July 30, 2010

More Thoughts About Passwords

I really should have knocked on wood when I wrote about passwords last week. I was practicing what I preached and knew that I was safe. But sure enough, my old Yahoo email account was just hijacked.

I stopped using this account after I signed up for Gmail, and it had some really old contacts in it. At one point a while back, and after not logging in for over a year, Yahoo sent me an email saying that the account was going to be deactivated. So I logged back in, deleted old messages, contacts, etc, and moved on.

But apparently, those old contacts were not actually deleted. They must have remained somehow linked to the old account, and available to anyone that would be able to hijack it. When whoever or whatever hijacked the account, they were able to send an email to all the contacts linked to the account and make it appear that it was sent by me. The email contained a hyperlink to a program that could be harmful to your PC.

I’m still trying to contact the folks that may have received the malicious email and make sure they are OK, and so far it doesn’t look like anyone was hurt.

Here is a summary of what this episode teaches us. I think it applies to everyone.

  • Just as in the real world, you are never 100% safe. You always need to be on guard.
  • Old accounts that you no longer use may still contain data that could be useful to hackers.
  • Make sure that the passwords you choose for ALL online email accounts are the strongest possible. They should contain at least 8 characters, have no dictionary words or other recognizable patterns and be a mix of alpha, numeric and symbol characters.
  • Make sure your anti-virus and anti-spyware programs are working and contain the most recent updates.

For more information on good password selection, Thoughtpick.com has a very good article on creating strong passwords.

/Steve

Passwords – How Safe is Your Online Information?

Your online security is only as good as your password. You probably make regular visits to dozens of sites that require passwords, so keeping track of them can be a chore. Dealing with so many passwords causes people to do some very unwise things. They might write them down, or store them on a computer file, or even use the same password for everything. All of these defeat the purpose of passwords and can result in compromising your important data.

Recently, an anonymous user posted 10,000 usernames and passwords that had been lifted from Windows Live Hotmail accounts. An online internet security company analyzed these passwords and found some very distressing trends.

  • The most common password was ’123456′
  • The second most common password was ’123456789′
  • Many passwords were people’s names
  • Only 6% used strong passwords which contain a combination of alpha, numeric and other characters

With the requirement for so many passwords, how do you keep track of them?

Security experts say that passwords should use a combination of letters, numbers and other characters and shouldn’t include names, dates or dictionary words. They also say that you should change your password frequently. It’s no wonder that people feel they have to write them down.

Here are some simple rules and tips to help you with coming up with secure passwords and then remembering them when you do:

  • Make Passwords Hard to Guess but Easy to Remember
    When establishing passwords, think of a short phrase that only you would remember and make an acronym. For example, “I Love The Rain” would yield ‘iltr’.  Now, capitalize one or more of the characters and you have ‘iLtr’.  Using this method, you will come up with virtually unguessable passwords.
  • Develop Several ‘Core’ Passwords
    The previous tip will result is a ‘core’ password. Adding at least two numbers and a special character will result in a very strong password. The numbers you use can be from a phone number, address or date. Varying where you put the numbers and special characters will make the password even more secure.
  • Never Compromise Your Password
    Make it hard for hackers and never write your password down. If you sign up for a service that sends you an email confirmation with your password printed in plain text, change it immediately. Never give your password away.  If your password is out of your control, so is your personal information.
  • For Low Security Sites, Use the Same Password
    Sites that don’t store any personal information don’t pose much of a security risk. If you find that you may need to enter personal information later, change your password to make it more secure.
  • Use Extra Security for Financial Passwords
    Each financial site should ALWAYS have its own password. These sites can result in the most risk if your account is compromised. Select the most secure password you can and change it monthly.

/Steve

Laptop, Notebook or Netbook

HappyNotebook-smallIn 2008, more notebook style PCs were sold than desktop PCs, and with the introduction of netbook PCs, this should be the case for 2009.  Currently, netbooks account for almost 6% of the total PC market and some analysts project that sales will remain strong throughout the holiday season.  However, after that is anyone’s guess.  The netbook’s small, inconvenient size and lack of capabilities may be a limiting factor to continued sales growth.

But what’s the difference between a laptop PC and a notebook PC?  And what is a netbook?  There doesn’t appear to be any official descriptions, so I’ve come up with my own:

Laptop – A portable PC with all the capabilities and power of a desktop, but small enough to use while on your lap, weight doesn’t seem to be an issue.

Notebook – Similar to a Laptop PC, but thinner and lighter, generally less than 6 lbs.

Netbook – Smaller and less capable than a Notebook PC, optimized for Internet usage (hence the “Net” in Netbook). Netbooks usually do not have an optical drive and weigh in at 2-3 lbs.

Count me as a netbook fan.  I’ve got some great uses:

  • they’re just the right size for taking into the kitchen for menu reference
  • the exceptional battery life makes them perfect for travel when you might not be near AC power
  • for connecting wirelessly to your desktop PC and acting as a remote desktop

GigaOM talks about Notebooks vs Netbooks

/Steve

Your new PC and all that bundled software

Many new PCs typically come with dozens of pre-installed applications, most of which you would never use.

Needing to keep the retail price as competitive as possible, PC manufacturers pre-install these applications, and the fee they receive from the software developers is used to subsidize the final price.

Some of the programs are common shareware items that you will eventually have to purchase for continued use, and others may be stripped down versions of a major off-the-shelf retail package. Either way, they are taking up resources.

A friend of mine recently brought home a new PC that had 24 applications he didn’t want. He proceeded to uninstall them one by one, but it took him a little over an hour.

Fortunately, there is an application that will eliminate most of these applications and allow you to start off with a fresh, clean PC.  Download and install PC Decrapifier which allows you to pick and choose which applications to remove.

/doc

Why is My New PC So Slow?

Even if you’ve only had your new PC for a couple of months, you could already be experiencing slower performance – from startup to browsing, and even shutdown. How does this happen and what can you do about it. Many people think that they just have to live with it and are prepared to wait until the darned thing stops working before they try and fix it. This article focuses on the causes of reduced performance of relatively new PCs but it could certainly apply to older PCs as well. Older PCs can have many more causes of reduced performance and I will address those issues in a future article.

Your PC may be only a few months old and you’ve taken the time to make sure you have updated antivirus and antispyware programs running. But it still seems to be slowing down. What happened and what can you do about it?

If you rule out Viruses, spyware and other malware, the degradation of a PC’s performance is usually caused by four things:
- Full and/or fragmented Hard Drive
- Errors in the Windows file system (Hard Drive Errors)
- Unnecessary or poorly written background processes
- Registry errors

Full and/or fragmented hard drive

Hard drives can fill up fast. If you have uploaded all your digital photos, as well as your audio and video files, you could be close to capacity. Let’s find out how full your hard drive is. From your Windows Explorer window, right-click on your C drive and then click on properties. You will see a graphical representation of your hard drive as in the image below.

If your hard drive has less than 10Gb of free space available, consider cleaning it up by deleting unused files or moving them to another hard drive. Likewise, if you have a 500Gb hard drive or larger and it is more than 90% full, consider a cleanup. One of the quickest and easiest ways to acquire additional storage space is to purchase an external hard drive. The price for a 500Gb external hard drive has fallen to below $100 (USD) from many online vendors. If you are a little more ambitious and understand the basics of PC maintenance and repair, an additional internal hard drive is another good option.

The fragmentation status of your hard drive has a great effect on data retrieval speed. When a hard drive writes data, it rarely puts the file in one contiguous space. It usually splits the file up into many fragments and has to remember where all the pieces are when it retrieves the file later. This method creates fragmented files. When too many files are so fragmented, the overall performance of the drive is degraded. Fortunately, there is a built-in program to de-fragment your hard drive. The Defrag utilities in the most recent versions of Windows are slightly different, but the end result is the same. In XP, the defrag utility presents itself with a graphical interface that gives you a visual feel for how fragmented your hard drive is. For Vista, Microsoft wanted to make the defrag utility more of a background process, so they stripped the graphical presentation and added the ability to better schedule automated defrag processes. Win7 defrag is similar to Vista except that it gives a little more info about the status of your drive. The image below shows the “Tools” tab of the same window we used above. The Defragmentation section of this window is the entry point for the defrag utility.

HGTools1

Whichever version of Windows you have, running defrag on a regular basis is one of the best ways to maintain good hard drive performance. After you set up an automated schedule, you may never have to deal with it again.

Before we move on, take another look at the first image above and notice the “Disk Cleanup” button next to the disk space pie chart. Clicking on this will cause your PC to analyze how much disk space can be recovered by deleting unnecessary files that have built up. These files include temporary internet files, recycle bin files, downloaded files, etc. After the PC has analyzed the potential files, it then displays them to you and asks if you want to delete them. You can check or uncheck the boxes next to the file types and continue, or cancel the whole process. This little cleanup utility is another easy way to perform maintenance on your hard drive.

Errors in the Windows file system (Hard Drive Errors)

Usually, hard drive errors won’t cause sluggish performance, but will cause your system to crash or not start up at all. Occasionally, errors on your hard drive can slow down your PC as it tries to read the data repeatedly. Hard drive errors can be caused by a defective hard drive or loss of power or power surge during the time the hard drive is writing data to the disk.

All versions of Windows have a utility to check the hard drive for errors. Look at the image above that shows the “Tools” tab. you will see a button for error checking labeled as “Check now…”. Clicking on this will bring up a dialog box that asks if you want to automatically fix errors and/or scan for bad sectors. Make sure that the first check box is checked and click the Start button. Windows won’t let you do an immediate scan of the system drive because it has many open files, so it will ask you if you want to schedule a scan to occur the next time you reboot. Click on the Schedule button, and then restart your system. During the startup process, your PC will take a slight detour and perform a scan of your hard drive. If there are few or no errors, it may only take 5 – 10 minutes, but if there are many errors, it could take 30 minutes or longer. If the scan found a few errors and successfully fixed them, you can safely use your PC, but run another scan in a few days to make sure that there are no further errors. If you find that you continually get errors during these scans, I would suspect the hard drive itself is defective.

Unnecessary or poorly written background processes

Background processes are programs that are running without any visual evidence, they are usually processes that handle print chores, antivirus monitoring and other important tasks, but can also be useless “helpers” that sit and wait for a certain event to take place such as opening a .pdf file or monitoring if a certain application has an updated version. Over time, even a relatively short period, especially if you download and install many applications, the number of the unnecessary background processes can grow to be a problem.

Fortunately, you can take control of the situation and stop these unwanted processes from loading. However, you have to be able to separate the good processes from the not-so-good. Let’s start by looking at the processes that are running on your PC.

The application we are going to use is what is known as a Windows Task Manager. Task Manager is an application that displays the processes and programs that are currently running. It also displays performance statistics based on the activity of the processes. As usual in Windows, there are several ways to start Task Manager. The easiest is to right click on any unused area of the task bar and select “Start Task Manager”. You can also use the “CTRL+ALT+DEL” keyboard combination to bring up a menu that has the Task Manager selection. Either way, you will then be presented with a window that is similar to this one:

Select the “Processes” tab and make sure that you are showing processes from all users by checking the box at the bottom left (this checkbox may be a button when you first open Task Manager.) You are now seeing a “real-time” representation of what your PC is doing. The processes are contained in the “Image Name” column. The next column shows who or what “owns” the process. The CPU column displays a number that is the current percentage of CPU time that the process is getting. The next column shows the amount of memory that the process is using, and the last column is a description of the process. If you click on the column heading name, the table will perform a sort based on that column. Click it again and the sort will reverse. Since we are dealing with how much CPU time each process is getting, we need to sort by the CPU column. The first time you click on it, it will perform a sort from least to most usage. You will need to click on it again to sort from most to least. This will result in the process with the most CPU usage on the top.

Remember that the Task Manager is a real-time representation of what your PC is doing, so the data in the list is constantly changing. A “normally” running PC should have at the top of the list a process titled “System Idle Process.” It shows how much idle time the CPU has and its normal CPU percentage can vary between 90%-99%. Lots of idle time is good, so if it stays below 90% for more than several seconds or more, you have processes that are consuming large amounts of CPU time. Since we sorted the list by CPU, you can see the processes that are consuming the most CPU time at the top. Don’t bother looking at processes that continually show 0% CPU time, but make a note of the processes that are consuming lots of CPU time. Are they good or bad?

Fortunately there is a resource that will help determine the “good” processes from the “bad.” Head on over to www.tasklist.org and you can research each of your processes and determine its value. If you can’t find it on this list, just do a google search on the process name. Your research will lead to your determination of the value of the processes so that you can make a decision as to whether you want to terminate them or not.

Your next step is to actually stop the process from running, but before you proceed, make sure that anything you are working on is saved because you may have to reboot your PC. At the bottom right of the Task Manager window is a button labeled “End Process” that allows us to terminate processes. Highliting a process and clicking on this button will cause the PC to attempt to terminate the process. Most of the time the process will end, but some system processes are so critical to the core of the OS that they won’t terminate. You will use trial and error to determine the results of terminating these processes. After you terminate a process, use your PC for a bit to see if there was any change in performance. Terminate one process at a time until there are no more processes that are consuming CPU time. If at any time your PC locks up, you may have to press the reset button or the power button to restart it.

We’re not done yet, because these processes will start right back up when you reboot your PC. Don’t despair, we have a solution for that. But first, when you were doing your research on the processes, did you find that the processes were related to a program that you recently installed? If so, you can decide to simply uninstall the program. Otherwise, Microsoft has a System Configuration utility known as MSCONFIG that allows you to pick and choose which processes can run at startup. I’ll be writing a separate article soon with instructions on MSCONFIG, so until then, there is an excellent, detailed article here:

Registry errors

The Windows registry is a system database that stores settings and options for the operating system. It contains information that establishes and defines operating parameters for hardware, software and user specific settings. The registry contains thousands of these settings and can be difficult to comprehend. Extreme caution needs to be taken when attempting to modify the data because one mistake can corrupt your Windows installation.

When errors appear in the registry, they can cause slow startup and sluggish performance. Errors can even cause a system to not work at all. Errors can appear in the registry from many sources such as poorly written applications and uninstall scripts or loss of power during registry updates.

Although it is possible to modify the registry manually, there are many software utilities that do the hard work for you. These utilities, known as Registry Cleaners, search out errors in the registry and make appropriate modifications which can result in marked inprovement in performance. Of the many Registry Cleaners available, I have found that “WinASO Registry Optimizer” does a good job and is easy to use.

Summary

After following the steps outlined in this article, your PC should show signs of improvement. The four reasons for sluggish performance are the main reasons, but not all of them. Other reasons for a slow PC can be faulty hardware, bad device drivers or defective memory. Additionally, the operating system could have become corrupt, but this condition is difficult to diagnose.

If your PC is still sluggishly slow, your next step will probably have to be a complete re-install of the operating system. This is fairly easy to do, but I will cover it completely in another article. Also, a future article will discuss the necessary steps in troubleshooting older PCs.

/doc