Another reason to block fonts at the proxy

Dave Farquhar security , , , ,

Last week Apple released a bunch of patches up and down its product line. One of the vulnerabilities it fixed in OS X was a vulnerability in its font parser.

In the past you could mitigate vulnerabilities like this by only installing fonts from trusted sources, but since it’s now possible for web pages to transmit fonts along with other content, there’s a limitless number of untrusted fonts out there in the world.

Since it may take a while for all of the major operating systems to shake out all of the problems in their font subsystems, that’s the reason I’ve recommended filtering fonts at the proxy.

Read more

Pogue’s attitude is unfortunately far too common

Dave Farquhar security , , ,

According to David Pogue, since hacking a car is “nearly impossible,” we shouldn’t talk about it anymore.

That, my friends, is precisely what’s wrong with security and security awareness today. Flying to the moon is nearly impossible, after all, and you could easily kill yourself trying. David Pogue has never done it. But Neil Armstrong and Buzz Aldrin did.

Read more

Fixing a sink that quit working

Dave Farquhar DIY, Landlording

My mother in law bought a foreclosed condo, and I helped her get the water turned back on, but one sink just wouldn’t work no matter what I did. I finally found an answer, and since there wasn’t much information online, I thought I’d share what I learned about fixing a sink that quit working suddenly, to save someone else some hassle.

The problem occurred in one of the bathrooms. The shutoff valves under the sink were extremely sticky and didn’t want to turn on. Eventually I got them to turn on, and then I ran the sink, and it worked. Then I turned the valves off and back on a couple of times to loosen them, in case she ever had to turn off the water. They loosened up to the point where they were usable again, but then the sink, which had been working fine a minute before, didn’t work anymore. If I turned the sink all the way up, the best I got was a slow drip. If someone else hadn’t been there with me and seen it, I would have thought I’d gone crazy.

Read more

Unchecky is another tool to help with staying out of trouble with malware

Dave Farquhar security , , , , ,

I found a mention of a tool called Unchecky as a minor point in a story about something else entirely. Unchecky helps to solve the problem with downloaded programs including a bunch of extra junk you don’t want.

I won’t be running it myself. But the next time I fix a computer, I’ll probably install it on that one.

Read more

Password management advice from CSO Online

Dave Farquhar security ,

Over at CSO Online, there’s a nice war story about tracking down and resetting 300 passwords.

I could pick nits at a few of his details, but that’s annoying and counterproductive. His overall advice is very good–manage your passwords, set them to something random, keep in mind that some sites just won’t allow for a very strong password so do the best you can, and protect your main e-mail password and your password management system password with all the diligence you can muster.

Read more