TechBlog

In computer security, a sandbox is a security mechanism for separating running programs. It is often used to execute untested code, or untrusted programs from unverified third-parties, suppliers and untrusted users. I recommend Sandboxie for daily use on Windows — the open-source fork maintained by the Sandboxie-Plus community after the original project was discontinued. The sandbox typically provides a tightly-controlled set of resources for guest programs to run in, such as scratch space on disk and memory. Network access, the ability to inspect the host system or read from input devices are usually disallowed or heavily restricted. In this sense, sandboxes are a specific example of virtualization. ...

Spam is any kind of unwanted online communication. Common types of spam The most common form is unwanted e-mail. You can also get: Text message spam — sometimes called smishing Instant message spam — sometimes known as spim Social networking spam Harmless vs. dangerous spam Some spam is annoying but harmless. However, some spam is part of an identity theft scam or another kind of fraud. Identity theft spam is often called a phishing scam. ...

If you suspect that you’ve responded to a phishing scam with personal or financial information, take these steps to minimize any damage. Step 1: Report the incident Contact the following authorities: Your credit card company, if you have given your credit card information. The sooner an organization knows your account may have been compromised, the easier it will be for them to help protect you. The company that you believe was forged. Remember to contact the organization directly, not through the e-mail message you received. In the United States, report identity theft at IdentityTheft.gov and file a fraud report at ReportFraud.ftc.gov. You can also report the phishing scam to the Anti-Phishing Working Group by forwarding the phishing e-mail message as an attachment to [email protected]. ...

After Adobe absorbed Macromedia, Dreamweaver remained the default tool for many small teams building corporate sites, portfolios, and internal portals. Dreamweaver CS4 adds better CSS tooling, Live View powered by WebKit, and closer ties to the Adobe stack — but the hard part is still the same: keeping sites maintainable after launch. What CS4 Improved Live View renders pages with a WebKit engine — closer to Safari and Chrome than the old Design view approximation Stronger CSS panel workflows for designers who do not want to hand-write every rule Better code hinting for PHP and JavaScript Integration hooks for Photoshop comps and Bridge asset management Spry framework widgets for menus and form validation — use sparingly Subversion integration for teams finally moving off shared folders Live View reduces “upload and pray” cycles. You still need to test in IE7 and Firefox 3 — WebKit is not the whole audience. ...

A hacker who posted candid photographs of Hannah Montana star Miley Cyrus on the internet was the subject of an FBI raid yesterday. 19-year-old Josh Holly, of Murfreesboro, Tennessee, boasted that he had broken into the Disney teen queen’s email account and stolen photos - including, according to media reports, pictures of her baring her midriff in the shower, and “posing provactively” in her underwear and swimsuit. ...

If Sysinternals shows you what is running, OllyDbg shows you what a program is thinking — one x86 instruction at a time. In 2008 it is the standard debugger for 32-bit Windows binaries: unpack a crackme, trace a malware sample in a lab, or understand why an installer behaves oddly when the vendor will not answer support calls. OllyDbg 1.10 is the version most people use. It is freeware, debugger-only (no disassembler license debates), and extensible with plugins. ...

Google Chrome arrived yesterday as a Windows beta with a comic explaining multi-process tabs and a reputation for speed. Another browser is the last thing some people wanted. For web developers and security folks, it is a big signal: the rendering engine wars are back. Mac and Linux versions do not exist yet. This is a Windows-only beta — but the design choices are worth studying regardless of platform. What Is Different Separate processes per tab — one crash does not take down everything Sandboxing ambitions — harder for web content to touch the system V8 JavaScript engine — fast enough to change how web apps feel in the browser Minimal UI — the address bar doubles as search, fitting Google’s habits Incognito mode — private browsing without digging through menus Silent auto-update — patches ship without a user-facing version bump Chrome uses WebKit for rendering — the same engine family as Safari — with Google’s own V8 replacing JavaScriptCore for script execution. ...

By late 2007, a lot of “enterprise” work still happens on small internal web apps: timesheets, inventory lookups, simple ticketing, phone directories. You do not always need Java or .NET. Sometimes you need PHP, MySQL, and a Windows server that the IT team can actually maintain. That is common in broadcasting, education, and mid-size offices — anywhere IT support sits close to the users and budgets are tight. Why Internal Tools Matter Desktop apps are expensive to deploy. Browser tools win when: ...

Windows Vista launched to retail on January 30, and the usual mix of excitement and complaint followed immediately. Retail boxes promise security, search, and Aero glass. Forums fill with UAC prompt screenshots, driver complaints, and games that stutter on borderline hardware. Two weeks in, both sides look partly right. What Vista Gets Right User Account Control pushes installers toward proper permissions — even if users click Yes too often Windows Defender bundles baseline anti-spyware awareness BitLocker matters on business laptops with TPM chips (less on home PCs without it) Improved networking UI helps non-experts join Wi-Fi without breaking DNS Windows Search indexes documents faster than XP’s slow companion ReadyBoost offers a flash-drive speed boost on RAM-starved machines — modest, but noticeable What Frustrates People Prompt fatigue — UAC trains some users to click through everything without reading Performance on 512 MB–1 GB RAM systems feels sluggish compared to XP Driver hunting for printers, scanners, and older peripherals Games needing patches before they match XP smoothness Edition confusion — Home Basic, Home Premium, Business, Ultimate — each with different feature sets The “Vista Capable” vs “Vista Premium Ready” sticker mess does not help. Machines that can run Vista often cannot run Aero, and buyers feel misled. ...

When a Windows PC feels slow, popup-heavy, or “haunted,” Task Manager is not enough. The Sysinternals Suite from Mark Russinovich answers the question power users actually have: what is running, why, and who started it? Microsoft acquired Sysinternals in July 2006, but the tools remain free, still updated, and still the first thing I reach for on a troubled machine. Process Explorer: Task Manager with X-Ray Vision Process Explorer shows: ...