validation

How to spot dangerous links before you click them

You probably got to this page by clicking a link. Links are the ties that bind the Web. But each click is also a leap of faith. How do you know you're going to the page you think you're going to?

Google search results let you preview pages before you follow the link, but elsewhere the best you can do is hover over the link to see at the bottom of the browser the URL of the page the link will open. (See below for more on free browser add-ons that rate the security of links in search … Read more

How to verify an e-mail address

Trying to e-mail someone who isn't in your address book can be a pain--especially if your phone's auto-correct did a fantastic job replacing parts of the address with dictionary words.

You could send them a test message and see if you get a delivery failed e-mail in return, but this can be embarrassing because they'll most likely read it and wonder what's going on. Next time this happens to you, try using eToolz instead. eToolz contains, among other nifty things, a tool that can verify the validity of an e-mail address without … Read more

Microsoft to boost security of Office 2003, 2007

Microsoft plugged 40 holes with 17 patches today and said it will improve the security of Office 2003 and Office 2007 by adding a feature to the older versions of its productivity software that opens files in Protected View.

Customers should focus on the two critical bulletins that are part of Microsoft's monthly Patch Tuesday security update, says Jerry Bryant, group manager for response communications in Microsoft's Trustworthy Computing Group. The first is MS10-090, a cumulative update for Internet Explorer. It fixes seven vulnerabilities in the browser and affects IE 6, 7 and 8. There have been attacks … Read more

Why we can't have nice security

I know this is TLDR fodder of the highest order, but I'd like to read to you from a press release--for a security product, even. Here it goes:

The entire line of Spyrus Hydra PC USB encryption drives are invulnerable to such attacks because no password authentication values or keys are ever stored on Hydra PC devices after logoff or removal. Unlike any competing USB encryption drive, the Hydra PC reconstitutes a Master Key Encryption Key at logon using a FIPS-approved Key Derivation Function which utilizes, at a minimum, an Elliptic Curve Diffie-Hellman (ECDH) public/private key pair … Read more

Google Docs now gives you validation

Google Docs has a new validation option that spreadsheet jockeys are going to appreciate. You can now give cells prerequisites, so that you or other users must fill them in with a certain type of data. It can also be set up to provide instructions that pop up as soon as someone starts entering data--similar to what's available in Google Docs' form tool and in Microsoft Excel. Both options can be set inside of the data validator that shows up once you've selected a cell or range of cells.

The Google Docs blog has suggested this as a … Read more

Certification credited with boosting online confidence

Extended certificate validation for Web sites has boosted online confidence in 2008, according to a statement released Thursday by the Authentication and Online Trust Alliance (AOTA).

This could help online consumers looking for sites to trust on Cyber Monday, the first shopping Monday after Thanksgiving when online purchases are at their peak.

Sites with Extended Validation Certificates (EV) added to Secure Socket Layers (SSL) encryption display their URLs in a green bar in the address field of compatible browsers. This signals to the user that there is increased scrutiny of the Web site. In Firefox 3, a user clicks the … Read more