Issue # 82. July 23, 2004

Previous issues of ClickTALK

IN THIS ISSUE:
  • Why You Should Be Aware Of Spyware
  • Next Release Pushed to August
  • User Group Meeting at Appraisal Today Conference -  August 5, San Francisco

Why You Should Be Aware of Spyware, Adware & Sneakware software

Definitions:

Spyware is software installed on your computer without your knowledge or explicit permission. Generally spyware gathers confidential information from your computer and automatically transmits it back to the individual or organization that planted it on your computer.

Some privacy advocates also call legitimate access control, filtering, Internet monitoring, password recovery, security or surveillance software "Spyware" because it could be used without notifying the users.

Spyware can be broken down into two different categories, surveillance spyware and advertising spyware.

Surveillance spyware includes key loggers, screen capture devices, and Trojans. Corporations, private detectives, law enforcement, intelligence agencies, suspicious spouses, etc would use these.

There are some legitimate uses for keystroke loggers but it’s the illegitimate uses that pose a very serious identity theft threat.

For example a keystroke logger is a program that runs a background on your computer and records every keystroke you make, a cracker (one who breaks security on a system) can steal your social Security number, credit card numbers, and just about anything else you type and enter into your PC weather the information is part of a document on your hard drive or an online form.

Advertising spyware is software that is installed alongside other software or via ActiveX controls on the Internet, often without the user's knowledge, or without full disclosure

Besides crackers using spyware to steal confidential information in many cases, if you have a spyware problem, you may have unwittingly installed it yourself by downloading and installing freeware that severs as a Trojan horse for spyware, or if your browser’s security settings are not configured properly, just by visiting a particular web site can automatically install spyware on your computer, this type of infiltration is called a drive- by download.

Adware is any software application in which advertising banners are displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen. It gathers information about your web surfing habits, personal information, and passes it on to third parties in order to target you with pop-up advertisements for products and services that might be of interest to you. Unlike spyware, adware is installed with the users knowledge and permission, usually in exchange for the software that’s free but supported by advertisers.

An estimated 45 percent of these files contain malicious codes i.e. Trojan horses and/or spyware.

Sneakware uses deceptive means to sneak onto your computer. In theory the user is still granting permission for the software to be installed but he user is often unaware that they are granting permission, because it is buried deeply within the terms and conditions of the software. Another sneaky way is the vendor often tries to fool native users into thinking they are at risk if they do not install it.

For example a pop-up box labeled “ Security Warning” it’s intended to convince you that you must install the software to protect your computer in a very persistence matter.

Unlike Adware, sneakware makes changes to your system; typical changes include hijacking (changing) your home page, changing your default browser toolbars and adding pornographic bookmarks to your browser and prevent you from undoing the changes.

 Other serious problems associated with spyware, adware and sneakware than the obvious dangers such as identity theft and financial fraud.

  1. They steal your Bandwidth, slowing down your Internet connection, Adware is especially harmful in this regard, using the bandwidth to pepper you with unwanted popup ads.
  2. These applications may cause sluggish performance of your PC by always running in the background, meaning they are using your system’s processor, memory and resources.
  3. Sneakware may replace your home page with one that contains adult or sexual material, which is distressing when children use your PC and see this type of content.
  4. Bugs, these applications often contain bugs that may cause your system to crash.

As indicated there are distinct differences between spyware, adware, and sneakware however all three applications are now more commonly refer to as spyware because the lines separating these applications is very blurry. For example Xupiter is adware that sometimes asks for permission to be installed and sometimes installs itself without permission via a drive-by download, which defines spyware.

Important tips on keeping your computer free of spyware, adware and sneakware.

  1. Use anti virus software and keep it up to date. The anti virus programs block some Trojan horses that contain spyware, so ensure your anti virus software is current.

  1. Install a Firewall. Install a good software- based firewall that monitors both inbound and outbound communications from your computer so it can alerts you to the fact that spyware has been installed. You may also want to install some type of residential gateway such as a router to offer hardware based firewall protection. Note: The firewall can only stop crackers, but it cannot stop you from unwittingly installing these applications on your computer.

  1. Install anti-spyware and stay current. Install anti- spyware and run regular scans of your hard drive. Keep it up to date or it will become as useless as out of date anti virus software. Two of the most popular anti-spyware is Lavasoft’s Ad-aware www.lavasoftusa.com/software/adaware and Spybot Search and Destroy www.beam.to/spybotsd both are free but donations are encouraged.

  1. Properly configure your browser’s security settings. If you’re using Internet Explorer as your web browser, IE has a feature that lets software automatically install on your computer. To disable this feature and stop drive by downloads, change your IE security settings, launch IE, click on Internet Options from it’s Tools menu, click the Security tab, and click the Custom level button. From the next dialog box, look below the Active X Controls and Plug ins heading and set the options as follows:

  • Select the Prompt radio button below Download Signed ActiveX Controls

  • Select the Disable radio button below Download unsigned ActiveX Controls

  • Select the Disable radio button below Initialize And Script Active X Controls Not Marked As Safe

  • Select the Prompt radio button below Run ActiveX Controls And Plug-ins

  • Select the Prompt radio button below Script ActiveX Controls Marked Safe For Scripting

If you’re considering switching your Internet web browser, a couple of alternates and less susceptible to drive by downloads than Windows Internet Explorer is Opera www.opera.com and Mozilla www.mozilla.org

  1. Do not install pervasive adware, bundled in applications i.e. Xuptier, Bonzi-Buddy, Comet Cursor or Claris products such as Gator e Wallet, Dash Bar, or Precision Time, unless you value these applications so much that you’re willing to put up with the effects of the bundled adware.

Most important you should back up your hard drive on a regular basis, if you PC becomes infected with a new spyware, adware or sneakware version and your anti-spyware may not be able to remove it, you will have a recent backup to restore your system to it’s pre-infected configuration.

References:

Smart Computing, PC Magazine, C/net, Google, Zdnet.


Next Release Pushed to August

We previously indicated that the next ClickFORMS release would be this month. Having decided to release in August instead, we want to reset that expectation for you. The new release date for the next release will be late August.  We think it will be worth the wait.


User Group Meeting at Appraisal Today Conference -  August 5, San Francisco

If you are in the bay area, plan on attending the Appraisal Today Conference during the days of August 4-6 in the South San Francisco. Also plan on joining the Bradford Technologies team for the ClickFORMS User Group meeting on August 5 after the tradeshow. Details on the conference can be found at http://www.appraisaltoday.com.  


Have a Good Weekend Everyone

Have a good weekend everyone. Drive safely while you're out inspecting. Don't forget to tell your friends about ClickForms. 

Bradford Technologies - Real Estate Appraisal Software  |  ClickFORMS Appraisal Software
Products  |  Services  |  TechSupport  |  Store  |  Company & News
© Bradford Technologies Inc. All rights reserved.                302 Piercy Road, San Jose, CA 95138.

If you request to be taken off our ClickTALK email list,
Bradford Technologies, Inc will honor your request pursuant to our permission-based email terms and conditions.