To lie or keep in hiding, as for some evil reason. To move or go in a mean, stealthy manner.
Thursday November 11, 1999
|Free subscription to WebSkulker||
To use the links in this newsletter, you must be connected to the Internet. PC Eudora users: to see this and other html mail properly you must check the box "Use Microsoft's Viewer" in the "Viewing Mail" options.
"It is also possible to code a website so that
merely by visiting the site, a ... document would be run on your
machine that could have malicious commands embedded.
"It is also possible to code a website so that merely by visiting the site, a ... document would be run on your machine that could have malicious commands embedded.What's worse ... it is possible for someone to send you an email in HTML format (just like this newsletter) which contains embedded calls ... If you read email with Outlook, Outlook Express, Eudora, or any other email reader that uses the Microsoft HTML renderer, then merely opening an email message could cause commands to be executed on your machine."
Were we psychic, or what? Which
story was all over the computer news yesterday? The Bubbleboy
virus that, so the reports generally claim, is the first virus capable
of issuing commands to cause damage to your PC simply by opening an
email message. Here is a typical report about Bubbleboy in case
you haven't been following the news:
Here is more technical report giving the details of
what Bubbleboy does when it infects a machine:
turns out that Bubbleboy is exploiting a security problem in Internet
Explorer (IE) that was publicized and fixed over two months ago, but
the fix does no good unless you download it and install it on your
system. At the time this was discovered, it was believed that
the danger was in visiting a "malicious web site" using IE
as the browser, because the web site author could code special
functions in their web pages that would take advantage of the flaw and
execute malicious commands on your machine. Here is the
Microsoft Security Bulletin describing the flaw and how to fix it:
But pretty much anything a malicious web site author can do on their web site can be done by sending HTML-formatted email messages. The Microsoft email programs Outlook and Outlook Express use Internet Explorer under the covers to handle the display of HTML-formatted messages, so flaws in IE as a web browser are also flaws in IE as an email reader. Eudora can be set to use IE, and in that mode it is probably vulnerable to the same problems.
So how can you jr. skulkers prevent Bubbleboy and other email viruses like it that are sure to follow? By downloading and installing all the security fixes for Internet Explorer. The easiest way to do that is the Windows Update web site from Microsoft discussed in the following article.
If you use Outlook or Outlook Express to read email, you can also change a setting to make email reading more secure from HTML attacks. For both products, go to the Tools menu, choose Options, then press the Security tab. You will see a way to change the Internet Explorer Security Zone. Change this to "Restricted Sites" and press OK. This setting tells Internet Explorer that when it is displaying an email message under the covers of the email program, it should treat the email like a potential malicious web site and restrict the HTML functions it will allow.
If you are using Windows 98, you probably noticed the Start Menu item(s) called "Windows Update". This is merely a bookmark to the first link above, the Microsoft Windows Update site. You can use the Windows Update button, or click on our link to get to the site. Contrary to popular belief, the Windows Update site now works for Windows NT as well as Windows 98, but WebSkulker seems to recall that you must have IE 5 already installed to use it from NT. (We believe it will work from Windows 95 as well for some types of updates, but we don't have a system to test this). NT doesn't have the Windows Update button so go directly to the first link using Internet Explorer. When you get to the Windows Update site, press Product Updates. After some machinations, you will get a list of fixes and new versions of programs and add-ons that are available from Microsoft.
This list will be customized to your PC and will show only those items that would work for you and that are not already installed. The Critical Updates will generally be security fixes so you should take all those. Check the box in front of each item you want, press the Download button, then sit back and watch. Everything should be downloaded and installed automatically. Depending on what you update, you might get a message at the end asking you to reboot.
The second link above is to the Microsoft Download Center. This is a central location for downloading fixes and updates for most Microsoft products. For operating system and Internet Explorer updates, you should generally use Windows Update instead of downloading and installing individual items, but if you need to install the same item on multiple machines then downloading might be a better idea than running Windows Update on each machine individually.
These three sites (the first one submitted by Jr.
Skulker Batteryman) discuss myths about computer viruses and chain
email letters. If you hear a report about a virus, or you get
email from a friend warning you about something and telling you TO
FORWARD THIS TO EVERYONE YOU KNOW, then go to these sites to see if
this is a hoax, or might actually be something to worry about.
These three sites (the first one submitted by Jr. Skulker Batteryman) discuss myths about computer viruses and chain email letters. If you hear a report about a virus, or you get email from a friend warning you about something and telling you TO FORWARD THIS TO EVERYONE YOU KNOW, then go to these sites to see if this is a hoax, or might actually be something to worry about.
Jr. Skulker Tom McWilliams suggests this site for those of you who know what the Fry's Electronics stores are all about. If you never heard of Fry's, think about a gigantic Wal-Mart sized Radio Shack store and you will get the general idea.
Jr. Skulker JennyAnn suggests this site for what to do
if you can't find a job and have too much free time on your hands.
Jr. Skulker JennyAnn suggests this site for what to do if you can't find a job and have too much free time on your hands.
An American, a German and a Japanese guy are golfing one day and, at the 3rd hole, they hear a phone ring. The American excuses himself, puts his left thumb to his ear, his left baby finger to his mouth and proceeds to have a telephone conversation. When he is done, he looks at the other two and says "Oh, that's the latest American technology in cell phones. I have a chip in my thumb and one in my baby finger and the antenna is in my hat. Great stuff eh?"
To change your subscription to a new email address, unsubscribe from the old address and then subscribe to the new address.
This newsletter is copyrighted 1999 by The WebSkulker. You may use any material in this issue for any reason provided that you attribute it to the WebSkulker Newsletter and include the URL to our web site: http://www.webskulker.com .