Apple just made Safari a better fit for the enterprise

Enterprise users can now wrap a new layer of security around their web services, thanks to Apple’s introduction of support for USB security keys in Safari 13.0.1. Enterprise class security Dongles aren’t a terribly convenient security protection for most people, but government, military and regulated industries are always searching out …

Microsoft releases emergency IE patches inside ‘optional, non-security’ cumulative updates

I’ve seen a lot of confusion about the security hole known as CVE-2019-1367 and what normal Windows customers should do about it. Part of the reason for the confusion is the way the fix was distributed – the patching files were released on Monday, Sept. 23, but only via manual …

Microsoft delivers emergency security update for antiquated IE

Microsoft on Monday released an emergency security update to patch a vulnerability in Internet Explorer (IE), the legacy browser predominantly used by commercial customers. The flaw, which was reported to Microsoft by Clement Lecigne, a security engineer with Google’s Threat Analysis Group (TAG), has already been exploited by attackers, making …

Throwback Thursday: Ultimatum

It’s 1977, and this pilot fish’s company is moving to a new data center. “The old facility was in the basement of the headquarters building,” says fish. “Access was via an ancient magnetic strip reader with no special capabilities. You either got in or you didn’t. The new facility has …

Why France and Germany fear Facebook’s cryptocurrency – and plan to block it

Facebook’s plans to launch its own Libra cryptocurrency next year is getting resistance from France and Germany who have promised to block it and plan to create their own national cryptocurrencies. Last week, the two nations said Libra could threaten the Euro’s value and unlawfully privatize money. Last year, the …

Wayback Wednesday: When you said ‘gone for good,’ I only heard ‘good’

User comes to this support pilot fish complaining that his PC is acting strangely. “It turns out he had gotten his computer so jammed up with spyware and Trojans that it was basically nonfunctional,” says fish. “We had to rebuild the computer from scratch.” They were able to recover much …

Mozilla first reveals, then conceals, paid support plan for Firefox

Mozilla earlier this month quietly outlined paid support for enterprise users of Firefox, but last week scrubbed the reference from its website, saying that it is “still exploring that option.” The offering – labeled “Mozilla Enterprise Client Support” – was to start at $10 per “supported installation,” which likely referred …

Now let me guess your password

This pilot fish IT guy gets a call from an irate client one day complaining (incorrectly) that we had changed his administrative password on his Windows 2000 server without his knowledge. “As I walked him through the logon process, I asked if the username in the login prompt was ‘Administrator,’ …

Mozilla previews Firefox VPN, will charge for service at some point

Mozilla this week resurrected its Test Pilot preview program, offering Firefox users a free VPN-like service to encrypt browser-to-site-and-back transmissions over public networks. “The Firefox Private Network is an extension which provides a secure, encrypted path to the web to protect your connection and your personal information anywhere and everywhere …

Heads up: Microsoft is back to snooping with this month’s Win7 and 8.1 ‘security-only’ patches

Two months ago, the July Win7 security-only patch was found to install telemetry software, triggered by newly installed scheduled tasks called ProgramDataUpdater, Microsoft Compatibility Appraiser, and AitAgent. As best I can tell, Microsoft never admitted that its security-only patch dropped a telemetry component. The August security-only update didn’t include that …

Windows 10 1909: What’s in it for enterprises?

Microsoft upends its Windows servicing model, if not regularly, then often enough to put the “con” in “consistency.” The latest revision or revamp or reconsideration took place this summer when the Redmond, Wash. company confirmed that it was dispensing with the year’s second feature upgrade – at least in the …

How to take full advantage of Android 10’s privacy-reclaiming powers

Well, gang, it’s here. In case you’ve been hibernating over the past week (or maybe just, ahem, on an unfortunately timed week off), Google brought Android 10 into this wacky ol’ world of ours this past Tuesday. There’s really only so much to say about the Android 10 basics at …

Heads up: A free, working exploit for BlueKeep just hit

There’s been a lot of discussion about BlueKeep, its ramifications and various strategies for blocking it. In a nutshell, it’s a security hole in the Windows Remote Desktop Protocol that allows a malicious program to enter your machine – if you have Remote Dekstop turned on, it’s accessible directly from …

Apple issues statement in response to Google security vulnerabilities report

Last week, Google’s Project Zero security research team posted information about a serious vulnerability in iOS. The security exploit (or group of exploits, really) allowed a “small collection of hacked websites” that would, when visited, install code to monitor certain activity on the iPhone. The security holes were patch in iOS …

Time to install the August Windows patches — but watch out for the bugs

August brought loads of drama to the Windows and Office patching scene. Microsoft’s first round of patches killed Visual Basic, Visual Basic for Applications and VBScript in certain situations — on all versions of Windows. Fixes for the bugs dribbled out three, four, six and 17 days after the original infection.  …

Why Apple’s little ‘Find My’ Tile competitor is big news

Apple is expected to introduce its own Tile-competing tracking device(s), perhaps as soon as fall. So, what are the advantages of the device, what can we expect, and what happens next? Freedom from networks There are hundreds of tracking devices available today. These cost anything from tens to hundreds of …

How to create a backup plan to restore passwords if your system fails

Password-management apps are a great way to ensure that you create unique, strong passwords for every service, app, or site at which you need one, and you don’t have to memorize any of them. However, what happens if you have a catastrophic failure, and can’t access your main computer? What …