Microsoft releases EMET 5

Dave Farquhar security, Software ,

Late last week Microsoft released a new version of EMET. I’ve written about EMET before and I still recommend it. EMET 5.0 adds a couple of new mitigations, tries to be harder to bypass, and offers improved compatibility, so there’s little reason not to upgrade.

EMET does more than anything else I can think of to protect you from the many things that get past your antivirus software and firewall’s defenses, and it’s free. I can’t think of any good reason not to run it. Of course, the people not running it at all stand to benefit the most from it, but if you’re already running EMET 4.1, upgrading to get better protection is worthwhile, too.

Re-attaching prewar Lionel trucks

Dave Farquhar Toy trains , , ,

This past weekend I scored a poorly repainted Lionel #602 baggage car (made from 1915-1923) and an Ives #71 passenger car (made 1923-25) at an estate sale. The Ives was in good shape and original, but one of the Lionel’s trucks was detached and one of the hook couplers was broken. Fortunately I was able to find the loose truck, and the repair was as simple as you can get. Read more

My counterpoint to Forget Frugality

Dave Farquhar Landlording, Saving money , , ,

I saw a reference this week to an editorial by Ramit Sethi called Forget Frugality. While he has some good points, I think some of his advice is counterproductive and even contradictory. He argues that you should focus on earnings and negotiation instead of trying to actively cut costs.

I really think you have to do a combination of the three, and you should start with what you have the most control over, which is your own budget. Here’s what I have to say about his seven strategies. Read more

Throwback Thursday isn’t for the Java Runtime Environment

Dave Farquhar security ,

The Java Runtime Environment is one of the nastiest pieces of software ever foisted upon mankind. It’s difficult to secure when people have the will, and few people have the will to even try. So nasty ancient versions of the JRE live forever.

That’s not to say I’ve completely given up on the Quixotic quest to get rid of it. Earlier this week, I exhorted, “Can we please not use the JRE that Ada Lovelace wrote for Charles Babbage?”

That stopped everyone dead in their tracks with a laugh. “That’s good.”

Hopefully they think it’s a good idea too. Because with all the hacks they would have had to do to get Lovelace’s JRE running on a Von Neumann architecture machine, there’s no way the thing can be stable, let alone secure.

The Bing conspiracy

Dave Farquhar Uncategorized ,

So my buddy Tom was working on a Windows 8 laptop, trying to fix it up, and he needed to uninstall a program. Tom’s been using Windows since about 1992, so he’s no newbie, but he couldn’t figure it out.

He had to resort to using a web search to find out how to do it.

I told him it’s a Microsoft conspiracy to get people to use Bing. But then Tom had to go and ruin it for them by using Google.

How to stop the 30% of ex-employees who want to access company data

Dave Farquhar security

I read on Linkedin this week that up to one-third of former employees are still accessing company data–after their last day.

I wish I could say I was surprised. But I remember on my last day at one former employer, I turned in my badge, mentioned that I still had some paperwork to fill out and asked if I could have a couple of hours before my accounts would be de-activated. The guy laughed, and I won’t say how long he estimated my accounts would still be good. It was too long. Read more

“Windows Technical Support” ups its game–and so do I

Dave Farquhar scams , ,

It was bedtime and the phone rang. “Unknown name,” my Caller ID said, and the phone number was “1.” Sounds legit, right? No? I picked it up anyway. There was an audible delay after I said, “Hello.”

“Hello?” a distant voice said. “Hello?”

“Hello,” I said.

“Hello. My name is ‘Daniel,’ and I’m calling from ‘Windows Technical Support.’ How are you this evening?”

I really wanted to tell him my name was something obviously non-American, but I couldn’t think of anything so I told him I was fine. Next time I’m going to tell him my name is “Dhanesh.” After an introductory ramble, “Daniel” said my computer was sending alerts because it had lots of errors, and it was impossible for me to see them.

Read more

Eliminate wifi dead spots using access points

Dave Farquhar DD-WRT, Servers and Networking , , , ,

I’ve said before how to eliminate wifi dead spots, but perhaps I didn’t give it the focus it deserves. I think almost everyone has wifi dead spots in their house that they would like to eliminate. It turns out you can do it, and it doesn’t have to cost a fortune either.

The idea is to supplement your existing router with one or two additional access points. Read more