Author: Dave Farquhar

Application whitelisting on Windows, even home editions

Dave Farquhar security , , , , , ,

One of the very best things security measures you can take is application whitelisting–limiting the apps that are allowed to run on your computer.

The Australian Signals Directorate–the Australian counterpart to the NSA–says doing four things cuts security incidents by a whopping 85 percent. You probably do three of the things. The fourth is application whitelisting.

  • use application whitelisting to help prevent malicious software and unapproved programs from running
  • patch applications such as Java, PDF viewers, Flash, web browsers and Microsoft Office
  • patch operating system vulnerabilities
  • restrict administrative privileges to operating systems and applications based on user duties.

Read more

Advantages of Windows 10

Dave Farquhar security, Windows , , ,
Advantages of Windows 10

Now that Windows 10 is out, the questions I see most frequently are why someone should upgrade, or what benefits they get if they upgrade, or if there indeed is such thing as advantages to Windows 10.

While I understand the skepticism, and I think most people probably should wait a few months before upgrading a Windows 7 machine that’s working well, there are a number of compelling things Windows 10 has to offer.

Read more

Hacktivism is real, and getting more dangerous

Dave Farquhar security ,

Lost in the stories of last week was a story I really don’t want to talk about, but I have to: Planned Parenthood got hacked, and a database of its employees was stolen.

I don’t want to talk about it because the risk is this story becoming about abortion rather than about security. But it brings up a real problem: Now we know that political activists have the desire and the ability to hack into organizations they disagree with.

Read more

How to justify text in Publisher 2013

Dave Farquhar Office, Software , ,

I couldn’t figure out how to justify text in Publisher 2013, but I finally found the way. Here’s how.

I did some layout in Publisher 2013 after having not done page layout in a decade or more, and Publisher 2013’s interface confused me a bit. I finally found two ways to justify text.

The fast, easy way: Highlight the paragraph you want and press CTRL-J. Done. I love keyboard shortcuts. Justify starts with “j,” so that makes the keyboard shortcut pretty easy to remember.

The harder, slower way: In the paragraph tab, click the down arrow in the lower right corner. In the “Indents and Spacing” tab, there’s a dropdown box called “Alignment.” Select “Justified,” then click “OK.” Scout’s honor, I looked past that option at least 17 times.

Oddly enough, once I used full justification, then I got a little icon in the paragraph section of the ribbon for that, but I’m 100% certain that option wasn’t there before.

Pro tip: If you’re going to justify text, make sure you enable hyphenation. Click inside the text box, then click “Format” under “Text Box Tools” under the ribbon. Justified text looks much better when hyphenation is on. Hyphens reduce the number of spaces the computer has to insert. Fewer spaces mean fewer “rivers” in the text, and that makes for a better-looking page. Here’s more on hyphenation if you’re curious.

Five things security experts do vs. five things non-experts do

Dave Farquhar security , , , ,

There was a fair bit of talk last week about a study that compared security advice from security experts versus security advice from people who are at least somewhat interested but don’t live and breathe this stuff.

There were significant differences in the answers, and a lot of security professionals panned the non-expert advice. I don’t think the non-expert advice was necessarily bad. Mostly it was out of date.

Read more

Droidpocalypse? Josh Drake says no.

Dave Farquhar Android, security , , , , , , , ,

Josh Drake, the researcher who discovered the Stagefright vulnerability in Android that lets an attacker hack into an Android device by sending a specially crafted picture or video in a text message, was on the Risky Business security podcast this week to talk about it. What he had to say was interesting.

Patrick Gray, the host, tends to be a pretty outspoken critic of Android and isn’t shy about talking up Apple. He tried to get Drake to say Android is a trainwreck, security-wise, but Drake wouldn’t say it. Drake actually went as far as to say he thinks Android and IOS are fairly close, security wise.

So why do we see so many more Android bugs? Drake had an answer.

Read more

How to keep your Android from being hacked by a text message

Dave Farquhar Android, security ,

In case you haven’t heard, it’s possible to hack into about a billion Android phones by sending them a text message with a specially crafted picture or video attached.

Google has a fix. The carriers and phone makers are taking their sweet time pushing it out. They may never do it. Here’s how to protect yourself.

Read more

Intel and Micron imagine a future beyond flash memory

Dave Farquhar Hardware , , , , , ,

In the shadow of Windows 10, Intel and Micron announced a new type of persistent memory that’s 1,000 times faster than the flash memory in today’s SSDs. It’s still not as fast as DRAM, but it’s fast enough that it’s going to make things possible that weren’t before.

Intel and Micron weren’t the first to develop something like this–HP has been working on something similar for years–but HP hoped the product would be out by now, and as far as I know, it didn’t happen. It looks like Intel and Micron’s similar technology is going to happen.

Read more

So much for flashes in the pan

Dave Farquhar Baseball , , , ,

I’ve had some questions about the Royals’ wheeling and dealing for their pennant drive, and of course I have an opinion about that.

Mostly I’m glad I was wrong about last year’s heartbreak turning into a flash in the pan. But you may be surprised to hear I’m not too heartbroken that the Royals traded away five pitchers so they could rent Johnny Cueto and Ben Zobrist for two months, or three if everything goes as planned.

Read more

Windows 10 is out. I say you should upgrade, just not necessarily right now.

Dave Farquhar Uncategorized , , , , , , , , , , ,

Windows 10 is out today. Of course I’ve been getting questions about whether to upgrade from Windows 7 to 10, and I’ve been seeing mixed advice on upgrading, though some of that mixed advice is regarding Microsoft history that isn’t completely relevant today.

My advice is to upgrade immediately if you’re running Windows 8 or 8.1, and to wait, perhaps six months, if you’re running Windows 7, but I still think you should do it. I’ll explain.

Read more