An overview of Windows Search Technologies

This Microsoft white paper, Windows Search Technologies Overview for Business Customers, presents an overview of Windows Search technologies, and the immense value they bring to the enterprise, small businesses, and consumers.

Since I got over the errors I was making when I posted here that made my searched less than optimal, I have gotten to appreciate with Windows Search and the functionality it gives me, as delivered in Windows Vista™, where it permeates all aspects of the operating system.

The fact that I do not need an external/3rd party app to perform search, and by not doing so, reduce the chances of having a data leak over external, or for that matter, internal links, is a great bonus.

The Whitepaper can be downloaded here.

It requires the XPS viewer, a component of Windows Vista, or found here for all other Microsoft operating systems.

[ View ]

Google Gadgets can be misused by phishers

The domain used to host small Google Gadget applications written by Web developers could be misused by phishers, a Web security researcher said Friday.

Google Gadgets are little programs that gather information on the Web and then display them on multiple Web pages. They are used to give Webmasters an easy way to display everything from sports scores to astronomical data on their sites.

Unfortunately, they can also be misused by phishers to get around antiphishing filters. Attackers could create a phishing site on the gmodules.com domain and then send that URL to victims. Because Google’s gmodules.com domain is trusted by antiphishing filters, victims might then go to the phishing site without being warned by their browser’s filtering software.

Security researcher Robert Hansen, a frequent critic of Google, reported the issue to the company’s security team, but he was not satisfied with their response. He says Google told him that what he sees as a flaw is simply part of the site’s expected behavior. Google couldn’t be reached immediately for comment.

Google should restrict the URLs that can use this domain to avoid helping online criminals, said Hansen, who is CEO of SecTheory. “If they leave it intact, I guarantee you it will be used in an attack.”

Such an attack would probably be obvious, however, to a vigilant Web surfer, who would know better than to enter banking information on a site hosted on the gmodules.com domain.

There’s not much that can be done to prevent phishers from abusing sites like this if Google wants to let its users create content, said Alex Stamos, a researcher with Isec Partners. “They have to have this throw-away domain to jail modules written by other people,” he said. “It’s not an unreasonable model, and it’s the best they can do to host content created by malicious parties while not exposing themselves to attack.”

[ View ]

Order Xbox 360 Elite via Indiatimes

Less than a year after the launch of Xbox 360, Microsoft has announced the launch of Xbox 360 Elite in the country.

The Xbox 360 Elite sports a premium black finish, and signature metallic detailing. It requires a component HD cable or HDMI cable, both of which are included with the package. While the Xbox 360 includes a 20GB hard drive, the Xbox 360 Elite includes a 120GB hard drive.

Salient features of the console are: high definition multimedia interface (HDMI) port, high definition cable for the console, and a wireless controller.

New to Xbox 360, the HDMI cable allows consumers get HD video (up to 1080p) and multi-channel surround sound — all from one cable.

The wireless controller is now in black, and features the Xbox Guide Button for quick, in-game access. The controller boasts a range of up to 30 feet and a battery life of up to 30 hours on 2 AA batteries.

The headset is also black, and lets gamers strategize while playing games.

Other features of the newbie include: 3 powerful processors capable of producing superior HD entertainment; 16:9 cinematic aspect ratio, anti-aliasing for smooth textures, full surround sound, DVD playback with upscaling capabilities; etc.

Mohit Anand, country manager – entertainment and devices division, Microsoft, said, “There is a huge demand for gaming in the country, and fans are constantly craving for products and features that enhance their experience. The Xbox 360 Elite’s good looks, larger storage space, and premium features will allow our customers in India to enjoy all that the next generation of entertainment has to offer.”

Beginning today, the Xbox 360 Elite is available exclusively through indiatimes.com. Those interested need log on to www.indiatimes.com and place their order.

Meanwhile, there is no word on whether and when the Xbox 360 Elite will be out on the market. The Xbox 360 Elite is priced at Rs 34,990 vis-a-vis the Xbox 360 which is priced at Rs 19,990.

Microsoft launches online storage service with SkyDrive

Microsoft Corp has simultaneously released an online storage service ‘Windows Live SkyDrive’, a variety of upgrades to Windows Live Hotmail, and a beta of home.live.com.

With SkyDrive, customers can have anywhere, anytime access to their files and information on the web, as well as options for conveniently sharing it with others.

Jaspreet Bindra, Country Head, MSN India and Windows Live, said, “This is the first time Microsoft has offered sharing and storage in this manner, and we’re excited to roll it out to our customers. We are hoping that this platform would prove to be a way of offering customers a range of services, to meet their storage and file-sharing needs with maximum security.”

The initial beta offers 500 MB of free storage and a customer would be able to store approximately 100 songs, 1,000 office documents and 3,000 digital photos at 1200×1200 resolution. Beta is available in the US, UK and India only.

The official communique pointed out that beta is an endeavor to deliver a new and integrated suite approach for the next generation of Windows Live. A beta of the full suite of communications, sharing and online safety services is also expected in the coming weeks.

Also, increased storage limits to five GB for free accounts and 10 GB of storage for subscription-based customers of Windows Live Hotmail Plus are among the other upgrades released.

DoD, not bloggers, biggest security risk

In mid-April the Army ordered soldiers to clear any content to be posted to blogs, or even emailed, with a superior officer. The reasoning behind Army regulation 530-1: Operations Security (OPSEC) was, of course, security. However, a series of audits have shown it’s really the Department of Defense we should be worried about, not bloggers.

The audits were done between January 2006 and January 2007. The results were only obtained after the Electronic Frontier Foundation acquired a copy through the Freedom of Information Act.

According to the audits, there were at least 1,813 violations of operational security policy on 878 military websites. Contrast this to blogger breaches: there were 28 on 594 individual blogs during the same period. Do a little math, and if there were a comparable number of blogs as DoD websites, you would have a total of 41 blogger breaches vs. the 1,813. Not really a comparison, is it?

What is The Google Sandbox Effect?

In the age of fair competition you may find it hard to believe that a search engine may hinder the appearance of a new website.

This is what is currently believed to be happening on more web servers today. Some programmers have viewed Google as uncomfortable to rank newer websites until they have proven their viability to exist for more than a period of “x” months. Thus the term “Sandbox Effect” applies to the idea that all new websites have their ratings placed in a holding tank until such time is deemed appropriate before a ranking can commence.

However the website is not hindered as much as the links that are reciprocated from other users. Newer links that are created are put on a “probationary” status until again they pickup in rank from other matured sites or placed directly by an ad campaign. The idea behind the hindrance is to prevent a fast ranking to occur on a new website. The usual holding period seems to be between 90 and 120 days before a site would start obtaining rank from reciprocal or back linking.

Some advice has been given to have companies you are going to reciprocate back add your link first to the website. This may help grandfather your site in, thus reducing the waiting time associated with “new” websites. People have noticed a 0 page rank when first signing up and receiving a bolstering 7 page ranking after 4 months. Why the delay? The fact is, that if people realized how easy it would be to get a high ranking, would that take away the credibility of the engine. It depends on whom you ask, but it does seem to be happening frequently to newer subscribers. Do not discontinue back linking, your rank will eventually appear.

Corsair introduces encrypted, auto-locking USB drives

In a press release issued today, Corsair announced the release of new line of secure mobile storage. Their “Flash Padlock” units are USB drives that include an integrated hardware encryption and authentication, which encompasses a variety of different functions. It includes automatic “locking” after unplugging as well as the ability to lock it with a 10-digit pin, and others:

With its simple touch-pad security PIN entry system, Flash Padlock can be unlocked quickly and confidentially for use as a standard USB flash data drive. Flash Padlock is impervious to “brute force” hacks or keystroke loggers that would defeat a software secured USB flash drive.

The device is supposedly compatible with all 3 major computer platforms, including Windows, Mac and Linux. That makes the device somewhat unique, and the price isn’t all that bad, with the 1GB units starting at $29.99. You can read the full press release at Corsair’s site.

Google opens click-fraud Web site

Google has unveiled a Web site “resource center” focused on the thorny issue of click fraud, which many consider a potential threat to the company’s main source of revenue: Pay-per-click advertising.

Google developed the new Ad Traffic Quality Resource Center primarily to give its advertisers a single place to find Google’s information about click fraud, said Shuman Ghosemajumder, business product manager for trust and safety at Google, on Friday.

In the pay-per-click format, advertisers pay every time someone clicks on their ads, which are linked to a Web page. Click fraud happens when companies click on competitors’ ads to drive up their ad spending. Another common click-fraud practice is for Web publishers to click on their sites’ ads to increase their commissions.

With some organizations estimating click-fraud incidence at over 30 percent in general, Google has gone on the offensive in researching this topic and stating publicly what it is doing and what is the extent of the problem in its own ad network.

For example, Google proactively monitors its network for what it calls invalid clicks, which include not only malicious clicks but also innocent practices that may look like click fraud, such as clicking on an ad twice.

It has concluded that less than 10 percent of clicks on Google ads are invalid and that only 0.02 percent are declared invalid as a result of advertisers’ complaints.

Along the way, Google has locked horns at times with companies that provide click-fraud monitoring and measurement services, questioning the validity and thoroughness of their methodologies.

The resource center, unveiled Thursday evening, is the latest in a series of click-fraud tools Google has been making available to its advertisers.

Originally slated for March, the resource center’s debut was delayed as a result of shifting priorities within the group in charge of click fraud, Ghosemajumder said.

For example, the group decided to prioritize organizing a click-fraud forum for Google advertisers that was held at the company’s headquarters in May, he said. A similar event will be held later this month in Google’s New York City offices, he said.

Already in place is a service called IP Filtering, which lets advertisers “blacklist” certain IP addresses for whatever reason, such as suspicion of click fraud or simply because their clicks never lead to a sale, he said.

In mid-2006, Google began reporting to advertisers the number of invalid clicks to their campaigns, as well as what percentage they comprise of all clicks.

Google plans to beef up these reports with the amount of money Google didn’t bill the advertiser by detecting and discarding invalid clicks. This was also slated originally for March.

Click fraud has led advertisers to sue Google, Yahoo Inc. and other providers of pay per click ads. Google reached a landmark settlement of a click-fraud class action lawsuit last year which many described as a big victory for the company. A loss could have likely cost the company hundreds of millions of dollars, but instead Google managed to settle the case for $90 million. As part of the deal, all but several hundred Google advertisers forfeited their right to sue the company over click-fraud instances dating back to 2002.

The settlement also allowed Google, which admitted to no wrongdoing or liability, to only pay a third of the settlement in cash — all for plaintiffs’ attorney fees — with the rest taking the form of credits for advertisers.

[ View ]

An overview of Windows Search Technologies

This Microsoft white paper, Windows Search Technologies Overview for Business Customers, presents an overview of Windows Search technologies, and the immense value they bring to the enterprise, small businesses, and consumers.

Since I got over the errors I was making when I posted here that made my searched less than optimal, I have gotten to appreciate with Windows Search and the functionality it gives me, as delivered in Windows Vista™, where it permeates all aspects of the operating system.

The fact that I do not need an external/3rd party app to perform search, and by not doing so, reduce the chances of having a data leak over external, or for that matter, internal links, is a great bonus.

The Whitepaper can be downloaded here.

It requires the XPS viewer, a component of Windows Vista, or found here for all other Microsoft operating systems.

[ View ]

Google Gadgets can be misused by phishers

The domain used to host small Google Gadget applications written by Web developers could be misused by phishers, a Web security researcher said Friday.

Google Gadgets are little programs that gather information on the Web and then display them on multiple Web pages. They are used to give Webmasters an easy way to display everything from sports scores to astronomical data on their sites.

Unfortunately, they can also be misused by phishers to get around antiphishing filters. Attackers could create a phishing site on the gmodules.com domain and then send that URL to victims. Because Google’s gmodules.com domain is trusted by antiphishing filters, victims might then go to the phishing site without being warned by their browser’s filtering software.

Security researcher Robert Hansen, a frequent critic of Google, reported the issue to the company’s security team, but he was not satisfied with their response. He says Google told him that what he sees as a flaw is simply part of the site’s expected behavior. Google couldn’t be reached immediately for comment.

Google should restrict the URLs that can use this domain to avoid helping online criminals, said Hansen, who is CEO of SecTheory. “If they leave it intact, I guarantee you it will be used in an attack.”

Such an attack would probably be obvious, however, to a vigilant Web surfer, who would know better than to enter banking information on a site hosted on the gmodules.com domain.

There’s not much that can be done to prevent phishers from abusing sites like this if Google wants to let its users create content, said Alex Stamos, a researcher with Isec Partners. “They have to have this throw-away domain to jail modules written by other people,” he said. “It’s not an unreasonable model, and it’s the best they can do to host content created by malicious parties while not exposing themselves to attack.”

[ View ]