![[UCS Trademark]](../../images/blulogo.jpg)
April 2007
![[Photo of Cliff]](../../images/cliff.jpg)
![[Baton Bleu Image]](../../images/baton.gif)
By Cliff Millward, Editor cliffm@xmission.com
Spam Killer (?)
A British company is offering a spam e-mail fi lter which is supposed to be 100 per cent effective. It has been in testing for over a year.
They claim it will prevent all spam even though spammers are always fi nding new ways to invade your privacy. There is a free 30 day trial at: http://www.clearmymail.com/
I don’t know how they will handle
exchange currency, but it costs £15 for
six months, £24 for a year and £40 for
two years.
They’re Cheaper by the Dozen (?)
If you don’t know what to get your wife for her birthday, anniversary, etc., here is a half dozen suggestions for you. (Bring several checkbooks!)
1. Digital camera
Casio EXILIM Hi-ZOOM EX-V7 $399.99.
2. Pink laptop
Sony VAIO C Series Laptop, Pink, Green &
Silver Colors, $1,449.99.
3. Pink XM radio
XM Radio Pink Pioneer Inno, $199.99.
4. Fashion phone
Nokia 7380 Fashion Phone, $359.99.
5. Designer computer mice
$30 to $25,000.
(The $25,000 one has diamonds in it.)
6. MP3 WATCH
Origim’s Superior Lady Diamond MP3
Watch D01, $109.99.
Sex Sells (unfortunately)
Who will win the HD-DVD, BlU-ray war? Perhaps it’s up to the porn industry. That’s right, the porn industry!
If you remember the VHS-versus-Betamax war, then you will recall that the porn industry provided a real boost to the winning format.
Keep your eye on what this sleazy industry does as it may well provide the answer to this format war.
NO -- I am not telling you to visit any of their sites!!! You can fi nd this information elsewhere!
Webkinz
If you have any children, they probably have told you about Webkinz — a line of toys made by Ganz Inc. Webkinz is a ground-breaking toy that uses the internet in a unique way.
First, you buy a stuffed animal. This animal comes with a “secret” code which when you go to webkinz.com will allow you create an online identity and “adopt” it. It also allows you entry into the Webkinz World where you can play games, chat, “buy” furniture for its bedroom, decorate the bedroom, etc. (The chat room has a list of 900 phrases they can use, so no personal information can be exchanged.) They can also answer trivia questions, get a job for their pet, and do many other things in this play act world.
I predict that it is just a matter on time before the big name toy makers pick up on this innovative new way to doing business. I also predict that if you buy one of these creatures, you kid will bug you to purchase more and squeeze your bank account!
Linux Placed in a Cell
Linux may be the OS on your next cell phone. That’s because it is open-source; so, look out Symbian and Windows Mobile. It is also reputed to be better as older technologies don’t scale well and a single chip can take card of all functions.
Linux enabled cell phones are expected to increase to about 203+ million in 2012.
The plus side for companies is that they won’t be beholden to proprietary systems and they will save a great deal of money.
I wonder if they will pass the savings on the their customers -- or am I dreaming?
Hope you had a wonderful Easter!
Finè
Index
ID Vault
Only Two-factor, Smart Card-based Security Token
Available to the Public
Reviewed by Don Nendell
Manufacturer:
GuardID Systems, Inc.
1900 S. Norfolk, Suite 235
San Mateo, CA 94403
Tel: (650) 286-9440
Fax: (650) 286-9273
Sales Information:
(650) 286-9440
Tech Support: support@guardidsystems.com (or, you can call and leave them a message)
Web Site: www.guardidsystems.com
ID Vault Specifications
and Features
Storage Capacities: N/A
Pricing: Visit GuardID’s web site for latest prices (Currently $49.95 (Single); $79.99USD (Bonus Pack - 2 ID Vaults)) Note. Available at most Computer Electronics Stores everywhere
Pocket-sized for easy transportability with Plug and Play USB technology
Dimensions: 2.57” x 0.82” x 0.32” (65.24 mm x 20.8 mm x 8.24 mm)
Operating Temperature: -25o to 85o C
Embedded support: USB 2.0 high-speed protocol and backward compatible with USB 1.1
Power Supply: USB bus-powered (No external power required)
Simple and Easy to Use: Just plug and play into any available USB port
Guaranteed: 90 Day limited warranty from date of purchase to protect customers against damaged or defective products Note. A new guarantee is planned for with the release of version 2
FAQ’s: Visit web site <http://guardidsystems.com/main/page/1024/>
System Requirements
Microsoft Windows XP Professional (w/ Service pack 2)/Windows Vista
Windows driver: Available on installation CDROM
One Available USB Port
Product Highlights
Secure your online identity with the ID Vault. GuardID Systems Trusted Network combined with the ID Vault hardware gives you the confidence to securely bank and shop online. ID Vault keeps your user names and passwords in a digital safe and the GuardID Systems Trusted Network verifies that your data is only entered at your financial site, thus preventing hackers “keystroke logging”, “phishing” or “pharming” schemes attempting to steal your online data.
Prolog
It may seem a bit too early to review for you yet another USB Token, yes I said, “Token,” but wait, hear me out on this! I was busy cleaning up those 20, or so, UFD’s littered all around my keyboard - you know, all those that I mentioned in last month’s review - when I also came across in that pile this neat, “new fan dangled USB Token,” GUARDID System’s ID Vault. It’s another one of those neat security gadgets that I ran into in Las Vegas while “cruising” the floor at the recent CES 2007 show. I know, I know, what happened in Vegas was “Supposed to stay in Vegas,” but I just simply had to break the mold on this one and share it with you, too!
BTW While I’m on the subject, I still can’t seem to get over my fascination with one particular UFD. I’m still very much impressed with that highly unusual, quite utilitarian and very distinctive USB Flash Memory Card, the 128MB Wallet Flash! (i.e., unsecured digital data storage that also comes in various storage capacities) <See at www.wallettex.com>.
Let’s get back to this review, Don! Craaack! [Editor’s whip being applied liberally]
ID Vault Introduction
Simply put, ID Vault (IDV) is a breakthrough in online security. ID Vault does this by encrypting and storing your personal passwords, user names and PINS (on the ICC Chip inside the ID Vault itself) for secure online commerce (banking, e-commerce, et al.), as well as, secure web surfing (e-mail accounts, et al.).
Now you are able to protect your online identity, and easily stop ID theft and fraud with the ID Vault, the only two-factor, smart card-based solution available to the public.
ID Vault Promo
Here’s what GUARDID pointedly asks us. “Do you bank or purchase online? Are you worried about online fraud and identity theft? Do you type your user name and password in every time, and have trouble keeping track of them? They go on to say, “[Then,] you need ID Vault.”
Also, John C. Dvorak, PC Magazine, declares ID Vault, “Outstanding.” So, who am I to disagree with such a notable, quotable and famous (or is it notorious?) media pundit? Well, let’s see for ourselves. OK? OK?
Recall, I’m doing this all under the auspices of protecting your secure communications, privacy, identity and security, and ID Vault certainly does fit that description, right down to their last “t.”
BTW I don’t really know what the difference between the Red and Blue ID Vault’s are (one apparently seems to be the “recommended backup spare” you’re supposed to own?). The one the Executive VP gave me at CES 2007 must have been his personal “spare” Red one; and, I must say, it’s really very distinctive, outstandingly attractive, certainly eye catching and totally unique in it’s overall construction and security-based operations. But, more on all that later, for sure.
ID Vault is definitely different from all those UFD’s I’ve been reviewing in the past for you herein; it does not store data, albeit secure or otherwise. What it does store is user names, passwords, and PIN’s - you know, all that “heady security stuff” that is most often needed to successfully complete some form of program or application access - and absolutely no mas! And, since my personal interests lay in “secure” storage, access, transport and digital data exchange, which might possibly - even conceivably (?) - account for their USB ID Vault “Token” getting lost down under that huge pile of UFD’s right there in front of my keyboard. But, then again, I’m not altogether sure about that one, either. Never-the-less, ID Vault’s time has definitely come - for all of us – “Your Own Personal Digital Safe!”
First Impression
Although the IDV is definitely an eye-catcher, I’m just a tad concerned about its “seemingly” hefty price tag (but then, ask yourself, “Is it really?” See also Potential (?) Competitors list below). But, I admit it most certainly is worth the price, if, repeat if, it actually can save y’all (that’s Texan talk I learned while growing up there, for “all of you”) all that embarrassment and personal loss of identity, etc., coupled with its associated “ruined Personal Credit Rating” that runs lockstep with identity theft and fraud (See explanations and examples below).
Accompanying my initial “seemingly hefty price tag” concern was also the added requirement that, after one (1) year of free use, the IDV license must be renewed for an additional year (for a fee of $19.95 USD). I questioned GUARDID about this additional expense, and they replied that this is very similar to the Anti-virus annual renewal fees accessed by companies such as, Panda Software, Semantic, TREND MICRO, et al.
They further explained to me that this is absolutely necessary in order for them to keep their data base of over 7000 financial institutions (and growing) current, up to the minute, and totally secure for access use by ID Vault owners, and to guard against insidious and torturous things like, phishing scams, false banking web sites, and the like (See explanations and examples below).
Caveat. You are not 100% required to renew the online protection - the IDV will still work - however, it is just that you will no longer have that “peace of mind,” “solitude” and “absolute assurance,” that you’re actually accessing a legitimate, bon a fide, and “THE legal banking web site” of your choice (the primary purpose and benefit of owning and using the IDV, in the first place).
Secondly, directly relating to my own personal interests - as noted above - my next question then is, “Can IDV use adequately protect us from ID theft when we are surfing the Internet on an ‘Open Wi-Fi’ source, such as, a cybercafé, airport access point, community ‘hotspot,’ etc.?” My question stems directly from my Black Hat Briefings and DEFCON (scary) teachings, but also from a very recent (March 25th, 2007) article in the Salt Lake Tribune Sunday Money Section, by Los Angeles Times reporter, Tami Abdollah, entitled: Wireless Internet connections: Free Wi-Fi: The easiest way to steal your life (Wi-Fi tricks make it easy to get hacked)” (See< http://www.sltrib.com/ci_5514390>).
In this very informative article, Ms. Abdollah reports:
“As communities push to turn themselves into massive wireless hotspots, unsuspecting Internet users are stumbling directly onto hacker turf, giving computer thieves nearly effortless access to their laptops and private information, authorities and high-tech security experts say. . . . It’s an invasion with a twist: People who think they are signing on to the Internet through a wireless hotspot might actually be connecting to a look-alike network, created by a malicious user who can steal sensitive information, said Geoff Bickers, a special agent for the FBI’s Los Angeles cyber squad. . . . ‘Wireless is a convenience, that’s why people use it,’ Bickers said. ‘There’s an axiom in the computer world that convenience is the enemy of security. People don’t use wireless because they want to be secure. They use wireless because it’s easy’. . . .”
The answer is a “qualified yes!” Caveat. ID Vault can only be used at locations where the ID Vault software has actually been installed, ergo, it is not mobile, in the sense of a standard USB Flash Drive. A Laptop used in these locations would be protected if, repeat if, ID Vault was actually installed on it.
“I’m not worried, you say?”
Well, think again? Think back, as I have been “Trying ever-so-hard,” to share ever more and more security knowledge with you in all of these security-related reviews for your edification, education, elucidation and enlightenment (the 4e’s of Security). (Please also see my reviews in the BCM archives at <www.ucs.org> Aug. 2006, Jan. 2007, Mar. 2007 issues; and now, this April 2007 issue. FYI Please be sure to select the .pdf version each time to enjoy the review in its full color format).
More From My Soap Box
As I reported earlier (See the Jan. 2007 BCM), the number of security breaches (i.e., loss of personal card data) in 2006 alone exceeded 100 million instances. And now, this Supporting Data “Hot Off the Presses” (This is not an April Fool’s Joke, either folks!)
Headline: The Salt Lake Tribune, Money Section, Sunday, April 1, 2007
<http://www.sltrib.com/search/ci_5566339>
Theft of card data claims 45.7 million victims
Hacker incident is believed to be the worst breach of consumer information ever
Mark Jewell, The Associated Press, writes: “BOSTON - A hacker or hackers stole data from at least 45.7 million credit and debit cards of shoppers at off-price retailers including T.J. Maxx and Marshalls in a case believed to be the largest such breach of consumer information.
For the first time since disclosing the theft more than two months ago, the parent company of nearly 2,500 discount stores put a number [45.7 million] on how much card data was compromised - and it’s a number TJX Cos. acknowledges could go still higher. . . .”
And there’s more, lots more. For instance, check out for yourself the “new” Gozi Trojan horse program. It’s a “duzzie,” and it affects all of us.
I can’t just stop there; my “horror story” is merely getting warmed up, or so it seems. This story appeared on Network World at <http://www.networkworld.com/news/
2007/031307-data-breach-companies.html>
Data breaches: Blame sloppy companies, not hackers: Researchers say organizational mismanagement causes 60% of breaches
By Network World staff, Network World, 03/13/07
“Phil Howard, an assistant professor of communication at the . . . (University of Washington), has reviewed major data breaches in the United States since 1980 and says that the 2 billionth personal record will become compromised sometime this year (that’s about nine records per U.S. adult). . . .
The research is based on media reports of breaches and the researchers said they suspect many incidents went unreported or were underreported before a California law went into effect in 2003 that forced companies to fess up (the number of incidents confirmed tripled in 2005 and 2006 compared with the previous 24 years).”
Comment: After watching all this “Stuff” going on for the past 11 years, I personally wonder when “THE straw that breaks this camel’s back finally happens?” “You see, I’m mad too, Eddie!”
To that end, I’ve also extracted for your edification, the very latest ID Theft Statistics from the SANS NewsBites, March 9, 2007 Vol. 9, Num. 20
STATISTICS, STUDIES &
SURVEYS
Gartner Study Sees Sharp Rise in ID Theft and Associated Fraud
(March 7, 2007)
“A Gartner study says that fraud arising from identity theft has risen significantly since 2003. Extrapolation from gathered statistics indicates that approximately 15 million Americans dealt with fraud stemming from identity theft between the middle of 2005 and the middle of 2006. Figures gathered by the Federal Trade Commission (FTC) in its own survey estimated that number to be 9.9 million in 2003. . . . Other findings include an increase in the average amount of money lost to fraud from US $1,408 in 2005 to US $3,257 in 2006. The percentage of funds recovered dropped over the same one-year period from 85 percent in 2005 to just 61 percent in 2006. <http://www.computerworld.com/action/article.do?
command=viewArticleBasic&articleId=9012483>
<http://www.zdnetasia.com/news/security/
printfriendly.htm?AT=61994518-39000005c>
<http://www.informationweek.com/shared/
printableArticle.jhtml?articleID=197800774>”
Q. Have you, you and you at least gotten the basic idea that I’m trying to share with you here, yet? You’re just not secure without adequate help - like the individual protection provided by security devices, such as, the USB ID Vault, for instance! And, that’s merely the tip of the iceberg folks, as the big boys want to say.
Now, Back to Our
Review at Hand
Somewhere back in a previous USB Flash Drive review I mentioned that I also had collected, over the past 11 years, a number of “USB Tokens” which I have kept in my own personal UFD/USB Token museum bag. Well, I thought that it would be propitious to share with you some of the actual contents of that museum bag at this time. Turns out that I have 40 (give or take a few - See Graphic and Competitors List below) different types of USB Tokens, actually. This surprised even me - and I’m pretty sure I don’t even have probably half of all the different USB Tokens that are actually out there. You might also recall (and, we could all shudder to think about this part?), that I could have actually also written a review on each of them, as well! ;-{)
So, You Say, “What’s the
Difference Between a USB
Flash Drive (UFD) and a USB
Security Token?”
Definition of a Security Token (From Wikipedia, the
Free Encyclopedia)
A security token (or sometimes a hardware token, authentication token or cryptographic token) may be a physical device that an authorized user of computer services is given to aid in authentication. The term may also refer to software tokens.
Hardware tokens are typically small enough to be carried in a pocket or purse and often are designed to attach to the user’s keychain. Some may store cryptographic keys, such as a digital signature, or biometric data, such as a fingerprint. Some designs feature tamper resistant packaging, others may include small keypads to allow entry of a PIN.
Why the ID Vault USB
Security Token - and Why Now?
First off. Finally, someone has come out with a handy USB Security Token for “individual users” that is easy to use - and now - one they can easily afford to buy. Hip! Hip! Hooray!
Second. As if I didn’t already have enough motivation to do this review for you in the first place, an editorial A message from Jacob Goodwin by Jacob Goodwin, Editor-in-Chief of GSN: Government Security News Magazine, entitled: Kiss the castle metaphor goodbye, (February 2007 issue, p. 5), certainly was the “Jump Starter” herein for me. (See the full article at <http://www.gsnmagazine.com/pages/archive.html>)
In his article Mr. Goodwin said:
“Once upon a time, the information security world saw itself as a landscape of separate castles, representing individual computer networks, each protected by its own moat, drawbridge and tall, sturdy walls. Digital data was safeguarded inside the fortress by firewalls, anti-virus software and various vulnerability monitoring systems that collectively protected the perimeter. Well, kiss that metaphor goodbye. . . .
According to many of the IT security experts who gathered earlier this month [February 2007] in San Francisco for the ‘Sweet Sixteen’ edition of the wildly popular RSA Security Conference, the current state of cyber security has concentrated too much attention on the walls, without considering what would happen to valuable data if there was a security breach. . . .
This sense that data is constantly on the move and constantly under attack from a continually evolving set of cyber threats has focused renewed attention on two traditional ways to protect that mobile data: stronger authentication of who is trying to gain access to the data [My emphasis here], and more frequent use of encryption while that data is moving and while it’s at rest. . . . The notion of beefed up authentication was also emphasized by Microsoft’s Bill Gates during his keynote appearance in San Francisco. . . .
Maintaining cyberspace security in a user-friendly environment is a challenge; protecting information and systems needs to permit people to feel comfortable while communicating, shopping and storing data online. ‘Confidence is the essential component,’ said another keynoter, Symantec’s CEO, John Thompson, ‘if we want to gain the full potential of the connected world’. . . .”
Here’s my take on the above editorial: “Amen Brother, Amen!” GUARDID Systems focuses ID Vault’s capabilities and security use on all of us “average users, not the Enterprise users” - which makes them “The Champs hands down,” in my book.
Ahem! After all, that’s what all my reviews have been (still are, and will always be) all about, i.e., getting the latest gadgetry (more like security, in my case), etc., to average users, like you and me. It’s a dirty job, but somebody’s got to do it! ;-{)
That’s the primary difference between ID Vault and all those other USB Security Tokens out there (See Major Competitors below): 1) Online “End user” (i.e., our kind of users) access versus “Enterprise user” authentication (via PKI Digital Certificates, etc.); 2) Encryption; and, 3) Secure Access. In a nut shell: It’s ID Vault’s “Common user” approach versus the “Big business” user approach of all the others. FYI I rather imagine that any of the other multitude of USB Security Tokens out there could very well be used in pretty much in the same way, but there is absolutely no doubt in my mind about ID Vault - that’s what it is designed specifically for - secure online banking (and Web Site) access for “average people” with ID Theft protection all wrapped up in one neat little package. Plus, it’s the only two-factor smart card-based solution available to the public, which is billed as your own “Personal Digital Safe”.
Third. ID Vault is first out of the gate as a commercial mass market leader, plus it is very easy to use. No special readers or drivers are required - so it can be used easily on any Windows XP or Vista PC.
And Fourth. GUARDID most surely must have been thinking of something like the U.S. Bill of Rights’, “. . . [To] Insure Domestic Tranquility. . .” when they fully committed themselves to supporting the mass user market with their superb USB ID Vault Token. Long stretch, I know, but the IDV accomplishes that part to near perfection, I’d say.
Snapshot of how ID Vault works.
Here’s what GUARDID has to say about ID Vault’s primary use. “Simply plug ID Vault into your PC or Laptop and one click takes you to any of your online [Banking, Web Site, etc.] accounts. ID Vault remembers all your user names and passwords, [all] locked in a microchip where hackers can’t get [to] them. Don’t be one of the 10 million people who will be victims this year (See 45.7 million JT Maxx article above). With ID Vault, going online is now safe, secure and easy!” Amen!
The graphics practically speak for themselves.
Extend the IDV USB connector by pressing down on the curved end of the token. You simply retract the extendable USB plug-in connector by depressing the button located in the middle (on the side) of the IDV, the one that that looks like a miniature safe dial.
Insert the IDV into an available USB Port.
Hardware Security for your online transactions
“Outstanding”
Online banking is exactly the same procedure. “It’s Simple, Easy, and Secure.”
The (Erstwhile?) Major Competitors of USB ID Vault Tokens
In my research for this review, I turned up a number of variations on the theme of “Tokens,” USB or otherwise. They all seem to fill different niches, very much different than that of ID Vault’s niche.
Not to brag, but I think it is safe to say that I have personally collected quite a “significant group” of USB Tokens (See My Museum Bag Graphic above), such as the: RSA SecureID 6100 USB Token (I don’t think(?) this is the same RSA SecureID Token (* See Below) (with their $10/month fee) now offered by AOL);
Authenex (A-Key); Aladdin (eToken); SafeNet (iKey 1000); Schlumberger (SafeID); Rockey4 (ePass 2000 PKI-based Smart Card); MARX (CrypToken 2048); BAFO (unknown); SPYRUS (Rosetta); Hardlock (unknown); one (1) that has been completely lost from off of my museum bag (the screw-on stub is still there though!) and now, from the just completed Novell BrainShare 2007, an Actividentity Mini Token plus an Actividentity AAA Server Keychain Token, amongst a whole host of other security “Stuff” - you may recall my apropos “Herding Cats” analogy in last month’s review?
Note. This grouping is primarily PKI-based Digital Certificate/Encryption/Authentication type Token devices, and I haven’t written about them before simply because they are essentially “Enterprised-based” PKI (some are indeed USB) Tokens used for access and authentication purposes primarily. And, not helping matters one bit, I also choose to not write reviews on this particular group of Tokens primarily due to some damaging reports I uncovered in certain USB Token review articles along the way.
One such article, for instance: Information Security Magazine’s July 2004 FEATURES bake off: “Token Effort: USB tokens aren’t as strong as you think…” by Tom Bowers <http://infosecuritymag.techtarget.com/
ss/0,295796,sid6_iss426_art864,00.html>; and one such article in, PC WORLD, Friday, March 15, 2002, “USB Tokens Offer Pocket-Sized Security: Small, cheap devices plug into PC’s ports to identify users, but not everyone is convinced of their merits” by Rick Perera, IDG News Service <http://www.pcworld.com/article/id,89263-page,1/article.html>; et al.).
Note. I think (which means it’s debatable?) that’s all behind us now with the emergence of the USB ID Vault Token. I’ll stay right on top of this security topic, however, like stink on manure - of that, you can be sure.
FYI Some other notable USB Security Tokens out there (which I do not have) are: Gemalto N.V.; VeriSign (* See Below) ($19.95 Yearly subscription (standalone) - not the same Security Token soon to be used with PayPal (With their $5/month fee)); Bestoken (available soon?); DESlock ($195); ActivCard (ActivKey - Digital Identity Device); et al.
(*) This is the “Below,” referenced above - Technically, I believe the USB ID Vault Token is every bit as capable of competing head-to-head with the RSA Token (AOL) and the VeriSign Token (PayPal) in the e-Commerce arena as any of them. It basically does the same thing they do - that is, they simply authenticate the user of the Token. You have but to compare their price differential and the ID Vault wins that race hands down, too! However, we’ll just have to wait and see about that one, won’t we?
Finally, In Closing
Bill Gates, in his keynote address at the recent RSA Security Conference 2007, shared with the 15,000 computer security experts in attendance, that security is the tech world’s biggest woe. Well, I certainly can’t top the “Big One,” so I’ll just close this review in saying, it appears, from my vantage point, that ID Vault has the inside track in the “mass marketing side” of USB Security Tokens. All eyes will surely be on this intrepid security product, and I predict “smooth and clear sailing” ahead for the forward looking, adventurous leaders at GUARDID Systems.
My ID Vault hangs in a “Place of Honor” on my “Wall of USB Flash Drives, which now includes, USB Tokens.” I use mine religiously to access all my e-mail addresses securely (I have four (4) of them), and Donna uses hers for her secure online banking - which she does every single day. My hat is most definitely off to GUARDID Systems, and I wish them continued success in an extremely critical, terribly important, definitely timely, and exceptionally vital area of personal identity security coupled with one’s (i.e., the end-user’s) complete “peace of mind.”
A piece of my mind says, “Sic’em Tiger! They’re all yours.”
Ciao!
Index
Vista and You in 2007
Five Visions of the New Operating System
by James Alexander
Vista is well named, but you need good graphics hardware and drivers to enjoy all the benefits and vision of Vista. But even if you do not have the hardware, you can still use many new features of Microsoft’s newest OS release. Vista has been worked over to attempt better security and a better UI or User Interface, than in Windows XP. If you are thinking about a faster system, that will be a hardware fix not Vista. Vista is on a par with XP for overall speed. Vista is not a major innovation, but a good evolution in the Windows family. However, there are still several loose ends to be fixed, patched or developed.
Wednesday March 14, at the Blue Chips general meeting
I showed off Microsoft’s newest operating system - Windows Vista. Some of the visuals from that presentation are included in this article. Unfortunately, due to shipping problems, I used the RC1 (Release Candidate 1) for the live presentation. I have been playing with Vista in Beta and Release Candidate versions for the last year. There are some real wow features and some daunting features in the OS that took Microsoft five years to deliver.
Multiple versions of Vista are available. The USA market has five versions of Vista.
Vista Home Basic - To be avoided if you are buying a new PC, Windows XP offers more of an OS. If you are buying a new PC, insist that the hardware be Vista Premium certified and have any other Vista version pre-installed. Basic does have the search and some other Vista goodies, but is not worth the cost for what you do not get.
Vista Home Premium - Media Center XP and Tablet XP replacement, with lots of goodies for the consumer, this version should please most home users. For most buying a new PC, this is the sweetest price for value in the Vista line. This is the one to use for the most entertainment and gaming enjoyment.
Vista Business - truly the business owners friend, good networking, great productivity, but limited playtime uses for the user
Vista Ultimate - the best of everything in Vista is found in this most expensive version. This is the version used for the demonstration. Personally as a power user, this is my favorite version. This is the version that has everything (including the kitchen sink) found in any of the other versions.
Vista Enterprise (not for consumers or small businesses, not expected to be on the store shelf) Enterprises shares with Ultimate the best features for enhanced security and enhanced networking.
My review here and my presentation March 14, are based upon Windows Vista Ultimate version.
Windows Vista’s
Hardware requirements
Windows Vista Home Basic (the beginning OS for the USA market, which I would advise against) required minimums are: an 800-MHz or faster processor, 512MB of memory, graphics hardware capable of SVGA (800 by 600) resolution, a 20GB hard disk with at least 15GB of free space, and a DVD-ROM drive (you’ll have to request installation CDs from Microsoft, but no help as to when they will be available, if you do not have a DVD drive). Vista’s Aero (more about Aero follows) interface, you’ll need a graphics card that can handle: DirectX version 9 graphics APIs with Pixel Shader 2.0 3D texturing; Windows Vista Display Driver Model (WDDM) driver; at least 128MB (better at 256MB+) of graphics memory; and supports 32 bits per pixel.
Review and Presentation PC - When I first started with Vista Ultimate version, I was using a P4-HT system (Pentium 4 -HT 3.02 GHz processor,on an ASUS main board 1 GB RAM, with DVD burners, 200 GB hard disk, and an nVidia video card with 256 MB of on-board memory. Though I was successful in running Vista, I felt limited; my WEI (Windows Experience Index) was a paltry 2.4, due to my video card.’s performance. I upgraded my PC to an Intel Duo-core 3.2 GHz processor, 400 to 666 MHz front side bus, carrying 2 - 1 GB, 533 MHz matched RAM, with on board video (Intel 82945G Express chipset). I moved over the DVDs, hard drives, and other peripherals.. Vista recognized the change of hardware, so I had to go through Vista license activation again. The new WEI was 3.1. The WEI score is the lowest score of five areas CPU; RAM; Graphics; Gaming/3-D Graphics; and Primary hard disk transfer rate. The higher score of 4 - 5 which will do anything Vista is capable of, the scale has a maximum value of 6.. A score of at least 3, will run most Aero graphic effects. The graphics were (on both systems) the lowest sub-scores that I had. This would argue for spending more for a separate, higher performance video card. Some of the sub-scores exceeded 5. I have seen few examples of sub-scores at 5.9, and presume that higher numbers will occur as hardware improves. In the future, there may be PCs that have highest and lowest scores of 6.
Repeatedly, during my experience with Vista, I found that software drivers for the various hardware parts were not adequate for best operation. Some drivers were not available during the Beta and Release Candidate versions for several months. One such problem was the AC’97 audio driver which is common on many on-board sound cards. Playing DVDs was frustrating on the P-4 HT system, as there was no sound available until August of 2006 when I found a driver that worked. Again older hardware, may not have all the drivers needed, in fact there may be some hardware that will not work due to no effort to create newer drivers. Be aware that many Windows XP drivers will work, even though they are not certified. The Duo core system had a graphics driver update February 2, 2007, which will be installed prior to the presentation. The WEI on March 14th did increase to 3.2. Since there are many combinations of hardware, I suspect Vista users may be searching for hardware drivers for many months to come.
User Interface - Aero
Vista has been worked over to attempt better security and a better UI or User Interface, than in Windows XP. The Aero interface is new in Vista and enhances many new features. The hardware requirements are not extreme, but for some PCs, Aero is beyond the PC’s capabilities. A stand alone high speed graphics card with dedicated memory (no less than 256 MB) will vastly improve the Aero experience. (During the presentation, I was using an on-board Intel video system sharing system memory. This proved the advice of going to at least 2 GB of RAM.) Aero’s visual experiences on a capable PC are exciting to see, and improved over Windows XP. Aero has a effect referred to ‘glass’ which means parts (the frame and some backgrounds) of a window can be semi-transparent. This transparency (user adjustable) allows users to see items behind a window. Aero also introduces the Live thumbnails, which show a representative thumbnail of the actual contents of minimized windows. If it is a TV show, the live thumbnail changes with the TV show’s content. The Start Button is now an attractive Vista Windows logo. (If you do not like these effects, you can change them to more traditional looks.) Aero adds a new 3-D Flip to the old Windows Alt+Tab for looking through your various open windows. 3-D Flip allows (Windows-key+Tab) to play in rotation all of the windows screens, until you see the one you want to switch to.
Searching and Finding
If you are thinking about a faster system, that will be a hardware fix not Vista. Vista is on a par with XP for overall speed. But Vista has a new approach to finding everything on your PC and most connections to your PC. The Search has been greatly improved by new search engines, techniques, and searchable tag features. If you have large file counts, the searches in Vista will be a real delight for users. This is not limited to text. Large collections of photographs are easily tamed as are audio collections. Additionally there are new explorers for most every area of Vista, each with a specialized search engine. Best of all any search can be saved for use in the future. In addition, there is a new Programs Explorers which replaces the Control Panel’s “Add/Remove Programs Task”. Not only does it have the new search functions built in to every Windows menu, but the search in Programs Explorer replaces the Run function from previous Windows versions.
Other Goodies
Vista offers a truly new feature named ReadyBoost. ReadyBoost takes advantage of the faster speed of USB 2.0 Jump or Thumb drives. Adding system memory (RAM) is often the best way to improve PC performance. One of Windows features-swap file, allows the PC to swap memory from RAM to a hard drive and back faster, this means applications can run without needing to access the harder to reach parts of the hard drive. Upgrading RAM memory would be better, but is not easy.
Windows Vista ReadyBoost lets users use a removable flash memory device, like a USB thumb drive, to assist system performance without opening the box. ReadyBoost retrieves data kept on the flash memory faster than it can retrieve data on the hard disk. Combined with SuperFetch technology, ReadyBoost helps improve data processing. ReadyBoost is most noticed when you have many applications or Windows open, or when you do not have a lot of RAM. ReadyBoost is reliable and protects the data stored on your device. You can remove the memory device at any time without loss of data. When removing the Jump drive, performance returns to prior to using the device.
ReadyBoost requires non-volatile flash memory buffer with at least 1GB of storage capacity and must meet the “Storage-0009 WLP” specification: 5 MB/sec throughput for random 4k reads across the entire device; and 3 MB/sec throughput for random 512k writes across the entire device. I found some inexpensive jump drives that worked as well as the better brand drives.
AERO experiences
Windows Vista goes a long way toward satisfying Mac envy. Many of Vista’s new visual features have been found on the Apple MacIntosh. For the PC lover, the Aero features should be welcome additions.
But wait, there is more, Vista Aero has a sidebar where new applets called Gadgets provide information and usage how you want it, per your configuration. Some of these Gadgets, such as calculator, notes, and recycle bin are useful. Many more should be available for downloading now and in the future. (Note - most Gadgets do not work in Windows XP; in many cases Windows XP locked-up and stopped responding..)
Good, bad, or indifferent, Internet Explorer 7 comes as part of Vista. IE 7 will work on Windows XP, but make sure your bank and important (to you) e-commerce web sites work with it before committing IE 7 to other than Windows Vista. IE 7 does some nice things such as: re-sizing the web page for printing all of the page on your local printer; printing the URL so that it is clearly visible; and a fair attempt to protect you from phishing (someone trying to trick personal information from you by presenting themselves a if they were a valid web site, like eBay or CitiBank) by revealing the correct URL instead of a falsified URL. Caution! Security is always at risk, as long as there remains one person wanting to steal or take advantage. Remember Hackers seem to work much harder than the developers, do not assume you are safe with any system as complex As Windows.
Installation was a lot easier (if you overlook the problem with not having every device driver available). One of the best features is the easy transfer of system and data information from an old PC to a new PC where you install Vista. (Requires the installation of software on the old PC, to gather the needed data in a form that the Vista install can use.) I was able to use a (Belkin) USB cable and DVD-R disc to transfer the data from my Beta Vista PC and my old Windows XP PC (which is staying in use) and to the newly built Vista PC. These special USB cables (Belkin and LapLink) can be found in some computer stores. Easy Transfer (both disc and cable) made the reconfiguring much smoother, so that both PCs operate mostly the same (the interfaces look different, but my operations remain mostly the same).
Finally, Parental Control is included in Windows. My son may not appreciate being told by the PC that he has only 15 minutes left to use the PC, but I love it. Because unlike Mom and Dad, the Parental Control is inflexible and excludes my son as scheduled. During the presentation, at 8 PM Vista shut down the presentation. As I was using my son’s user profile to present until that time, so as to show what happens. If there is concern about lost data, Vista does give warnings (not real large) about the shut-down, and does save the user’s material as it shuts down. Because of this saving, it did take a few minutes to launch the administrator’s account to finish the presentation. I am very pleased with this timer feature. I would have liked half hour increments instead of full hour that comes in Parental Control. Though I am not a gamer, Parental Controls allow me to dictate what game ratings are allowed as well as what if any internet access my son will have on my PC. There are still some bugs and even some software that will not be controlled by Parental Control, but I believe Parental Control is very worthwhile. Be aware that Parental Control works on most newer games, it does nothing with movies, music, images and their ratings. I have used third party software for controlling my kids PC use, but for Web usage, allowed time, and even the gaming filter - Parental Control is a major plus for buying Vista. I may have to seriously consider buying a family pack of licenses.
Mentioning Games, there are several new games (including 3-D action) included with Home or Ultimate versions of Vista. Chess and Mahjong have joined Solitaire as part of the package. Hooray!!! I am particularly happy for the new game Chess Titans. The 3-d image is nice, but the visual help to beginning players was a great educational tool. When selecting a piece, the program shows the player what moves are correct for that piece. Also the computer opponent computer player can be changed for its skills level. Yes, you can beat the computer at chess. Purble Place is a little kids game that is bright and cute (to the little ones).
Rounding off the Goodies are four very useful applications that are included.
Windows Media Player 11 will make sure you can enjoy virtually any form of entertainment on your Vista PC. This upgrade to the previous versions works well. I did not try to break WMP-11, but past versions work very well for me, as did this one
Movie Maker and DVD Maker will not put anyone out of business. The consumer (with little desire to become C. D. DeMille), will find that Movie Maker is a great easy way to assemble video, photos, and audio into a movie. Then instead of having the neighbor or friends have to endure your art project, DVD Maker will step you through creating a gift DVD for your family to sit through. Both applications are fairly easy to use, and somewhat limited, but just right for consumers. Vista did recognize I had inserted a blank CD-R, and offered to set up and burn a disc for me. Which was a good thing, as many of my CD/DVD burning programs will need to be updated or upgraded (at cost). Over all burning discs was an easy task, but making multiple copies was not possible. However, this is RC1, so I want to reserve judgement until I see the final retail version.
Finally, the little gem is the Windows Photo Gallery. This was also not designed to take business away from the regular photo editing packages. Photo Gallery is a great application for indexing, assembling slide shows, and doing general image manipulation. The new search capabilities using metadata make indexing a relatively comfortable job. Not easy, because most home photo collections are very large with such useful file names as P0012345.jpg. You will still have to
actually look at the photos and ID the who, what, where, and when of most of those photos numbering in the hundreds (okay, - tens of thousands). But the tools in Vista and Photo Gallery will make the job a lot nicer to take on. (As soon as you find some spare time.)
A final note about Internet bloating. Though Vista comes on a DVD, there still remains the problem that updates, patches, and many forms of help will be on the Internet. The size of the updates has grown over the last few years to the point that if you are limited to dial-up you could tie up your phone line for a few hours to a few weeks depending upon the dial-up speed and the increasing file size. Other than expensive subscription services to receive CDs and DVDs regularly, the bias is that everyone has broadband internet service. Truthfully, I have extreme slow band internet (average 24KBS), which means even Windows authentication on a bad line noise day has failed. Files greater than 2 MB cause me to pray for the entire (and LONG) time it takes to download that my ISP’s server will not bump me off. Microsoft and other software vendors need to consider how to reduce this Internet Bloat for fixing and patching their products. I would gladly pay for CD/DVD via snail mail containing the updates or patches needed, but I choke (like my internet connection) when the price is $300 per annum. Besides I’m still in my 2nd hour of virus updates, and it will be awhile before I can download that 7MB video driver. While I am still on internet bloat, thanks to all those who allowed me to use their internet superhighways to download several critical files over the last nine months.
Finally, I want to recap that Vista requires specific levels of hardware. A friend bought a family pack of licenses for his home, only to return it when all three of his home Ocs crashed when trying to install Vista. Two of the machines should be able to run Vista, but without realizing the absence of needed new hardware drivers, the PCs were not operating correctly. His third PC was not adequate for Vista Basic. There is talk that there will be a Service Pack 1 released during 2007, If it is large, many of us will need to get CD or DVD depending on the size of the SP1. (SP3 for Windows XP is supposed to come in 2008.) There are still many hardware drivers needed by many users for even hardware bought during 2006. Then finally, there is the matter of needing to replace applications which no longer work properly with Windows Vista. I am prone to suggest careful evaluation of current hardware, current applications, and needed utilities or functions to see if your PC can meet the challenge of Vista. If you can meet the challenge, then the experience now is a lot of fun. If not now, Vista will be waiting for you to move up and enjoy.
The free CD for those who came, contained self help materials, freeware software, and useful tools to help with Windows Vista.. Materials on the CD were provided by Microsoft’s Mindshare (User Group program), reprints of various opinions about Vista, and ZDNet who pointed out great freeware and some trail-ware which I felt would enhance your experience with Vista. All materials on the CD are copy-righted in some form or another. Please respect the copy-right holders by acknowledging the source where the materials are free or keeping their licensing.
Index
Reported by Stuart Gygi
The meeting was convened at 7:07 by President Rick Gregory. This was our first meeting at the Olpin Union Building. The facility was very nice. We plan to continue to meet their in the future.
Rick announced an offer from O’Reilly Books for 35% off of a $30 or more order. It includes free shipping. There were also offers from other publishers. Contact Rick for information on how to take advantage of these offers.
Rick polled the members on their interest in an annual CD ROM. UCS has issued CD ROMs in the past containing a lot of useful programs and other information. There didn’t seem to be much interest this year.
Rick asked for final nominations for election to the Board of Trustees. The final list contained Elman Ellsworth, Larry Hirschi, John Witzel, Bob Beaudoin, Larry Lamph, and Jared Motogawa. Doug Jackson moved to close nominations. It was seconded by Jared Motogawa. Ballots were issued to all members.
Open Access
A Launch resource kit was issued to each person who attended the Windows Vista Launch event at the South Towne Convention Center on February 2. The kit is a CD containing information about Vista. It also contains links and codes to download a free copy of Office Professional 2007 and Office Groove 2007. These downloads consist of two files for Office and one file for Groove totaling more than a gigabyte of data. John Witzel offered a copy of the files on CD to those who attended and have the installation codes, but whose computer system or internet connection doesn’t make downloading the files practical. Talk to John to obtain these files.
Rick described a Pentium machine that had Mandriva Linux on it. Rick tried to install Windows over it, but was unsuccessful in booting from the Windows CD. He had to use Partition Magic on a floppy to blow away the hard drive before the Windows CD would boot.
Cliff Millward mentioned when starting Firefox, a box appeared trying to access something at Real Media that couldn’t be found. This results from installing Real Player, a program comparable to Windows Media Player. Real Player tries to access the Internet to update itself. You can turn this off in Real Player by selecting the Tools menu, clicking on Preferences and turning off Autoupdate. Bob Beaudoin recommended not installing Real Player since you can play its files with Media Player.
Presentation
James Alexander presented Microsoft’s new operating system, Vista. James became involved as a Beta tester and continued with Beta 2 and Release Candidate 2 which is the system he showed. James has written an article appearing in this issue of the magazine that covers what was shown in the presentation. It also appears on a CD along with other information that James provided to everyone attending the meeting. The includes a Power Point presentation that James used at the meeting and a number of programs you can use with Vista. If you did not get one, talk to James about getting it.
On thing that should be emphasized is that in order to make the best use of Vista requires very good hardware. This is especially true if you want to experience the total affect of the new Aero interface. James described Vista as hardware harsh. His article indicates the hardware needed. Know that James is usually pretty up-to-date on hardware. He went through considerable expense to build a system that would run Vista well.
There is also a good description of the various versions of Vista and advice on which version you might want use. A good point is that you don’t want to rush into upgrading. Although XP is supposed to be phased out in two years, many doubt this will happen. But two years should provide plenty of time for problems to be corrected and for you to decide whether to upgrade or buy a new machine. Upgrading can be a problem, because many drivers for older devices are not available. If your system is very old, upgrading may not be practical. After all, machines are getting cheaper all the time.
If you need a new machine, it will come with Vista already installed. James recommends the Premium version for home users, Ultimate for business users; don’t buy a machine that won’t give you that version.
The results of the elections to the Board are as follows:
Elman Ellsworth trustee
John Witzel trustee
Bob Beaudoin trustee
Larry Lamph trustee
Jared Motogawa trustee
Larry Hirschi, alternate trustee.
Because of resignations from the Board, Larry Hirschi was promoted to a full Board member. Rick Gregory will serve as a board member as Immediate Past President.
At the Board meeting on April 5, the following officers were elected:
President: Stuart Gygi
Vice-President: Larry Lamph
Secretary: Lowell Kennedy
Treasurer: John Witzel