Life and Kraya by Stephen Ramsay
Security
Microsoft Internet Explorer Popularity vote
Mar 1st
Those of you who follow the news may be aware of minor but major changes to Microsoft Internet Explorer.
All Windows 7, Vista and XP users who currently use internet explorer will be offered a choice as part of the deal Microsoft reached with European Commission.
Microsoft IE sits awaiting the worlds judgment, like the American high school cheerleader who’s inexplicable popularity is for the first time being put to the test, as the not so popular kids elect a new leader.
A pop-up window will prompt people to choose and install one of 12 different browsers or let them stick with Microsoft’s Internet Explorer.
Kraya recommends users choose anything but Internet explorer. Users are able to select any browser of their own choosing however we would strongly recommend users pick from our top picks:
Mozilla Firefox http://www.mozilla.com/firefox/
Google Chrome http://www.google.com/chrome
Apple Safari http://www.apple.com/safari/
The big question is will the Anti-trust agreement and the fines totaling 1.68bn euros ($2.44bn, £1.5bn) that have been imposed by the EU on Microsoft make any difference? Take a look at the BBC graphic below, IE has a massive dominance in the browser market in the main due to the sheer ambivalence and ignorance of its users, no one (or very few) choose to use IE it was the default, what they had to use and by the point they had learned that there might be a choose out there with had learned IE, so stuck with it not because it was superior but because its what they know.
Browser market share
Firefox has for some time been catching on IE but it still has a long way to go. Its progress has been at lest in part due to its superiority as a browser over IE. However recent updates have left Firefox slower and buggier than ever before. For a browser that has never been advertised in main stream media, unlike Google Chrome, its rise to control a quarter of the browser market has been purely viral.
Google on the other hand has in anticipation of today’s changes embarked on a massive advertising campaign to push Chrome and gain even more control over the Internet, only time will tell just how successful Google ad spending has made it. The question now is will it be money well spent, or will Google find itself the next target of the EU competition and anti-trust regulators?
Only time will tell as is the case of Microsoft, I for one will be eagerly waiting updated browser market share statistics, as I’m sure Mr Gates will be. However I cant help but feel that we have in no way seen the beginning of the end of IE, undoubtedly its share will slip, I just don’t think the EUs Settlement can break what are now years of ingrained habit and apathy.
Further information:
Adobe update – excessive traffic to ardownload.adobe.com
Dec 16th
Adobe has not been without its problems of late, and whilst there have been security issues that could have lead to losses, so far none of our clients have suffered financially from Adobe’s failings. Until now that is.
One of our Clients had their ADSL cut off this week as they had exceeded the usage policy. Why? Adobe Update Manager on one Windows XP PC had decided to download over 70GB of data over the course of a 7 day period. It would appear that it was getting itself in a loop and just kept trying to update continuously, 70GB worth of continuously.
The Adobe website serves the update MSI binary files as content type Text/Plain, the Adobe Update client has a very short timeout and immediately opens another connection to re-start the download. Hence if there is a slow connection or the caching server does not return the whole file in a timely manner the Adobe Update client enters the infinite loop of retries, causing the excessive bandwidth consumption witnessed here.
There are several forum threads including on Adobe’s own site http://forums.adobe.com/thread/392129 all linking this issue to a conflict between and old version of WebMarshall and Adobe updater; however our machines do not use WebMarshall and we do not have it installed anywhere on our networks.
We do however use Squid caching on our CentOS 5 servers. The server in this instance seems to be fulfilling the requests on each occasion in a timely manner – the issue is that each time Adobe updater passes a URL it is different in key areas, which Squid interprets as a separate request. This is not abnormal and we have seen this before when we have tried to configure squid to cache Windows updates. However rather than enter a loop of requests, Windows updates simply fail. Other automatic updaters work well with caching systems and indeed most ISPs are now implementing different forms of web caching on their own networks. Dose this mean the Adobe issue is affecting them in the same way?
The issue seems to only affect PCs (or at least we have seen no affected Mac users as yet), and it also seems to affect most Adobe products.
For now Adobe and the ISPs have remained quiet on the issue, however we have 3 other clients (and my own home ADSL ) who cannot update Adobe at all, access to ardownload.adobe.com appears to have been blocked by the ISP. Quite when the Adobe update issue will be resolved is unknown; however we have also taken the decision to block access to ardownload.adobe.com from all of our networks, for the moment.
Richard, one of our Systems Admin Team has published a more detailed account of the technicalities involved here: http://richard.blog.kraya.co.uk/2009/12/16/a-big-adobe-problem/
Day Spa Photos and Video
Nov 5th
When I meet new and existing clients one thing that always gets a Laugh is the Krayatec Day Spa. Everyone not only finds the whole description rather amusing, they love the effects it has on their PC’s.
You can read more about it here http://stephen.blog.kraya.co.uk/2009/03/13/computer-day-spa/ but one thing everyone wants to know is how dirty as the inside of my computer and whats the worst that you have seen. So attached below are some photos and videos, not of the worst we have every seen but of a some examples of an old dirty PC.
You Shouldn’t look if your easily disgusted!
A PC Being cleaned as part of the Krayatec DaySpa http://stephen.blog.kraya.co.uk/2009/03/13/computer-day-spa/
A PC Being cleaned as part of the Krayatec DaySpa http://stephen.blog.kraya.co.uk/2009/03/13/computer-day-spa/
A PC Being cleaned as part of the Krayatec DaySpa http://stephen.blog.kraya.co.uk/2009/03/13/computer-day-spa/
A PC Being cleaned as part of the Krayatec DaySpa http://stephen.blog.kraya.co.uk/2009/03/13/computer-day-spa/
A PC Being cleaned as part of the Krayatec DaySpa http://stephen.blog.kraya.co.uk/2009/03/13/computer-day-spa/
Warning the Videos bellow are worse and sorry about the mobile phone quality
Changing your password in Kerio Mailserver
Jun 16th
Changing your passwords is very easy.
Under your Windows computer press Crtl + Alt + Del and select change password.
To Change your email password, simply log into your Web Mail (call us if you don’t know the address)
Then Select change password from the Settings drop down menu as below
settings menu in kerio webmail
And then enter your old and new passwords in the box below.
kerio password change dialog box
Remember to make it something secure that no one will guess, no kids, partners or team names and no dictionary words. Random Numbers and letters, remember capitals and lower case combinations are best, or try a sentence like “Why can 1 never remember 555″ you can use spaces. Remember the best passwords are ones that can not be are easy to remember and would not be easily broken using a dictionary or password list attack (this is where a system tires every word in the dictionary or in a common password list, things like Rang3rs or C3lt1c or to easy.
Kerio Mailserver Upgrade from 6.6 to 6.7
May 18th
Over the next few weeks Kraya will be upgrading everyone who currently uses Kerio to the latest version of the mail server software. If you have been directed to this blog post, it is probably because your upgrade is happening soon. Please read below to understand how this might affect you.
The latest update to Kerio Mailserver fixes a number of bugs including slow response times when using Outlook and the issues with the Kerio Offline Outlook connector consuming large amounts of RAM. It also fixes an issue with Thunderbird incorrectly mapping default folders such as trash and junk.
More detailed information on all of the changes can be found in the release notes for Kerio Mail server 6.7.0 here. However you should note that this information is aimed at techies not users.
Information for each user base:
Thunderbird and other users using IMAP accounts
- You should notice no changes to your email client. We will be looking at users accounts where duplicate folders have been highlighted to us over the next few weeks to ensure these are removed and mapped correctly.
Web Mail users
- No action is needed, when you next log in you may notice a few minor adjustments to the operations in web mail.
Outlook Users
- A new version of the Kerio Outlook Connector needs to be installed. When you open Outlook for the first time you will be greeted by a message asking you if you want you upgrade now, the answer is YES. The upgrade will take a few minutes and your Outlook will restart. Please take a look at the Screen shot links below for both Windows XP and Vista.
Windows XP Screenshots and Upgrade walk through
Windows VISTA Screenshots and Upgrade walk through
As always if you have any issues or questions please do not hesitate to get in touch.
Windows VISTA Screenshots and Upgrade walk through for Kerio Mailserver upgrade
May 18th
Throughout this process it is VITAL that you leave the computer to complete the update. Please do not interact with the computer unless told to do so below.
The Morning after the upgrade, please log in is normal before opening anything else please open Outlook as normal. You will the be greeted by the message below;
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows VISTA Screenshot Message 1 on open of Outlook
Please select YES.
The new Version will now be downloaded from the server. You should see this:
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows VISTA Screenshot of Microsoft Outlook progress
Once this has completed Outlook will be closed and the New Version installed. Once the update has completed you will see this:
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows VISTA Screenshot Outlook Completed
Press yes and leave outlook alone for a few minutes (5 to 10 depending on your own computer) whilst it completes the re-synchronisation.
If you have any issues please let us know. Furthermore, we are very keen to hear about any improvements or problems you have.
Windows XP Screenshots and Upgrade walk through for Kerio Mailserver upgrade
May 18th
Throughout this process it is VITAL that you leave the computer to complete the update. Please do not interact with the computer unless told to do so below.
The Morning after the upgrade, please log in is normal before opening anything else please open Outlook as normal. You will the be greeted by the message below;
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows XP Screenshot Message 1 on open of Outlook
Please select YES.
The new Version will now be downloaded from the server. You should see this:
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows XP Screenshot Outlook progress 1
Once this has completed Outlook will be closed, as below:
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows XP Screenshot Outlook progress 2
Then the New Version will be installed:
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows XP Screenshot Outlook progress 3
Once the update has completed you will see this:
Kerio Mailserver Upgrade from 6.6 to 6.7 Windows XP Screenshot Outlook upgrade complete
Press yes and leave outlook alone for a few minutes (5 to 10 depending on your own computer) whilst it completes the re-synchronisation.
If you have any issues please let us know. Furthermore, we are very keen to hear about any improvements or problems you have.
Security Bulletin – Adobe Reader and Acrobat
May 14th
Below is an update to Security Bulletin – Adobe – April 09
Adobe have published a new Security Bulletin and provided updates for Adobe Reader and Acrobat patches. These updates resolve the previously reported vulnerabilities in Adobe Reader 9.1 and Acrobat 9.1 and earlier versions. This vulnerability (CVE-2009-1492) would cause the application to crash and could potentially allow an attacker to take control of the affected system remotely and install Malicious code.
We have already recommended that user consider using alternatives to Adobe reader, this continues to be our current advice. However users still using Adobe should now update and install these patches as soon as practical.
Adobe recommends users of Adobe Reader 9.1 and Acrobat 9.1 and earlier versions update to Adobe Reader 9.1.1 and Acrobat 9.1.1. Adobe recommends users of Acrobat 8 update to Acrobat 8.1.5, and users of Acrobat 7 update to Acrobat 7.1.2. For Adobe Reader users who can’t update to Adobe Reader 9.1.1, Adobe has provided the Adobe Reader 8.1.5 and Adobe Reader 7.1.2 updates.
Kerio Mail Server – Feedback and Updates
May 14th
Posted by stephen in Linux
Kerio have recently introduced a new update for the Kerio MailServer (KMS), which has fast become krayatec’s favoured mail server.
We have now deployed Kerio MailServer 6.2 to most of our clients and despite a handful of teething problems, most are now seeing advantages over Exchange and their previous IMAP based systems.
Feedback from clients has generally been positive, however for two of our clients the switch has not been as pain free as we would have liked and they are still experiencing several issues:
The release notes for the new Update to Kerio MailServer 6.7 suggests that this upgrade will fix most of these issues. The update has now been deployed to our own Kerio system and we are currently testing this in full prior to deployment to our clients systems. After discussing the updates with the Kerio team, we are very hopeful of resolving the above issues. However, it is indisputable that issues may remain with legacy systems, particularity Windows 2000.
Feedback / comments and suggestions for the above issues are always welcome.