12
Feb

Security Roundup: Adobe and Storm

A roundup of computer security-related posts that I think you should be aware of:

* McAfee Avert Labs Blog reports of an Adobe PDF exploit spreading in the wild. Given the fact that PDF is almost a standard document format, be careful in opening PDFs. Affected Adobe apps are Adobe Reader 8.1.1 and earlier versions; and Adobe Acrobat Professional, 3D, and Standard 8.1.1 and earlier versions. Temporary mitigating measure includes not opening PDF files coming from the Internet. Users are advised to upgrade their Adobe PDF apps.

Techie part: the exploit allows for a JavaScript embedded in a PDF file to download a Trojan. Of course, you have to open the PDF file first.

Really techie part: vulnerability reports by Securiteam (with suggested workaround) and iDefense.

* And this month being the season for love (yeah, right), expect to get a lot of spam exploiting Valentines Day. TrendLabs Malware Blog warns people that the most prolific worm of 2007 (and most prolly 2008), Storm, is exploiting this event. These spam emails contain links to Web sites. DO NOT CLICK ON THOSE LINKS, of course.

29
Jan

Installing gOS over Ubuntu

If you want to install the cool gOS look over Ubuntu Linux, do the following.

1. Edit your software repository list to include gOS. Open a terminal window (Applications>Accessories>Terminal), and type sudo gedit /etc/apt/sources.list.

2. Enter the following:
deb http://packages.thinkgos.com/gos/ painful main

3. Save the file.

a. You must also add the key so that aptitude will not warn you that the source is untrusted. At the terminal enter
wget http://www.thinkgos.com/files/gos_repo_key.asc

b. Add the key by entering the following on the terminal
sudo apt-key add gos_repo_key.asc

c. Update aptitude through this command
sudo aptitude update

4. To install gOS via terminal, I suggest using aptitude instead of apt-get. It makes the removal easier (in case you want to revert to plain Ubuntu). Note that you need an Internet connection for this one. Enter the command
sudo aptitude install greenos-desktop

5. After installation, log out. In the login screen, press F10. Click on Select Sessions, then click on Enlightenment. Click Ok.

6. After entering your user name and password, you will be prompted whether to make Enlightenment as the default desktop. If you are just checking, click Just this time.

And you will now see the default green theme.

Enlightenment desktop

To remove gOS, issue this command at the terminal:

sudo aptitude remove enlightenment

Aptitude will automatically remove greenos-desktop package.

ADVANCED MODE:

Enlightenment DR17 is the environment used by gOS. If you want the latest version installed, add this line to the repository list (follow step one above):

deb http://e17.dunnewind.net/ubuntu gutsy e17

On the terminal, use aptitude to install the latest Enlightenment:

sudo aptitude install enlightenment

Note that DR17 is still under heavy development, and may be buggy. The upside is that you get the latest modules and gadgets (like the mixer and network gadgets).

If you want to try the beta of the new version, named Rocket, add this to the repo list instead of the one stated at step 1:

deb http://packages.thinkgos.com/gos/ reloaded main

Be warned, though. According to a post in Ubuntu Forums, installing Rocket will remove several packages, including network-manager.

(Steps taken from the unofficial gOS Forum.)

24
Jan

Impressions on Enlightenment over Ubuntu

I have been using Ubuntu (technically, more later) for the past month on an MSI VR320 K2 laptop. I have three desktop environments and one window manager installed – Gnome, KDE, Xfce, and Enlightenment (which comes as default desktop for gOS).

I first installed Ubuntu, and I experienced two problems with the default environment – GNOME. One was that nagging ad infinitum drum sounds; I had to mute the sound to get rid of it. One solution offered somewhere was to include the Gutsy backport repository and do an update, but Synaptic and apt-get always report that the repository is empty.

Second, the WiFi. I connected the laptop to a WiFi area secured by WPA. So I entered the passphrase and it connected fine on the first try. I just couldn’t connect again afterwards.

Then I tried installing gOS, which is just basically Ubuntu with another window manager. I liked the UI, but the network manager I did not. So i reverted to Ubuntu.

Enlightenment desktop
Anyway, as stated earlier, I had installed 3 environments and 1 window manager. Currently I am using Enlightenment with the default gOS theme. I was able to recreate the dock, but with several gadgets installed. I have 3 shelves on the desktop. On top contains an iBox (if you minimize a window, its icon is placed in this gadget). At the middle right is the iClock gadget. And the shelf below contains an iBar (gOS’ dock), the Pager (desktop pager), and temperature, battery, and CPU monitors.

This setup works for me, since the desktop is easy to the eyes, looks great, and is not cluttered. And I can play music without the nagging sound that I always get when I use GNOME.

I was also able to install GNOME PPP. This means I can use my 3G phone as modem, which is nice. I don’t have to use Windows just to browse the Web when I’m home. I haven’t tested the WiFi yet, but will do so when I get the chance.

I will post more impressions next time. Suffice to say that I like my Enlightenment setup now.

I will try to use KDE and Xfce in the next weeks, and will post my impressions soon. Will save GNOME for last, as I intend to savor Desktop and Rotate Cube effects. Take that, Windows!

And oh, don’t forget – unless you are very sure, do not press Shift+Backspace.

GLOSSARY:
Shelf – technically, a container where you can place gadgets
Gadget – a piece of software that can convey information (like a battery meter) and contain several icons (iBar and iBox)
Synaptic – the graphical package manager for GNOME
Repository – a central location where you can find packages
Packages – applications that you can install

22
Jan

Shopping for a laptop, 3 (or how getting one can screw you up)

There are several cheap Celeron-powered laptops in the market today. Most of them arrived at the Php 29,999 price point (back in 2007), but now that is about to drop due to the following reasons:

1. Some manufacturers are releasing cheap Pentium Dual Core laptops, like MSI’s VR320 P2, with SRP of Php 29,999 (lower at several shops). It has the following specs:

* Intel® Pentium® Duo Mobile Technology
* Intel Pentium® Dual Core T2130 1.86GHz 533MHz 1MB L2 Cache Processor
* ATI RC410ME Chipset
* ATI Mobility Radeon X200 Graphics 256MB Shared
* MSI Wireless 802.11G
* 1GB DDR2 Memory (Max: 2GB)
* 60GB Hard Disk Drive
* Super-Multi DVD+/-RW/Ram Dual Layer Drive
* Superb Glare 13.3″ Widescreen Display (1280×768)
* Card Reader 4-in-1 MMC/SD/MS/MSPro
* Firewire Port /10/100Lan / 56K Modem
* 3 x USB2.0, Express Card Slot
* Weight : 2.1kg; Battery life: 3Hours (6-Cell)

With cheap Pentium Dual Core laptops in the market, Celeron laptops appear to be on the way out.

2. Intel is releasing dual-core Celerons soon. While the early Celeron Dual Cores will be desktop-based, it is only a matter of time before Celeron Dual Core powered laptops appear in the market.

Stores will now be hardpressed to dispose their Celeron laptop inventories. Expect these to breach the Php 25,000 barrier (unless distributors pull them out).

I suggest you skip Celeron laptops, notwithstanding the cheap price right now. At the same price, get that MSI VR320 P2.

Or maybe not. I got an MSI VR320 K2 laptop last month for Php 39,999 at 12 months, 0% interest installment term. Net Essentials, MSI’s distributor in the Philippines, in its Web site (linked above) listed an MSI VR320 K2 Plus. It shares the same specs as that of K2, but with an upgraded memory (2GB) and a LOWER price, Php 34,999 (though I think the 0% installment is on a 6 months term only). And yes, I AM NOT RECOMMENDING THAT YOU GET AN MSI LAPTOP, not now that they release new models with better specs and lower prices at such (very) short gaps.

That’s the problem with technology. Get one now, and tomorrow it is already obsolete.

17
Jan

Smart 3G network problem?

Last night, I was having trouble with my Smart postpaid line. I was on the bus when I took a peep at my Sony Ericsson P1i. At the status bar, an icon appeared. So I tapped on it, and a window appeared. It said that “Incoming calls not allowed” and a Settings button appeared. Tapping on the button led me to the Internet accounts settings page. I ignored it and went on with the trip home. BTW, I sent a text message, and at first the sending failed, but on the second attempt, the message was sent. It was 10 minutes before 6PM.

I got home by 7PM, and after dinner, I checked the phone again. The icon remained, and out of curiousity I made a call to our landline. So I keyed in the number and tapped Call. After two seconds the phone returned to standby mode. So I turned off the phone, took off the SIM, and inserted the SIM into a Nokia 3660. I made a call to the same number, and our landline phone made its usual ringing sound. So I inserted the SIM back into P1i, powered it on, and the icon was still there. Making the same call, and the same result – nada.

What I did was to set the phone so that it would connect to GSM network only. The setting before was 3G only. (To do this on P1i, go to Main Menu>Control Panel>Connections>Mobile Networks. On the Mobile Networks window, tap More and then tap on GSM/3G networks.) The phone disconnected and reconnected. The 3G icon was gone. I then made a call to our landline, and the landline sounded. At this point, I received a reply to the message that I had sent earlier; the message was time-stamped 6:10PM.

I set the mode back to 3G only, and after disconnection/reconnection, the suspect icon appeared again. So I set it back to GSM only, and then played Warcraft III: Frozen Throne for an hour. After playing, I set the mode back to 3G, and the suspect icon was gone. Content, I went to sleep.

End of story? Nope. Woke up at around 12 midnight and took a look at the phone. “Emergency calls only,” the phone display said. Set the mode to GSM only, and the operator name appeared. Went back to sleep.

So at 8AM, I set the mode back to 3G, and no problems so far. Must be a problem in Smart’s 3G network yesterday. Or my phone’s getting old.

10
Jan

CES 08 Notables, 2

CES LogoListed below are the notables in this year’s Consumer Electronics Show, and why:

* Skype on PSP – A gaming phone is near. Just you wait.

* Cloudbook/Nanobook v. eee and Cloudbook’s coming – Should Asus be threatened? At the same price, Cloudbook/Nanobook appears to be better than eee, spec-wise (except for the weight). We’ll see. Everex better put gOS Rocket on Cloudbook.

* Curved displays – What’s next? a 306-degree-view display? Half Life addicts must be salivating at the potential.

* MSI venturing into mobile phones – First, they have to be aggressive first (they have nice notebooks spec-wise per price point). Second, have a better logo; why can’t MSI use its star logo instead of the logotype MSI?

* eee on Splashtop – It seems that Asus’ miniwonder knows no bounds. What’s next? eee pc server edition?

* USB 3.0 – At least we have an idea on how the connector would look like. Hopefully it is not vaporware.

* Point-here-and-there – Military generals would want this. Congress better look out.

8
Jan

CES 08 Notables, 1

CES LogoListed below are the notables in this year’s Consumer Electronics Show, and why:

* Panasonic’s humongous TV screen – If that ain’t big, you must be Goliath. 150-inch plasma? You must have a net worth like Bill Gates’ to get one – if it becomes available. And soon. (Via Engadget)

* Pioneer’s extreme contrast concept plasma – Good thing I was not there, or I might have sensory overload.

* Bill Gates’ final CES keynote – Aside from the fact that it was the last time for Bill (ha ha ha, yeah right, first name basis) to keynote CES, the intro video was LOL.

* Asus’ eee pc with WiMax – It seems that Asus can’t go wrong with its eee line. I wonder how much it will cost. And with GSMA going for LTE, do not expect this unit to ship here (unless one telco offers WiMax here, ehem Bayantel). And those early adopters in the US must be puking now.

* Driver-less cars by 2018 – Finally, an incentive for me to get a car – if I have the funds by that time. But, nah. Unless GM ditches manual override, Filipino drivers will override the auto when they find the car slow. Filipinos are after all, more daring versions of Michael Schumacher. Either that, or these automated cars get attitudes due to horrendous traffic and undisciplined Filipinos.

13
Dec

Shopping for a laptop, 2

In the previous post, I talked about my plans on getting a laptop, and the horrendous headache that shopping can give. Well, let’s add more to the confusion, shall we?

Last night, I went to SM Megamall Cyberzone, and I took a look around some shops (some of them were closed for their Christmas parties). So I looked at Octagon, and saw this MSI Megabook VR320 K2, a Core2 Duo laptop with the following specs:

Processor: Intel Core2 Duo T5200 1.6 GHz
Memory: 1 GB DDR2
Video: ATI Radeon 256 MB Shared
Hard disk drive: 80 GB SATA
Optical drive: Super Multi DVD
Screen size: 13.3″
WLAN: 802.11 b/g
Weight: 2.1 kgs
Price: Php 39999/Php 3329.16 for 12 months

I think this is a steal. There are cheaper models from Blue and Neo but I haven’t considered them.

Remember that confusing Compaq Presario V3617TU? The one with confusing specs? To add more to the confusion, Silicon Valley Computer has that model, and they list the processor speed as 2.0 GHz.

Whether I will get a laptop or not remains to be seen.

11
Dec

Shopping for a laptop

Who says shopping is a nice experience?

I am currently entertaining the idea of getting a laptop, and as an academic exercise, I began looking for the right laptop at the right price.

The exercise had progressed to the point that I have several candidate-laptops in mind. The major consideration was the processor. My list is divided according to the processor – single core and dual core (the first and second generation). Basically, Celeron-powered laptops fall on the single core category (I could have bundled the Intel Core Solo laptops on the single core group, but I haven’t considered them). Then, I considered laptops powered by Intel Core Duo processors and Core2 Duo processors.

I also considered the reputation of the laptop’s brand and manufacturer. If I can’t find the manufacturer’s Web site, they are automatically not considered. Also, I checked if enough support exists for the laptop (for example, driver downloads). Finally, comments by laptop users are also considered.

Lastly, the list is trimmed down according to price. I listed down those laptops whose price I am comfortable with – if I can comfortably pay for the monthly installment without seeing myself going bankrupt in case Gloria Arroyo finally managed not to mask the true state of the economy. So those products not offered under 12 months, 0% installment are discarded from consideration.

I will not list down the specs. Instead, I linked to either the official product page or to a distributor’s product page.

Celeron
Manufacturer Brand Model Price Notes
Packard Bell Easy Note FO336-V-089 Php27995/Php2332.92 for 12 months Here’s a more expensive model: F0335-207
Compaq Presario C702TU Php26950 I think this is offered at 6 months installment at Accent Micro
Acer Aspire 4310-400508Mi Php29988/Php2499 for twelve months A friend told me that Acer laptops break down easily (her husband works for a certain IT distributor). Another friend told me Acer is OK.
Acer Aspire 4315-050508 Php29988/Php2499 for twelve months With Windows Vista Starter Edition.
Intel Dual Core/Core Duo
Manufacturer Brand Model Price Notes
Packard Bell Easy Note FO445-U-078 Php39900/Php3325 for 12 months Best buy due to the hard disk. Price as quoted in the downloadable price list.
Compaq Presario V3617TU See caveat below. See caveat below.
Acer Aspire 4710Z-3A1G08Mi Php39900/Php3325 for twelve months Pentium core duo.
Intel Core2 Duo
Manufacturer Brand Model Price Notes
Packard Bell Easy Note GN45-017 Php50995/Php4249.58 for 12 months Not cheap.
Compaq Presario V3525 Php49950/Php4162.50 for 12 months Discontinued.
Acer Aspire 4710-101G12 Php52980/Php4415 for twelve months (None)
Acer Aspire 4520-401G12 Php39900/Php3325 for twelve months AMD Turion 64 X2

NOTE: Prices are current as of this posting, subject to change without prior notice. Contact your friendly distributor for details.

CAVEAT: There’s one discrepancy that I want to point out. Two distributors offer Compaq Presario V3617TU at different prices. One distributor offers it at Php39,950, while another prices it at Php34995. A steal? Read carefully. The processors are different. For the record, here is the official specs from HP Compaq.

What have I learned from the experience? The Americans are luckier: they can get Core 2 Duo laptops at around US$450, which is Php19530 when converted at the rate of Php43-US$1. That amount will get you the Asus eee PC, but not a Core2 Duo laptop.

Also, I learned that shopping can give you a tremendous headache. I am having one right now.

There are loads of things to consider when getting a laptop. Unlike a desktop computer, upgrading a laptop is not an easy task, and not everything inside a laptop can be upgraded. So, before you buy a laptop, assess first your needs. For what purpose will you use the laptop? How mobile would you like to be? What are your Internet connectivity options? Yes, answering a lot of questions is hard enough, and when you have answered all of them, looking for the specific laptop that fits your needs is harder. And if you live in the Philippines, you are immediately at a disadvantage – laptops here are relatively expensive as compared to the prices in the United States.

You might want to read this excellent article by PC Magazine on what to consider when getting a laptop. You may also want to visit MyProductAdvisor.com. And of course, don’t forget to ask friends for advise, specially if they are laptop owners.

(Will update this post if I manage to find better deals.)