Workers' Edge

Read all 'E-mail security' posts in Workers' Edge
May 11, 2009 9:00 AM PDT

Retrieve sent messages in Gmail, delay them in Thunderbird

by Dennis O'Reilly
  • 2 comments

Last August, I described how to delay the messages you send from Microsoft Outlook. In that post, I bemoaned the lack of a similar feature in Gmail. Well, Google engineer Yuzo Fujishima comes to the rescue with a new tool called Undo Send, though unlike Outlook's send-delay feature, in Gmail, you have to act--or unact--fast.

To activate the feature, open Gmail, click Settings in the top-right corner, and choose the Labs tab. If you don't see a Labs tab, click more in the top-left menu, select even more, click the Labs link at the top right, choose Gmail Labs. Scroll to Undo Send, click Enable, and select Save Changes.

This feature isn't a miracle worker; it can pull back a message only in the first 5 seconds after you click Send. Still, many an e-mail "Oops!" comes to mind in that split second after you send it.

The Undo option appears for about 5 seconds in the "Your message has been sent" message at the top of your in-box.

Gmail Labs' Undo Send option

When you use the Undo Send option from Gmail Labs, you have about 5 seconds to retrieve a message you just sent.

(Credit: Google)

If you click Undo in time, your message is yanked from the outbound queue and you see a message informing you that the send was undone.

Gmail Labs' Undo Send notice that the message was successfully retrieved

If your sent message was successfully retrieved, you see an alert to that effect.

(Credit: Google)

Clearly, the Gmail Undo Send feature doesn't give you anywhere near the level of control you get when delaying sent messages in Outlook, but Gmail's version is much simpler to implement.

The Send Later extension for the Mozilla Foundation's Thunderbird e-mail client provides a similar function. Unfortunately, several people report problems using Send Later with the latest version 2.0.0.21 of Thunderbird. The extension appeared to work as advertised on my Vista PC, however.

Send Later extension for Mozilla Thunderbird

The Send Later extension for Mozilla Thunderbird lets you delay your outgoing messages by the amount of time you prefer.

(Credit: talk2sk)
To activate Send Later, press Ctrl-Shift-Enter when you've finishing composing the message. In the "Send this email later" dialog box that opens, select the time you want the message sent using the drop-down menus at the top of the window, or click one of the three preset delays: 15 minutes, 30 minutes, or 2 hours.

If only everything we do on a computer had a "do-over" button!

May 7, 2009 9:00 AM PDT

Five simple PC security tips

by Dennis O'Reilly
  • 18 comments

The list of PC security products never ends. For every name that drops off, two more jump on. In fact, determining the best security hardware and software is a full-time job. Sometimes, you just want to throw up your hands and take your chances.

Maybe I'm just a cockeyed optimist, but I think you can stay safe without spending all your spare time doing research, installing updates, and generally becoming a PC-security expert. Here are five relatively easy ways to improve your security.

Use the firewall that's closest at hand
In the computer industry, the reputation of a product, service, or Web site is just about worthless. Yesterday's best firewall, ad blocker, spam buster, virus spotter, or spyware cleaner is today's bust.

Maybe the product got bought and the new owners aren't as conscientious about updates as the previous ones. Or the service's management team decides to go for profits and skimp on support, updates, and enhancements. There are lots of reasons why a good product goes sour, and the computer industry has seen nearly all of them.

So if you can't go by reputation, how do you choose a security product? One way is to go with the tools you've already got. Windows' security is roundly criticized, but the fact is, it's better than it used to be, and third-party security products have their own shortcomings.

Last February, I recommended that you use a third-party firewall rather than the one built into Windows. Six months earlier, I suggested that you pass on the third-party tools and stick with the Windows Firewall despite its shortcomings.

So which side of the fence am I on now? The simple side. The fact is, any third-party security tool complicates your setup. It's not difficult to find weaknesses in the Windows Firewall, but it's safe enough for most PC users, and it's much better than using no software firewall at all.

My previous post included links to information on Microsoft's TechNet site providing technical details of the Windows Firewall, tips for customizing the Windows Firewall, and help troubleshooting the firewall in XP and Vista.

Don't hesitate to try another free antivirus program
Just last week, I switched antivirus programs on my XP test system--for the umpteenth time. Something was slowing the system down, and after defragging the hard drive and doing other standard maintenance tasks, the machine's performance didn't improve as I expected it to.

Rather than go through a bunch of diagnostic tests, I simply uninstalled the system's antivirus tool and downloaded a competing package. The old and new programs were both free, and the switch didn't take much time to complete. The topper? The XP machine's performance perked up immediately.

Two antivirus programs that are free for home use and that are currently highly rated are Avast Home Edition and Avira AntiVir. You'll find a list of dozens of antivirus programs for Windows on this Download.com page.

Change your password...again
I hate those "your password will expire in x days" warnings as much as you do, but one of the simplest ways to protect yourself is by keeping your passwords fresh. Last year, I described the Ten Password Commandments, one of which was to devise a password-creation strategy that's all your own.

Just two months ago, I complained about the shortcomings of passwords as our primary security option, though I concluded that there's nothing better, for now. Lots of people swear by password managers such as RoboForm, but then you have yet another third-party app complicating matters.

For me, it's simpler just to devise a new password based on my unique, inimitable password-creation system, which I share with no one. No need to write it down, enter it in an online form, or encrypt it in a master-password file. Temporary amnesia, well, that's another matter.

For secure e-mail, use encryption
You would think that encrypting e-mail would be a breeze, but doing so is anything but. You and the recipient have to deal with digital certificates, public and private keys, and any number of other time-eating preparations and precautions.

The simplest way I know of to encrypt your e-mail is by using the Mozilla Foundation's Thunderbird with the Enigmail extension. Jason Thomas provides step-by-step instructions in this tutorial on the Lifehacker site.

Gmail users can secure their e-mail communications by enabling the service's built-in encryption. To do so, click the Settings button at the top-right of the main Gmail screen, scroll to the bottom of the General tab, select "Always use https," and click Save Changes.

Gmail Settings

Select "Always use https" under the General tab in Gmail's Settings to encrypt your messages.

(Credit: Google)

Keep your browser up-to-date
Most people will tell you that the Mozilla Foundation's Firefox browser is the safest way to surf, but a recent report from Google Switzerland and the Swiss Federal Institute of Technology found that "(u)sing the most recent version of a browser will lower the risk associated with drive-by-downloads and other Web-based attacks, which start by targeting the browser."

The report cites Google Chrome's silent updates as the best way to ensure that your browser is protected. The researchers also laud Chrome's lack of a way for users to disable its silent-update feature. Some people will object to software being downloaded to and installed on their system without their knowledge, but the fact is, these behind-the-scenes updates are the best way to keep you safe from the Internet bad guys.

Personally, I'm starting to rethink my choice of default browser. But as I mentioned earlier, you can't put any faith in a computer security product's reputation. And you can't be afraid to switch.

December 22, 2008 12:01 AM PST

Stay safe while using e-mail

by Dennis O'Reilly
  • Post a comment
The third of my three updates to the 10-Step Security story I wrote back in 2005 covers steps seven through 10, which deal with e-mail safety. (Last week, I refreshed steps one, two, and three, which address Windows security, and steps four, five, and six that cover safe browsing.)

Three years ago, e-mail was the source of most PC virus infections, but that's no longer the case. Now you're more likely to catch a piece of malware from a Web site, whether by downloading a file or simply by opening a booby-trapped page.

Does this mean you may now open e-mail messages and attachments without a second thought? Uh-uh.

The first of the four e-mail security tips in the original story warns against clicking links embedded in messages. That prohibition still applies. It's easy to spoof a link so that it looks like it leads somewhere other than its real destination. As the tip recommended, it's much safer to enter the URL in your browser's address bar manually, or to find your way to the page using the site's own navigation or search function.

Likewise, the advice in the eighth security step to scan attachments for viruses before opening them is as valid today as it was three years ago. Nearly every antivirus program and security suite scans all incoming e-mail and file attachments by default.

Some people will tell you that your e-mail client's preview pane--the topic of security tip number nine--poses no risk because it's much more difficult for malware to attack your PC simply by viewing a message. Even if this were the case, I would still close the preview pane in my e-mail program for privacy's sake.

The original article describes how to close the preview pane in Outlook Express, Outlook 2003, and Mozilla Thunderbird. The steps for doing so in Outlook 2007 are the same as in Outlook 2003.

I'm a big fan of viewing e-mail in plain text, the subject of the last of the 10 security steps. Using plain text is not just a way to block viruses transported via HTML mail. Plain-text messages may not always look so spiffy, but the files open fast.

I described how to set Outlook 2003 and 2007 to send and receive e-mail as plain text in a post from last month. To set Thunderbird to view incoming mail as plain text, click View > Message Body As > Plain Text.

Mozilla Thunderbird option to view messages as plain text

Set Thunderbird to view incoming messages as plain text via the View menu.

(Credit: Mozilla Foundation)

To send mail as plain text in Thunderbird, click Tools > Account Settings, choose Composition & Addressing in the left pane, uncheck "Compose messages in HTML format," and click OK.

Mozilla Thunderbird's Account Settings dialog box

Send mail in plain text by changing this setting in Thunderbird's Account Settings dialog box.

(Credit: Mozilla Foundation)

A final note on security software and wireless encryption
Two sidebars to the original 10-Step Security list the top security programs in various categories and recommend use of Wi-Fi Protected Access (WPA) to protect wireless networks.

Rather than using different programs for virus protection, spyware blocking, and other malware defenses, I prefer the suite approach. Using a combo security program reduces the chance of software conflicts, and if something goes wrong, you have only one vendor to deal with, for better or worse.

WPA provides sufficient protection for most home and small-office wireless networks, though you'll be safer if you upgrade to WPA2, if your network's router and other equipment support the later security standard. Using the older WEP security protocol is no longer sufficient because WEP is relatively easy to crack.

One last security-update note: the Mozilla Foundation recently acknowledged security breaches in the Firefox browser, Thunderbird e-mail client, and SeaMonkey Web suite. A security bulletin released last week instructs users to disable JavaScript until you're able to update to these versions:

• Firefox 3.0.5
• Firefox 2.0.0.19
• Thunderbird 2.0.0.19
• SeaMonkey 1.1.14

As of the evening of December 21, 2008, I could update to Firefox 3.0.5 and SeaMonkey 1.1.14, but not to Thunderbird 2.0.0.19 (2.0.0.18 is available). To update Firefox and Thunderbird, click Help > Check for Updates. Visit the SeaMonkey Downloads & Releases page to update that program.

October 16, 2008 12:01 AM PDT

View HTML mail from trusted senders, plain text from others

by Dennis O'Reilly
  • 3 comments

My previous post described how to create a quick-and-simple HTML e-mail newsletter. I mentioned that you should view the plain-text version of the newsletter so you could see how it looks to recipients who have HTML mail disabled.

But what if you're on the receiving end? How can you ensure that you see the full-color, fancy-format HTML messages sent to you by people or organizations you trust, but are protected from potentially malicious HTML mail from bad guys? In Microsoft Outlook 2003 and 2007, it's easy.

Customize Outlook's message view
Start by setting Outlook to view messages as plain text by default. In Outlook 2007, click Tools > Trust Center > E-mail Security. In Outlook 2003, click Tools > Options > Preferences > E-mail Options. In both versions, check "Read all standard mail as plain text" and click OK.

Microsoft Outlook 2007 E-mail Security dialog box

Check "Read all standard mail in plain text" in Outlook 2007's E-mail Security dialog box.

(Credit: Microsoft)

Next, allow HTML mail from sources you trust to appear by default. In both Outlook 2007 and 2003, click Tools > Options > Junk E-mail (under the Preferences tab). Choose the Safe Senders tab and make sure "Also trust e-mail from my contacts" is checked. You can also check "Automatically add people I e-mail to the Safe Senders List." Other options in this dialog let you add addresses manually and import or export your safe addresses as a .txt file. When you're done, click OK twice.

Microsoft Outlook 2007's Safe Senders dialog box

Make sure Outlook adds addresses in your contacts to its Safe Senders list.

(Credit: Microsoft)

You can also add e-mail addresses to your safe list by right-clicking the address and selecting Junk E-mail > Add Sender to Safe Senders List.

I wasn't able to find a way to set Mozilla Thunderbird to view HTML mail from sources you trust and plain-text messages from everyone else. You can make the view change globally in Thunderbird by clicking View > Message Body As > Plain Text.

The other two options on this submenu let you view messages as either "Original HTML" or "Simple HTML." What's the difference? According to MozillaZine, simple HTML blocks Javascript and remote-image display and interprets only "basic" HTML commands.

  • prev
  • 1
  • next
advertisement
Click Here

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Workers' Edge

Dennis O'Reilly has covered PCs and other technologies in print and online since 1985. Along with more than a decade as editor for Ziff-Davis's Computer Select, Dennis edited PC World's award-winning Here's How section for more than seven years. He is a member of the CNET Blog Network and is not an employee of CNET.

Add this feed to your online news reader

Workers' Edge topics

Most Discussed



advertisement

Inside CNET News

Scroll Left Scroll Right