SecureAgent Software's Secure eNewsletter


Check out our line of products!
SecureAgent Software's Products

Write Us

Courtesy Subscription

To share this information with a friend or colleague, please click here



Volume 180 - January 12, 2004

Welcome to the SecureAgent Secure eNewsletter!
Don't have time to search the web for news? We can help. Secure
eNewsletter keeps you up-to-date on Internet, computer and security related news.

Secure eNewsletter is your source for hot tips and noteworthy news.

Get ahead - Stay ahead!

In This Volume

1.
Is Your Stored Data Encrypted?
2.
PC Extortion Hits Offices
3.
Dell Sees Spending Increase
4.
Virus Plays on Terror Fears
5.
Law, Tax Break Boost Recycling
6.
Happy New Virus
7.
Super Hacker Seeks Book Tales
8.
Voting Security Company Hacked
9.
Spam King Changing Operations
10.
Old City Computers Get New Lives
11.
Scam Hits Bank of England
12.
World Wide Web Creator Knighted

Hot Tip: Bad Policy Makes Bad Passwords


Is Your Stored Data Encrypted?

Recent incidents of missing inventory at Los Alamos National Laboratory and the theft of a personal computer from a Rhode Island Bank have focused attention on the importance of encrypting data being stored.

Secure Agent Software has the encryptyion technology to safeguard data. SecureAgent DataSafe provides safe, secure, automated off-site backups for critical data.

You will never lose information with DataSafe, even if your hard drive fails, natural disasters occur, your own backup tapes become corrupted or a human operator makes an error.

SecureAgent DataSafe will be there to restore files and let your system continue to work.

With Secure Agent DataSafe you can save, store and retrieve your encrypted data from anywhere at anytime. If a fire or other problem forces you to move your physical location, your data will be safe - and retrievable from your new location. A simple drag and drop feature enables you to retrieve your files quickly and easily.

For more information on SecureAgent DataSafe, log on to www.secureagent.com


PC Extortion Hits Offices

A new form of extortion has hit office workers, mainly in Europe, authorities report. The blackmailers send e-mails, claiming to have the power to take over an individual's personal computer work station and threatening to delete files or install pornographic material unless the victim pays a fee.

The threats usually begin with demands for small amounts, $20 or $30, but authorities say anyone who cooperates and pays may be subjected to demands for larger amounts later.

A British detective say the extortionist prey on "the nice secretary who wouldn't do anything wrong."

A Finnish security company say a Scandinavian university was hit early in December. That firm said the threatening e-mail appeared to have originated in Estonia.

In the past, most computer extortion was aimed at small companies, largely threatening to overwhelm a system with a flood of messages unless a ransom was paid. But authorities said the latest blackmail is harder to track and easier for criminals to use because it doesn't require anything more complicated than an e-mail.


Dell Sees Spending Increase

The world's largest maker of personal computers, Dell, sees an increase in corporate spending in 2004.

That's according to interviews published in Handelsblatt, a German business newspaper. The paper quoted Chief Executive Michael Dell as expecting large companies to resume spending on information technology.

Chief Operating Officer Kevin Rollins was quoted as saying Dell's Christmas business had been good, but that major hopes were for an increase in buying by large companies. He said many companies had been deferring purchases, holding onto computers for an extra year or two rather than replacing them routinely after three years.


Virus Plays on Terror Fears

A new computer virus exploiting fears of terrorism is spreading in Maylaysia.

The virus arrives in an e-mail purporting to carry a warning of five pending terrorist attacks. But authorities said an imbedded link to a Web site supposedly giving information on the attacks actually unleashes a virus which tries to connect to three Internet sites that have already been compromised by vandals.


Law, Tax Break Boost Recycling

A new federal law and a big tax break for businesses is prompting a boom in recycling of computers, cellular telephones and other electronic gear.

The law is the Electronic Waste Recycling Act, which governs company disposal of computers, copiers, fax machines and other electronic equipment. An estimated 500 million personal computers will have become obsolete in the decade from 1997 to 2007.

All contain metals and other materials which environmentalists object to seeing dumped into landfills and which could be recycled.

The tax break is an extra 50 percent "bonus deduction" for equipment bought between last May and the end of 2004. That's on top of a 30 percent writeoff most companies take the first year of any newly-purchased equipment.

The combination has spurred a number of new companies specializing in recycling old equipment. Most recondition and re-sell newer and still usable devices, then grind the rest up to have lead, copper, zinc and other metals retrieved and the remains disposed of properly.


Happy New Virus

The year hardly started before a new computer virus began spreading. This one, called Jitux.A, is not destructive but is disruptive because it spread by MSN Messenger and once inside a system sends messages to other Messenger users every five minutes.

The virus apparently began in Europe and spread first in Spain and Portugal. It affects all Windows operating systems but can be easily removed by any antivirus program.

Also spreading was a holiday-themed worm called Quis, which spreads through Microsoft Outlook using an e-mail with a destructive payload.

It comes with a "Merry Christmas" salutation and poses as a holiday screensaver.


Super Hacker Seeks Book Tales

Super hacker Kevin Mitnick wants to hear stories about clever hacks - and he's offering to pay for some of them.

Mitnick sent e-mail messages to security discussion groups and posted an offer on his Web site asking for tales about hacking exploits. He offered a $500 reward for the "most provocative story….your sexiest hack."

He wants the stories for a book he's writing.

He wants tales about attacks on high-profile targets, such as universities and government installations, and is looking for those with "an industrial espionage flavor." He apparently will pay for more than one story, in addition to publishing those he deems noteworthy - with the hacker's identity kept secret.

He also proposes to tell readers how to avoid such attacks.

Mitnick gained fame for his hacking exploits and served a prison term for his activities.


Voting Security Company Hacked

A company developing security systems for electronic voting was hacked, but officials think they know who did it and believe it is linked to the debate over that type of balloting.

VoteHere Inc. of Bellevue, Wash., said the FBI is investigating the intrusion, which occurred in October but was just disclosed. Company officials said the intruder got into internal documents and possibly copied sensitive material about its programs.

Chief Executive Jim Adler said the company has identified the culprit and turned all its information over to authorities. He said the firm also has repaired the hole through which the intruder entered.


Spam King Changing Operations

The man who may be the king of spammers has gone out of business, temporarily - he plans to resume operations full-scale in January, after he has changed his e-mail system to conform to a new federal law.

Alan Ralsky earned a reputation as a master of cyberdisguise and once sent 70 million messages a day from false addresses. His e-mail offers covered everything from debt repayment schemes to time-share vacations.

His operation was exactly the sort of bulk unsolicited e-mail, with fake names and addresses and no way to track the origin, that lawmakers had in mind when they created the CAN-SPAM law - Controlling the Assault on Non-Solicited Pornography and Marketing. Among other things, that law requires bulk e-mailers to provide a real return address.

Ralsky says he'll comply with that when he cranks up again. "You would have to be stupid to try to violate this law," he said, noting its potential for fines up to $6 million and prison terms of five years.


Old City Computers Get New Lives

The city of Columbia, Mo., is starting a program to give its old computers to needy families.

The city buys about 150 computers a year, to replace older models. In the past, the old machines were stripped, reduced to piles of chips, keyboards and other components. Then the junk was loaded onto pallets and auctioned, usually for $50 to $100 per pallet.

But Tony St. Romaine, who buys computers for the city, knew of poor families who needed computers for their children or other purposes. He proposed recycling the old machines for city families who needed computers.

Bob Simms, director of the city's information system, agreed. His staff will delete all sensitive material or other city information from the computers, wipe their slates clean, then reinstall a basic Windows operating system. Then they'll be given to the city's Voluntary Action Center for distribution.

Simms said the city will begin with about 35 computers but eventually about 130 machines a year ought to funnel into the program.


Scam Hits Bank of England

The Bank of England is the latest financial institution to be hit by a flood of e-mails posing as messages from the institution.

In many previous cases, the e-mails asked recipients to re-enter their account numbers, passwords or other vital information. In the Bank of England case, the bogus e-mail instructs recipients to download a file attachment.

The Bank alerted authorities and advised all customers to delete the e-mail promptly, without downloading any file. The Bank said it had intercepted more than 100,000 phony e-mails.

Another fake site, involving Singapore's DBS Bank, does attempt to get bank account information from customers. That one surfaced in Hong Kong, the fourth such fake site in a month.


World Wide Web Creator Knighted

The man who created the World Wide Web is now a knight.

Tim Berners-Lee, who devised the system of Universal Resource Locator identifications to create Internet addresses, was named a Knight Commander of the Order of the British Empire. He came up with the idea for "global hypertext space" in 1989 and wrote a point and click hypertext editor which was released in 1991.

The combination of his ideas turned what had been largely a scientific and educational network into a global information and message system. He is still active with the consortium which oversees Web operations.


Hot Tip: Bad Policy Makes Bad Passwords

A good password system starts with a good policy. If your password policy is too complex or not strictly enforced, you will wind up with bad passwords - those which are easily guessed or a master file which can be easily stolen.

Passwords may be the weakest link in almost any corporate security chain.

Some companies store passwords in a master file which is accessible through the regular network. That means anybody who figures out the key to get into that file can steal not just one but every password in the company.

Some companies do not enforce regular changes of passwords. The problem here, of course, is much like the basic password policy - if you change too often or make changes too complex, users will write them down or store them where they are easily found.

But time spent in devising a chance policy that is easy enough for users to implement and follow but complex enough to confuse a casual intruder is time well spent.

Any password policy must be enforced to be effective. It's the old story: Any law is only as good as its enforcement.


Thank you for reading this edition of our SecureAgent Secure eNewsletter.

If you would like to respond to any of our stories, please use the following form.

 

Name:
Email:
Letter:



We respect your privacy. Information pertaining to
Secure eNewsletter recipients will remain confidential.
Subscribe | Unsubscribe