James E. O'Brien

Qualys BrowserCheck is a cross-platform and cross-browser SaaS service that scans the user’s browser looking for vulnerabilities in the browser itself and its plug-ins. This tool will also help you fix the security issues discovered by the scan.

To give you an idea, I scanned my  Firefox portable browser. Here are my results:

Browsercheck is easy and free to use, as long as it is for personal use only. Check it out at https://browsercheck.qualys.com

A big security issue that many businesses are forced to live with is having to use Internet Explorer 6.0 in order to run their business applications. The problem of course, is that Internet Explorer 6.0 has huge security issues. Unless the companies that write the browser-based business applications update their code to support current and more secure versions of Internet Explorer, businesses that have to use these applications either have to live with these major security risks, or they have to try and beef up their firewalls and network security to make up for the security flaws on Internet Explorer 6.0.

A solution just became available that touts the ability to use Internet Explorer 6.0 dependent applications in Windows 7 and current versions of Internet Explorer without having to modify any code or settings.  It’s called UniBrows,  and it allows full IE6 functionality and behavior including layout, ActiveX controls, and JavaScript, including legacy controls, to run side-by-side with current versions of Internet Explorer.  UniBrows is offered by the Browsium company

Now, I haven’t tried this out for myself,  but if you’d like to check it out as a possibility for your company, I have the link here: www.browsium.com/unibrows

Web Browsers are among the most frequently used programs in the home or business environments.  We use them to access websites, check our web-based e-mail, run applications for work, and so on.  Since web browsers are frequently accessing the Internet, they are great targets for hackers who seek to discover and exploit any flaw in the browser that can be used to hijack the browser and spread viruses and malware, or gain access to computers for other purposes.  On the other hand, it’s not always the browser that gets exploited; it’s us, the users.

That is the reason for writing this article, to help you benefit from their web browsers without exposing their computers to security risks, or at least provide you with enough information for you to make informed decisions about the way you use your web browser.

What is a Web browser?

A web browser is a program used for viewing web pages or web-based content over the internet or intranet, or even a local computer.  Web browsers, also known as just browsers, translate content written in HTML (Hypertext Markup Language) or PHP (PHP: Hypertext Processor), and us to view web pages, images, video, and use web-based applications and games.

The Top Five Most Popular Web Browsers Today Are:

Mozilla Firefox – Firefox is a free and open source browser developed by Mozilla, and is currently the 2nd most popular browser.

Opera - Opera is a web browser and Internet suite developed by Opera Software with over 200 million users worldwide.

Safari – Safari is a feature rich browser with versions for Mac and Windows, and is considered by many to be the fastest mainstream web browser on the open market.

Google Chrome – Offers excellent security and privacy in a clean interface.

Microsoft Internet Explorer – This is the default browser that comes built into the Windows Operating System.

How Does a Web Browser Work?

Browsers work by communicating over network connections either to the Internet to the World Wide Web or an Intranet or local network or computer.    I’ll save the technical details for another article, suffice it to say that communication over a network is handled through standardized communication protocols, the most common being the TCP/IP (Transmission Communication Protocol over Internet Protocol) or UDP (User Datagram Protocol) protocols.

When you type a website URL  (Uniform resource Locater) address, such as www.obrienpc.net into the address bar of your browser, the address is translated from the name obrienpc.net to the numerical IP address 64.38.25.106 through a Domain Name Server (DNS), and the request is then routed through various servers until it reaches the server that stores my website, which in turn, either accepts or denies your request to access information from my website.  This is done through the  TCP/IP protocol, using port 80.

Encrypted or Non-Encrypted Browsing

Port 80 is the standard port used to communicate with most websites throughout the world, and it is a port that is considered unsecured and is open to virtually any network transmission. A simple way to tell if your web browser is using port 80 is by the address displayed in the address bar. If you see HTTP, then your web browser is transmitting through port 80.The point to be made about  port 80 is that neither are secure. Traffic over port 80 can be sniffed out.

HTTPS uses port 443, which offers the ability to encrypt data transmissions. This is why banks, online stores, and other services where you might need to transmit sensitive data use HTTPS. If you see HTTPS in the address bar of your web browser, then you are probably using encryption to secure your data transmission over the web.  The standard of encryption used today is 128 bit encryption, which is pretty darn strong, nearly impossible to crack.  Most browsers also show an icon such as a padlock in the status bar to indicate that you are transmitting over a secure port.  You should look for this anytime you are transmitting any financial or sensitive information over the Internet. you should also make sure that your browser is using 128 bit encryption.

Addons, Extensions, and Tool Bars

In theory, add-ons, extensions, and toolbars are supposed to enhance the functionality of our web browsers and make our browsing experience more convenient. In practice however, add-ons, extensions, and toolbars are also used to track your browsing habits, feed ads to your monitor, or allow malware to be covertly downloaded into your computer.

Now, I am not saying that add-ons, extensions, and toolbars are all bad, but you should use caution before using them. I use a few extensions in my browsers to enhance my research and browsing capabilities.  I am careful to research extensions or add-ons that catch my interest before I install them. The easiest way to do that is simply to use your favorite search engine and see what other users are saying about it, and what security warnings (if any) are out there.

Myself, I don’t trust toolbars. While they may add convenient access to search engines or other enhancements, they more often track your browsing habits and report that information somewhere else. Not to mention, they chew up system resources.  This is not true for all tool bars, so again, do a little research. It can save you a lot of pain.

You should also be careful about installing toolbars that are bundled in with other software.  Many freeware programs that you download from other websites include these toolbars in their software packages because they are paid to do so by marketing firms, and they are often set up by default to install automatically.  If you suddenly see toolbars appear in your browser that you did not intend to install, get rid of it by uninstalling it.

Some add-ons are good to have. For example, most antivirus applications will install an add-on to your browser to help prevent viruses of malware from covertly being installed on your computer. Some firewall programs do the same thing.

Keeping Your Browser Up-To-Date

As I mentioned in the beginning of this article, hackers love to exploit security flaws in web browsers. It is for this reason that you should keep your web browser up to date.  Fortunately, updating your web browser is essentially an easy and straight-forward process, and takes just a couple minutes to do. In fact, some web browsers are configured by default to automatically look for updates and inform you when updates are available.  Either way, make it part of your routine to check for updates once or twice a month. You can either go the support website for your browser, or in some cases, your web browser will have an update option in the  menu options.

How do you know what version of your web browser you are using? If you go into the menu system of your web browser, say for example, Internet Explorer,  you would click on the Help menu, and then click on About Internet Explorer, and then you will see what version you are currently using.

I have tried different programs that stream internet radio stations, and most of them work pretty well. Windows Media player works and sounds OK, but it’s not designed very well. Most users are confused when they try to find their favorite music and add it to their playback lists. WinAmp does a fine job, but is more configured for the more geeky and music buffs, people who understand bit-rates and stuff. And so on and so on.

One thing I have never seen in a music streaming program, specifically a free music streaming program, is the ability to record the music streams and play them back in MP3 format. that is, until today.

One of the sites that I love to visit. Gizmo’s freeware, had a great post today about a brilliant Internet radio stream player/recorder/search. I saw this and I said “hold on! Let’s check this out” I read the write-up about a program called Streamwriter, which has a nice genre categorized list of stations to play in the built-in radio player, but what really caught my interest was the ability to record the streaming music in MP3 format. That, and StreamWriter has a Windows installable version and a portable apps version.

Streamwriter can be downloaded at streamwriter.org/en

At work, I am not allowed to install programs without Admin consent. So I downloaded a copy of Streamwriter onto my USB thumb drive. It runs beautifully from my thumb drive on my work computer. that alone made Streamwriter worthwhile to me. Then I discovered how easy it was record the stream into MP3 format and play it back through Windows Media Player and of course, Streamwriter. I haven’t tried yet, but I don’t see any issues with the MP3′s playing on any compatible device or software.

Another fascinating feature that I haven’t tried yet, but I am definitely going to test at home, is the ability to search for a song and add it to a wish list. If the song is played in any of the hundreds of radio stations in Streamwriter’s database, Streamwriter will record it and store it in my music file. How awesome is that?

The interface isn’t as glamorous as skinned media players, but then, the features are far more useful than most players.

I know. the big question is whether or not it is legal to record streaming radio music. Well, truthfully, at the moment there is no law prohibiting recording streaming audio music. It’s the same as recording music from your local radio stations. Of course, this only applies to recording for PERSONAL USE ONLY! This may change in the future, if they ever figure out how to prevent recording over-the-air radio music.

To quote Wikipedia.org: Source: http://en.wikipedia.org/wiki/Radio_music_ripping

“The doctrine of fair use should make it legal to record songs from the radio for private use.[original research?] Traditionally, the recording industry expressed little or no concern with individuals who recorded music from the radio on a cassette recorder. However, the digital format in this case changes the whole issue since it does not degrade over time and can be easily copied.

That PopCatcher has developed a technology that automatically removes commercials may lead to a legal case similar to ReplayTV’s and SonicBlue’s. In 2001 these DVR manufacturers had issued a Digital Video Recorder equipped with a Commercial Advance feature enabling the automatic removing of commercials from recorded programming. They were sued by 28 companies of the Entertainment Industry in the USA until they ran out of money to pay the expensive litigation. In 2003, they filed for Chapter 11 bankruptcy. The case itself has never been judged.

The Audio Home Recording Act also lays out certain legal rights on the part of consumers.”

Streamwriter contains no adware and is completely free to download and use. If you like it, you might consider making a small donation to support their efforts. You can do so on their website.