Kids turned cybercriminals

You might know this kid. He's as young as 12 or 13, not all that popular in school. He spends a lot of time online. You figure he's playing World of Warcraft, constantly refining his MySpace pages, or maybe hanging out in Habbo, a virtual world popular with kids. But he may also be wreaking havoc on social networking sites, selling a veritable supermarket full of his own malware, and creating packages of phishing tools.

"These kids are obsessed with phishing," said Chris Boyd, director of malware research for Facetime Communications during a presentation at the RSA Conference, here in San Francisco. They don't see phishing as a problem, Boyd says, because they typically start out stealing large numbers of MySpace pages, then move on to stealing a few PayPal accounts—but for a lot more money.

Today's young hackers consider themselves stars of the cyberworld, not aware or not caring that what they're doing is illegal. "For these kids, it's a game, a hacker version of American Idol," Boyd said. "But the TV show they're really on is America's Most Wanted."

RSA 2008: Only you can prevent cyber-attacks

Ira Winkler looks like a guy with a lot on his mind. And rightly so. After all, he helped orchestrate a hack of a power company, at the request of the company itself, which wanted to test its defenses. It took Winkler, who is president of the Internet Security Advisors Group, and his team just a day to break in. If he'd wanted to, he could potentially have turned out the lights on the power company's customers—or worse, since this company ran a nuclear reactor.

Obviously, the company's defenses did not hold up well. What was most striking was how easy it was for Winkler and his team to break in. One step in accomplishing the task involved tricking employees into clicking on an e-mail that downloaded malicious code onto their work computers.

"There is a major storm brewing that is receiving insufficient attention from the government," Winkler said.

Adobe Photoshop Express beta blurs the lines

The lines are blurring. Again.

Adobe has just launched a public beta of a new version of Photoshop called Photoshop Express, which allows users to upload and edit JPEG images through any web browser. Once photos are uploaded into the web application, you can crop them, distort them, remove red eye, and do many of the standard image edits you’d do in your computer-based image editing software. The service, which requires you to fill out a brief registration page, also includes 2 gigabytes of storage to upload images. What this means is that no matter where you are, if you have access to a computer and the Internet, you’ll be able to make edits to your photos.

This is certainly not the first free online image-editing tool. There are many others available, including FlauntR and Picnik. So, Adobe’s not the first to blur the lines between an image editor and what many call a Web 2.0 application, or a software app that runs via a web browser. But since Adobe sells such well known image-editing programs like Photoshop CS3 and Photoshop Elements 6, it's able to make this type of web app more mainstream. The company has even designed the Express version with the same clean interface that appears on CS3 and Elements.

Announcing a new feature for the Electronics Blog

As our annual State of the Net survey has shown for the past several years, the insecurity of online consumers is a severe national problem that affects nearly everyone and costs American consumers billions of dollars annually.

Coverage of this important subject has become an integral part of our electronics content, both in print and online. While we will continue reporting on Internet threats of all types, and testing the key products and services that help you protect yourself online, this year we will begin to do even more.

Cell-phone spam: How to curb it

Cell-phone spam still trails computer spam, with the typical cell-phone user receiving at most a few spam text messages per year rather than the thousands that may bombard their computer-based e-mail accounts. But in some ways, cell spam is more annoying. It can cause your phone to ring or vibrate at inopportune times and possibly cost you money—typically 10 to 25 cents per message if you don't have a text-messaging plan.

Since 2005, the CAN-SPAM Act (Controlling the Assault on Non-Solicited Pornography and Marketing) has prohibited commercial e-mail and text messages to be sent to cell phones without "express prior authorization." Unfortunately, the law leaves commercial entities lots of loopholes. For example, it doesn't prevent your carrier or its partners from sending you upgrade offers or account notices. Also, non-commercial organizations such as charities and political campaigns can shoot you all the messages they want on your dime.

In spring, a phisher's fancy turns to taxes

If tax season is here, can IRS e-mail scams be far behind? Here's a tempting one making the rounds: An e-mail that looks like it's from the IRS tells you the agency has "determined that you are eligible to receive a tax refund of $746.35." All it takes to get that cash is a simple click on a link to "access the form for your tax refund."

If you get one of these, don't start planning that vacation yet, and definitely do not click on the link or fill out the form. The IRS doesn't send unsolicited e-mails about tax refunds or any other matter. What you've actually received is not an opportunity to claim hundreds of unexpected dollars. It's a phishing scam designed to load malicious software onto your system and collect personal information for use in identity theft schemes.

This and other scams that use refunds from the IRS as bait are more prevalent than ever. Meanwhile, even newer scams are showing up surrounding the recent Federal tax rebate, according to Paula Greve, director of Web security research for Secure Computing.

In fact, Greve notes, there has been a 3,000 percent year-over-year increase in phishing attacks and malicious Web sites targeting the IRS, with more such attacks in January 2008 alone than in the first six months of 2007 combined. Close to 600 IP addresses sending e-mail purporting to be from the IRS have already been tracked, and Greve expects that number to increase.

iTunes movie rentals: A generally strong opening

After years of simply selling movies, iTunes last month added the option to rent them. The service adds a welcome and relatively painless way to view films on your iPod, iPhone, or computer—though the service does have a few minor annoyances. After renting and viewing on a number of computers and players, here’s what we liked and disliked about the new service:

HIGHS

It's less costly than buying. If you're like me, you’ve resisted movie-watching via iTunes because you don't want to pay $9.99 apiece to own films that you'll likely watch only once, especially given the restricted size of computer and iPod screens. The rental costs—$3.99 for new releases, $2.99 for catalog titles—are in line with those for pay-per-view offerings from satellite or cable companies. Apple says selection will also be comparable by the end of February, when it promises more than 1,000 titles.

Decent picture quality. We viewed movies on a laptop and desktop, two iPods (a Touch and a Nano), and an iPhone. They looked good on all platforms—bright, clear, and surprisingly sharp. Unsurprisingly, it was hardest to appreciate that quality, and the movies themselves, on the tiny Nano screen, though the images were still surprisingly watchable.

Adware recedes, but other online threats grow

If you've noticed fewer popup ads while Web surfing, it's probably more than just your anti-popup software doing its job.  So-called "nuisance adware," popups and home-page hijackers that annoy but don't usually harm your computer, has been vanquished, though not totally eliminated.

That was one of my main takeaways from attending last week's fourth annual public workshop held by the Anti-spyware Coalition, a group of software companies, academics, and consumer groups united in the effort to control spyware and other online threats. Held in the shadow of the US Capitol in Washington, DC, the workshop's subtitle was, "What's worked, what's left, and what's coming."

Some of the reasons for the downfall of nuisance adware include new state anti-spyware laws, aggressive high-profile prosecutions of perpetrators, and a growing reluctance by high-profile makers of consumer products and services to inflict further damage on their brands by advertising in a medium (adware) that one workshop speaker characterized as "a lousy consumer experience."

But this success has come at a price, the conference attendees found out. While some adware purveyors have changed their practices for the better to stay on the good side of the law, others have gone underground, to a market position some speakers called "the dark side" by adopting even more egregious technologies borrowed from virus writers, hackers, and other online miscreants.

Following a keynote by FTC Commissioner Jonathan Leibowitz, conference panels discussed such topics as Is Spyware Dead?, Can Investigators Stay Ahead of the Bad Guys? and Education: What Works and What Doesn't? Speakers included experts from major anti-malware vendors like McAfee and Lavasoft, government officials, security professionals, and academics.

PMA 2008 Preview: What's incoming in cameras and more

Each year, camera enthusiasts and pros wait to see what the major camera manufacturers will introduce at the annual Photo Marketing Association trade show (PMA), which will take place this year in Las Vegas from Jan. 31 through Feb. 2. And while some companies opted to unveil some products at CES, just three weeks ago, most have chosen to stick with PMA08 to introduce not only cameras, but also lenses, printers, software, and photo accessories.

Starting Wednesday, I'll be at the show, posting the latest news about cameras and related products and services to this blog.

Although I expect a few surprises at the show, some developments and trends are already evident. Here's what I expect to see, by camera type or technology:

Digital picture frames infected with computer virus

Best Buy tells us that one of its Insignia brand digital picture frames has been contaminated by a virus. The only model involved is a 10.4-inch frame bearing the number NS-DPF10A. If you're downloading photos by connecting this frame directly to your computer, you may be putting your system at risk. Owners should contact the company by calling 877-467-4289. Best Buy will help you determine whether your frame is affected and will let you know how to proceed if it is. The model, which was sold over the holiday season, has been discontinued and is no longer available for purchase from Best Buy.

The virus is not a new strain, so if your system is protected by antivirus software, it should catch and isolate the infection. In addition, if you're loading photos using a memory card, the virus can't be passed along that way, according to a Best Buy spokesperson.

So far, the company has received about two dozen calls concerning this issue. Best Buy is still investigating the cause of the infection. If you have another model of Insignia frame, and notice that your antivirus software is picking up viruses when you connect the frame to your computer, call Best Buy and let them know. Continue checking the Insignia home page at http://www.insignia-products.com/default.aspx for further developments.

And for additional computer safety tips, including Consumer Reports' Ratings of the best computer security software and online protection tools, check out our online cyber-security center.

—Donna Tapellini

MacBook Air: Some closer looks

A Consumer Reports colleague (Joyce Ward) and I met privately with Apple reps Tuesday afternoon for a personalized demonstration of the MacBook Air and other products. It was fun to take a closer look at these new offerings, even if just for a short time.

They say the MacBook weighs three pounds, but it honestly didn't feel even that heavy when I held it in my hand—it seemed lighter somehow. The screen was bright, the keyboard a joy to touch, and the trackpad "touch" software had specific settings for one-, two-, and three-finger operation. One finger can click, drag, or double-click. Two fingers flip, rotate, magnify, or minimize images or web pages by using a "pinching" motion. Three fingers let you "slide" from page to page, image to image. This software utility is currently fully compatible only with the Leopard Finder, Safari Web browser (seen on a Windows XP machine at left), and most of Apple's "iApps." Expect third-party support in the future.

Of course, one of the first things that came to mind when seeing the MacBook Air was, "How's this battery deal gonna work?" In case you hadn't heard, the battery in the MacBook Air is not user-replaceable. As a long-time traveling laptop user, that worries me. I always found having the occasional spare battery to be a good thing, especially on those extra-long excursions.

Apple insists its batteries are absolute state of the art, hold a charge very well, and have a very long life. (The 17-inch MacBook Pro's battery lasted 5.25 hours in our latest tests.) Nevertheless, Apple will try to ease your worries with a Battery Replacement Program: Bring your MacBook Air to the nearest Apple store, and the techs will replace the battery (while disposing of the old one in an environmentally responsible manner). Total cost: $129, the same as a new battery you would replace yourself in other models. In addition, more and more airlines today offer laptop power ports on their planes, and both Apple and third parties sell adapters. So as time goes on, the need for having all that extra battery power handy is becoming less necessary. (It was unclear whether this Apple store program was a "while you wait" service, or a "drop it off and pick it back up tomorrow" sort of thing. Time will tell.)

Apple's goal with the MacBook Air was to design a sleek laptop without most of the tradeoffs associated with ultra-portables. The full 13.3-inch backlit LED screen with 1280 x 800 widescreen resolution bears this out, as does the standard MacBook keyboard and an oversize trackpad that supports the one-, two-, and three-finger multi-touch technology used on the iPod Touch and iPhone. Nevertheless, for power users, there are some tradeoffs: There's only one USB port, no Firewire, no DVD, and the custom battery.

Which led to my next question for the Apple folks:  What if you're on the road, your Time Capsule (seen at right) is at home, and your system has a meltdown? Low odds, mind you, but there it is, coming from a geek who can't be too paranoid. They recommended two solutions. The first, of course, is to carry that $99 external DVD drive and your install disk with you. Another possibility is to install, from that disk, a copy of the Remote Disk application on someone else's Mac (or PC!) with a wireless card. Then you can piggy-back on their CD drive and run the installer to restore your hard disk. Clever, but all you're doing is imposing on a friend's good will—sooner or later you'll have to connect to some physical media to restore your system.

Next up in our interview session was the "Time Capsule" wireless backup solution. Security was my main worry with this product, so I asked our Apple reps: Should I be concerned with potential man-in-the-middle attacks when wirelessly backing up your hard drive? Not necessarily. Time Capsule is essentially a full Airport Extreme base station (a fancy term for "wireless router") combined with a server-class hard drive. It supports all the wireless security protocols found in any other wireless router, including WPA and WPA2. That was the answer I was looking for, but it was still unclear how simple that would be to set up for the uninitiated. It's not normally much fun for those who do it for a living. All that wireless security is well and good, but sometimes to an old school guy like myself, there's nothing more secure than a good honest wire, and fortunately for me, Time Capsule has three gigabit-Ethernet ports included. (See image at left.) But of course, that does me no good with the MacBook Air, which has not a single Ethernet port built-in.

—Thomas A. Olson

Free Internet Radio in Your Pocket

The Internet offers a growing range of free music services, from Napster, which allows you to stream albums at no cost, tailored to your taste, to sites like Pandora, Slacker, Finetune, AOL Radio, and others that let you create your channels that select music based on your preferences, and even adjust their programming on the fly as you tell the service what you like and don't like among the selections they've delivered.

Until now, listening to streamed music away from your computer has often meant paying a subscription, typically $15 a month, to online services like Napster and Rhapsody or the satellite radio services, XM and Sirius. You can then stuff a compatible portable player—sometimes a regular MP3 player but often a proprietary player you need to buy—with the service's music.

But Slacker is now one of the first online music services to offer portability without a subscription. You do need to buy a proprietary player, one of three new Slacker portable players launching later this month for $200 to $300. But you can then store free music from the site's 2-million-song library, either capturing it from their 100 channels or from the customized channels you've created at Slacker.com.

MacBook Air, super-thin notebook, introduced

What may be the most talked about of Apple's four major product releases Steve Jobs introduced today is a new addition to the MacBook line called the MacBook Air. With a teardrop profile only 0.76 inches at its thickest point, it's the thinnest notebook computer ever. (You can get closer looks at the new MacBook Air by clicking on each of the embedded images.)

Apple didn't compromise much on features. There's a full-size, backlit keyboard, 13.3-inch screen, iSight webcam, large trackpad with multi-touch gesture support (similar to the iPhone's, which lets you use your fingers in more ways than the traditional tapping and sliding), plus a new magnetic latch.

There are only three ports on the right side: USB2, MicroDVI, and a headphone jack. (There's no Ethernet port for wired networking, but that's not really an issue with a notebook designed for extreme portability.) Apple says that the 1.6-GHz Core 2 Duo processor is 60 percent smaller than chips made for other models. The standard MacBook Air comes with an 80GB hard drive—or a 64GB solid-state drive for an additional $999. The standard memory configuration is 2-GB and Apple claims 5 hours of battery life. The built-in wireless capability supports 802.11n and Bluetooth 2.1+EDR.

There's no internal CD/DVD burner; to use discs you need the $99 external MacBook Air SuperDrive which connects to the USB port. Also, a new custom application in Leopard called "Remote Disk" lets you wirelessly "borrow" other users' CD/DVD drives.

In keeping with Apple's environmental initiatives, MacBook Air notebooks have a fully recyclable aluminum case, displays that are mercury and arsenic free, and logic boards that are BFR and PVC free. In addition, the packaging has 56 percent less volume, to save trees.

The base model, which starts at $1,799, pairs a 1.6-GHz processor with an 80-GB Parallel ATA hard drive. A second model that features a 1.8-GHz processor and 64-GB solid-state drive starts at $3,098. Both ship in two to three weeks, but can be pre-ordered starting today.

Compared with Windows-based 13-inch slim-and-light notebooks we've rated (Consumer Reports' Ratings are available to ConsumerReports.org subscribers only), the MacBook Air is pricier and its hard drive is a bit slower and has a smaller capacity, but weighs more than a pound less. When compared with notebooks in the 3-pound range, such as the Sony TZ series 11-inch or Toshiba Portege R500 12-inch, its pricing is very competitive.

Macworld 2008: Preview

Apple goes into Macworld Expo, the annual party, love fest, and religious revival for the Cult of Mac, which opened today in San Francisco, following a year that's had a few fizzles (Apple TV, the first release of OS X Leopard, 10.5), one big hit (the iPhone) and under-the-radar sales growth of 40% for Mac desktops and laptops. The one adjective that no longer describes Apple is "beleaguered."

While analysts don’t see the same kind of explosive growth for Apple this year, they still hope a few compelling new products and services will keep the company on a growth track.

I do believe Apple will deliver. My first clue was this week's pre-event announcement of a new MacPro tower and XServe, powered by 8-core Intel Xeon processors, offering 2.3 times the speed and raw horsepower as the dual, quad-core 3.0 Ghz machines being sold only a month ago. If they couldn't wait one week to announce this, it often indicates they have so many other things to show us, there simply wasn't room in the Keynote program to hold it all.

Below is a distillation of predictions, hopes, and wishes from the amassed Mac pundits and bloggers for Keynote 2008:

Movie rentals in iTunes—Fox and Disney are reported as already signed on and almost everybody wants the "One More Thing" to be—at long last—the entire Beatles collection, made available at the iTunes Music Store (iTMS). (If that happens, no one will be crying over the loss of Universal.)

Improvements to iPhone: A 16GB, 3G model, with no limits on cell service provider—we can certainly dream, can't we? Also rumored is an iPhone SDK (software development kit), which would mean that there would be a market for third-party software. We might even see a demo of 3rd-party apps—something developers were clamoring for most of last year.

Office 2008—slam-dunk #2, as Amazon is already taking pre-orders. I expect someone from Microsoft will make the official announcement during the Keynote. (I'll write more on Office later in the week, when I get to see it for real.)

Leopard 10.5.2—this is almost a slam-dunk, as the Developers Cut is already making the rounds. There are at least 75 fixes and feature additions in the works, and this would be a perfect time to announce their deployment.

New Cinema displays with touch-screen and built-in webcam—possibly 24-, 27- and 30-inch models, an upgrade that is long overdue.

Blu-ray drives in some Macs—a rumor that is growing some legs, now that Blu-Ray seems to be winning the format war, and there is going to be a growing need to handle HD content.

Ultraslim notebook/touch tablet—this is the biggest rumor to make the rounds, and highly likely: Apple fills out its laptop line with an ultra-thin notebook, running on flash memory instead of a hard drive, sporting a 12-13 inch touch screen, which could possibly fold over to become a tablet Mac.

Final Cut Studio update—not likely, but definitely overdue, considering the plethora of new digital camcorders that have hit the market

Apple TV "2.0"—look for a "reboot" of this product, with new features, more storage, and built-in compatibility with iTMS movie-rental.

If you are not attending this year, here is a link to sites offering live blogging of the Keynote (SFW). Stay tuned!

—Thomas A. Olson

Thomas Olson, the Publishing Systems Administrator for Consumer Reports' Editorial, Design, Production and Pre-Press groups, has been a Mac enthusiast since 1984.

 

CES 2008: Four web sites worth a visit

The Consumer Electronics Show has become a showcase for content as well as hardware, and more exhibitors are featuring electronics-related websites. Here are four intriguing sites I learned about while browsing the exhibit booths last night—two that help you buy gear and two that help you share the content you create on your gear.

The tagline for Retrevo.com is "matching people and electronics." The site offers category overviews and product pricing summaries in real time. But its real distinction lies in capabilities built on computer algorithms. Retrevo crawls the Net to gather features data on products, which it then analyzes against a list of possible features, each assigned an importance level. It rolls those together with price data to assign a value score to each product. You can view a list or a rather complex "value map" reflecting Retrevo's judgment of the best-to-worst values in the product type you're seeking. The site also offers handy content for products you already own, including searchable manufacturers' manuals and tips on using the gear from users and expert sources.

When it comes to finding out how easy it is to use a cellphone, there's no substitute for actually holding the thing in your hand and trying it out, as we recommend in our advice on buying a phone. But tryphone.com offers the next best thing: a virtual, actual-sized version of the phone with menus and buttons you can explore by pressing your computer mouse. For now, there are only 10 phones up on the site, including the iPhone, the Blackberry Pearl, and the Samsung Juke, but tryphone says it will add three more phones a week until the site boasts hundreds. This site might be worth a visit even if you already own one of the listed phones, because there are tips on how to use them.

While there are plenty of sites for sharing and storing your photos, there are few or no such services for home videos. Motionbox.com fills that gap. There's a free service that's limited to 300 MB, a capacity you can quickly exhaust if you're a true camcorder auteur. A premium version, which costs $29.99 a year, offers unlimited capacity and the ability to download your videos in full resolution. Either service allows you to order Motionbooks, 3.5-by-2-inch flip books that animate a 15-second video clip of your choice. They're $8.99 apiece.

Finally, there's eJamming.com, a site for musicians that made a high-profile debut during yesterday's CES keynote address by Paul Otellini, the CEO of semiconductor giant Intel. The popular band Smash Mouth used this site to play together although each musician was at a different location in Las Vegas and the singer was on-stage with Otellini. The performance seemed flawless.

You can view the keynote address and performance via the CES Web site, www.cesweb.org/about_ces/multimedia.asp (scroll through the "playlist" of videos on the right) and via Intel's CES-related Web site, http://www.intel.com/pressroom/kits/events/ces2008/index.htm?iid=pr1_marqmain_ces2008 (scroll to the bottom of the page to find the link to the online video.).

To replicate the way musicians settle into a groove in a room, each adjusting their timing to that of their colleagues, eJamming's software analyzes the time delay, measured in milliseconds, among the players and adjusts it as needed. The site, which is free, allows you to post a recording of your playing and to solicit musical partners. Spokesmen say the site already has over 10,000 users and has been responsible for bringing together musicians from disparate countries to, er, e-jam together.

—Paul Reynolds

CES 2008: Bill Gates's Last Days at Work

William Gates III, founder of the world's largest software company, is quitting. Well, at least he's stepping out of his role as Microsoft's Chief Software Architect. That was news over a year ago, as Gates looked forward to devoting more of his time to philanthropy.

Bill chose to make light of his impending "last day of work" at his final keynote presentation on Sunday, "press day" here at the CES. He showed a video of himself approaching a series of celebrities—from the music, cinema, TV and political world—pretending to be looking for work.

(Click on the image above to see Bill Gates with rock guitarist, Slash, during his CES speech. You can also watch Bill Gates' complete keynote speech at Microsoft's CES-related Web site, www.microsoft.com/ces. But you'll need "Silverlight," Microsoft's free Web-browser "plug-in" to access the online video. You'll find more information and the free Silverlight download at: www.microsoft.com/silverlight.)

In fact, Gates will continue to advise Microsoft on a number of projects started during the past few years, and his main message is that these projects represent the directions he believes consumer computing technology is heading.

Gates declared the "first digital decade" a success, and said there was nothing holding back the second digital decade. He outlined three technology trends that will drive the next ten years:

1. The ubiquity of the "high-definition experience": Gates sees sharp, bright video displays everywhere, not just on PCs and big-screen TV sets. Along with this will be improved ease of connection between devices, and 3-D presentation.


2. Hardware devices of all types will be "service-connected"—an obvious tie-in to Microsoft's "Live" online services. Gates described photographs moving from the digital camera onto the Internet seamlessly without the user having to deal with cables, or memory cards. Users will be able to easily share their own content with others, and organize their memories easily and effectively, accessing them from anywhere in the world. Devices will be smart—aware of the context—to optimize the way they work.


3. Powerful, "natural" user-interfaces will become common. The obvious tie-in here is Microsoft's "Surface," a table-like display with a touch-sensitive surface that can also recognize objects like cell phones. "Gestures"—like the two-finger zoom function on the iPhone's screen—will become familiar.

The remainder of Gates's dog-and-pony show showcased existing and new Microsoft technologies. One surprise was an agreement with NBC TV to produce online Olympic Games content for MSN through Microsoft’s "Silverlight" video-authoring platform.

There was also a demonstration of Ford Sync, an integrated, voice-activated in-car communications and entertainment system that will roll out on nearly all Ford, Lincoln and Mercury vehicles later this year. It will include a "911 Assist" feature to help quickly connect vehicle occupants to a 911 emergency operator following an air bag deployment.

As always, Microsoft continues to establish partnerships—with media companies to provide content for its products, and with hardware companies to extend the various Windows platforms. Whether any of these partnerships produces a "must have" product or service remains for you, the consumer, to decide.

—Dean Gallea, Senior Program Leader

Share your telecom "bundling" experiences

These days it seems like everyone wants to provide you with Internet, telephone and cable TV service. Double- and triple-play packages that offer some or all of these services are being heavily promoted offered by cable and telephone  companies, as well as by satellite service providers such as DIRECTV and DISH Network. Verizon's high-profile entry into the market with its much-publicized FiOS fiber-based service has created yet one more choice for consumers to ponder.

Adding to the complexity is that individual providers frequently offer a variety of bundles, allowing you to increase your Internet surfing speeds, for example, or the number of channels included with the TV portion of your service, all, of course, at a higher price. Promotional pricing that ends in anywhere from 3 to 12 months can make difficult to find the amount you’ll ultimately pay.

Given all this, we’d like to find out whether you’ve ventured into the jungle of bundled choices. If so, how was the experience?

Among the questions we’re curious about:

• How easy (or difficult) was it to compare bundles within a provider and also to compare among providers?


• Did you try negotiating with the providers to see whether they’d sweeten their offers or extend promotional prices?


• Did you end up opting for a bundle or buying your services a la carte from different companies, and how satisfied are you with your choice?

Have you reviewed the choice you made, perhaps some months after the fact? If so, some additional questions:

• If you went with a bundle, are you saving money compared to the amount you were paying for individual services, even after the end of the promotional pricing?


• Were there any nagging gimmicks or gotchas that you didn’t discover until after you signed up?


• What do you like best about your provider, and what bothers you the most?


• Finally, do you have any horror stories or tips for other consumers?

Your input will help us create upcoming content on so-called telecom bundles.

Thanks.

Who's talking to your kids online?

To borrow from an old public-service announcement: It's 10 o'clock, do you know where—online—your children are? If the answer is, "Romping around on social-networking sites," it's time for you to take some action.

Millions of minors post all sorts of personal information on social networking sites like MySpace. Sadly, such sites have become virtual playgrounds for adult sexual predators, too, placing a new responsibility of the shoulders of already-overworked parents: safeguarding their kids who go online.

What makes sites like MySpace so risky is that predators can develop long-term relationships with several children simultaneously. "They'll contact the youth repetitively for up to six months," Dr. Sharon Cooper, CEO of Developmental and Forensic Pediatrics in Fort Bragg, N.C., told me. The predators usually present themselves as about 20 years old, an appealing age to younger children, according to Dr. Cooper. They talk to the child so frequently and for such a long period of time that by the time they propose meeting, the children don't see the predator as a stranger. "They see them as people who understand them better than their own parents," she says.

Related reports:

• Social networks: Kids at risk 
• Net threats: Why online is still risky 
• Best online security software 
• Consumer Reports on cyber-security

Defending Against Spam

When it comes to online security, some key threats are getting better and yet remain serious problems. Take spam, for example.

Jeff Fox, Consumer Reports’ Technology Editor, is today presenting evidence to the Spam Summit, a Federal Trade Commission event on this ongoing Net menace. (Note: The link will take you directly to the FTC's Web site for the summit.) Drawing on findings from the 2007 Consumer Reports State of the Net report, which includes a nationally representative survey of U.S. Web users, Jeff’s paper offers both hope and alarm about the spam scourge.

Spam is easing, our survey found. The proportion of spam recipients who said half or more of their e-mail was spam dipped below 50 percent for the first time since our survey began  in 2004. Also, fewer people reported clicking on links in spam or replying to it. (Click on the image on the left to see our findings.) And the use of spam blockers and firewalls is more widespread.

But spammers are still making sales from their messages and ensnaring people with phishing scams, in which bogus e-mails and Web sites induce people to disclose information about their financial accounts. Based on our survey, we estimate that 650,000 Americans made such a purchase in the month before the survey. And the proportion of Web users who are responding to phishing messages has remained steady. (Click on the image on the right for a closer look at our findings.)

What to do? Jeff recommends a continued effort to educate Web users, since some of the good news from our survey (fewer clicks on links, for example) proves that education can help. He also advocates steps to boost the effectiveness of the federal CAN-SPAM Act, which has given law enforcers new tools to use against spammers. The FTC also needs adequate resources to take full advantage of the U.S. Safe Web Act, which allows that agency more authority to work internationally to protect consumers. For their part, software manufacturers need to design firewalls that clearly identify name a product that is attempting outgoing communications, rather than using a hard-to-identify file name. In addition, Microsoft needs to fix its Vista firewall. (See our previous post on Window Vista's flawed firewall.)

We’ll have more on spam and other threats--both good news and bad, problems and solutions--in the State of the Net 2007 report, and in its accompanying Ratings report on software to protect against viruses, spyware, and spam. Both reports will post to ConsumerReports.org in early August.

In the meantime, you can find out more helpful information about how to protect your computer and your personal information by visiting our special cyber-security section and our Ratings of computer security software programs.

-- Paul Reynolds

Broadband termination fees: Check before you sign up

A new survey from our colleagues at Consumers Union, the nonprofit publisher of Consumer Reports, highlights the importance of checking for termination fees for broadband service, especially if you're signing up for DSL broadband from a phone company.

Published on HearUsNow.org, CU's website devoted to telecommunications issues and advice, the survey showed that most DSL services still come with termination fees of $70 and up. For the most part, cable broadband still involves no contracts or termination fees, a continuing plus. But CU's efforts showed that it's still worth checking the fineprint, since that's where researchers turned up termination fees with Comcast triple-play service in some locations. A portent of penalties to come in other triple-play cable offerings?

-- Paul Reynolds

How to keep your new Vista PC safe

If you’ve installed Vista on your PC or are planning to do so, it’s important to update your security software as well. In fact, if you have a current subscription to security software, check your vendor’s Web site to make sure there is a Vista version currently available—not all the security-software vendors have Vista software ready.

Although Vista is being touted as a more secure operating system, you still need to take additional steps to protect your data. For starters, you don’t get antivirus software with Vista. The antispyware bundled free with it, Windows Defender (we tested the beta version last summer), did not score as well as other programs.

Different providers are using different methods to help their subscribers keep up to date. In addition, how you do so will depend on whether you’ve bought a new PC with Vista installed or upgraded your old computer with Vista. Keep in mind that if you bought a new PC and want to transfer a subscription from your older system, you’ll probably have to remove the software from the old PC first, and you’ll most likely need a key number to get the new version. If you’re upgrading a current PC to Vista, some vendors, including Symantec, recommend updating your security software before you switch to Vista.

Here’s the latest from a sampling of security-software providers:

BitDefender
BitDefender Antivirus 10, Antivirus Plus 10, and Internet Security 10 are all Vista-compatible and free to current subscribers. Check the site at http://promo.bitdefender.com/vista.php.

Computer Associates
The only CA product currently Vista-ready is its antivirus software. Antispam should be available mid-February, and others will follow during the month of March. Check the CA Web site at http://home3.ca.com/stcontent/vistaready/index.aspx for the latest additions and update instructions.

F-Secure
F-Secure currently has beta versions available for its Internet security suite as well as its antivirus software. Final products will be available online in May and in stores in June. Subscribers will be eligible for free upgrades. For more info, go to http://www.f-secure.com/vista/consumers/.

Kaspersky
Kaspersky’s Anti-Virus and Internet Security are both available for Vista. Current subscribers can download them free at http://usa.kaspersky.com/vista/.

McAfee
You need to be a subscriber of the 2007 version of any McAfee software if you want to run it on Vista. Upgrades to the Vista-compatible versions are free to current subscribers.

If you’re a McAfee user who bought a new Vista PC, uninstall the McAfee software from your old system if you want to use it on your new one. Then log on (using the e-mail address and password you set up when you originally bought the software) to http://us.mcafee.com/root/myaccount.asp to download a Vista version for your new system.

For McAfee subscribers who upgrade their existing system to Vista, McAfee software will automatically upgrade to a Vista-compatible version. The exception: subscribers who manually install McAfee updates will have to download the Vista upgrade themselves.

Symantec
Norton Internet Security 2006/2007, Norton AntiVirus 2006/2007, and Norton Confidential are all available for Vista. The Symantec site at http://www.symantec.com/home_homeoffice/themes/vista/compatibility.jsp has more information on Vista-compatible products.

Users who subscribe to the 2007 versions of Internet Security and AntiVirus should uninstall the old Norton software and download the trialware from Symantec’s Web site. You’ll need your product key (available in your Norton Account, the CD-ROM sleeve, or the confirmation e-mail if purchased online). The trialware will automatically be converted to an activated product with your remaining subscription. If you have the 2006 versions of those products, go to www.symantec.com/07upgrade for an assisted upgrade.

Trend Micro
Trend Micro Internet Security 2007 (formerly PC-cillin), Trend Micro AntiVirus plus AntiSpyware 2007, and Trend Micro HouseCall all work with Vista. If you are currently subscribed to Trend Micro Internet Security PC-cillin 2005/2006/2007, go to http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034344 for instructions on how to change to the Vista software.

Zone Alarm
Zone Alarm products are not currently Vista-compatible. A company spokesperson says a beta should be available for ZoneAlarm Internet Security Suite in the next couple of weeks, with the final product likely being released in April. ZoneAlarm subscribers will be able to upgrade free when it’s available.

-- Donna Tapellini

CES: Living the broadband bottleneck

A growing number of products and services launched at the Consumer Electronics Show depend on robust Internet service to deliver on their promises, such as offering more video content to your TV and other devices via the web. And yet the online access headaches of CES’s attendees may serve to show how strained today’s Net technology may be to handle all that bandwidth.

Loaded with laptops and other Net-connected gear, the CES crowd is enough to make any ISP manager tremble with concerns over capacity. Demand may even have grown this year as more companies send CES attendees to the web to download press kits and images of new products, rather than giving those out on CDs or thumb drives.

Sure enough, by early yesterday the free CES Wi-Fi service at the Las Vegas Convention Center, a main venue for the show, was so busy most of us couldn’t even sign on. It was little better back at our hotel rooms, where most of us faced service (wireless or not) that was unreliable at best — in spite of a typical fee of $10 or $12 a day on top of already-inflated room rates.

It’s all a bit embarrassing for the Consumer Electronics Association, the show’s organizer. But at least they warned us about it — sort of — by highlighting the “Looming Broadband Bottleneck” as among the “Five Technologies to Watch” this year. The CEA writes “there are two main issues that arise in light of the emerging entertainment and connectivity uses of the Internet today: 1) There are not enough Internet Protocol (IP) addresses for all the possible devices that will be connected to the Internet, and 2) The bandwidth demands of these new services are intensive and will test the limits of the Internet.”

Relief is on the way, the CEA adds, via a new Internet communication protocol known as IPv6 that promises more addresses and faster transmissions. But the timetable for deployment is unclear, meaning next January’s CES might again inadvertently serve as a case study of the gap between Net hopes and Net reality.

— Paul Reynolds, Electronics Editor

iPhone: The world in the palm of your hand

I mentioned in my introductory post that if Apple was going to break into the smartphone/PDA market, it would have to be with a technology that is both transformative and disruptive. The new Apple iPhone, set to ship this coming June, is poised to be that rule breaker. 

The one key thing that sets Apple products apart from the pack is their fundamental simplicity, a hallmark of the company's products from the first graphical user interface of the original Mac in 1984 to the click-wheel of 2001's iPod.  Apple now intends to grab some of the smartphone market, again, by keeping it simple. 

Only 11.6 mm thick, the device sports a single large screen, 3 1/2 inches diagonally across, and a single "home" button at the bottom. Press it, and the bright 160 ppi screen comes to life, as seen in the image above. From there, virtually anything you want to do, from a simple phone call, to listening to your music collection, to watching a film you just downloaded from the iTunes Music Store, is only a few finger-taps away. 

Over the last two and one-half years, the iPhone team has been developing a completely new user interface allowing for better interplay of hardware and software. But at its core is something Apple fans are already very familiar with: Mac OS X. Yes, thanks to OS X under the hood, this device is capable of desktop-class applications and networking. 

Macworld: Apple's not just a computer company anymore

In a lengthy presentation that barely touched on the company's traditional computer products, Apple CEO Steve Jobs wowed the faithful earlier today with the introduction of several new products — and a new company name. Banishing the word "Computer," Jobs declared that the company will henceforth be known simply as "Apple, Inc." The new identity seemed fitting for a company now known more for the iPod than for its computer products. And the devices introduced by Jobs at the Macworld Expo — the $299 Apple TV networked media player and the long-awaited $499 iPhone (pictured) — certainly position the company even more firmly in the consumer electronics camp. We'll have a detailed report on everything Apple later today. In the meantime, remember the name: Apple, just Apple.

— MP

Technorati tags: apple, macworld, steve jobs, iphone, ipod, apple tv, itv