Web shoppers are a suspicious lot. That's the conclusion of a recent poll conducted by Zogby International and funded by Symantec and the National Cyber Security Alliance. The survey found that 63 percent of online shoppers abandoned a purchase due to security concerns.
Among the reasons given for failing to complete the transaction were sites that asked for too much information, uncertainty about how their personal data would be used by the site, and lack of faith in the site's security. These are all valid concerns.
CNET News reporter Greg Sandoval describes recent Congressional hearings on bogus online loyalty programs that sucker Web shoppers into offers that are loaded with fine print. Sandoval's follow-up report indicates that few of the big-name sites profiting from these programs intend to end their relationships with the companies being scrutinized.
Even if you've been making Web purchases for years, it pays to review the top five tips for avoiding unpleasant online-shopping surprises.
Know who you're dealing with
You can get an indication of a site's trustworthiness by using a site-rating browser add-on such as the Web of Trust, LinkExtend, and McAfee SiteAdvisor. I described these and other security add-ons for Firefox in a post on Nov. 17, but these and similar site-rating services are available for Internet Explorer and other browsers as well.
The BBB Online's shopping tips suggest that if you're not sure about completing a Web purchase, look for a toll-free phone number you can call to place your order. Just remember not to volunteer more information than necessary, whether you make your purchase via a Web form or telephone.
Know exactly what you're getting—and when and how you're getting it
Document as many specs as possible about the products you're purchasing, including model numbers, dimensions, item numbers, and guarantees of authenticity. Know beforehand all delivery and handling charges, warranties, and return/refund policies. Get the tracking number of the delivery service the vendor will use.
In my experience, the ability of Amazon and other reputable Web sites to deliver products when they promise goes down as the heart of holiday shopping season approaches. To avoid Christmas morning disappointments, shop very early or stick to brick and mortar for your most important purchases.
Watch for prechecked or disguised 'offers'
Just as you can find your browser sporting a new toolbar if you rush through an update of your media player or PDF reader, being in a hurry when you make a Web purchase can cause you to "sign up" for unwanted offers. Technologizer blogger Harry McCracken found himself an inadvertent enrollee in the SavingsAce affinity program run by Vertrue, which is one of the companies under investigation by Congress.
Maintain a complete paper trail
Print out all transaction records, invoices, order-confirmation e-mails, warranties, return and refund policies, and anything else that documents the transaction. The BBB Online recommends printing Web pages showing the vendor's name, physical address, and telephone number. Also print pages with information about the product you're purchasing and the seller's privacy policy and legal terms.
Watch for unexpected charges after the fact
Some of the most unpleasant surprises may not manifest themselves until you receive your next credit-card statement. Be ready to challenge any unauthorized fees or other added charges. Watch out for mystery charges from third-party vendors such as Harry's experience with SavingsAce.
If you're unable to work out any problems with the vendor, the BBB Online recommends using the Better Business Bureau's complaint form, the Federal Trade Commission's Bureau of Consumer Protection complaint form, or the equivalent complaint form on the site of your state's attorney general.
Unfortunately, when I went this route with the faulty notebook computer HP sold me, I got nowhere fast. Still, you might have better luck with your complaints than I had with mine.
Internet Explorer 8, Firefox 3, Google Chrome 4, Apple's Safari 4, and Opera 10 include features that block sites known to host malware and malicious downloads. All but Opera also let you browse without leaving any tracks. But just as important as these protections is ensuring that whichever browser you use is thoroughly patched.
Filtering out bad sites
Firefox's built-in antiphishing tool claims to update its bad-site database 48 times a day, according to Mozilla's Firefox security page. Firefox 3 uses Google's Safe Browsing service to automatically block sites that are known to host malware. The Google Code site describes how Safe Browsing works in Firefox.
To verify that attack-site blocking is enabled in Firefox, click Tools > Options > Security and make sure "Block reported attack sites" is checked.
Firefox will prevent known-bad sites from opening when "Block reported attack sites" is checked.
(Credit: Mozilla Foundation)The same feature is built into Google's own Chrome browser. You can ensure that malware-site filtering is on in Chrome by clicking the wrench icon in the top-right corner, choosing Options, and selecting Under the Hood. "Enable phishing and malware filtering" should be checked. The Google Chrome Help site describes the feature. (Hint: This page looks very similar to the description on the Google Code site.)
Google's Chrome browser blocks known-bad sites when "Enable phishing and malware protection" is checked.
(Credit: Google)The SmartScreen technology in version 8 of Internet Explorer blocks known-malicious downloads as well as bad URLs. Other new security features in IE 8 include automatic blocking of click-jacking and cross-site scripting attacks, automatic crash recovery, and highlighting of the actual domain name in the address bar. The Microsoft Security site describes the SmartScreen Filter and includes links to a SmartScreen FAQ and information for site managers.
Apple's Safari browser added phishing and malware blocking in version 3.2, which was released in late 2008; read about this and other security features in Safari 4 on the Apple Safari site. Likewise, Opera's Fraud Protection predates the phishing and malware filters in IE and Firefox and is enhanced in the latest version 10. But attack-site blocking is only one of Opera's many security features, which you can read about on the Opera site.
Browsing in private
To activate private browsing in Firefox 3, click Tools > Start Private Browsing, or simply press Ctrl-Shift-P. You can set Firefox to start in private-browsing mode by clicking Tools > Options > Privacy and check "Automatically start Firefox in a private browsing session." The Mozilla support site provides more information about this feature. Likewise, put IE 8 in private-browsing mode by clicking Safety > InPrivate Browsing, or by pressing Ctrl-Shift-P. You can also open a new tab and click either Browse with InPrivate or Open an InPrivate Window.
IE 8 also lets you control the information about your browsing habits that's shared with Web tracking services. To activate this feature, click Tools > InPrivate Filtering Settings and choose "Let me choose which providers receive my information." This opens the InPrivate Filtering settings dialog, where you can turn filtering off, choose which services to block from tracking you, or automatically block all trackers.
Internet Explorer 8's InPrivate Filtering lets you block some or all Web tracking services.
(Credit: Microsoft)You can open an incognito window in Google Chrome by clicking the wrench icon in the top-right corner and choosing "New incognito window," or simply press Ctrl-Shift-N. The incognito icon (a shadow figure in a fedora and glasses) appears in the top-left corner of the browser window. The Chrome support site offers a more detailed description of this feature.
Opera lacks an equivalent private-browsing capability but does offer private searching and other identity-blocking features, as described on the Opera site. To activate private browsing in Safari, simply click Safari Settings Menu > Private Browsing.
Automatic and not-so-automatic browser updates
Patching is a way of life with nearly all software, but especially with browsers and the media players associated with them: Adobe Reader, the Flash Player, Apple's QuickTime, and Sun's Java, among others. All of a browser's security features can be rendered useless by a piece of malware that takes advantage of an unpatched hole in the program.
Firefox 3 alerts users to the presence of an update and now also notifies you when your Flash Player is out-of-date. Internet Explorer 8 updates via the Windows Update/Microsoft Update services. Google Chrome made a splash by being the first browser to update itself in the background without requiring any prompting from users. Safari updates automatically via Apple's update service, which also serves up patches automatically for QuickTime, iTunes, and other Apple software. Opera also notifies you automatically when a new version is available.
But updating is too important to leave to others. Back in April, I described Secunia's Online Software Inspector and downloadable Personal Software Inspector, which identify out-of-date programs on your PC. The programs mentioned in that post have all been updated since, but Secunia's services should point you to the most recent versions.
(Note that Secunia sometimes reports a program as being out-of-date when in fact you have the latest version. On my PC, it continually reports my up-to-date Flash Player as being in need of an update, for example. But the free service Secunia provides is worth putting up with this and similar minor annoyances.)
There's no way to reduce to zero your risk of picking up some piece of malware while browsing. You need layers of security to keep viruses, Trojans, and botnets at bay—the more layers, the safer your browsing. (Of course, the more layers, the slower your browsing, too, so don't get carried away.)
Much emphasis has been placed on the enhanced security features of the latest versions of the popular browsers. Whether one is any safer than another is anybody's guess, but no browser gives you more ways to thwart a Web-based attack than Firefox via its wealth of security add-ons.
Link checkers add warnings to search results
Search results are often difficult to trust, even when the URL looks familiar. Phishers are adept at planting dangerous links that look like harmless ones. Link checkers provide you with an indication of the trustworthiness of sites before you click their links. (Note that several of the products are available for Internet Explorer as well.)
Some of the programs, such as McAfee's SiteAdvisor, give the thumbs-up or thumbs-down based on a single company's research. Web of Trust (WOT) bases its recommendations on the collective intelligence of a network of volunteers. LinkExtend is a link-check aggregator that combines the analyses of eight different services.
McAfee SiteAdvisor adds a safety indicator to Web search results.
(Credit: McAfee)While the recommendations of link checkers are helpful in identifying safe sites, you can't take their yeas and nays as gospel. For example, sites that offer downloads of system utilities may be flagged as dangerous because the programs require access to the operating system and thus could do major damage in the wrong hands.
Track the trackers
You know popular Web sites download software that tracks your activities on their sites, but do you know who's doing the tracking? Find out with the Ghostery add-on that pops up the names of the trackers as the page opens. The program puts a small "ghost" icon in the bottom-right corner of the Firefox window that turns orange when trackers are present. Click the link that appears to the right of the icon to find out more about the trackers and block them individually or entirely.
The Ghostery Firefox add-on lets you know who's tracking your activities on the site.
(Credit: Ghostery)
View encryption specs
When you open an encrypted Web page, a lock icon appears in the bottom-right corner of the Firefox window and the URL in the address bar begins with "https." But there's more than one form of encryption, and knowing which type and strength of encryption in use can be handy.
The CipherFox add-on puts in the bottom-right of the Firefox status bar the Secure Sockets Layer/Transport Layer Security (SSL/TLS) cipher and keysize currently in use. Double-clicking the entry opens the CipherFox dialog box, where you can disable RC4 encryption and display partial SSL/TLS. (Note that the developer accepts donations to support the product.)
Take charge of Web password management
Firefox's built-in password manager lets you create a master password and remember passwords for specific sites, but if you want to get serious about managing your passwords, get LastPass, a password manager that provides much more granular control over your sign-ins.
After you download and install the add-on, an icon is placed in the top-right corner of the Firefox window. Click it to open the LastPass menu, which lets you manage your identities, open the LastPass Vault, jump to favorite sites, and generate secure passwords. You can also import or export sign-in IDs, compose and print secure notes, and assign keyboard shortcuts for specific actions.
In addition to Firefox and IE, LastPass is available for Google Chrome and Apple's Safari browsers. LastPass backs up your passwords by storing an encrypted copy on its own servers. And because you can access your passwords via the Internet, you can use LastPass on any Web-connected device, although use of LastPass on an iPhone or other smart phone requires a Premium membership, which costs $1 a month. (You can also put LastPass on a USB thumbdrive for use with Firefox Portable and other portable apps.)
A colleague contacted me the other day with an odd problem: Microsoft Word 2003's default paper size was stuck on A4. Every time he changed the paper-size default back to Letter, it reverted to A4 with the next print job.
My first thought was that his printer driver needed an update. But driver updates often spell trouble, so I recommended that he look for the fix first in Word itself, then check Windows' print settings, and install a new printer driver only after the first two options come up empty.
Try a new normal.dot template
One potential cure-all for Word printer woes is resetting the normal.dot template (it's called normal.dotm in Word 2007). Microsoft provides instructions for doing so in Word 2000, XP, 2003, and 2007 in the inaccurately named article "How to troubleshoot printing problems in Word 2007 and Word 2003."
Interestingly enough, Microsoft offers another support article with information on finding the source of print failures. But the step-by-step approach in "How to troubleshoot print failures in Word 2007 and Word 2003" takes more time than some people will want to spend to find a solution. For deliberate types, though, it might be just the thing.
Reset Windows' own print settings
Microsoft tries to make it easy to troubleshoot Windows print problems by offering a one-click Fix it routine. The Help & How-to article also provides instructions for resetting the Print Spooler service when you receive an error message referring to spooler problems.
If the problem is with a network printer, check the FAQs in Microsoft's aptly named Help & How-to article "Troubleshoot network printer problems." Of course, uninstalling and then reinstalling the printer is a trick that predates Windows. (You also tried turning the printer off and then back on again, didn't you?)
Look for a printer-driver update
It's no surprise that Microsoft suggests you let Windows update your device drivers automatically. Instructions for doing so are provided in the Help & How-to article "Update a driver for hardware that isn't working properly." The company also offers the article "Find and install printer drivers," but the information there is pretty basic.
To take matters into your own hands, visit the support or download section of your printer vendor's Web site and search for the most up-to-date driver for your model. If the driver has a version number later than the number of your current printer software, download the newer release and save the file where it's easy to find.
Next, open the Printers Control Panel applet, right-click the printer whose driver you want to update, and choose Properties. Select the Advanced tab, click New Driver, and browse to and select the new driver you just downloaded. (The Printers applet in Vista provides an option to "Go to the manufacturer Web site" on the toolbar when a printer's selected.)
The consensus of experts is that Windows 7 is the best operating system Microsoft has ever released. I managed to perform a clean install of Windows 7 Ultimate on an XP PC with no problems whatsoever, but not all Windows 7 upgrades go so smoothly.
In fact, I was getting ready to install Windows 7 Home Premium on a blank partition of my Sony Vaio laptop so I could dual-boot Vista and Win7 but was scared off by a handful of reports of serious upgrade problems. Call me chicken, but I count on my notebook PC and don't want to risk breaking it. (And besides, I don't dislike Vista near as much as many other people do.)
Some veteran PC users postpone upgrading to a new Windows version until the first service pack is released. Unfortunately, service packs often cause problems of their own. Back in 2008, glitches with Vista SP1 caused Microsoft to offer free support, as Suzanne Tindal reported. Microsoft provides the System Update Readiness Tool designed to resolve update problems for Vista, Windows Server 2008, and Windows 7.
You can minimize the chances that you'll encounter upgrade woes by doing two things beforehand: back up your data and save the Windows 7 drivers for your hardware to a removable medium. This applies whether you're doing an in-place upgrade (which preserves your data and settings) or a clean install (which wipes out the current Windows installation).
That's the theory, anyway. There's no guarantee that the official Windows 7 drivers will work without a hitch on your system. Paul Mah of the IT Business Edge reports success rolling back to the Vista driver for a device that balked under Windows 7.
Some Vista users fall into an infinite loop when attempting to install the Windows 7 upgrade. Microsoft provides a Fix-it for the problem on its Support site. Seth Rosenblatt describes in the CNET Download Blog two Win7 upgrade gotchas to avoid.
Microsoft's guide to upgrading to Windows 7 relies on the Easy Transfer wizard, but ZDNet UK's Adrian Bridgwater points out the risks of trusting your data and software settings to an automated process that can be "easy" to derail. (The wizard doesn't bring over the applications themselves, which have to be reinstalled separately.)
I may eventually upgrade my Vista notebook to Windows 7—probably long before Win7 SP1—but only after the early adopters have cleared a path.
Web ads aren't just annoying, they can also be the source of a malware infection that attempts to steal your identity. In her September 15, 2009 InSecurity Complex blog, Elinor Mills describes how ads are being used by criminals to trick people into buying fake antivirus software, among other nefarious purposes.
Technology to block the ads that appear on Web pages has been around for almost as long as the ads themselves. No doubt someone will point out the irony of a blog that relies on ads for its livelihood explaining how to prevent them from appearing. For better or worse, few people will actually take the time to use an ad blocker when they browse. I don't think online advertisers are losing much sleep over the technology—yet.
Skip the ads when viewing pages in Firefox
One of the most popular Firefox add-ons is Adblock Plus, which puts an "ABP" icon on the far right of the main menu. Click it (or press Ctrl-Shift-V) to view the blockable items on the current page. Choose the down arrow next to the icon to open the program's Preferences dialog, disable ads on the page or site, or select other options.
Click the Adblock Plus icon to view blockable items on the current page.
(Credit: Wladimir Palant)Hovering over the Adblock Plus icon shows the add-on's status and the number of blocked and blockable items on the current page. You can also open the program's Preferences dialog by clicking Tools > Adblock Plus Preferences. There you can subscribe to an ad filter, import and export blocklists, view and reset your "hit" list, and change your view. Another option lets you remove the block tabs that appear by default on Flash and Java items.
Block ads in Internet Explorer
Back in January 2008, I called the free IE7Pro "(t)he only Internet Explorer 7 add-on you'll ever need." Well, the name's the same, but the program now works with IE 8 as well. Blocking ads in IE is as easy as downloading and installing IE7Pro, clicking Tools > IE7Pro Preferences, and checking Ad Blocker on the main Modules tab. The program blocks Flash, Java, pop-ups, pop-unders, and other types of Web ads.
Activate ad blocking in Internet Explorer by choosing the Ad Blocker option in IE7Pro's Preferences dialog.
(Credit: IE7Pro Team)To put a finer point on your IE ad blocking, select the AD Blocker option on the left side of the Preferences window. There you can enable the program's Flash blocker, which is off by default. You can also make changes to the IE7Pro filters, but you can't import or export filters as easily as you can using Firefox's Adblock Plus.
Use a proxy to squash ads in Chrome
It isn't surprising that Google decided not to include an ad blocker in its Chrome browser. After all, the company makes quite a bit of money from serving up those ads, so helping people to block them would be self-defeating. I found a couple of ad-blocking extensions for Chrome, but after taking a look at them, I just didn't trust them.
In one case, the home page of the extension's provider was crowded with ads itself. And another Chrome ad blocker I looked at had an unfinished appearance. The best solution I could find for blocking ads in Chrome is the Privoxy Web proxy, which is available on Source Forge. Configuring the add-on is a challenge, but a post on the GeekZone tech community boils it down nicely to seven steps.
Block ads in Opera, no add-ons required
The best way I found to block ads in the Opera browser is to use the program's built-in content blocker. To activate it, right-click anywhere on the page and choose Block Content. Only the blockable content on the page will be highlighted, and a toolbar appears at the top of the page. Choose an item to block it, and then click Done on the toolbar to reload the page minus the elements you selected.
To unblock an item, just reopen the Block Content toolbar and click the "Blocked Image" indicator. You can also view the URLs of all blocked items on a page, edit the entries, and add or delete items. There's no option to import or export a list of blocked URLs, however.
Bonus tip: Block ads and malicious sites via the free OpenDNS proxy service
Perhaps the greatest security resource on the Web is the free OpenDNS proxy service, which sends all your Internet traffic through a well-maintained set of filters to screen out ads as well as sites known to host malicious content. You can use the OpenDNS service to block gambling, adult, and other specific types of sites. For instructions on using OpenDNS, see Becky Waring's article "Use OpenDNS to surf safely with these tricks" on the Windows Secrets site.
Adobe Systems' Portable Document Format (PDF) is one of the great successes of the software industry. PDF has been the de facto standard for document exchange since the mid-1990s, but it wasn't an official ISO standard until 2008.
Unfortunately, the ubiquity of Adobe Reader and other PDF software has made the format a target for malware perpetrators. Along with Sun's Java, Adobe's Flash Player, and Apple's QuickTime media players, it's imperative that you keep your PDF reader up-to-date to prevent it from becoming an entryway for viruses. (I wrote about the importance of keeping your apps updated in a post from last April.)
So when I heard last week about an important security update for Adobe Reader 9, I hurried to the Adobe site to download the new version 9.2. But the 45MB download included a separate program: Acrobat.com with Adobe AIR. This is a Web service for sharing and collaborating on documents. It was formerly called Create Adobe PDF Online.
Update, October 27, 2009: The Adobe site is now offering the Adobe Reader 9.2 upgrade without the Acrobat.com with Adobe AIR component. Thanks to CNET member baddy_3- for pointing this out.
I hadn't signed up for Acrobat.com—registration is required to use the service—I just wanted the Adobe Reader update. I couldn't find it offered on Adobe's site minus the Acrobat.com add-on I didn't want. I contacted Adobe to ask them about this. Adobe spokesperson John Cristofano told me the following via e-mail:
"(I)f a user downloads the full installer of Adobe Reader 9.2 (Windows or Macintosh in English) from the 'Get Adobe Reader' page on Adobe.com, the Acrobat.com on Adobe AIR application will be included. If a user already has a previous version of Adobe Reader 9.x installed on his/her system and the Adobe Updater delivers that person the version 9.2 update (the latest dot release update to their existing product), Acrobat.com on Adobe AIR is not included."
I didn't recall installing Acrobat.com with AIR on my system, but I can't verify that it wasn't installed prior to the update to version 9.2, either. The machine's only six months old, though, and I hadn't signed up for the Acrobat.com service, so I certainly had never used Acrobat.com with AIR if it were on this PC.
In any event, I wasn't inclined to wait for Adobe Reader's auto-update component to fetch and install the latest security patch without Acrobat.com, nor would I recommend that other Adobe Reader 9.x users wait to update their version. And if you updated the program manually from Adobe's download site, you got Acrobat.com with AIR, whether you wanted it or not.
Downloading Adobe Reader 9.2 from the Adobe site requires that you also install Acrobat.com with Adobe AIR.
(Credit: Adobe Systems)You're also offered a free McAfee Security Scan, but at least you can uncheck that option to do without the scan. (If you're still using Adobe Reader 7 or 8, you can update to versions 7.1.4 and 8.1.7, respectively, without having to install any other programs.)
I could've saved myself a lot of time and trouble if I had just stuck with Foxit Reader, the free PDF reader from Foxit Software. I used Foxit Reader exclusively on my old laptop, but for some reason I switched back to Adobe Reader when I bought my new machine last spring. Foxit Reader has a lot of fans, but it's far from the only free Adobe Reader alternative.
Tracker Software Products' PDF-XChange Viewer does a good job of matching Adobe Reader's features and interface while—like Foxit Reader—taking up much less disk space (though at 15MB, PDF-XChange Viewer is almost three times as large as Foxit Reader).
If small is what you're after, try the open-source Sumatra PDF Viewer, which at just over 1MB is downright lilliputian, compared to the competition. The program may lack some of the polish of its larger brethren, but it might be all the PDF reader you need.
An even-smaller free PDF reader is PDF2EXE Software's CoolPDF Reader, which weighs in at a modest 900KB. You'll find capsule reviews of these and one other free PDF reader at the Tech Support Alert site.
By the way, if you're looking for a free way to create PDFs, I described one in a post from March 2008: Acro Software's CutePDF Writer. Coincidentally, that post also included information about the free trial of Create Adobe PDF Online, which has since become Acrobat.com. Talk about going full circle!
Browsing the Web has become like walking down a carnival sideshow. Everywhere you turn, you're bombarded with come-ons. You know there's a catch to each and every pitch because these barkers are pros at separating you from your money.
The people offering free software and Web services appear to be taking lessons from retired carnies. Their offers are too good to be true—literally. Most of these folks are in business, after all, so they have to make money somehow.
And as they say, the most successful cons are the ones where the victim doesn't even know he or she has been conned at all.
Of course, the purveyors of these "free" services assert that there's nothing underhanded about their method of doing business. Many are up-front about their business model, whether it involves placing ads in their products and services, downloading unrelated browser toolbars along with their updates, charging only organizations who use the software while letting individuals have it for free, or offering only dumbed-down versions of the programs for free and requiring payment for access to all the products' features.
Still, sifting through the "free" claims to find the true price you pay for such products can be daunting. Anyone who has used the Internet for any length of time knows it pays to be skeptical. While there are hundreds—perhaps thousands—of truly free programs and services available on the Web, finding the best of them isn't always easy. And clicking the wrong free-download link can be downright dangerous.
One way to determine whether a program is really free is its use of the Free Software Foundation's GNU General Public License (GPL). The GNU GPL stipulates that the software can be used, copied, and distributed verbatim without limitation, though it cannot be changed. While you can usually get the source code of programs that adhere to the GNU GPL, the license differs somewhat from open-source software.
The Open Source Initiative defines 10 criteria that programs must follow to be considered "open source." Among these are that the software can be redistributed—whether sold or given away—without limitation, and that the source code be distributable as well. Such programs must also allow "modifications and derived works" that can be distributed under the same terms.
SourceForge provides the most comprehensive collection of open-source software for Windows, Linux, and other operating systems. The programs listed on the site are often poorly documented and may be labeled as "projects," so you may not want to pin your business's success on one of them.
In fact, you'll often find more complete reviews of the programs listed on SourceForge by searching for them on Download.com. For example, here's the SourceForge entry for the KeePass Password Safe password-management freeware, and the product's entry on Download.com.
Whose bandwidth is it, anyway?
My biggest beef with software vendors—whether they charge for their products or not—is their cavalier attitude toward our system resources. Microsoft ties up our PCs every second Tuesday of the month with multimegabyte Windows updates. But a more recent example is Apple's latest iTunes and QuickTime update, which comes in at a whopping 101.2MB download. Apple, Microsoft, and other software vendors repeatedly expect me to put my workday on hold and turn my system over to their monster updates.
Apple's iTunes + QuickTime updater wants to download more than 100MB of patches in the middle of my workday.
(Credit: Apple)Many antivirus and other security programs let you use them for free but request a donation—sometimes repeatedly. For example, InformAction's popular NoScript add-on for Firefox opens a page after each update that solicits donations.
Other times, the vendor offers a free version of their commercial products, but finding it on the company's site becomes a game of Where's Waldo? If you're looking for AVG Free, you'll find it much faster on Download.com than you would on AVG Technologies' site.
Perhaps the greatest danger when looking for free software is becoming a victim of rogue security programs. This form of malware tricks you into downloading it by promising free protection, and then it claims to have found viruses that aren't actually there. The software holds your system for ransom, requiring that you pay to "remove" the infection that the program itself created.
The best way to avoid such traps is to restrict your software downloads to sites such as Download.com that scan all the files they host for malware prior to offering them for download. Better yet, think twice or even three times before installing any program. Every piece of software you load on your PC comes at a price, even if it's just the time, effort, and bandwidth required to keep it up-to-date so it doesn't become a security weak point.
Outlook, Thunderbird, and Yahoo Mail put Gmail and Hotmail to shame in one important area: handling attachments. Moving e-mail-attached files to a folder on your PC is a breeze in Outlook, Thunderbird, and Yahoo Mail. Doing the same in Gmail and Hotmail? Forget it!
Freeware strips e-mail attachments in a few clicks
Back in June 2008, I wrote about Kopf Outlook Attachment Remover donationware, which lets you save some or all of the files attached to Outlook messages to your PC or network. The program adds a button to Outlook's menu that opens a single dialog box showing your attachment-removal options.
Kopf Outlook Attachment Remover's single dialog lets you save attachments to a folder outside Outlook.
(Credit: Kopf)The attachments can be removed from the message or simply copied to a separate folder. You can detach specific types of files, remove files larger than a size you choose, and save images embedded in the body of messages. Other options let you overwrite or rename duplicate files, reproduce subfolders in the target folder, and even return the files you remove to the e-mails they were originally attached to.
You get many of the same options in Mozilla's Thunderbird e-mail program via the AttachmentExtractor donationware. After you download and install the add-on and restart Thunderbird, an AE Extract button is added to Thunderbird's toolbar and an AttachmentExtractor option is added to the program's Tools menu.
Selecting either option opens the add-on's settings, which let you select the target folder, save attachments of certain types or with specific attributes, and auto-extract all attachments or only those meeting specific criteria. You can also delete some or all of the attachments, mark the messages as read, and delete the messages automatically.
The AttachmentExtractor add-on for Mozilla Thunderbird provides several options for handling e-mail attachments.
(Credit: AttachmentExtractor)
Download attachments in Yahoo Mail
It's no secret that Webmail services can't match the features of their desktop counterparts, but when it comes to attachments, Yahoo Mail can teach Gmail and Hotmail a thing or two. While Gmail and Hotmail make it easy to find messages with specific types of attachments via search operators, downloading them once you've found them is another matter.
By comparison, zipping and downloading the files attached to your Yahoo Mail messages takes only a couple of clicks. In Yahoo Mail's Classic interface, click My Attachments in the left pane, select those you want to save, or click Check All to choose them all. Then click the Save to Computer button and choose Zip & Download Files button.
Yahoo Mail's attachment-extraction option makes it easy to save e-mail attachments to your PC.
(Credit: Yahoo)All the attachments are saved in a single zipped file to your browser's default file-download location. You don't get the many options provided in Outlook Attachment Remover or Thunderbird's AttachmentExtractor add-on, but at least the files are backed up and available on your PC or removable medium. I still haven't figured out how to accomplish the same feat with the attachments in Gmail and Hotmail.
Gmail and Hotmail do let you search for all attachments, and in Gmail you can find files by name or extension. To find all messages with attachments, enter has:attachment in the search box of either Gmail or Hotmail and press Enter. Gmail lets you add filename:*.doc, for example, to find only messages to which a Word .doc file is attached. You'll find a complete list of Gmail search operators on the service's help site.
Unfortunately, once you find the attachments in Gmail and Hotmail, there's not much you can do with them except open them one at a time and forward them to a POP or IMAP account. Then you can detach or otherwise process the attachments using one of the free add-ons described above.
You can also set Gmail to automatically forward messages to a POP or IMAP account. (In Hotmail you can forward automatically only to another Microsoft mail service.) I described how to forward mail from Gmail to Outlook and Thunderbird in a post from December 2007.
This won't help you detach the files already received by your Gmail account because there's no way to forward messages in bulk from Gmail. I realize that such a capability would be a spammer's dream come true, but a feature that lets you detach in bulk the files attached to Gmail messages would be nice.
The U.S. Centers for Disease Control and Prevention announced on Friday, October 9, that the H1N1 virus was widespread in 37 states. Fortunately, vaccines are on their way, and seasonal flu shots are currently available (the map on the Flu.gov site helps you find a vaccination center near you).
The best way to avoid bringing the flu bug home with you from the office is to stay out of the office. If you have the flu, do yourself and your coworkers a favor: stay home and rest! Not sure if you have the flu? Check the CDC site for a list and description of the symptoms of both H1N1 and seasonal flu. You'll also find information on the CDC site for taking care of people with the flu, prevention for people at high risk, and travel updates.
One of the best ways to track the flu's spread is via Google Flu Trends, an interactive map that indicates the frequency of flu-related search terms in various countries.
The Google Flu Trends map tracks flu-related searches by country.
(Credit: Google)Additional information on flu trends is available for the U.S. and several other countries. For the U.S., you can compare yearly flu trends and view data for each state.
For several countries, Google provides more annual and regional flu data.
(Credit: Google)
Link to your office PC for free
In many work situations, there's no substitute for being face to face. But every year it gets easier to get your office work done from outside the office. One way to do so is via Windows' Remote Desktop Connection component, which lets you link to a PC that's on an office network, but only if the machine's running XP Professional or Vista/Windows 7 Professional, Business, or Ultimate.
... Read more
