Security

Google Chrome arrived yesterday as a Windows beta with a comic explaining multi-process tabs and a reputation for speed. Another browser is the last thing some people wanted. For web developers and security folks, it is a big signal: the rendering engine wars are back. Mac and Linux versions do not exist yet. This is a Windows-only beta — but the design choices are worth studying regardless of platform. What Is Different Separate processes per tab — one crash does not take down everything Sandboxing ambitions — harder for web content to touch the system V8 JavaScript engine — fast enough to change how web apps feel in the browser Minimal UI — the address bar doubles as search, fitting Google’s habits Incognito mode — private browsing without digging through menus Silent auto-update — patches ship without a user-facing version bump Chrome uses WebKit for rendering — the same engine family as Safari — with Google’s own V8 replacing JavaScriptCore for script execution. ...

Windows Vista launched to retail on January 30, and the usual mix of excitement and complaint followed immediately. Retail boxes promise security, search, and Aero glass. Forums fill with UAC prompt screenshots, driver complaints, and games that stutter on borderline hardware. Two weeks in, both sides look partly right. What Vista Gets Right User Account Control pushes installers toward proper permissions — even if users click Yes too often Windows Defender bundles baseline anti-spyware awareness BitLocker matters on business laptops with TPM chips (less on home PCs without it) Improved networking UI helps non-experts join Wi-Fi without breaking DNS Windows Search indexes documents faster than XP’s slow companion ReadyBoost offers a flash-drive speed boost on RAM-starved machines — modest, but noticeable What Frustrates People Prompt fatigue — UAC trains some users to click through everything without reading Performance on 512 MB–1 GB RAM systems feels sluggish compared to XP Driver hunting for printers, scanners, and older peripherals Games needing patches before they match XP smoothness Edition confusion — Home Basic, Home Premium, Business, Ultimate — each with different feature sets The “Vista Capable” vs “Vista Premium Ready” sticker mess does not help. Machines that can run Vista often cannot run Aero, and buyers feel misled. ...

When a Windows PC feels slow, popup-heavy, or “haunted,” Task Manager is not enough. The Sysinternals Suite from Mark Russinovich answers the question power users actually have: what is running, why, and who started it? Microsoft acquired Sysinternals in July 2006, but the tools remain free, still updated, and still the first thing I reach for on a troubled machine. Process Explorer: Task Manager with X-Ray Vision Process Explorer shows: ...

Early 2006 delivered a rude reminder: a picture was not always safe. A flaw in how Windows handles WMF (Windows Metafile) images allows attackers to run code through crafted files — sometimes simply by viewing them in a browser, image viewer, or Explorer preview pane. It is a classic zero-day moment: exploit code is circulating while users wait for an official fix. Why This Feels Different Previous worms often needed obvious .exe attachments. The WMF issue blurs the line: ...

Internet Explorer 6 has dominated Windows desktops for years — and for years, users have asked for tabbed browsing. Firefox and Opera shipped tabs long ago. Microsoft showed IE7 briefly in beta form last July, and the public Beta 2 Preview is expected within days. If you maintain websites or support family PCs, this is the moment to pay attention. What Microsoft Is Promising Based on beta builds and public statements, IE7 is shaping up as a real course correction: ...

Music labels are fighting piracy with software, not just lawyers. Sony BMG and other majors now ship copy-protected CDs that install player software, limit ripping, and sometimes phone home to verify licenses. The packaging rarely explains what happens when you insert the disc into a Windows PC. That should worry anyone who manages desktops — including your own. Autorun Is the Real Entry Point Most of the friction starts with Autorun. Insert a CD, and Windows offers to launch an installer — often a custom media player with DRM components. Users click OK because the dialog looks official and the CD came from a retail shelf, not a download site. ...

Every power user eventually downloads something questionable: a codec pack from a forum signature, a “speed up your PC” utility, an installer from a mirror you do not fully trust, or shareware from an old CD-ROM whose publisher disappeared years ago. In 2005, full virtual machines are possible — Microsoft Virtual PC and VMware both exist — but they are heavy on typical hardware. A Pentium 4 with 512 MB RAM struggles to run a guest OS smoothly while you also browse and download. Sandboxie offers a lighter idea: run the program in a disposable sandbox and throw the changes away if things go wrong. ...

For years, Internet Explorer 6 was the default and often the only browser on Windows machines. Then Firefox 1.0 arrived in November 2004 with tabbed browsing, integrated pop-up blocking, and a community that cared about web standards. Three months later, the conversation has moved from “have you heard of it?” to “should I switch?” The answer for most people is simpler: install it alongside IE and use both. Why a Second Browser Helps Keeping Firefox next to IE is useful even if you do not switch full time: ...

If you run support for a home network or a small office, 2004 has been a constant lesson in how fast email malware spreads once one person clicks the wrong attachment. Mydoom was the headline name, but it lived in the same noisy ecosystem as Bagle and Netsky. Different family, same outcome: crowded mail queues, angry contacts, and half a day lost to cleanup. What We Saw in Early 2004 Mydoom.A appeared in January and spread faster than most AV vendors could ship signatures. Variants targeted high-profile domains — including SCO and Microsoft — with DDoS traffic from infected bots. Mydoom.B followed within days with tweaked behavior. By spring, IT forums were full of the same question: “Why is our mail server queueing ten thousand outbound messages?” ...