how it breaks certain sites. NoScript effectively disables all scriptable components of any website, include Javascript and ActiveX. Without scripts, it is practically impossible to have a malicious site compromise Firefox. Of course, many sites use these scripts to provide basic functionality – YouTube, for instance. The point is you can pick and choose which sites you want to enable scripts on, and any other site will be script-less the first time you visit it. Play around with it, I’m sure you’ll get to enjoy the feeling of only allowing sites to run scripts that you specify.
What’s your choice for the most secure browser? Let me know in the comments.
Ladies and gentlemen, we’ve arrived at the A in our CIA acronym. As a review, C=Confidentiality and I=Integrity. Can you guess what the A might mean? Here’s a hint: Remember the last time you went to the ATM with your hot date and you had no money? What was that embarrassing message that the machine seemed all to quick to tell you in front of your now very cool date? No funds _______. If you said “available”, you’re the genius that you think you are (okay, maybe dateless, but take the compliment anyway).
Okay, think of the biggest weasel you’ve ever worked with. Okay, calm down. I can detect your blood boiling. Take a deep breath. Now, think of why s/he’s such a weasel. I detect another deep breath is in order here. If one quality that they lack is integrity, then you’ve already identified the second term in our CIA acronym that we’re going to discuss today – although I’ll bet many other words came to mind first.
Do you update your computer regularly? Surprisingly, many people don’t. Whether you are using Windows, Macintosh, or Linux, it’s important to update your system often. Every software vendor releases updates to their system, whether for compatibility or security reasons. When one of these updates is released, it clues everyone into the fact that there may be a bug in the system, so it’s in your best interest to make sure you get that bug fixed before someone has a chance to use it against you.
Last time we met, I asked you to remember a short acronym. Do you recall? No, well here’s a hint: There’s an intelligence agency with the same acronym? If you said CIA, muy bien! If not, you’re the recipient of Colbert’s Tip of the Hat – Wag of the Finger. And if you don’t know what that means, then unfortunately my friend, you’re probably missing out on one of TV’s wittiest and funniest shows.
Seeing too many pizza commercials on TV yesterday, I finally succumbed to the advertisements and made a quick phone call to Dominos (advertising is indeed powerful). Usually when I call them, I’m on and off the phone in about 2 minutes. Not so today. I was put on hold for about 4 minutes. Very unusual. Afterwards, the employee gets on the phone, asks me for my order and then has to put me on hold again because the computer was slow. He apologized and finally said, “Ya know, computers are great, except when they’re not working.” True, but what about my pizza? Thankfully, my order was entered and I got my wonderful pizza while still trying to figure out how Sanjaya from American Idol made it as long as he did! Oh well. Some things we’ll never know. But I digress.
Do you spend much time at work browsing personal sites, such as shopping or online banking? Do you check your personal email while at work? Not only is this usually against the corporate policies at most companies, you are putting yourself at risk by doing so.
This is a sponsored review of EndPointScan.







