Slashdot Mirror
Windows Security and On-line Training Courses?
eggegick writes "My wife has taken a number of college courses over the last three years and many of the classes used on-line materials rather than books. The problem was these required IE along with Java, Active X and/or various plug-ins (the names of which escapes me), and occasionally I'd have to tweak our firewall to allow these apps to run. I don't think any of these training apps would work with Firefox. All of this made me cringe from a security point of view.
Myself, I use Firefox, No-Script, our external firewall and common sense when using the web. I have a very old Windows 2000 machine that I keep up to date. To my knowledge, I've never had a virus or malware problem.
Her computer is a relatively new XP machine, and at this point she feels her computer has something wrong. But now she prefers to use my old machine instead of hers since it seems to be more responsive. We plan to run the recovery disk on hers.
Assuming the college course work applications were part of the cause, what recommendations do any of you have for running this kind of software? Is there a VMware solution that would work — that is, have a Windows image that is used temporarily for the course work and then discarded at the end of the semester (and how do you create such an image, and what does it cost?)."
vmware is free, so is virtualbox and xen.
you would create the image yourself.
install a default XP machine and run IE on it.
They're using their grammar skills there.
I review software for a living (in addition to doing other things) so I've been using virtualized Windows XP installations for awhile now. (I prefer Virtualbox, but you can do this with any utility)
A long time ago, I created a virtual hard disk image of a Windows XP installation, got it the way I like it, and then backed it up. (storing a few GB long-term is trivial these days) When the current disk image I'm using gets overly cluttered after a few weeks or months, I just get rid of it and load a fresh copy from my backup and start over.
You could probably benefit from the same system.
"It is a denial of justice not to stretch out a helping hand to the fallen; that is the common right of humanity."
Why would this make you cringe from a security standpoint? Security is only a problem with nefarious things are intended. The act of allowing these specific ActiveX controls to run within the context of the training courses has no bearing on whether or not you are permitting other ActiveX controls to run. If the prompts annoy you, rather than simply completely turning off ActiveX security features, you should add this site to your list of Trusted Sites.
There's nothing inherently wrong with enabling IE, using IE, or using ActiveX. And within the context of this single site there's not likely to be a problem. After all, if they were using their software for malicious deeds you surely have legal rights on your side.
The courseware he's talking about is almost certainly Blackboard and up until very recently that was basically the only available product for this kind of stuff. Yep, it is a titanic piece of KAKA, but no matter how clueful a school is, they pretty much don't have a choice. WebCT was somewhat better, but Blackboard bought that a good while back and they don't put new customers on it.
In the last year or two there are some OSS apps that are at the point where they would be a better choice, but switching is also a titanic nightmare and thus the pain goes on...
"Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
require you to turn off your firewall and pop-up blocker. Why they cannot write web software to work without needing pop-ups and can work with firewalls is beyond me.
Virtual PC 2007 is free. Use Pricewatch's operating system price search to find a version of Windows to run under it. Windows XP can be bought in OEM version for under $100.
Run all college web sites in a virtual machine.
Use Avast Home for Antivirus as it is free for home and non-profit use.
Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
Sunbarrow.com? I meant: Sanbarrow.com
http://etudes.org/
They use it at Foothill College Los Altos CA where where I am a somewhat permanent student
I have taken dozens of online classes and it seems to have worked well for a variety of classes and teaching styles
-I'm just sayin'
Windows 2000 is not out of support. It is, in fact, still supported under the "Extended Support" model, where security fixes are still produced. It has left the mainstream support model where tech support was free. The difference between mainstream and extended is that you must pay for tech support calls instead of them being free.
According to this, Extended support doesn't end until July 13, 2010.
Bill
It's my Sig and you can't have it. Mine! All Mine!